{"report_id":"4d5af19d-c89a-4abc-8ae8-b35c0161074f","version":6,"status":"done","tags":[],"date":"2026-03-17T02:39:21Z","url":{"schema":"http","addr":"otakustream.piraproxy.xyz/movie/","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/movie/","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"title":"Movie List - Watch Most Popular Anime Movies Online - OtakuStream","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"otakustream.piraproxy.xyz/movie/","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-21T02:39:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":33}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"piracyproxy.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"piracyproxy.page","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"piracyproxy.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"piraproxy.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"dirproxy.me","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"dirproxy.me","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"dirproxy.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"123proxy.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"123proxy.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"piracyproxy.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"piracyproxy.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"dirproxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"dirproxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"piracyproxy.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"piraproxy.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2021-01-24","domain_rank":0,"first_seen":"2021-08-17T11:47:13Z","last_seen":"2026-03-03T19:12:43.162777Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":433,"comment":"","tags":null,"fingerprints":null},{"fqdn":"piracyproxy.org","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2021-02-15","domain_rank":2868926,"first_seen":"2021-02-16T01:00:44Z","last_seen":"2026-02-26T20:46:29.275659Z","alert_count":4,"request_count":2,"received_data":0,"sent_data":870,"comment":"","tags":null,"fingerprints":null},{"fqdn":"piracyproxy.info","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2021-02-15","domain_rank":681436,"first_seen":"2021-02-16T00:55:36Z","last_seen":"2026-03-15T05:52:23.228985Z","alert_count":2,"request_count":2,"received_data":0,"sent_data":872,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-15T22:16:12.279722Z","alert_count":0,"request_count":8,"received_data":300287,"sent_data":4547,"comment":"","tags":null,"fingerprints":null},{"fqdn":"origunix.com","ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-11-30","domain_rank":343993,"first_seen":"2021-11-30T12:40:27Z","last_seen":"2026-03-14T04:44:18.676463Z","alert_count":0,"request_count":1,"received_data":71723,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"piracyproxy.page","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2021-02-15","domain_rank":1946605,"first_seen":"2021-02-16T00:48:00Z","last_seen":"2026-02-24T15:17:53.811186Z","alert_count":3,"request_count":3,"received_data":0,"sent_data":1308,"comment":"","tags":null,"fingerprints":null},{"fqdn":"wayfarerorthodox.com","ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-08-08T11:06:50.216151Z","last_seen":"2026-03-13T03:57:39.266131Z","alert_count":6,"request_count":2,"received_data":6483,"sent_data":973,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"dirproxy.me","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2021-02-15","domain_rank":786145,"first_seen":"2021-02-16T01:55:17Z","last_seen":"2026-03-04T05:28:59.129005Z","alert_count":6,"request_count":2,"received_data":0,"sent_data":862,"comment":"","tags":null,"fingerprints":null},{"fqdn":"matomo.hellohi.me","ip":{"addr":"104.21.94.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-07-03","domain_rank":0,"first_seen":"2019-07-03T20:13:04Z","last_seen":"2026-03-12T11:31:03.810008Z","alert_count":0,"request_count":1,"received_data":605,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"creative-sb1.com","ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-01","domain_rank":22211,"first_seen":"2025-08-08T09:32:32.509707Z","last_seen":"2026-03-11T21:04:22.585124Z","alert_count":34,"request_count":17,"received_data":820586,"sent_data":8169,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"piraproxy.info","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2021-02-15","domain_rank":661881,"first_seen":"2021-02-18T06:41:57Z","last_seen":"2026-02-26T20:46:29.094501Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":434,"comment":"","tags":null,"fingerprints":null},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2026-03-12T06:03:08.282309Z","alert_count":8,"request_count":4,"received_data":343824,"sent_data":1692,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.show-creative1.com","ip":{"addr":"172.67.208.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":392451,"first_seen":"2024-08-27T12:23:01Z","last_seen":"2026-03-12T03:07:13.915114Z","alert_count":0,"request_count":1,"received_data":2169,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-15T22:19:58.945817Z","alert_count":0,"request_count":2,"received_data":44018,"sent_data":932,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"vmuid.com","ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2018-10-22","domain_rank":182910,"first_seen":"2019-07-09T14:53:12Z","last_seen":"2026-03-14T04:44:17.669307Z","alert_count":0,"request_count":2,"received_data":11821,"sent_data":1051,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"dirproxy.com","ip":{"addr":"104.21.26.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-01-24","domain_rank":645569,"first_seen":"2015-06-18T06:28:28Z","last_seen":"2026-03-14T12:56:45.87378Z","alert_count":2,"request_count":1,"received_data":1699,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"piracyproxy.app","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2021-02-15","domain_rank":1645788,"first_seen":"2021-02-16T00:52:23Z","last_seen":"2026-03-04T07:30:14.818589Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":435,"comment":"","tags":null,"fingerprints":null},{"fqdn":"flushpersist.com","ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2026-03-12T06:06:03.537259Z","alert_count":6,"request_count":3,"received_data":1590,"sent_data":2328,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"exposuretigerphilip.com","ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-11-25","domain_rank":0,"first_seen":"2026-01-14T19:13:10.560919Z","last_seen":"2026-03-14T04:44:18.022068Z","alert_count":0,"request_count":6,"received_data":195856,"sent_data":5088,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.show-sb.com","ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":187612,"first_seen":"2024-08-31T03:46:04Z","last_seen":"2026-03-11T23:46:19.249526Z","alert_count":4,"request_count":2,"received_data":3136,"sent_data":1000,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"kettledroopingcontinuation.com","ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":196057,"first_seen":"2025-07-30T15:18:19.355595Z","last_seen":"2026-03-12T03:02:46.497967Z","alert_count":24,"request_count":8,"received_data":4232,"sent_data":4816,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"protrafficinspector.com","ip":{"addr":"18.193.176.129","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2026-03-11T19:16:24.063036Z","alert_count":0,"request_count":4,"received_data":1736,"sent_data":1864,"comment":"","tags":null,"fingerprints":null},{"fqdn":"msdoj.com","ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-07-01","domain_rank":211684,"first_seen":"2025-07-02T02:58:17.140394Z","last_seen":"2026-03-10T10:03:27.95905Z","alert_count":0,"request_count":2,"received_data":72111,"sent_data":989,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"123proxy.info","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2021-02-15","domain_rank":519400,"first_seen":"2015-03-11T02:06:52Z","last_seen":"2026-03-04T07:30:15.047528Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":433,"comment":"","tags":null,"fingerprints":null},{"fqdn":"heartilyscales.com","ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2022-12-16","domain_rank":2862533,"first_seen":"2022-12-16T08:32:11Z","last_seen":"2026-03-14T09:50:57.653657Z","alert_count":18,"request_count":9,"received_data":201649,"sent_data":8765,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"otakustream.piraproxy.xyz","ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-04-10","domain_rank":0,"first_seen":"2026-03-17T02:39:23.809022Z","last_seen":"2026-03-17T02:39:23.809022Z","alert_count":99,"request_count":33,"received_data":1049061,"sent_data":16820,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"piracyproxy.biz","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2021-02-15","domain_rank":1364059,"first_seen":"2021-02-18T06:41:57Z","last_seen":"2026-03-04T07:30:15.164601Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":435,"comment":"","tags":null,"fingerprints":null},{"fqdn":"123proxy.biz","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2021-02-15","domain_rank":2819938,"first_seen":"2021-02-16T01:46:08Z","last_seen":"2026-03-05T03:19:45.786513Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":432,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-04T21:41:25.698368Z","times_seen":13230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/app/apx19.js","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2344c3f05f624d595f6fb920e4d74ded","sha1":"eb4d1404ac2d5eecd307f4588aeeab5c8ef463f1","sha256":"3a28fe59e4a2af96d8edeeb12d7040c574cf71fa88fccb5cf49e9c0a1d4e4c7a","sha512":"b1660b062c77332a119e159c5c69d3f75d375915a33f141503232f424c4fdd990998a883c271efb94e8eb909f7837d235354ecae15b58fc23ab9d1908170e831","ssdeep":"192:yfBLCNsvzXnQQuWYQVN6nYaRB5c5FM/MR6Adpf04u7w2Br:4gNYXnrYtBONxpf05r","tlshash":"62126cc87ac7f00b53ed8a53ae1a66b8117b946362a47907d3bcf6cd15e920bc179cc4","size":9183,"data":"","first_seen":"2023-03-07T12:40:02Z","last_seen":"2026-04-03T18:56:21.982955Z","times_seen":3505,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heartilyscales.com/a0/32/b4/a032b4d33c8aea68a4f9b84235614bff.js","fqdn":"heartilyscales.com","domain":"heartilyscales.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"68ff02cd479f5e6ff9e47614cd222c00","sha1":"192875fa7897d7b352be06305dee1c331d5932a7","sha256":"68dc3551d89dd21156e8d9b44d5f6710aa3aec385989e21770e984f66cb1f18a","sha512":"121567cb9646162bb6e0ae6712ceb5401e0084c65260c1f20f863ff0e9a1488154c1163c5e7246b34522648b51dc4616260704c86c5b2297d2639597d0ca75b1","ssdeep":"1536:1sgv0NC4Y5Tll1apjTHlxn0WvXEon8USxOKo4hRl+GdRIsEf7R:agvA25lIpZxn0WvXEon8SCTRo7R","tlshash":"6393e8887fb272ed4396307b362fb006f22a9d512498f4f4d586b8e52e7876da437704","size":91813,"data":"","first_seen":"2026-03-12T11:31:11.885484Z","last_seen":"2026-03-24T07:50:44.051003Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exposuretigerphilip.com/22/00/54/2200540f09f939738419313a1a090c32.js","fqdn":"exposuretigerphilip.com","domain":"exposuretigerphilip.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"978a633e00f7ee3a5532c58b3ef5a110","sha1":"0259d67ae9a88f72e7340da003d36a05f52c58cf","sha256":"670cd0b32d53a202e3f00c0d1d94c5d20922cdd498f5fdde681e5a5e4a7e45c1","sha512":"9cede0146b81f35853ea6d94e60faa7823cc3e603feae9cf09869dc0be56d3e63d64c882fc6cab91484fd874a9b61d141413841ef67fc2f3f28f67fe9c0a4bc9","ssdeep":"1536:7MaPcZqem5Kvg/+UriOXwaHe4J+LDFR8Xmj8sV:i1v4WUR+1HFb9V","tlshash":"d493e78c3fc1f0a513a5203b222f714ef0994d95546ce468f783f56a2f7ca4ae536b98","size":93676,"data":"","first_seen":"2026-03-12T19:13:09.650255Z","last_seen":"2026-03-25T07:58:56.793621Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vmuid.com/script.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8","fqdn":"vmuid.com","domain":"vmuid.com","tld":"com"},"ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb58954d37b59dfbf3d3dfd7f9a9b7c9","sha1":"9113992e0cf8daa04b1a7bafe4d38d4e3eb1506c","sha256":"ea3ae5982dd7321db72935a1fb03ff0e06e946d8bf0ee0b07501a7479cc578ba","sha512":"c4ecc02393fb39c2e4a4fd5ef9acd0cc23f4346923c30d888ea96eca3ad146e4a32d58fe4188368bfed4eca94468f67e0ef1fab20b2ed51ecfa3380c00d8a0a7","ssdeep":"192:/4Rjn7CBVpFxiD7TCWuYShk8MhQEAf3UKqnoqN/timFgqRPr4SP93HY3L0U/3LA8:8j7gn+f2hk8H3lo9tizG8SlKgUzA8","tlshash":"4b22a5c9b2d2f06443d67560802f200bf23a686db59dc498e765d8e3bcb445ea227f7d","size":10786,"data":"","first_seen":"2026-03-16T11:03:52.199433Z","last_seen":"2026-04-03T18:56:21.985396Z","times_seen":172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c22d6d75a207a14eb5f38eaaece5895","sha1":"d02f1acc6915978253e851cea2fa35579a5976b6","sha256":"cc3a6801caba94f42d92fd435f5a82d283f1cd0e8c9f65b88366bb8195ed3196","sha512":"2419784b9a7b43af541fbe8f8361251a33b971a99827621de1b01ab0c64bc5cc65b135fad7839e053a2819b6f0aa779294f8bfd52944ea97d78eefec7f6c3e06","ssdeep":"","tlshash":"adf0783cd848c3319b93a2d5f65bb34d5330041df608120a321e4feb2eb3b1a2094c89","size":612,"data":"","first_seen":"2026-02-04T09:19:30.436794Z","last_seen":"2026-04-03T18:56:22.070693Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"33e25be9b6f8ab6adb4b8acbed24e9aa","sha1":"e629c0a3a2c8790eaba6b15199f6751d5b1c5946","sha256":"679b5c35d394edb71ed276dec2e504365e21050beba4ceb606963dc13bd2c827","sha512":"d16266a25ecfce9f93119699ca46f993672136d4153c3b812dae6db4fbb48da217aef64d171954ee073b56a77793b65e3d3036aee670e0ba73862a74cbce0d40","ssdeep":"","tlshash":"33d023f9197585317198024a50f5d3d82a6130e07b13d34081ddcc3f7e21dd344f159c","size":217,"data":"","first_seen":"2026-03-17T02:39:33.224289Z","last_seen":"2026-03-17T02:39:33.224289Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exposuretigerphilip.com/a0/32/b4/a032b4d33c8aea68a4f9b84235614bff.js","fqdn":"exposuretigerphilip.com","domain":"exposuretigerphilip.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1d74a52570fe8e856b9da93ce35a4f1","sha1":"04fbefc2e76be6ee5330d752436d50d38d988343","sha256":"db81b48ce0403605a3bba214d4c0ac1a08390a905cc05eafae65e51f053efa61","sha512":"232b36aab9e42101fdde055d8ff1707af8da816fa708c198733adeb9cfc7505c16c581356c2c6e3416053d9923ce56e1d5218813cb8e73921202d0ebc24fc50c","ssdeep":"1536:1sgv0NC4Y5Tll1apjTHlxn0WvXEon8USxOKo4hRl+GdRI1Ef7O:agvA25lIpZxn0WvXEon8SCTRT7O","tlshash":"7293e8887fb272ed4386307b362fb006f22a9d516498f4f4d586b8e52e7876da437704","size":91830,"data":"","first_seen":"2026-03-12T11:31:11.880609Z","last_seen":"2026-03-25T03:26:44.150133Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ee2d3b461bd16f8ded51089755a6991","sha1":"8b13706f18340a701369b5d43ac7f26575be41a7","sha256":"b805f1542f34e023594ea59440d3d671cb4439b106bab902637213667a2dc938","sha512":"cd278d57e17154064c7177a3881066c3453e831cafce97fb0f908ccc6386721e70e335d54b26758650e01540132c11a203de8a7000eff2cf5fe84876459dfe10","ssdeep":"384:uefEwOjuyamdrHQcSkdQrulKI/GhZFvUT/N1k3BDGTdK1RWKIDmq5Nb8asp9C:ucZOSgd7JS+Ql4/Nlo6zmewJpk","tlshash":"1bc2e689b5de756b8225607810f774f676bebe7834084b01c110f8f4bc95386acfae89","size":27212,"data":"","first_seen":"2026-03-17T01:42:57.470403Z","last_seen":"2026-03-17T02:39:33.190977Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/9c/5d/14/9c5d14453d6b11cdec5b98e5ce5af0dc.js","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f7f534aa475f2ab416f5768f5eb1abf","sha1":"0e264d3826ec4cea33eb1d05bc113200a9ca55b1","sha256":"18821fa5e86c1240947fc976e78c43d849789cda4360578383adcfbd873d133a","sha512":"c24f6cff97cb6e0cf363714e9073f5f0533cfd228d16665aa6be8fc2527f88f5f3fa156e6dff75bcd4f581a1a3e8f7e0e7242ce4eb3d98d5af950a497b98ee7d","ssdeep":"96:JPczm1siDwcWu0HAGMUJhSENesmRmTj8pdkZ:Bc0DwBLAGtvArmjZ","tlshash":"c2b1b79c3f40b0a017a2a0776f6f2429f1396c10ab6be894d527a1dc3f29d29c2b2755","size":5119,"data":"","first_seen":"2026-03-12T08:34:48.0486Z","last_seen":"2026-04-04T21:37:07.773831Z","times_seen":1406,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-04T21:41:25.698368Z","times_seen":13230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/other/adzilla/big/2/js/jquery-3.2.1.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e59a2e92b4756cc61e2e4f3082ee1360","sha1":"c96d002f642bd85adf1e5326bcc0679f9c3ee001","sha256":"42173a3ca70c715370ce99071f892ad61d3fee33dbf15426fa7eee549a4afca2","sha512":"94ab9f4e87fa268a76679ac3484952b84332bb01efb3bda37ec883310eea2536c7b5b50370553571d57beed05179749ba0bef6d53306896f2018ebd037c682a7","ssdeep":"1536:hLkR/QpfICJ5vJBQT6bTGw9S5HY6wm482+a02Yo+eKcGbp7E0bJy+jhklK4dy8Nj:hLkRNV48Ba02YowbCuyMSxtZxc9MuCx","tlshash":"8ac3518976e621319207f07a8d6fcc09b275544f1a8ded057d4c82a5af1883c97bafec","size":129575,"data":"","first_seen":"2023-03-08T15:21:31Z","last_seen":"2026-04-04T01:42:36.078218Z","times_seen":2054,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c91c326e464d432e5dc132a524eeaccf","sha1":"03aae2e36c38794d29664ff1aea6303e9dc04076","sha256":"cc8792ec6e27e2a2920435d52a6c9b66943fd95069c5ecec18adfbb663d705cf","sha512":"755aa072c94f91142f91391b996b1f2db0694a340ba965c590539f11cdcdcdc4cbba898a105f1c1e4eea83692172d3b6602b1c7ef9841f916087d01bb564494b","ssdeep":"","tlshash":"26f0f924576743ad8f5bd1e56a4f0fef1531080bd05b099d3118d3875ee076a22c4636","size":612,"data":"","first_seen":"2025-10-08T01:29:27.968594Z","last_seen":"2026-03-30T18:41:29.16907Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/movie/","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d2a89d2372fc8290577c134e99837cd","sha1":"21db629801d4f80fd46cb960028195b4a032b536","sha256":"2427b653359e625d96beafa83c56161f5e5689be413583cb49096aa79f598db6","sha512":"44265dff0d74da67b373ce5870b5b537418516edd331e046c11aeda6db244bbd2b2bde3cb9dd93bb620bc85620984c2711c24b3c7a3e60cad8178ed743c6b125","ssdeep":"","tlshash":"98f0e1fa3d9060308559f1b4b15aaa14b46564246440a90984cd84c8acd4a9d8f6d69c","size":551,"data":"","first_seen":"2023-03-29T21:25:25Z","last_seen":"2026-03-29T17:05:03.127338Z","times_seen":300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heartilyscales.com/a2/86/90/a286902791a7f4c98bcb1e812322cd78.js","fqdn":"heartilyscales.com","domain":"heartilyscales.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"046f2416be988d43308c4482ab870a30","sha1":"450bf2bc0376f28a24c3b9df8520a3424a3141de","sha256":"8db596987132ba16f2952b8c4785bc13a5e9bfb31db13341091c3b6867186271","sha512":"90713622344190cebf1511b59b610bf64e5a0f568c77f063d53d35d95e29c8673ccfa067db229ac85cc75ad89f83ce1c5c690f4dda095abc99e29060b41a5c44","ssdeep":"1536:1sgv0NC4Y5Tll1apjTHlxn0WvXEon8USxNKo4hRl+GdrV7af73:agvA25lIpZxn0WvXEon8pCTr873","tlshash":"ac93e8887fb272ed4396307b362fb006f22a9d512498f4f4d586b8e52e7876da437704","size":91833,"data":"","first_seen":"2026-03-12T11:31:11.850589Z","last_seen":"2026-03-25T19:35:08.134976Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"origunix.com/sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8","fqdn":"origunix.com","domain":"origunix.com","tld":"com"},"ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"39339c441d31d026ad980e7dc79326f8","sha1":"d2f482e0898f14866bd4f4d0f0316adca85f3b7f","sha256":"eca67e35188403ce56853c0cf039f366cca4fe7dc7e9c7cfdafdb578af08cd6d","sha512":"8cc0440ba7b9456f2ca63c2e83020f9749711b2b302455aa0aa4541c9b900472ce1035070fd3a2196c86dee8d252705d708cbf020b3ed168982ae95b70bd1a2f","ssdeep":"768:vCFlwCRCRvQXnmCvHZSRduUfqXLyvnx0WepCLCflGDn3t4sTJ+1XDGW9vzpfwC4m:MdKvQXnbH2du77yPNe3GDnCNwakt0h","tlshash":"3463c588b5d2f07146877069443f6107f23a6919209ec098f7b5cde1beb899ea533f39","size":71318,"data":"","first_seen":"2026-03-17T02:39:33.207907Z","last_seen":"2026-03-17T02:39:33.207907Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/movie/","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8ec4ea2cc07fb4298dd793cbc67d3755","sha1":"04c34c92ef5baad58af7c56b728d4a84c55f7185","sha256":"9a0e8ee9789c9f554b318f332bf0d2c61f85cdcf33afc1228b6f94181f841b1d","sha512":"30304737e90f692141d3d9d94011b08bd5605aa54d85f9808fb80fb3fae2b0c1d8151784f56ab2bbd89729e5cbc7aef8f6f3b00acae27ae268a8718a5d3ceba0","ssdeep":"","tlshash":"e1f0dc20a9ce2dff820650ba9c78cd0a71a7381ec1f0c0070e00d83563b1fc909582c8","size":449,"data":"","first_seen":"2023-03-07T12:40:02Z","last_seen":"2026-04-03T18:56:22.078109Z","times_seen":2002,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-04T21:41:25.698368Z","times_seen":13230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"401e669c73450a63564a0b7a77fad2f0","sha1":"a2afb94df6260773958bf4b94a9aa2397a2241e2","sha256":"c52f458eb85126a7dfc851bc80d768aea61294e35108cbb1423b7c8b6fcce3b7","sha512":"d01bc917bd24dfb83640b53c68e550bc829e4413b9b28ac733aa687bd646fcf64fcacb75107f2e3a6794da31da12462b4638bf11aab30dab56100fe080a68ce1","ssdeep":"","tlshash":"0ef0783cd958c3319ba3a2d5f55bb34d5330041df608120a321d4fe61eb7b1a20d4c89","size":612,"data":"","first_seen":"2026-02-07T10:47:03.653503Z","last_seen":"2026-03-31T06:41:18.944644Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/movie/","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5ecf4a7133bc58931d4152c9e906e557","sha1":"82a9bf4b6b6ba13556670f4a42a5d205e3ee9a5f","sha256":"ee99cdb52a37ee10a79c22e02200300d6cd2f642caaf7ff5287a7ff7794df25c","sha512":"f67ebd00c8d4e3c43912897d1516bfb0fbf5f2c9e1b5bf575f48023dd5b98634e8e48b4fae55c0ee2686b2f1f5a883458cdd626b8932440c374d1c1217878783","ssdeep":"","tlshash":"d511dcb93a2a1534c685418b31bee7a93e3260617a029184c26ccc295918e8314efcbe","size":902,"data":"","first_seen":"2026-03-17T02:39:33.228869Z","last_seen":"2026-03-17T02:39:33.228869Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-04T21:41:25.698368Z","times_seen":13230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/other/adzilla/big/2/js/jquery-3.2.1.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e59a2e92b4756cc61e2e4f3082ee1360","sha1":"c96d002f642bd85adf1e5326bcc0679f9c3ee001","sha256":"42173a3ca70c715370ce99071f892ad61d3fee33dbf15426fa7eee549a4afca2","sha512":"94ab9f4e87fa268a76679ac3484952b84332bb01efb3bda37ec883310eea2536c7b5b50370553571d57beed05179749ba0bef6d53306896f2018ebd037c682a7","ssdeep":"1536:hLkR/QpfICJ5vJBQT6bTGw9S5HY6wm482+a02Yo+eKcGbp7E0bJy+jhklK4dy8Nj:hLkRNV48Ba02YowbCuyMSxtZxc9MuCx","tlshash":"8ac3518976e621319207f07a8d6fcc09b275544f1a8ded057d4c82a5af1883c97bafec","size":129575,"data":"","first_seen":"2023-03-08T15:21:31Z","last_seen":"2026-04-04T01:42:36.078218Z","times_seen":2054,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensanscondensed/v24/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff0GmDuXMRw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensanscondensed/v24/z7NFdQDnbTkabZAIOl9il_O6KJj73e7Ff0GmDuXMRw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://otakustream.piraproxy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 16480\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 05:40:19 GMT\r\nexpires: Mon, 15 Mar 2027 05:40:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 161919\r\nlast-modified: Mon, 08 Sep 2025 18:05:54 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16480,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16480, version 1.0","md5":"29c06a7423fa8b3bf06203691b8b6d86","sha1":"d843de87aed977b9d8dea19d3a171bd83a94efea","sha256":"de9f0e7b6e092b8a7ac503e4467565bacda3a7692590dd987ffd32bffb2da6a9","sha512":"9c014fe230d37215122cc681b5686f187300c4dbf417c8898b9703e4b463e6c55f0c34b18a869283d8ad9057d4ac3360e62c74bcb9f18cc2801e0455b64d061b","ssdeep":"384:A0gje0PjziJW2GSgdPoGF6pablfd6lVOCMeGIIts9xz:cjzPPiQ2LgdgLud6LiLtqz","tlshash":"3d72c00cc6ec24a3bd623bbc5db5d06292250c616f495a3c7d8f7c8a2d0a01cbee5d1a","first_seen":"2025-09-09T09:23:07.937461Z","last_seen":"2026-04-04T21:33:53.825015Z","times_seen":3151,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":206,"connect":22,"send":0,"wait":32,"receive":17,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exposuretigerphilip.com/ren.gif?sid=H4sIAAAAAAAC_1RSu4skRRyu3ltMDMRTzIQGDVTc2X7No73s8JHornonhxhIPbrnfk5NV19X98zsRHuemIlrJkY93-zeJodoZiQyayKCcB05wa2Bf4JwmSIzO7BaUL9HfUXxfb-vPp9V56yFii_ffcdMSWu-22557ku3KFNmbN29m67vtbxr7i3KOtE1d7IKxeg1P4xa3svuW4kcmN3A8z3P93z3TSqS1Ex21ygofxD7rdhrRUHLb0eYFP_vbeXAcgdqdM6uglTz1J_pRyC5QDb87vXEDkqTv_rGsNK8NAVG6vSDbJCZcYbhZZkWDtLsdHMbxjaMfb0Fk51uFMCMjlcKIKhhW889gshONzQhRicXTIVGkkGoJzEeLZDoBYgvIM09kHrIAKmwt49seH_PFGN-cIHyFdqw7cd_gcYN2370LLLht9c1TdwbRlclmcxiktagyQLUXyCvzlBOHdD4DLL8FKR-Y7uP30Y2PN632oBUvVZP6QLcOqhWmxxUqYMqdzBUSzfyepH0edhJYyW7XsSjSCXCi3uB5_FYdlHJuyB1BFkcIi8OMaAj2Ns1rHJgy4Y57x1ipOoTpW1g6_tK20r4mxxscljPTdmf8RNT9pOMgRdHKFR9TPkdew-yvDKfplbNzSpwUdZzLlQ9J1VuobizfNHzY5nGPN4JemG00-0IfycWgdrptoXf7fEg9Hkwy8_Z06v5OR_-YzFIli73wkBEKgxljye80-NRGoteFITtjh-JNIWlGmS31qOZUsO6zS_IqWHsy98h-BmsPoOkK-DV8-DjGvx2jWn2QFGRF2Zy0JJmCGVq5OU2ygNnps_ZM_P3b17_aW3jx698gUT-yjYLsqiRFzU-oZ8Z-vru9_t5SUOa8pWvN0peJk-A08MXAkhq2NVvkvUHa__9B2R-CJtfvmQNg8gdaGLQyeU5FzXsf3pxWc_sZ-gXDoR25kIXzrHQhf7qgqSlpdsORNjp9TpJ2lFpqMIgVHHbS-KIx50ojtoobUM__Lj4NwAA__9jbypE3gMAAA==","fqdn":"exposuretigerphilip.com","domain":"exposuretigerphilip.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:58.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exposuretigerphilip.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 21:17:40 GMT","end":"Fri, 24 Apr 2026 21:17:39 GMT"},"fingerprint":{"sha1":"E6:1A:BC:6E:FC:B3:C6:D1:F1:0F:04:47:53:D8:32:72:71:8D:56:75","sha256":"E8:B8:3A:1E:16:ED:9F:2B:1E:CA:7C:79:2A:2D:68:EE:2C:0C:1D:8D:C9:6A:79:36:C5:F4:3D:3C:11:B3:19:BD"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSu4skRRyu3ltMDMRTzIQGDVTc2X7No73s8JHornonhxhIPbrnfk5NV19X98zsRHuemIlrJkY93-zeJodoZiQyayKCcB05wa2Bf4JwmSIzO7BaUL9HfUXxfb-vPp9V56yFii_ffcdMSWu-22557ku3KFNmbN29m67vtbxr7i3KOtE1d7IKxeg1P4xa3svuW4kcmN3A8z3P93z3TSqS1Ex21ygofxD7rdhrRUHLb0eYFP_vbeXAcgdqdM6uglTz1J_pRyC5QDb87vXEDkqTv_rGsNK8NAVG6vSDbJCZcYbhZZkWDtLsdHMbxjaMfb0Fk51uFMCMjlcKIKhhW889gshONzQhRicXTIVGkkGoJzEeLZDoBYgvIM09kHrIAKmwt49seH_PFGN-cIHyFdqw7cd_gcYN2370LLLht9c1TdwbRlclmcxiktagyQLUXyCvzlBOHdD4DLL8FKR-Y7uP30Y2PN632oBUvVZP6QLcOqhWmxxUqYMqdzBUSzfyepH0edhJYyW7XsSjSCXCi3uB5_FYdlHJuyB1BFkcIi8OMaAj2Ns1rHJgy4Y57x1ipOoTpW1g6_tK20r4mxxscljPTdmf8RNT9pOMgRdHKFR9TPkdew-yvDKfplbNzSpwUdZzLlQ9J1VuobizfNHzY5nGPN4JemG00-0IfycWgdrptoXf7fEg9Hkwy8_Z06v5OR_-YzFIli73wkBEKgxljye80-NRGoteFITtjh-JNIWlGmS31qOZUsO6zS_IqWHsy98h-BmsPoOkK-DV8-DjGvx2jWn2QFGRF2Zy0JJmCGVq5OU2ygNnps_ZM_P3b17_aW3jx698gUT-yjYLsqiRFzU-oZ8Z-vru9_t5SUOa8pWvN0peJk-A08MXAkhq2NVvkvUHa__9B2R-CJtfvmQNg8gdaGLQyeU5FzXsf3pxWc_sZ-gXDoR25kIXzrHQhf7qgqSlpdsORNjp9TpJ2lFpqMIgVHHbS-KIx50ojtoobUM__Lj4NwAA__9jbypE3gMAAA== HTTP/1.1\r\nHost: exposuretigerphilip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl22675059=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:38:58 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: exposuretigerphilip.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 6d5dcf6e6bc273b17ada84b1e93a492f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heartilyscales.com/a0/32/b4/a032b4d33c8aea68a4f9b84235614bff.js","fqdn":"heartilyscales.com","domain":"heartilyscales.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"heartilyscales.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 21:54:33 GMT","end":"Fri, 01 May 2026 21:54:32 GMT"},"fingerprint":{"sha1":"D7:D7:C3:2B:ED:15:06:17:54:C9:BC:9A:74:64:C6:8C:FD:9A:F8:99","sha256":"5A:C4:3A:8B:F7:8B:DC:E5:DB:AE:1A:A7:C5:65:1D:5B:AD:34:D0:A1:85:55:D5:FB:18:43:CB:08:F5:8A:0E:B5"}}},"request":{"raw":"GET /a0/32/b4/a032b4d33c8aea68a4f9b84235614bff.js HTTP/1.1\r\nHost: heartilyscales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:38:57 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 34707\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: heartilyscales.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 35d73306081888286af1f593dd81c23e\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91813,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"68ff02cd479f5e6ff9e47614cd222c00","sha1":"192875fa7897d7b352be06305dee1c331d5932a7","sha256":"68dc3551d89dd21156e8d9b44d5f6710aa3aec385989e21770e984f66cb1f18a","sha512":"121567cb9646162bb6e0ae6712ceb5401e0084c65260c1f20f863ff0e9a1488154c1163c5e7246b34522648b51dc4616260704c86c5b2297d2639597d0ca75b1","ssdeep":"1536:1sgv0NC4Y5Tll1apjTHlxn0WvXEon8USxOKo4hRl+GdRIsEf7R:agvA25lIpZxn0WvXEon8SCTRo7R","tlshash":"6393e8887fb272ed4396307b362fb006f22a9d512498f4f4d586b8e52e7876da437704","first_seen":"2026-03-12T11:31:11.885484Z","last_seen":"2026-03-24T07:50:44.051003Z","times_seen":21,"resource_available":true,"data":null}},"time_used":846,"timings":{"blocked":300,"dns":50,"connect":98,"send":0,"wait":111,"receive":94,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.6102748809663175:1773711386:oCPHuUwIYI9uKqxQpTDPqkNEtECJGeNA7LahY3YvhME/9dd89fd50f1a3181","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:58.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.6102748809663175:1773711386:oCPHuUwIYI9uKqxQpTDPqkNEtECJGeNA7LahY3YvhME/9dd89fd50f1a3181 HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12181\r\nOrigin: https://otakustream.piraproxy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/movie/\r\nCookie: hu8935j4i9fq3hpuj9q39=true; s9ifs0idfjlwfie32dekl=0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12181,"data":"QonSOIiF2YN99m-K5Ry55QSN5SNHu9usRtu582YiGuEytsQxnN9iftz4Si8t9Tuy4fSNUu4Z8iVCTQt$U3ucW$R3u2-h5uiISi+b2RHiyYbsHXLacIYnixKILUsye8SudhpuvSSoXo83EZFuuxaU5Yhnni$bV$hKZiCCg2uaEN6FUaT1cMoZcMPuidhbewvCRHuM43U4yyPtc7wvE6FuM+Ru27u659fum4J3Sj5kLGl8Sz2F3jtB8NFuMe6uuPXZbJe$-JJuN3Dejf0Fr8ui43yY2t5uMgFjig5MhtuQ1$ZthbL--MFu2E6YNF6IJM5GHGFru0u2ILitfrgHuu8V5JbM5E22e2Me2uznEuNWUYIuitT62k9anTIuRfHBzodWhb3k23k6novztf3Phz9sM5ZtERztJoouiYNxiuttRXECegutO4TDtdeds2SwdgLdtZsYxs9XJvur2fToSNIT3u2teUwM55chQcETuOOKtF6-EO7rgi5jU4GxH7REajKVk4wDDwU5uZ6nMu0hjZJw1ptuTDpXescCzmJQ5ogoZM5xrU+YHaQoGUe9e3121dWvRe5BfYIpo9xPUr48rhJ+DSuFG9I2ZxvHxnlxoH-dCPAQ$lResj+ut$K4ZRt7RBcU2cwE08vauxKTM3nO3QjmZZEdIF67lgPiGLCS8lZyzCeOyDUzpFc6v56c2T-aGr75mS29uYs57npxb9M1u9xXrZiE4Vaiiv8Bj2ZyxRQN6WiHadZz45YQbTGghOTHwWhMr6zMPks84X2i4uip-IhmhcXZmT5S3JoA5a8gY4phCmS829Q8b27t7Z5zYPkzt0ZKz9t8gZZi$Z244hjVuj3aNo6SlRLzumMogZ0sg4Zi29lcZtTcSAmo5XDe2CZDdolcUtn2$5dTn58uDt5X2tknP8dOS8Mod5TDlitacuR-HEn4hHBIgZ8VubTCXtFhu5FVRFJhNyjitM5AVuhh83muMVI2ehLMn4Z1VI03J9TURM4tsu3ItKSUXtQ0lL2v0h2W1T$d22jde8nK-XJ7jFtwoeIenjXF2h6S6Td7fR+XjK$IWS3ym2SGuIWdo8T6B0i00OIcQh4Z0toM5u4ofKPIHM5t0FfW5DTNyjXwrohTW2XPLmSizjXSfuOTEMXhMiM8FX6ztQSnLos$oFh$z4Chg83JX1m36HKXPsw3SHgn4XoEYFhJzlri6CcStS63JJWlmyXRtnYuTaopsaznb6JTobaw2i9uRscdhZb3$O2ieAM$-7znlSd8XsdtiDhmHVDfmxpiamcJmMVlC88i6Vm5NRQWLs1FnMDoYiPX0z88tnnoT0JMht6468NcwH$fc4jto+hHWuBgRZ2KXN0HTV9uTol1UQDon5$NuHog9lsuM4TunPjH4ZIalg8F5i7Sg$u20CYY485HYRMeskduiC7HSFuQ8SJttNLX-8R4NuYRHNNlSlLvKTpc7K$X8essu5KoRZPzlhCjvdEtESpGkk8pWe$5p04An4iE0iImLQHztAjlWdi05LmvavBVDnQBXhatCxMp$Cg8QH8XvlAp782uOvVSmY6SuhSOB0H6iwS8uHiktufAaPvjgxp2TMiAFbujw5kSduy9NuSb8lu8XL27oSiUbo-HPPfiWZHt9QL1EoXew+SuQDo2nEI3SAVwMjM5H1UiWmdiH28g8x2+T-10VmF8SXA398FdpNUs9WtYUrTon5Uc6ujh8isDh-Ycc3tnRnliucVmIux0HHRNQkZb49OoOSx4sV16lnCOTxVLRKXtUodtLEBzLURVy68e2xoibettXw2cauLu0u9uTOXrjoiXz2jcUiHsZUc2sMc7cRzx4jXBNci5AXw2HNd+cnuIs$QnU4wXCh1zJVWRZM1UkH6$bIt4ITnXeXSibsfD3759IoiUeRjSNERiiQXcarU75SVZY6DuaSnQIHihIrtSTZcsR$agT5l5uyauEi3d8n5Xdrcxyx0$zuc8f2+uysxiw24R3EaWbSCnwFEMfYwk8-oAygsfcVOyETBw52neKYIjS0cAXGhtO7kjxE0dumdhNwu6d4X4R4H3+n04t6WZSDGlD2BFdLEwf2sYAL76n$ihijZfd4e8ZT9D4bTl5FgihGfkb$ds48OYRK9ZJjHhtB9t6QDtbk4Scg3GxYjadHMrhI5Rd35uR11hErJx4$sMR92Rgj4P5D+JX67+$VkSficgs7AcexUKu9b30$IZZODg86365IyM042TlEKEtC5j2tzlNIKZB2md7flf+lLiXu1QYPLHu8RkbdKcM-5-LVOoX63iseHMw9HryxUdbY-5cvEbuV-tdcg9VdsR9Nm2Ml4ArcL$Dua1tVZDTJDaNE-Uiy6gZtznM5$PWgMh8R0JJo5nxsuLOm7xmwFVILtY2$efR3aEfIVg5wpR714m9OyMS4w2pEax52xteg3d6rHHnE+9RnHSMAi4NgHiX2zUHcsrJRjmJy3t2wSTGNKOkRu40G-tKyhwpXRToMEGtarR9MZ68xKA1x1T2OhmLybOuILk420t7L4N0NDa2JnSMI4mJKDsulWzcSiVzfz1nSa1oNbr2g8xX6iZhl4o8SUWi4FaumFb0eYnx7nt5tHMAG6QT10eRf3baUYLp-+moMx6u2RYQksV3uOn1tCNT$u+hO9vPQYmTnJi5YE$RSoEaxz-28SvOYbJsy24vNZxbN7gnwYaTTz9TXr-I+hnpibO98UkKbTzSA$2QfSgvY5E2NXipF2VEZnVnu80h1AtpKUbE5u8tnwIIJu6loyShMwRgQh6tt8ILNmbuudzI2x9ex8VsL0IoMhBQGoONeEgYoCYop4gG680OLO7uSwtU+MQSZltGO2X-duy00S9tRi7sO-Emfl+oL7UVKGDrsgB3RX3M56sYzgGerIO+$ismmlnl5s2uS-Kmg4vaDzDHG5Odr-S3Fh8++XXm3H5SDNWj+T2F5vZN2xCDDoE5gszYebwYFbX0crePEhl9pPWKzQwTEnIrI5Xlj1mYMhJma1MX3fu2NE5d5J2ozB+Fewky1K$lTn7dOj0uB8oFWdL3N67FovdWTCA2YhufE4YY8Ues7whRo$I3s750Q1uUvepkaMlIoiRFYA+EXDQtHAX40EAHM68IAfRZ1nsQ9FLijY7-GRlJewpfaQo5SSJPahwZSQLKZdU9LE5geSOmHImwV63D$QTg6bF+ndmwfTQen8$4P-r6bRYud+kG7yt3BJFFx4v5xirpBftZhg80DeuYg3eeBeS93GEnm4KTt2pC4ImEwurO7SxY6EjuLPon4cz4HYUHuXx6g17wlU-SBH1kxR-4ZGeMkCfuA6+S8t5SvyJg8VFmsjPGVedTzZ2taFzKJFT0CGOyEiJc0i8YWLLgjeQdGclGwWMZejA$8UsAPWY4FI24gVcS19XuSwAe088cL8iIXMiUwnpJzedhuX+dCQPPH+1dPo-tEPj7ohe+px$YfiG$Ue8HHERiDnH7--Kghk1eaiDnpgDurHK4iED8j9eYM7LYAE570eQ8-Y$+6udH$iwunhcQS3exdYR9ASj+6orSpXFQ7QR2RdJ9LhnY52znZ9A+h3RE04oTcXhTR$BtLXQHw93$5YLXpSs7m3rTVtnMTNX7o5riJuLFnxgP1E4h-E$41tRuY4cMrFrcpFeX2uK-nXCun5TPl-R7P4dE$uAiU-STL2cx$Q7Q9NiN--nN17W2tNMYEtZ937PNDXQd3S7Tm9N2BTOg9Pg+R-d5L7$tccHkodSTfHHP7ZRxLcy5H7HhXeUi43zYK7jHGP9FcxlgPnwetk$EbgaM1-t5-FM$5P0e3PsFBNO+874NSEONw2E$2iM2o5eYIeoZTVtP87WVb9MIOEJcgSj-Ui7ihI+ddI+YIQD8B2CNUxv25i1M-hetHY3E0h0VhFK2CcQ8pXWYo3ltCEpSx9cVv$kks-rHLupPLPTgB7NdU4E3rtT43S-POY$7wTT5Juo9j-998PodM5mEKIcgASeimFF2F+juY+U7DcExzFxVDSI+na9Y5xRoitfizP+ctoxF59T5z-h+zYeXVioeSEd2cP93SP1avdLMn5L+zY$g2SZ5vIb7Niua-9m36uB2ST53h+57$P1HaXmi$i7-b+57P4Lnm3RHaIP4seH5aIIdwPx$i6E+Id+$cu82lnnN-HAk0TXaha2iwuOobIiFT56VZu3hSEUMA+iiUMLtlH1+camT2VEuu5Z-S9fQX5Y$UimipX1dJMSEi4k8PcI2L8wxcYHY+PUuk7DnZ934T6laod3huSSNHhSPlMkZF37inkVuhTXi1MySe+Sy6iAI6PRubQu5A$R-R7IeUtsXRiPQrIZTr606-+nyZVu4gyM6HYlXUiji7wK+l4ZNiaQgjowYuhTTV9pXa9S5TP1H5-uw8u2oEiG$1wQxz23e-7w6cccwrnHPEEUi4PD4ASYMH5Q9TyQdHX0FzP3nLwdx4at62XbS73TTzyT4iQkNxYtV+dm92kL7gwUPjQXMrdCSZ+gEhi1wc6SOYNHhhV82t5U9Nu960tuh7uC7ogRS42m22QuOgIFP52SO0hDuQZDnDVuRs7r7jOTTAVbHOeRy8Fjw+oWwHkMyyh6HNuOg3EV3OiJcy5kYLty2jVf-GT-3xwTRW7HOkIPeQQG$sEDkPIAX$RjuliNiNaxem6M$5kc3J-8aZ2P-rTc7LTccAVEO$Sjoc2iT3NNHjo-yI45u350uAHpOSNkEJurP$OSFRe-Vji$yY6Rda7pF9H-eO7moeozR4NAIgy+MohY$XYaI0+iTYy3d0NxetyzQ5QthKcLusnFP0TdFlSsXeXai0PrYIEpEs7uS-NlwokbcVOs3S4t9LgUFe$fg1fpYKtCnuNvONe7XWQFio7otQRohi7HaEMaiNVC2ThOo7ToxON9ezYvOYgG6nx7ZIhviUuJYEug2Yx-HZ9XfLg3heSYo7YoTXVod2SRugO5Few5gN-8S3$s4z-HyhFY9SaaFFuF0wTkg66z$CS2SHd437uLV9gZ99SWSJiUR4TDf2483D+oXlO8aDXKPxaTfxd-OeVuRIe1w5YYfU6AOj-4cnXd6zRj$h7r-Y0mKoVETi+1KQHNdwgwEAIETiui95fpya0nhQ-hIhZNPNiHj3EcSBQo07eJ+-a5TlIRdMhISxEJRTM8oRd6jZRD6CcJ0IYg-reig838KuTFSCcZutTr91grk2ia79-BRBFx0TVsjBNFwNKRMvXZeAPZwX6f0jo3EFEQ-1R6R3EnfQVOFH7V+$uNuEw0KXIc7S2-YjihicX$Xp02S0n+0CfyhaQsxy5Ra0o3oV6nOzY2SYVmOjIgHDu-VxdawPezQhX5Q8Q2uh2RyPP8yZIfu3Vsks4D$pX3fltJcCHOyMfOYr47EJ6WNAIZ9idl$u97I2XYg5QfxO24K-FFj3676tRF+J+nXHfju1QVSPFTw-H7OaapxcMhon6rjpKpX4f8xL$$EvPPi$4sjUdwfJcI-SVRtETEaRP07QoXkYw57tf0Xs3QFVn3+vKoSb5B5L6ta8E45tN0iTgWopTNiG$HVxQi74IV2p6SNlHajBSIVp60g466RX6U+ohsax9oxzWKF-QJ9mP24Pf8yS4WGgHeSAouKafjzLnMhtWwRH7T6Ei0MSTCR3hY$+evX73m$fxCXMe93p73oyVfgmV1$lPlIFaRHbj-NauF43mV-0ie2DfJ9$yjiHKi4w3X4kHg6FTtkuOg7Ha563oLSLXCSEQQ-RPmW2HFMT-EiuJekGFSRThRaThzYPEbf$uT4p31daV5QI5odH8+zVW5i5WJcL7$zZuY$1Hu4GNoSaSoQV9B2smsX45h4Kj5aBt3$1ypVAXXy8zFKQKRtId2Gjj8yWjIjJjDjEdwWIXNiVueQOOLk8yhzotj2R0ZfB+r7LgsxYPUxLx7w0wnkXOTFY$coZ9dF4FaMw9PESjsgaI2wKww3ZJVuaiNOPaLkF3mioamRIe05NfuRR3E$RiO3ZSb23Wg-Q-O2oMuEON7W$mIw2XiQNFxxUwFV1-RPUGfgxNUcN2GiwoDwm2RiJNu5Fx2teicHXoS09Tu+rznwBaIGfQk8lnrJGYBu5kuRX21hyGuTLiVNiKu4DGoevPjR6Ot0G29HST43TTxzi5eIZO5+l-QIg92z3zfJEiKscsZw9jXinWfivOoOUjIjhjxTQ3oRbOfxLGlGR-4DZ9AV2EmRdFH8SDm+autzwuEWd$VaG6yaJRj0LrWWHQlrmOs40myju0xg4oHoDJxxcMm7A3NuZ+sE6WWYZP+DOekDZj6YxR0GuFzOf4LSZ9Q4MdedhihJ4fJcY3EgWyWJFPlHA+a4T2NaDK27W2E3rXpS1NhmRXlcs6+Fa6gGodwsDS50fkpRAGnwwVIW-mRW1jy6GyDSwYwTx6lYrxDIhsDg4x+JXRTkWy0hMFVeJynw-OSm2KW1lNm7GVrWR76+Z$R-pGV4KThiamfuBjdNwjhi8X+kzQea0iDPvOxFT5Ux0FA3JiQklnjmLcsSLfFYuhaK+Gt5Qm7ppXBe8GWa6GWDEjRsJisilyjpzeiXnSCnt58jigvieK8p2EpNTssRzPPuGs9zFzb-7zG$hYU4l9dw-kOiMSfuuKRP1z2E7WJmPpV4isEYLjd1Q3ZKobwW0oZysj34hjXudy0FPnSEdxetuTPVZ9iGiKCOjirdwpe23hMFu3F6a4zefWerGJSRwyhNvOyPJx71e1eYUxyiRPgE2ict1oMXVmi2J4yaz6u66YUEhzQePbnovwdyD87YUSH+f6t5aVJrGzDMN1K1Fb+o60Re3sBIpHKKBzJJ9fNRZ4cEgsxzMewNHUyzOYdWG6-KFk+deYAjtpsW0Rb+0tS5ZP$uPGLsoXJEBEgHFXfyK9wTNOeY8r-sh0b59J0XOiDBjaRtPasTVyrPdOZ9hZvroRIF6FZrkGJUgRM6KwA4kf-e$eWg7phs0hHyeuP7yb804THP3sS4irw4H3kRox6-VXlHTD0RYWCXdeIGuWhEnfkYeOuOufeUSDv+Xgig2JgNCX2$oSuEVnZR-mcROx1yauimKH4FuT+3yr5IkZWf$Ew2SrmRfK8SXm83CmyQhiSPK1gp7IFSGpGWt4rHPEvrX+se4RRsK2GB+MrXy12lme5w+2jeIWbQZujzgj-40D951blbLowlObRCGp5r45KrpSDtWGEuZOthsn+n3l0P9GcBoSzfEuNNBQba5RKzP7hZ6GeBIFyyu944Ts2gkNH5eYIPLctYk3cDi5+3SdthiWt7UOD8Z5rb0f7ryfgSZ+Aw$-e6Muxa1FMkGoMhviEumHuTPWDU61+UC9kU5300eMNbVekgpCRuB2hxlTMmem7TEmShV1dfpSA+XyOpXMQgfwDw1wxgrrRP1wNYwToEwTUsTJkxns5pZd1J3oXdhdxx9R5C03j23aAI6KUAAAzl5igKiXErBbbPCUldRRcxHBy2M5B23Anxvag2EI2SAdilJDeWLj6jgyiYelHE$B0dGUQsEuJIZN6fodeKbcj2$a8X4ACSIgehhVT$VBG2-ZtXecceHu5KT8aI55bTcB6noXhw9EZ5Zcu56InNn1iSzTY31PStPpm2cNgSI5-yDnVH3S5+LMJWG2cyuxxzXcNDIHhFo9bak-u8cnTycYme8M0LwZc6LgjAgv4bO9MlNdio6x4rHn0SH8xnAotAYGf9twSmPBT3SrHta2rKY+LmalzuO9MmuuH8uxZR8Q4S4tGihurgKDJViSwR2KU9YE0stE4tc5-iU54-z3MVnRi+wc1C5Dbi4hDictldlwOSMnH6xxiU8R1iFiXnTtyLTnaRuYItik50RiSRmL6z2zc3nX7SjnENhZiPuoXHB4rndb55XhHXtolnjOIWV8Zw5k9jbn$eiue2P105oTl25dS9N2R5WtIL4c0mN5U4elcTlhslI+imXHn-ThSUVaHNbHLuJNR2zcXzd1XU8E5Q4NuNV2RXH1kTDPtboaSRXUWRHB2rRyyNKw48t5bQEsfiSRX0NH2USgHTK2huLsRQYWDgcGNJX-8swiFnfZ327Xm5P3ndQwziXOnveFTa6rc295Z7yIzHN7ckSvubXU8cItniXG4$w5p6rRYEtAIX2kSZYr-N2YYOi23i$nit6x8AImMm0QbMwmIn48HILXXXRrzIY5cnIBTC5mKdAVRSdVthJnfWMVVAMc5PHTSKIeYzc2VuDtxpYTD2tEVMNnTHMcUueMiiYIY4Ywn4a9mW5LZRgS5NmLwYWiboJHgTLrtQSs26IUY$8Yy2VgXm62iUObQ$m2Q$VS2PXGmbbu$m3XKhH1toktkezOnGnjhQlCuKyiOciH8XU5mgh-pc2SV2l3875impciRNHHpTW8-2UaaJVDSeToYNemlMXInZfTp3Q+8la3NVweu-HUysdMO2znYXYumJONtyNYZ+dbzOJUIKeN7ZCY4LdDRrWSS24LobWiU2ouxIoh48h8lTr8u5SEuvtjThgbZ51$VXb5VTjdOfWou6LdH0Z3I1N2-hnlAmFHj2RWc+IkgoT78Q6JbnWg1hkHySu1Qsm5XvhrjUY3ZMKMKIc848M0zLOKzdSQ8kXH-uQmRti8R7ZHsHisMCO8XZXAyFcfSNytl5Unk5SPb$mSKM26YajF44TtTu9isTFVcwumxiiu65csuRmserl2Anc8mFna+YYGh86vX0S-i9m1FNKVVZYwO2arMiuQ5701FOHewVaNuSr8TSruz8MY2+VglRsHwbc8ImJi97mDEmMbMwh8-JnT5R8mVd2y96yTRYExO3tpc2uicUub6utztdSuVILEHZi4edsj7AorbYpfKmm5nS12$ahIXwSxKd+-h9SksLGeY2BiC6LuHvdlr3IMPjSRGD9s986I96$Fn14zJHzCyCuEu70lJiKrZjAiNYZJnmm$SFVlVF2xu+uI2un04cDc2ci8hetcj2uRSktg8uu2dASGnaS5omeWp3V4CuDgrDId5Ugo2IV45uneDWmEWHNwnLuTcw2UnGtvSpFUaS2szcPi+wltmSbgmZep1Io30r5DZ-YtMFr2m8r9ubjQ+7DL8YTz4giN6iPiDdKCYTzZOANo59v6x0Hc1N-oDuugAIkK5s2halZT8$QzX1NNrEnLvpKTE5MbRlIzR$nEJUtzMM8X0oWHoYUxnvjuayujg7dm6sMml-bnoT3oRO51VzPw5VYCuOyzMzxI3dzgSxRyZH5C6KRVOKTH2zXus4WZIWKr02u2XWI03KgdVURbi25SUZtocw2HJ5WKIohVuuRuYJcsMNPZRSlFDPUFS370-$n4J4Iu-e3SH8JdmdJkyJuXh9UzSF8MgNhZh$0hvSBuL5zKM8F3oTnbSU+mtu0VS8T8c4-YzR2lIGukaRgQ5uluBuRdtRzW6kN4i3XJ0Hdm9aruFXbiX3G5itIKbIW7ZMRp1hI3KUmsDyFUeY2SuOQRSDhcijyzuu$NYXa8znXdHwUGODVOi33TatuQGcrzLuJuFEk15y2Vd0dH$yuh8CnmYNAip13siwYFmy5ZyV9Q9NUE7RPelcn4b6aIazU0Np8Y$YYaUCPXVdrg2$RSiS2zQyeC5XgG9P9DMMfMXyJ$GFvJsrRzachsIBFPnusMPekwNuAsnY3pbKzW5W$BtNOMrUFehnbnlOYGetsC8fyznSRCsLGbYNhw2$$Sn1zHzkea-$uQuvwS$mbdtTxisFoAFPzksWgG$3pY0MBnOsWgwT5mYYeKuCJ0iZ$75iwUgivRsyp-v7g5uImQeYiSMU4iVQENvJWPVZ52pr0ftGd5OX$72s7fCnOJ9h4R5DiwznmVVLw$ub$CiCznOecwf7sFGwnJX+yLyXi77Wi48MOWvyWMTYUXl92JSMyDMDLkllap1wE5lHZ1l5R7zU8Dy7AnSciLGcu4ttg0sF0IrAsH4HejMoI01Yu6oEforHoIWsu1bks8whuygO5s53uG4-o52IVilRsvOIO7ib77ZKjb-VmOU$ldtlilX84jVQH9F3JbSLFEDiuMc2VZEGNKXUROSQwiUUoT2D3ymMbYtc6SL74XO5Mn77cD-sGegR4WIwzZKHSy8Byvnw6dcjd+MHMyhS49J4HYM948RUSA6JDE9UF2kZu$2HGIUGJ8EPZ0eASklF8MLZ6He28I$3FLDUhD8c$RKiPQuxF4u22$QzH$QugjEjOI0GYO1mCYgZPORHeIViCS5$TQRU$NdtD554P5+RznSnx$VieDDORQes6A--pOD4LZXeMiEllBR92ER2$3utTMHm7IA52$xF4$M1sfIYOsej02MbCnOJSV7uh6osbbm9KXiveLENDs5+iEX5fe$Diwc5iI2nyU$NdlMaSf2I+IeAwRWW4NQTzdO0SAs6o5$2Jii$RHYLOsM80FegRn4ZR1tU1ct2t0G-9cHsRkpksVZt96CiwMiX1XY0rAHFNUb-MWi$5X-igTwO8fAzo0zR8AQWOH+iNXwresgI6Q7ioIr23ECFU$6HSnWl5Th20BoaZNoSnSBAjn2HD8flmUh3-mQ6Ea9NPdJfiS4RIDlj0VdAOE3-0vZCt95KDfw5JHd3fxnUZJ0J-Vy5xmWYTziXvuAmHMMDc74T75xU843hV5Vrwy3-I9v5imTFS4ib-h0s1DWTpdiwc86jWSYzcys30be48zlKrRQDZwd$Wjg+60hadgibu$jGTIRLoX$09xNjvwbD+$EwfrHwlF+DrbODEwWxbjvE6KnKJQ0VEKFVAIU0zhVRJxTWJclJ+z4cO-x5W6clUB6izReE47+LmL+sJ4ZzEeSclE8VXtrRiE609eYvRQEM0ix-Y-vbnSbD9id4rITxhCRTEQ0K$mW1xk70QDBw8o5pNPHvc4NByax60vD0L++45OGx60IiaU0K45O$x4m1i4t+SgvetMomXiFUU5xTOrx0wfilJ+8DRfKEi29xtjfOEQf6M4I3Eh5+zS7YJxQ2B+EhBdHrflTFXc+h8Ba4FOcxh0GXFxyo4GeiMA$HHKjTdEzfAQA56hDU0E4wOk0amAhahBHxRR0EOmxhhlBWZRYU$60GhKTfzMR0NMFDzklZtdwdjXQ+ToN4-194-y3Q0JZQccrfEZRrM+6GNaofuxojCMW28VaofSrtjCM6mZyht+5xljyYdmey6t3Sxm0dexJ08Qd+rtv0uTTDpxbwnIpnj6ee073aLfwDcKwSf03+hgfsJ1jY+wwJP-e93VKOP360vOly2YgyRhe1WGO4jfUDVREQ+0Jf-a2Jr30m+3DG3hl3U4zRY9Km3Ehx3RxKR1eBHB-l5zDEPjLeytkfC93jgrOgxWD+oDZ69iCVPEFSCIQYOBzOjPYpnSennL3yAHmu-2gtcHiW6GjAFTJsHiL2luYVw5Gjg8XuNauEuzS36AQC$5CMGH3S1MrH2PNoNz7G1UTSEjQYOStMGLn5v55$Mp-Ba4+2jpGr2QVDius+RnLaHXbG-70UEjHO8n9It25uuuPcVB8wIn$UhQzHN8u1ngc$uU8DXigulNDwb1ETYd2Ai5a05ktN8Khi3NaNO3yui1iomy9Y625g8YezQ5uuceSuoNubI255bikSvdF5bU6+iXkr2a4iIiYbrznSsS95P6MEQ9hGSMkPHxraSi5uGuQuvUSuihius8uu6sM1RGUuGhk0JJM9iYuYnMLZ8DuNc5wGUSFLyzrfTQ1mWGkQuT5byfZN7Ga8ALSuQy7WGk624bF9uVp7W+HYuiu2Wzx1JGAkumkmc5tZxISQu3oab-sB$1wn3SXd-HcVB5ucWMnnurHNA4nNNZTdjHMb68uTJWub+vSnyO+aaNWuuu+Q6N6tRGmuXSnMrLMKxYuUPC5OuM-mG1u0fTET-QK5zTuPW1u4tnSXUtUJYN+i7TRgUIVBZlPyt4tlwiAY2SiTg8wTmYmpBTXHhY$khaDtjbRMagoSeg0U5L675Q5mojHk+-V072+iVH1Apy0ItScDXFknt$aXFdcpU5LucU9sCnu3x5hf0A8F8Mj2L2CGScr2RgiTu5iMGHuWlo6iSz$p2hnu2uuFcui5usGS8aYBNux2FV4Ig8tRkshQYBz4ITnoc4796bndZiK5a8b0uH2HudzAPUutwk8usw1SlNs0w0n8-821XcXW0pjUVnoM3SuuZtB38c5hy+3GUJRVTUoHG9kCAvzHujcgSm4Z3U7s-V3jXFcYk+TEmRnM7aruuuBXHjuu"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: qHCWh+/FkBua104dfutlew==$DtE5k9xbxvOk49dEpiMYLg==\r\nset-cookie: cf_clearance=68OWiZEOIxJleB1rJT_JRy0Skg.FYcLMSHvmKS_8iDk-1773715138-1.2.1.1-gKQReVUv7y1r63DOip..PHIKZOR922yQ3BwF_AwHRXHI8ifdHSlEYgkFDXforQBo7vLuwoAsmtS6.j0qg6ZuMz4whTpL63nqCxQhGV2rgxpefLnOMlQF9xgZqxY3NNox.Y7Y.RAJjLLB7jj.UsTqVbE9.tIxGs8KPl1KT6RTH.CfELEipzJ08ByAqvNUOPTjtf_HU2mrutInsHacFqxcUQgHE6fHDRaXp0LjRXrdTJA; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=piraproxy.xyz; Expires=Wed, 17 Mar 2027 02:38:58 GMT\r\ntiming-allow-origin: https://otakustream.piraproxy.xyz\r\ndate: Tue, 17 Mar 2026 02:38:58 GMT\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9dd89fdeff2d35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"piracyproxy.biz/","fqdn":"piracyproxy.biz","domain":"piracyproxy.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piracyproxy.biz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 22:59:56 GMT","end":"Sat, 16 May 2026 22:59:55 GMT"},"fingerprint":{"sha1":"7D:C6:DF:ED:37:B6:EE:D9:D0:F6:F4:D5:68:79:4C:11:35:5A:B6:EE","sha256":"D7:19:A4:E9:8C:AB:71:97:D3:97:41:CE:27:3C:27:1B:E7:50:34:10:56:79:95:E8:24:B8:4A:36:95:80:46:E6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: piracyproxy.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://otakustream.piraproxy.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":270,"connect":114,"send":0,"wait":0,"receive":0,"ssl":183},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"piracyproxy.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/other/adzilla/big/2/js/jquery-3.2.1.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:59.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/notifications/other/adzilla/big/2/js/jquery-3.2.1.min.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 02:38:59 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 11:23:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YYKsKnGqlBU3xK%2BPLAhDoDv2SyUlrkYPsFoUHst%2BHlbS%2FfwRBMjZ1hO0Sztwf1MauuJS1okqvELj1zQI3mLkPFAVaJGh66ZmUAJ%2BPstTfqY%3D\"}]}\r\nage: 503480\r\ncf-cache-status: HIT\r\netag: W/\"68c00e2b-1fa27\"\r\ncontent-encoding: br\r\ncf-ray: 9dd89fe4d9990731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129575,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (745)","md5":"e59a2e92b4756cc61e2e4f3082ee1360","sha1":"c96d002f642bd85adf1e5326bcc0679f9c3ee001","sha256":"42173a3ca70c715370ce99071f892ad61d3fee33dbf15426fa7eee549a4afca2","sha512":"94ab9f4e87fa268a76679ac3484952b84332bb01efb3bda37ec883310eea2536c7b5b50370553571d57beed05179749ba0bef6d53306896f2018ebd037c682a7","ssdeep":"1536:hLkR/QpfICJ5vJBQT6bTGw9S5HY6wm482+a02Yo+eKcGbp7E0bJy+jhklK4dy8Nj:hLkRNV48Ba02YowbCuyMSxtZxc9MuCx","tlshash":"8ac3518976e621319207f07a8d6fcc09b275544f1a8ded057d4c82a5af1883c97bafec","first_seen":"2023-03-08T15:21:31Z","last_seen":"2026-04-04T01:42:36.078218Z","times_seen":2054,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/other/adzilla/big/2/js/script.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:59.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/notifications/other/adzilla/big/2/js/script.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://otakustream.piraproxy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:59 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yVcotPRkEJdp4wHpcBAzIXk4TfSydTXJ9AneAqP1r56mLUvSiI3mLUIEnBNjpjabOTXfNRNyQiYbJT3K%2FQj8gO0hgJwxjOna47O60MacSPo%3D\"}]}\r\nlast-modified: Tue, 09 Sep 2025 11:23:23 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"68c00e2b-18d\"\r\ncf-ray: 9dd89fe89f6f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":397,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"37a36981025a4dc83117b1ea5348e389","sha1":"d13a13d8284819725e63b87a6206c71a23ef3242","sha256":"7e356a6794903f614c27ab41ac97b1b95ade6593d31bda3e94062df56ec05ad0","sha512":"96245d4bb7f97ca555e016d42422210d00360eeb2921b7b84acf5bef5b3643ba9297df42a3ac1c0e031f38d93b9a8e4c8834eb6aa6dd48f162ad597f4f3a7f05","ssdeep":"","tlshash":"11e02b38a2685274c7b7d2a2618f5b9f2630425fd00a029e702c534e0ee1fa612c1d6b","first_seen":"2025-09-12T13:40:28.363426Z","last_seen":"2026-04-04T01:42:36.094564Z","times_seen":201,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/wp-content/uploads/2018/06/99678l.jpg","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /wp-content/uploads/2018/06/99678l.jpg HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/movie/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 17 Mar 2026 02:38:57 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a0AJHAJ8WcWmgG5lkg891T7w9llrlX52Qdx9ipxb9Fuu0bm2eoKATiOvQ58iInltyw5gDJ8svIlsoFFYfuOqWtANH7jz13G2KIta7a3naAeRVTzXShcbz1I%3D\"}]}\r\ncf-ray: 9dd89fd82eb835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57693,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 423x600, components 3","md5":"58963c06dba99537904e82625cbe5f5d","sha1":"9ecd9cdb146d843c1acf65812576a70c783d804a","sha256":"60f5477b96be77280b8bbe98237455ab254222e7a091ab9c55f14f1aae4b66ba","sha512":"904e10cf987f035e277bc0d2b80d6cde1f55bf7d7b5a91296f8f770b408aa91c8bbfae3278da8d55c86f642bd1c934cb711ce246bd6f0da7d3d572c872d8f078","ssdeep":"1536:zHC9EDXYemBuabdB+aSy+Kuwy2lS4POD01lypL:zHCUXYe2JZP55ulcypL","tlshash":"7a430217b7c135338925e27810f859016806ebe7da31ae6ce8fd7b6e0b673f91446b18","first_seen":"2026-03-17T02:39:33.184384Z","last_seen":"2026-03-17T02:39:33.184384Z","times_seen":1,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exposuretigerphilip.com/22/00/54/2200540f09f939738419313a1a090c32.js","fqdn":"exposuretigerphilip.com","domain":"exposuretigerphilip.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exposuretigerphilip.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 21:17:40 GMT","end":"Fri, 24 Apr 2026 21:17:39 GMT"},"fingerprint":{"sha1":"E6:1A:BC:6E:FC:B3:C6:D1:F1:0F:04:47:53:D8:32:72:71:8D:56:75","sha256":"E8:B8:3A:1E:16:ED:9F:2B:1E:CA:7C:79:2A:2D:68:EE:2C:0C:1D:8D:C9:6A:79:36:C5:F4:3D:3C:11:B3:19:BD"}}},"request":{"raw":"GET /22/00/54/2200540f09f939738419313a1a090c32.js HTTP/1.1\r\nHost: exposuretigerphilip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:38:57 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 34121\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 4\r\nHost: exposuretigerphilip.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e8e290a5793070aa1acef55895a01a2b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":93676,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"978a633e00f7ee3a5532c58b3ef5a110","sha1":"0259d67ae9a88f72e7340da003d36a05f52c58cf","sha256":"670cd0b32d53a202e3f00c0d1d94c5d20922cdd498f5fdde681e5a5e4a7e45c1","sha512":"9cede0146b81f35853ea6d94e60faa7823cc3e603feae9cf09869dc0be56d3e63d64c882fc6cab91484fd874a9b61d141413841ef67fc2f3f28f67fe9c0a4bc9","ssdeep":"1536:7MaPcZqem5Kvg/+UriOXwaHe4J+LDFR8Xmj8sV:i1v4WUR+1HFb9V","tlshash":"d493e78c3fc1f0a513a5203b222f714ef0994d95546ce468f783f56a2f7ca4ae536b98","first_seen":"2026-03-12T19:13:09.650255Z","last_seen":"2026-03-25T07:58:56.793621Z","times_seen":26,"resource_available":true,"data":null}},"time_used":747,"timings":{"blocked":254,"dns":1,"connect":95,"send":0,"wait":102,"receive":96,"ssl":196},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"origunix.com/sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8","fqdn":"origunix.com","domain":"origunix.com","tld":"com"},"ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"origunix.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 00:54:42 GMT","end":"Fri, 12 Jun 2026 00:54:41 GMT"},"fingerprint":{"sha1":"45:AA:3A:0E:90:64:38:1A:66:CB:84:B5:2C:83:94:64:64:4B:D2:4C","sha256":"DB:4F:32:25:2B:6F:39:DA:E5:B2:60:A5:D8:CA:9F:10:04:77:37:A9:A7:4C:A8:1C:ED:D3:6F:29:AC:01:7A:1F"}}},"request":{"raw":"GET /sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8 HTTP/1.1\r\nHost: origunix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Tue, 17 Mar 2026 02:38:57 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store, max-age=0\r\nAccept-Ch: Sec-CH-UA-Platform,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform-Version\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nLocation: https://msdoj.com/sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":71318,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":29,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/notifications/other/adzilla/big/2/index.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:58.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 22:39:28 GMT","end":"Mon, 04 May 2026 23:38:03 GMT"},"fingerprint":{"sha1":"DE:44:B7:F9:65:9F:D2:6E:27:46:3E:12:7A:23:24:E9:D7:2B:16:7E","sha256":"E1:09:99:E2:19:59:48:E0:83:95:4C:4F:63:09:68:08:82:8E:16:17:8D:20:09:B6:93:1D:B5:84:B7:46:68:C1"}}},"request":{"raw":"GET /sb/notifications/other/adzilla/big/2/index.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://otakustream.piraproxy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 02:38:59 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 11:23:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wzXBYq%2Frmdgyw6s1Eb4B6UrRrLpbyHxRT3ENBvuzgnjDnPv70Ed6oVFti3%2FFleoDzXtbd%2F9gNSZuFtVBBUrpJfRDysefjZMvTTUPlIyCeQ%3D%3D\"}]}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9dd89fe13d8f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":844,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e3a2c9d994fe6c8d6beb127a100d3030","sha1":"da7e6974835b1f2a612825fdb05ae928edb816b6","sha256":"fdb2a8a5d0f3f9933b4d33b2cad3205d5e99aeed720383cf8c70b668d19ec117","sha512":"7ea95545c1685584d39b4a3e88a3d29d514125282b5f272e747b01f0d62a3d7560bddc88e03fb2c60e2733105f3c5e025f31b24f5369d5e97290cd2a53185547","ssdeep":"","tlshash":"7301049f2dae92f724c230a6be313edad4d6e18b4a0744103bee04104745b708e2324e","first_seen":"2025-09-14T23:01:21.732181Z","last_seen":"2026-03-30T18:41:29.074726Z","times_seen":102,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":461,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Fother%2Fadzilla%2Fbig%2F2%2Fcss%2Fstyle.css\u0026l=2400\u0026fd=519","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:59.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 21:44:44 GMT","end":"Sun, 24 May 2026 21:44:43 GMT"},"fingerprint":{"sha1":"4C:9B:DC:71:4E:6F:7E:04:5A:F2:21:54:DA:06:E8:A0:34:82:CB:86","sha256":"23:FF:1C:4C:C9:81:C7:C0:A0:EB:2B:81:77:68:85:F3:47:33:36:DE:71:C4:DB:B4:66:77:5F:24:24:B9:A7:89"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Fother%2Fadzilla%2Fbig%2F2%2Fcss%2Fstyle.css\u0026l=2400\u0026fd=519 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:38:59 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Fother%2Fadzilla%2Fbig%2F2%2Fjs%2Fscript.js\u0026l=397\u0026fd=450","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:59.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 21:44:44 GMT","end":"Sun, 24 May 2026 21:44:43 GMT"},"fingerprint":{"sha1":"4C:9B:DC:71:4E:6F:7E:04:5A:F2:21:54:DA:06:E8:A0:34:82:CB:86","sha256":"23:FF:1C:4C:C9:81:C7:C0:A0:EB:2B:81:77:68:85:F3:47:33:36:DE:71:C4:DB:B4:66:77:5F:24:24:B9:A7:89"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Fother%2Fadzilla%2Fbig%2F2%2Fjs%2Fscript.js\u0026l=397\u0026fd=450 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:39:00 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":560,"timings":{"blocked":270,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":193},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"piracyproxy.page/","fqdn":"piracyproxy.page","domain":"piracyproxy.page","tld":"page"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piracyproxy.page","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 22:53:20 GMT","end":"Sat, 16 May 2026 22:53:19 GMT"},"fingerprint":{"sha1":"03:ED:AB:71:11:D8:48:43:E0:0B:C8:F6:10:24:A9:E7:42:AA:FE:F7","sha256":"63:A0:F9:F3:70:C6:65:0E:FA:95:8A:2F:9C:6E:EA:0F:94:D6:A3:9F:33:54:99:A8:9B:39:F3:41:36:79:19:CC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: piracyproxy.page\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://otakustream.piraproxy.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":571,"timings":{"blocked":-1,"dns":255,"connect":113,"send":0,"wait":0,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"piracyproxy.page","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"18.193.176.129","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"statistics.it.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 18 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FF:73:E7:93:27:CB:4F:C3:84:85:D5:0E:06:52:E6:94:2D:2B:A5:C6","sha256":"09:27:72:13:57:CD:B4:25:3A:BE:58:AD:CC:13:D2:7D:D4:D4:F6:12:80:69:D9:B9:38:71:43:36:A9:56:FE:70"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://otakustream.piraproxy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 02:38:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://otakustream.piraproxy.xyz\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=e74e562e-bedb-42e0-9f20-1ce3a4c91b04:3:1; expires=Fri, 14 Mar 2036 02:38:58 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"41b545f345d3a6908e260f65a5f80e24","sha1":"7aab57fb8456725ff4876bdb41923805e3236b6b","sha256":"e786772b4f517b2903bbb14c8bbf7e5d81f4806109c1d8bdb6d208742964bbcf","sha512":"cb9e6bf5cc7e68fc927c92561fb8ba23972a65da07847c6cf1b384868cf2494467bfb12fba38e146108d55bc7ec5544efb7155b519b96f73caffb15610aa88e4","ssdeep":"","tlshash":"7290041c731000053d4115357c14154c34f0c101353147ff4143d0077337355c300c17","first_seen":"2026-03-17T02:39:33.187653Z","last_seen":"2026-03-17T02:39:33.187653Z","times_seen":1,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":30,"connect":41,"send":0,"wait":21,"receive":0,"ssl":288},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heartilyscales.com/ren.gif?sid=H4sIAAAAAAAC_1RSu4skRRyu3l0MNBBdMRM6MFBwZ_s1j_ayw0fi7ap3cogg1KN77-f0dPVVdc_MTrTniYGJa2Zmzze7t8khmhmJzJqIIFxHTnCb-BeIcKHIzA6sV1C_R31F8X2_r76cVheshYov3r-hJ5RlfLfd8tzXblOu9Mi6e7dc32t519zblHeia-54GczwTT-MWt7r7ruJ7OvdwPM9z_d89x0ySarHuysUVDyM_VbstaKg5bcjjM3Tva0cWO5ADS_YiyDVPP9X-glIzpEPfngrsf1SF2-8PagyXmqDoTr7KO_nepRjcFWmxkGan61vQ9uGsW83oPOztQLo4clSAQQ1bOPlxxD52ZomxPD0kqnIkOQQ6jmMhnMk2RzE55D6Pkg9YoBU2NtHPniwp82IH16ifIk2bOvJP6BRw7Yev4R88P31jMbuTZ1VJencYpzWoPEcdDBHUZ2jnDig0Tlk-TlI_cF2n7yHfHCybzMNUvVKPaVzcOugWm5yUKUOqsLBQC3cyOtF0udhJ42V7HoRjyKVCC_uBZ7HY9lFJe-B1DGkOUJhjtCnY9g7NaxyYMuGOR8cYajqU5XZwNYPVGYr4a9zsM5hPdPlwZSf6vIgyRm4OYZR9QkVd-19yHJzNkmtmull4KKsZ1yoekaq3IC5u3jV82OZxjzeCXphvNOVXroTe2F7R_WSsOt3u6otwmlxwV5Yzs_5-F-LfrJwuRcGIlJhKHs84Z0ej9JY9KIgbHf8SKQpLNUgu7EazYQa1m1-Q0ENY1__CcHPYbNzSNoEr14BH9Xgd2pM8oeKTGH0-LAl9QBK1yjKLZSHzjS7YNuzD29d_2Vl46fbBon8na0XpKlRmBqf0a8MB9m9H_eLkgY04Utfb5a8TJ4Bp4Y9-_dXkNSw7Uebqy_WvvEdZHEEW1y9ZTWDKBxkxJAlV-dc1LD_68VVPbVf4MA4EJkzE5lxTkRmsm8uaVpauO1AhJ1er5OkHZWGKgxCFbe9JI543IniqI3SNvTTz_P_AgAA___d-kKh4AMAAA==","fqdn":"heartilyscales.com","domain":"heartilyscales.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:58.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"heartilyscales.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 21:54:33 GMT","end":"Fri, 01 May 2026 21:54:32 GMT"},"fingerprint":{"sha1":"D7:D7:C3:2B:ED:15:06:17:54:C9:BC:9A:74:64:C6:8C:FD:9A:F8:99","sha256":"5A:C4:3A:8B:F7:8B:DC:E5:DB:AE:1A:A7:C5:65:1D:5B:AD:34:D0:A1:85:55:D5:FB:18:43:CB:08:F5:8A:0E:B5"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSu4skRRyu3l0MNBBdMRM6MFBwZ_s1j_ayw0fi7ap3cogg1KN77-f0dPVVdc_MTrTniYGJa2Zmzze7t8khmhmJzJqIIFxHTnCb-BeIcKHIzA6sV1C_R31F8X2_r76cVheshYov3r-hJ5RlfLfd8tzXblOu9Mi6e7dc32t519zblHeia-54GczwTT-MWt7r7ruJ7OvdwPM9z_d89x0ySarHuysUVDyM_VbstaKg5bcjjM3Tva0cWO5ADS_YiyDVPP9X-glIzpEPfngrsf1SF2-8PagyXmqDoTr7KO_nepRjcFWmxkGan61vQ9uGsW83oPOztQLo4clSAQQ1bOPlxxD52ZomxPD0kqnIkOQQ6jmMhnMk2RzE55D6Pkg9YoBU2NtHPniwp82IH16ifIk2bOvJP6BRw7Yev4R88P31jMbuTZ1VJencYpzWoPEcdDBHUZ2jnDig0Tlk-TlI_cF2n7yHfHCybzMNUvVKPaVzcOugWm5yUKUOqsLBQC3cyOtF0udhJ42V7HoRjyKVCC_uBZ7HY9lFJe-B1DGkOUJhjtCnY9g7NaxyYMuGOR8cYajqU5XZwNYPVGYr4a9zsM5hPdPlwZSf6vIgyRm4OYZR9QkVd-19yHJzNkmtmull4KKsZ1yoekaq3IC5u3jV82OZxjzeCXphvNOVXroTe2F7R_WSsOt3u6otwmlxwV5Yzs_5-F-LfrJwuRcGIlJhKHs84Z0ej9JY9KIgbHf8SKQpLNUgu7EazYQa1m1-Q0ENY1__CcHPYbNzSNoEr14BH9Xgd2pM8oeKTGH0-LAl9QBK1yjKLZSHzjS7YNuzD29d_2Vl46fbBon8na0XpKlRmBqf0a8MB9m9H_eLkgY04Utfb5a8TJ4Bp4Y9-_dXkNSw7Uebqy_WvvEdZHEEW1y9ZTWDKBxkxJAlV-dc1LD_68VVPbVf4MA4EJkzE5lxTkRmsm8uaVpauO1AhJ1er5OkHZWGKgxCFbe9JI543IniqI3SNvTTz_P_AgAA___d-kKh4AMAAA== HTTP/1.1\r\nHost: heartilyscales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl15816950=1; u_pl22675059=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:38:58 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: heartilyscales.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: b6a51ec86d3dbaeb29e2d66b8b6a0da6\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/wp-content/themes/otakustream/static/assets/img/basic/otakustream_white.png","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /wp-content/themes/otakustream/static/assets/img/basic/otakustream_white.png HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/movie/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 17 Mar 2026 02:38:57 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iXe1RUVIXWxDCdabdzT6OMQ3phiR7IyqYMXRAPYH7z3P0nF4xGPrsn3TTkFzpQOzfbvMlTmd2v%2F18qxpEyDm4l3t3NnUgjncYJV3PukgiHw9CJYVrcyG7aw%3D\"}]}\r\ncf-ray: 9dd89fd80e9e35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17518,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 476 x 96, 8-bit/color RGBA, non-interlaced","md5":"8c0e2533c3426b1f629e0116ae2d1555","sha1":"965fd5a176a5b16fc0afd3fd26cae47a4cadc66e","sha256":"3e00e452404fae09c88b927981a7ccb1ccd157ad77d5f573e57458092e012307","sha512":"ee617d34df16389ebda61a1d58ae883cb89244fab640ec3de519d1f18920d00bbc7708be3745c7b926c01e3c3ed9e4bfe855b9f86cd6e904747e6e297a34e676","ssdeep":"384:JGOrnNnhr2SUkPt9EC8pYXfw3JgbHLmIA9undEW+UXW:JvtV2Six+w3Cb5sgRm","tlshash":"ea72d0c64c488b4c48fe75c5ad3f13db98ad5222b4622d252d479efa46c5c00d67a78b","first_seen":"2025-07-16T15:44:51.427387Z","last_seen":"2026-03-25T03:25:34.337188Z","times_seen":32,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/wp-content/uploads/2018/12/115755l.jpg","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /wp-content/uploads/2018/12/115755l.jpg HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/movie/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 17 Mar 2026 02:38:57 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N9zmpJxfC7wuuyau2DfHHcdsmLH%2FRdgYMLH79b0cnWCNhWhWrWNfxnbKjhR9PvBu8YxbppbQA6BkM22b5lg0k4dxYRPdAZm8vdGL3CoqxIpVaVrvSQ0TwPE%3D\"}]}\r\ncf-ray: 9dd89fd82eb935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81730,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 421x600, components 3","md5":"7a30348bdd1357d9234c5131c8d1cbb4","sha1":"476ad3394dcd4509cae8acb93407b9190c20d550","sha256":"6305aa2389881216c8bfc25e497ba43bc8b1a241a0b048a0c15f65dbe6dc0566","sha512":"a445a082f7c31dd81c9e20468ba6eb9d91e24214160af759c06b9ccb07f87f70b0861a6b55ebd4df75f87d04143dd567785b7f36590efe2bd0033e629f5a68e7","ssdeep":"1536:TcOhNrd6H/fYbdVHOJoo/KctIFiZ6dOC2genaM16Z4hTumUZAJgLe:tTdM4bdVuqiKJeKOCze/7uto","tlshash":"d6831252677e5532f983fa783934d028d9bebb2418c75f3ca4ce41d1415c873caa52ab","first_seen":"2026-03-17T02:39:33.189141Z","last_seen":"2026-03-17T02:39:33.189141Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/wp-content/themes/otakustream/static/assets/img/highlight.png","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /wp-content/themes/otakustream/static/assets/img/highlight.png HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/wp-content/cache/autoptimize/css/autoptimize_059185088f753f88cc6bae6f78fafc48.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 17 Mar 2026 02:38:57 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FbYDSemQrWBEMvrPnPNOzvA7Q2fybaliC3z4BS4DjkzQWmjoK7RfPrbrgZ5cfUDUx81AUSvT%2BmjCINWahubKSlVCiVHSLxUarubwZtZQw40Zr%2BDcVRRLTBk%3D\"}]}\r\ncf-ray: 9dd89fda7ee535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 17, 8-bit gray+alpha, non-interlaced","md5":"4313c5e4dd6d8d03058980a9b9615cbf","sha1":"91dcbf1d7b98075327550229fd8e6b1f3e3319e3","sha256":"505dc39dab048a631dc320aae4a16c3d39a4ca639c7c569d5123e3da6238aecb","sha512":"f07d545683345597bd17346abc853e2854df7a75a75378bbce09a9d938acc7c37fcf24df15e8ac2126b0d65e152920e5d17238fccf6d867f9bf1e57261f1ccbc","ssdeep":"","tlshash":"0fa012d302409828cd100333420a0a28d8355113441421594018d8a02848248504030a","first_seen":"2026-03-17T02:39:33.190157Z","last_seen":"2026-03-17T02:39:33.190157Z","times_seen":1,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js? HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: hu8935j4i9fq3hpuj9q39=true; s9ifs0idfjlwfie32dekl=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ndate: Tue, 17 Mar 2026 02:38:58 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9dd89fdcaf1235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27212,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (27212), with no line terminators","md5":"4ee2d3b461bd16f8ded51089755a6991","sha1":"8b13706f18340a701369b5d43ac7f26575be41a7","sha256":"b805f1542f34e023594ea59440d3d671cb4439b106bab902637213667a2dc938","sha512":"cd278d57e17154064c7177a3881066c3453e831cafce97fb0f908ccc6386721e70e335d54b26758650e01540132c11a203de8a7000eff2cf5fe84876459dfe10","ssdeep":"384:uefEwOjuyamdrHQcSkdQrulKI/GhZFvUT/N1k3BDGTdK1RWKIDmq5Nb8asp9C:ucZOSgd7JS+Ql4/Nlo6zmewJpk","tlshash":"1bc2e689b5de756b8225607810f774f676bebe7834084b01c110f8f4bc95386acfae89","first_seen":"2026-03-17T01:42:57.470403Z","last_seen":"2026-03-17T02:39:33.190977Z","times_seen":4,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-creative1.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2Fmar24%2F4%2Findex.html\u0026l=1417\u0026fd=518","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:59.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 21:44:44 GMT","end":"Sun, 24 May 2026 21:44:43 GMT"},"fingerprint":{"sha1":"4C:9B:DC:71:4E:6F:7E:04:5A:F2:21:54:DA:06:E8:A0:34:82:CB:86","sha256":"23:FF:1C:4C:C9:81:C7:C0:A0:EB:2B:81:77:68:85:F3:47:33:36:DE:71:C4:DB:B4:66:77:5F:24:24:B9:A7:89"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-creative1.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2Fmar24%2F4%2Findex.html\u0026l=1417\u0026fd=518 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:38:59 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":663,"timings":{"blocked":283,"dns":1,"connect":93,"send":0,"wait":96,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/other/adzilla/big/2/img/close.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:59.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/notifications/other/adzilla/big/2/img/close.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 7809\r\nlast-modified: Tue, 09 Sep 2025 11:23:28 GMT\r\npriority: u=4,i=?0\r\netag: \"68c00e30-1e81\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 2663289\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DiUjQGHS76PUJlpygrnIv2Z1oLg7LuF1IUQqkrpWV%2BJ6Jwo1e5156cCIdJGBK7GTXrf%2FOB9VYP9ETcjNgghspsLLAUcbtg6QYbVxyRP79bY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd89fe7bf5d120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7809,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 497 x 496, 8-bit/color RGBA, non-interlaced","md5":"6539fb8abde26b7251e0bb75238b31b9","sha1":"299a695c323c7fc62d32d3fe6c44b30b5faf158e","sha256":"6e8293050852070c444df1c2b5eaeac4234c22e43d882857a0ce6fedc5a5ccf4","sha512":"de65c6b52e01bad6b1f5db45f50e8caa5427ad1a32569c8d8e95ba77437c8651b4496036b1dd9a497b18ac3100835003c9e7bf6ae01cd5a34fc57b7c253e0ec3","ssdeep":"192:QEQvSbknZCYBeAZPoUptQFzXFHVGHYJXreHZ0Hi1Okynft:QrawnZClAhDQFzVHV3JmFQt","tlshash":"e4f18d6db98b7a4147c96704dd84e527ff2b0bd68995f4285cd4ae03ec70bb90a043b5","first_seen":"2025-09-12T13:40:28.346731Z","last_seen":"2026-04-04T01:42:36.093681Z","times_seen":207,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1078\u0026rd=1078\u0026fd=567\u0026bv=26.3.5226\u0026tmpl=70","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 00:35:17 GMT","end":"Thu, 28 May 2026 00:35:16 GMT"},"fingerprint":{"sha1":"17:4A:E8:7A:8D:4C:22:69:70:30:C3:3D:6A:72:7A:68:E9:D2:3C:83","sha256":"0D:06:FA:1C:4D:9B:7A:47:4C:58:29:3B:40:85:C2:D1:F6:2B:AE:C5:66:2E:53:32:27:48:B1:F2:5C:2C:A7:A1"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1078\u0026rd=1078\u0026fd=567\u0026bv=26.3.5226\u0026tmpl=70 HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:38:58 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":424,"timings":{"blocked":5,"dns":25,"connect":97,"send":0,"wait":98,"receive":0,"ssl":197},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/wp-content/cache/autoptimize/css/autoptimize_059185088f753f88cc6bae6f78fafc48.css","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/css/autoptimize_059185088f753f88cc6bae6f78fafc48.css HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/movie/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bOLlPWPSzKFkKhd%2FwPpKv1%2FhgFzJ5pRHevOsVZVNqkG3zZMG6LSZzINrVp9G9JhwzGU6dJxThYYTLdLiRfrtLPfqbcId8iYyEMaT7291wFLSa5b7ZK5SXrc%3D\"}]}\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 17 Mar 2026 02:38:57 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd89fd80e9d35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":322648,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (41708)","md5":"29600c7e71d053569282753dc677f68f","sha1":"997e02ac36be5fc3efc3b3e2749307e9ebab4328","sha256":"d99e425f89745ca9b3356eb8d3aaf9012a9f6ab6cb65c7adf13ff9d96088a0ad","sha512":"fc142f1d0e65ab4006b98f65e4f059cc2c877fb8857b9fb4763006f666f015657133b0ee8785df9958c7c4c22b6baedcabd3a41d65e3193c1f572915dc859982","ssdeep":"3072:hDTyt7ZKY7ML6YVA3JQLEMH2UtFDJg1Q6S7/D9aITFs:hDmtRML6YVA3CLEMH2UtFDJg1Q6SPK","tlshash":"db64c623f591362db027c91555d07bbd262ec416d2630ffef427bb648b869ca05b3a0e","first_seen":"2026-03-17T02:39:33.192412Z","last_seen":"2026-03-17T02:39:33.192412Z","times_seen":1,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"piracyproxy.app/","fqdn":"piracyproxy.app","domain":"piracyproxy.app","tld":"app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piracyproxy.app","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 22:52:39 GMT","end":"Sat, 16 May 2026 22:52:38 GMT"},"fingerprint":{"sha1":"34:44:DE:10:F6:96:1C:73:ED:36:55:C6:C8:69:C8:B8:9D:03:46:37","sha256":"DC:49:FA:47:E5:2C:E2:58:0F:54:E4:50:4A:28:C2:C1:CF:11:6D:91:8D:38:45:9F:0B:A4:10:51:7A:E6:54:A0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: piracyproxy.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://otakustream.piraproxy.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":783,"timings":{"blocked":-1,"dns":552,"connect":112,"send":0,"wait":0,"receive":0,"ssl":118},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"piracyproxy.app","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/wp-content/uploads/2018/08/77929l.jpg","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /wp-content/uploads/2018/08/77929l.jpg HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/movie/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlocation: https://123proxy.biz\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kQNsnmZA6zQSITHLVG8cLTLs9oh1XEYdRlWDkchMWpE7BcLks%2Fl7ZbzP22tT9GXt2OYVzRIuCG%2FSZRHI%2BeLk09ss4DH%2BHIZ9%2Bh7YXuqz6N2HMgaOlwYg8x4%3D\"}]}\r\ncf-ray: 9dd89fd80ea335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exposuretigerphilip.com/a0/32/b4/a032b4d33c8aea68a4f9b84235614bff.js","fqdn":"exposuretigerphilip.com","domain":"exposuretigerphilip.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exposuretigerphilip.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 21:17:40 GMT","end":"Fri, 24 Apr 2026 21:17:39 GMT"},"fingerprint":{"sha1":"E6:1A:BC:6E:FC:B3:C6:D1:F1:0F:04:47:53:D8:32:72:71:8D:56:75","sha256":"E8:B8:3A:1E:16:ED:9F:2B:1E:CA:7C:79:2A:2D:68:EE:2C:0C:1D:8D:C9:6A:79:36:C5:F4:3D:3C:11:B3:19:BD"}}},"request":{"raw":"GET /a0/32/b4/a032b4d33c8aea68a4f9b84235614bff.js HTTP/1.1\r\nHost: exposuretigerphilip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:38:57 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 34711\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: exposuretigerphilip.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: be01ab7419466fa68d56226e85ee39bc\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91830,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a1d74a52570fe8e856b9da93ce35a4f1","sha1":"04fbefc2e76be6ee5330d752436d50d38d988343","sha256":"db81b48ce0403605a3bba214d4c0ac1a08390a905cc05eafae65e51f053efa61","sha512":"232b36aab9e42101fdde055d8ff1707af8da816fa708c198733adeb9cfc7505c16c581356c2c6e3416053d9923ce56e1d5218813cb8e73921202d0ebc24fc50c","ssdeep":"1536:1sgv0NC4Y5Tll1apjTHlxn0WvXEon8USxOKo4hRl+GdRI1Ef7O:agvA25lIpZxn0WvXEon8SCTRT7O","tlshash":"7293e8887fb272ed4386307b362fb006f22a9d516498f4f4d586b8e52e7876da437704","first_seen":"2026-03-12T11:31:11.880609Z","last_seen":"2026-03-25T03:26:44.150133Z","times_seen":19,"resource_available":true,"data":null}},"time_used":722,"timings":{"blocked":244,"dns":0,"connect":93,"send":0,"wait":99,"receive":94,"ssl":190},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"18.193.176.129","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"statistics.it.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 18 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FF:73:E7:93:27:CB:4F:C3:84:85:D5:0E:06:52:E6:94:2D:2B:A5:C6","sha256":"09:27:72:13:57:CD:B4:25:3A:BE:58:AD:CC:13:D2:7D:D4:D4:F6:12:80:69:D9:B9:38:71:43:36:A9:56:FE:70"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://otakustream.piraproxy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 02:38:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://otakustream.piraproxy.xyz\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=cf9be5e3-ed4d-4152-be71-f465f3f5abd1:3:1; expires=Fri, 14 Mar 2036 02:38:58 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"4136651ab89c8334873831439e69f4b6","sha1":"c946aeca1a04721dd4f26040c83b20fbd0c36f86","sha256":"9c28fa51f58ce664baaa916ee4356ad0892a4fe57aa6ecfcb2c0091dc4fb9c68","sha512":"8e9707c76f535c23ee93854417ece580c6a7cca0611bce4c4d7be6a590ccd43536b647d3bbbd937ac9659192a477071308e404626e2bdd8e5b83ec87414c06e0","ssdeep":"","tlshash":"4f900437413c10c04575c7c41c7414c01744d075c03041d110d1d141503104c7430d17","first_seen":"2026-03-17T02:39:33.193844Z","last_seen":"2026-03-17T02:39:33.193844Z","times_seen":1,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":42,"connect":24,"send":0,"wait":22,"receive":0,"ssl":237},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/other/adzilla/big/2/img/close.png","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:59.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/notifications/other/adzilla/big/2/img/close.png HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 02:38:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 7809\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 11:23:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68c00e30-1e81\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 2663289\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4IgFEUkPafqdd4CKF3LOA1XSBO6iYGSw2M0P4Bj2or8zEVcIYu0%2BtpPGl%2BTkG0G%2FaR2cn6zm15DoRjZhId5NY4tc8Gg16qigHMcV8aHsips%3D\"}]}\r\ncf-ray: 9dd89fe4d9980731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7809,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 497 x 496, 8-bit/color RGBA, non-interlaced","md5":"6539fb8abde26b7251e0bb75238b31b9","sha1":"299a695c323c7fc62d32d3fe6c44b30b5faf158e","sha256":"6e8293050852070c444df1c2b5eaeac4234c22e43d882857a0ce6fedc5a5ccf4","sha512":"de65c6b52e01bad6b1f5db45f50e8caa5427ad1a32569c8d8e95ba77437c8651b4496036b1dd9a497b18ac3100835003c9e7bf6ae01cd5a34fc57b7c253e0ec3","ssdeep":"192:QEQvSbknZCYBeAZPoUptQFzXFHVGHYJXreHZ0Hi1Okynft:QrawnZClAhDQFzVHV3JmFQt","tlshash":"e4f18d6db98b7a4147c96704dd84e527ff2b0bd68995f4285cd4ae03ec70bb90a043b5","first_seen":"2025-09-12T13:40:28.346731Z","last_seen":"2026-04-04T01:42:36.093681Z","times_seen":207,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/other/adzilla/big/2/img/1.jpg","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:59.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/notifications/other/adzilla/big/2/img/1.jpg HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 111559\r\nlast-modified: Tue, 09 Sep 2025 11:23:27 GMT\r\npriority: u=4,i=?0\r\netag: \"68c00e2f-1b3c7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 1039051\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BUfrSCuF4LM5i1AXu5BFb3cAURP6pEMIXnW3%2Bj3p3CuvFPhOis0RSsZ3pkAngivYFlGkq%2FkzcD%2BHU1PUyC%2FPk84xswTU5eVVlAx4xRCRjME%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd89fe7bf5c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111559,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:08:29 13:22:59], progressive, precision 8, 800x440, components 3","md5":"8ea42d150a20a7fa76544df0b619da09","sha1":"7b122e82465c774421f075baff5df74c356dda58","sha256":"bcac2efa74b5f4db3b7773cb650813da7fa53147a48c995126ef948faf644e81","sha512":"3bd6d3cfab9b2cc9d08c884d6214a3b559f5ef893a984c0b55a9267a00e2b0b8b0be7cc69c6147401cb16700e96b0b5fb35e4fa340128bb718a7898cfd2f6dbc","ssdeep":"3072:tBK1FgKCJd7bOLlBlQVGjg6lU3LG3gaxy:tmF3GvOLlwkjg3I7g","tlshash":"3bb3f1269be0dd65d4f7bb304a02eae1a715fd24c693710afc0c316b3f725618e89e45","first_seen":"2025-09-14T23:01:21.737138Z","last_seen":"2026-03-30T18:41:29.157659Z","times_seen":102,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/wp-content/themes/otakustream/static/assets/img/bg_footer2.jpg","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /wp-content/themes/otakustream/static/assets/img/bg_footer2.jpg HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/wp-content/cache/autoptimize/css/autoptimize_059185088f753f88cc6bae6f78fafc48.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 17 Mar 2026 02:38:57 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zRtZEVbXr8omuqc4cqswt7BEBrvngDjHRMGvfOp3Bf1MlBlp8WqgjLLvTjDvC0hJ%2FpG8sb925%2FScJu0vD3yxHxHkhfqAy4SoKGOQBwVNjzBsh5f0%2FwJmJqg%3D\"}]}\r\ncf-ray: 9dd89fda7ee635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153555,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1902x1080, components 3","md5":"457cbc1571bcb23f607bf61c9ff7fc7d","sha1":"5ad8b0b2edef2f0783e9e497555be1aee1c3341f","sha256":"c0dbf36b58a6538c3104119053e8c0992543c92ae9c7700a045f17c3c381357b","sha512":"58648ce901fe71ba0c19a9ce3da560155aae025c1234ed225177ac4075a919de1a251bf9a96ab14dd62507335e6b0828de06fcd27a38a187f3a2201cd53c7deb","ssdeep":"3072:NslSXSWzx35OJRymjOvSUz5rixcRFcjTA9DElPzUeKhP:alSi+6ymjNUtriGRSHA9IlLTKhP","tlshash":"05e31280c7d5f102f4cdd5b9e15f382a748bbb4f318c6d5262a2896a4ba831dbd17077","first_seen":"2025-07-16T15:44:51.497419Z","last_seen":"2026-03-25T03:25:34.348301Z","times_seen":32,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heartilyscales.com/sbar.json?key=a032b4d33c8aea68a4f9b84235614bff","fqdn":"heartilyscales.com","domain":"heartilyscales.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:58.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"heartilyscales.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 21:54:33 GMT","end":"Fri, 01 May 2026 21:54:32 GMT"},"fingerprint":{"sha1":"D7:D7:C3:2B:ED:15:06:17:54:C9:BC:9A:74:64:C6:8C:FD:9A:F8:99","sha256":"5A:C4:3A:8B:F7:8B:DC:E5:DB:AE:1A:A7:C5:65:1D:5B:AD:34:D0:A1:85:55:D5:FB:18:43:CB:08:F5:8A:0E:B5"}}},"request":{"raw":"GET /sbar.json?key=a032b4d33c8aea68a4f9b84235614bff HTTP/1.1\r\nHost: heartilyscales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://otakustream.piraproxy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:38:58 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 4855\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://otakustream.piraproxy.xyz\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: pdhtkv=true; expires=Wed, 18 Mar 2026 02:38:58 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Wed, 18 Mar 2026 02:38:58 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Wed, 18 Mar 2026 02:38:58 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Wed, 18 Mar 2026 02:38:58 GMT; path=/; secure; SameSite=None\nu_pl22675059=1; expires=Wed, 18 Mar 2026 02:38:58 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 9\r\nHost: heartilyscales.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 56d7aa112f636eeeef3db13eb425ef59\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4830,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"e81efb577d053708cefc14ed0e0c5651","sha1":"caf917e410250fd882ed59f593b19067612c31ac","sha256":"738406ea17ccec42f058b78fbf2264e1badbbe9c10e5bc4c17bfb53301137fc0","sha512":"350476a269dc4561fa7a0446a1d2ffd59432d032102a63e56dbb5e32c43eb8c53aeaaddd26a61a4e13285e97418e7bb8b0ae8dbfda467e72c8a968807b7d9c38","ssdeep":"96:9zMSWKJ0u+mu0D649SYA0NFHEANxHErV318rDJ/vv8QjqCnuxhNw1JMfLo:9z40emu0D6492yWANxHEJSrDBHMyumT7","tlshash":"4ea19eff8209a0c80dd30d77abcb2d75afca488f0d34ae1b86a68adf7427035661455d","first_seen":"2026-03-17T02:39:33.195803Z","last_seen":"2026-03-17T02:39:33.195803Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://otakustream.piraproxy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 16 Mar 2026 19:50:51 GMT\r\nexpires: Tue, 16 Mar 2027 19:50:51 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 24487\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-04T21:41:37.578732Z","times_seen":199466,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":207,"connect":22,"send":0,"wait":46,"receive":3,"ssl":134},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heartilyscales.com/sbar.json?key=a286902791a7f4c98bcb1e812322cd78","fqdn":"heartilyscales.com","domain":"heartilyscales.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:58.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"heartilyscales.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 21:54:33 GMT","end":"Fri, 01 May 2026 21:54:32 GMT"},"fingerprint":{"sha1":"D7:D7:C3:2B:ED:15:06:17:54:C9:BC:9A:74:64:C6:8C:FD:9A:F8:99","sha256":"5A:C4:3A:8B:F7:8B:DC:E5:DB:AE:1A:A7:C5:65:1D:5B:AD:34:D0:A1:85:55:D5:FB:18:43:CB:08:F5:8A:0E:B5"}}},"request":{"raw":"GET /sbar.json?key=a286902791a7f4c98bcb1e812322cd78 HTTP/1.1\r\nHost: heartilyscales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://otakustream.piraproxy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:38:58 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 3753\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://otakustream.piraproxy.xyz\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: pdhtkv=true; expires=Wed, 18 Mar 2026 02:38:58 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Wed, 18 Mar 2026 02:38:58 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Wed, 18 Mar 2026 02:38:58 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Wed, 18 Mar 2026 02:38:58 GMT; path=/; secure; SameSite=None\nu_pl15816950=1; expires=Wed, 18 Mar 2026 02:38:58 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 14\r\nHost: heartilyscales.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: b469936c965fc259e79fefe53687b08e\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4817,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"3e7ee14e43dc350eec84915e948d66f7","sha1":"79dbe742f190af3db6eca18a2be56773e5445784","sha256":"4ed488881cd48edf4036e657580a04b2f42ca43d692c9eead2ae36a69b09909a","sha512":"a3c4d2d755b0544d14b7240f50a31766ccb0d248c6bed6c1b4d1c66e8272acc5cb11e0df7fe19a07ec9528ba02be57bf18720864132129bc555ed0034e35d845","ssdeep":"96:9zMxYJI7YCg9eA9COIRWnUY3ofxUdm7kpO0TL:9z9JI29lkLRWnUYYf6E7kpOy","tlshash":"caa16ebf09c6a4a76bf518e58d441eea0c128c0fad7544d3a77b738f19ea2358d4a314","first_seen":"2026-03-17T02:39:33.197295Z","last_seen":"2026-03-17T02:39:33.197295Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/other/adzilla/big/2/css/animate.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:59.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/notifications/other/adzilla/big/2/css/animate.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://otakustream.piraproxy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 02:38:59 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 11:23:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68c00e28-13365\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jYDthnAOcj7X36DXOFa026MjiejXnCEsmTnfLWyUwKHvzbpzZ0bU53SvPvHkkfVeTNRuav9tXbhknRLf4%2BxbLC1JA4BzZ7fhAqpyYJwPzWI%3D\"}]}\r\ncf-ray: 9dd89fe4791a0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78693,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5982c5377696d20476871062646b253f","sha1":"8bf2c93fa9ccc908f7df0fb7abb911bbac3e4242","sha256":"4e23a6449e6ef4614f0107cecf5c9eda75d2041c7c71f4a55d45f2a7e75450f4","sha512":"92592dac2a817293e8ec1d94bf99df639626a90d524420b01a12210398927c0650cc26fa8e730300096b29961563aa02efb707478c6d51ac8616bb1bde5a0cb2","ssdeep":"384:jvuAuF81dghu3uFlZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uhu7uNKwZiMUL6Vpaj7F","tlshash":"1d731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-02-12T20:28:38Z","last_seen":"2026-04-04T21:41:25.748119Z","times_seen":6243,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":26,"dns":4,"connect":1,"send":0,"wait":478,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=e74e562e-bedb-42e0-9f20-1ce3a4c91b04\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=a286902791a7f4c98bcb1e812322cd78\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=2","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:39:05.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 22:12:10 GMT","end":"Wed, 27 May 2026 22:12:09 GMT"},"fingerprint":{"sha1":"F8:CE:1C:DD:8F:86:0E:25:10:C6:86:56:A7:A3:47:DA:38:11:C7:3A","sha256":"19:3B:E0:74:B6:FC:9E:17:C4:75:30:39:E3:6A:CB:EF:32:91:9E:69:12:DF:51:AC:FA:76:15:EE:1B:D3:36:B8"}}},"request":{"raw":"GET /pxf.gif?uuid=e74e562e-bedb-42e0-9f20-1ce3a4c91b04\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=a286902791a7f4c98bcb1e812322cd78\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=2 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:39:05 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: d2fe75d052bd6bbfd7d56f43aba1bc8c\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":668,"timings":{"blocked":286,"dns":0,"connect":93,"send":0,"wait":96,"receive":0,"ssl":191},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heartilyscales.com/a2/86/90/a286902791a7f4c98bcb1e812322cd78.js","fqdn":"heartilyscales.com","domain":"heartilyscales.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"heartilyscales.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 21:54:33 GMT","end":"Fri, 01 May 2026 21:54:32 GMT"},"fingerprint":{"sha1":"D7:D7:C3:2B:ED:15:06:17:54:C9:BC:9A:74:64:C6:8C:FD:9A:F8:99","sha256":"5A:C4:3A:8B:F7:8B:DC:E5:DB:AE:1A:A7:C5:65:1D:5B:AD:34:D0:A1:85:55:D5:FB:18:43:CB:08:F5:8A:0E:B5"}}},"request":{"raw":"GET /a2/86/90/a286902791a7f4c98bcb1e812322cd78.js HTTP/1.1\r\nHost: heartilyscales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:38:57 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 34723\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 7\r\nHost: heartilyscales.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 56855ad61e9f3e9dac5be2697da27a95\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":91833,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"046f2416be988d43308c4482ab870a30","sha1":"450bf2bc0376f28a24c3b9df8520a3424a3141de","sha256":"8db596987132ba16f2952b8c4785bc13a5e9bfb31db13341091c3b6867186271","sha512":"90713622344190cebf1511b59b610bf64e5a0f568c77f063d53d35d95e29c8673ccfa067db229ac85cc75ad89f83ce1c5c690f4dda095abc99e29060b41a5c44","ssdeep":"1536:1sgv0NC4Y5Tll1apjTHlxn0WvXEon8USxNKo4hRl+GdrV7af73:agvA25lIpZxn0WvXEon8pCTr873","tlshash":"ac93e8887fb272ed4396307b362fb006f22a9d512498f4f4d586b8e52e7876da437704","first_seen":"2026-03-12T11:31:11.850589Z","last_seen":"2026-03-25T19:35:08.134976Z","times_seen":16,"resource_available":true,"data":null}},"time_used":821,"timings":{"blocked":293,"dns":50,"connect":92,"send":0,"wait":102,"receive":93,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"piraproxy.info/","fqdn":"piraproxy.info","domain":"piraproxy.info","tld":"info"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 00:05:06 GMT","end":"Wed, 20 May 2026 00:05:05 GMT"},"fingerprint":{"sha1":"59:D0:A8:94:1D:CA:6F:99:CC:81:C7:16:73:4F:DF:46:E2:D1:BD:54","sha256":"3A:BF:EA:10:04:FE:D4:98:5F:E3:40:8E:9F:39:D4:DB:5A:9F:94:D0:1F:F3:DF:C9:F3:51:8A:99:2B:67:C2:32"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: piraproxy.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://otakustream.piraproxy.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":1183,"timings":{"blocked":576,"dns":287,"connect":129,"send":0,"wait":0,"receive":0,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"piraproxy.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wayfarerorthodox.com/9c/5d/14/9c5d14453d6b11cdec5b98e5ce5af0dc.js","fqdn":"wayfarerorthodox.com","domain":"wayfarerorthodox.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wayfarerorthodox.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 00:35:17 GMT","end":"Thu, 28 May 2026 00:35:16 GMT"},"fingerprint":{"sha1":"17:4A:E8:7A:8D:4C:22:69:70:30:C3:3D:6A:72:7A:68:E9:D2:3C:83","sha256":"0D:06:FA:1C:4D:9B:7A:47:4C:58:29:3B:40:85:C2:D1:F6:2B:AE:C5:66:2E:53:32:27:48:B1:F2:5C:2C:A7:A1"}}},"request":{"raw":"GET /9c/5d/14/9c5d14453d6b11cdec5b98e5ce5af0dc.js HTTP/1.1\r\nHost: wayfarerorthodox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:38:58 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 2572\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: wayfarerorthodox.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: aedd89a3010e9cb47305db9dc0ae1615\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5119,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5119), with no line terminators","md5":"2f7f534aa475f2ab416f5768f5eb1abf","sha1":"0e264d3826ec4cea33eb1d05bc113200a9ca55b1","sha256":"18821fa5e86c1240947fc976e78c43d849789cda4360578383adcfbd873d133a","sha512":"c24f6cff97cb6e0cf363714e9073f5f0533cfd228d16665aa6be8fc2527f88f5f3fa156e6dff75bcd4f581a1a3e8f7e0e7242ce4eb3d98d5af950a497b98ee7d","ssdeep":"96:JPczm1siDwcWu0HAGMUJhSENesmRmTj8pdkZ:Bc0DwBLAGtvArmjZ","tlshash":"c2b1b79c3f40b0a017a2a0776f6f2429f1396c10ab6be894d527a1dc3f29d29c2b2755","first_seen":"2026-03-12T08:34:48.0486Z","last_seen":"2026-04-04T21:37:07.773831Z","times_seen":1406,"resource_available":true,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":32,"connect":97,"send":0,"wait":99,"receive":0,"ssl":199},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"wayfarerorthodox.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2Fmar24%2F4%2Fjs%2Fscript.js\u0026l=397\u0026fd=468","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:59.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 21:44:44 GMT","end":"Sun, 24 May 2026 21:44:43 GMT"},"fingerprint":{"sha1":"4C:9B:DC:71:4E:6F:7E:04:5A:F2:21:54:DA:06:E8:A0:34:82:CB:86","sha256":"23:FF:1C:4C:C9:81:C7:C0:A0:EB:2B:81:77:68:85:F3:47:33:36:DE:71:C4:DB:B4:66:77:5F:24:24:B9:A7:89"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2Fmar24%2F4%2Fjs%2Fscript.js\u0026l=397\u0026fd=468 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:39:00 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":81,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=e74e562e-bedb-42e0-9f20-1ce3a4c91b04\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=a032b4d33c8aea68a4f9b84235614bff\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=2","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:39:05.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 22:12:10 GMT","end":"Wed, 27 May 2026 22:12:09 GMT"},"fingerprint":{"sha1":"F8:CE:1C:DD:8F:86:0E:25:10:C6:86:56:A7:A3:47:DA:38:11:C7:3A","sha256":"19:3B:E0:74:B6:FC:9E:17:C4:75:30:39:E3:6A:CB:EF:32:91:9E:69:12:DF:51:AC:FA:76:15:EE:1B:D3:36:B8"}}},"request":{"raw":"GET /pxf.gif?uuid=e74e562e-bedb-42e0-9f20-1ce3a4c91b04\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=a032b4d33c8aea68a4f9b84235614bff\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=2 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:39:05 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 555cd1f1010d21d36671e21da6e8eddc\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":687,"timings":{"blocked":292,"dns":1,"connect":97,"send":0,"wait":98,"receive":0,"ssl":193},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 01:24:35 GMT","end":"Thu, 28 May 2026 01:24:34 GMT"},"fingerprint":{"sha1":"66:45:2B:BB:A2:6D:D3:A2:B6:16:36:65:94:BA:4A:C6:5E:05:66:09","sha256":"A4:2E:A7:56:DB:44:FF:55:9A:FA:4D:EC:2A:78:CB:C5:02:CD:CF:B2:FB:A7:A7:75:77:EC:01:DB:19:71:C0:77"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:38:58 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 04762244ca7dbc905744d7747214c7fb\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-04T21:41:25.698368Z","times_seen":13230,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":18,"connect":30,"send":0,"wait":44,"receive":18,"ssl":89},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2Fmar24%2F4%2Fcss%2Fstyle.css\u0026l=4763\u0026fd=468","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:59.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 21:44:44 GMT","end":"Sun, 24 May 2026 21:44:43 GMT"},"fingerprint":{"sha1":"4C:9B:DC:71:4E:6F:7E:04:5A:F2:21:54:DA:06:E8:A0:34:82:CB:86","sha256":"23:FF:1C:4C:C9:81:C7:C0:A0:EB:2B:81:77:68:85:F3:47:33:36:DE:71:C4:DB:B4:66:77:5F:24:24:B9:A7:89"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2Fmar24%2F4%2Fcss%2Fstyle.css\u0026l=4763\u0026fd=468 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:39:00 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":96,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exposuretigerphilip.com/pixel/sbs?c=1","fqdn":"exposuretigerphilip.com","domain":"exposuretigerphilip.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:39:00.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exposuretigerphilip.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 21:17:40 GMT","end":"Fri, 24 Apr 2026 21:17:39 GMT"},"fingerprint":{"sha1":"E6:1A:BC:6E:FC:B3:C6:D1:F1:0F:04:47:53:D8:32:72:71:8D:56:75","sha256":"E8:B8:3A:1E:16:ED:9F:2B:1E:CA:7C:79:2A:2D:68:EE:2C:0C:1D:8D:C9:6A:79:36:C5:F4:3D:3C:11:B3:19:BD"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: exposuretigerphilip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl22675059=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:39:00 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: exposuretigerphilip.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/wp-content/uploads/2017/10/53903l.jpg","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /wp-content/uploads/2017/10/53903l.jpg HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/movie/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 17 Mar 2026 02:38:57 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Ut%2FQU9oKgNi%2BWSvpLUI7g%2Ba3pg7S6bFfTTRv3Ua5bgcSq%2FJEuB8Jirq20tWaSrmlrjHi7TLSFQGUOpJR6Ly7DAPCtgGnOrwRUMswj5luD9%2Bcg2VLD9latc%3D\"}]}\r\ncf-ray: 9dd89fd81ea835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38007,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 315x450, components 3","md5":"42d78248b9233c11e9e676eab1adbc58","sha1":"a73ea994fd58a8934b7b005d302f9c9cd530570d","sha256":"0e70c01f31247c797181b340c250ee83cc792b740b23e1ef1bda32212e577948","sha512":"d51161860d46d8b8824fcefea57b2af5ec338f8c0838853734989e7bdd2445d0c5d304f174beae0cc5295958ea53c9b10b5b46d7fb75e04ada28e2f593ac3ba0","ssdeep":"768:Pr8W98GBFbSOOfRq90WGQT5b1BcQzeR5ntVon4/Kdi2saHH:PoMv+bRqiDQhcYgc4/MkaHH","tlshash":"4f03f0ba761db95f9145d0b072af0a3b1fb0b302a0a6060ef621ed3efe1107a3555633","first_seen":"2026-03-17T02:39:33.200805Z","last_seen":"2026-03-17T02:39:33.200805Z","times_seen":1,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-creative1.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/4/index.html","fqdn":"cdn.show-creative1.com","domain":"show-creative1.com","tld":"com"},"ip":{"addr":"172.67.208.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:58.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-creative1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 22:00:04 GMT","end":"Sun, 03 May 2026 22:58:27 GMT"},"fingerprint":{"sha1":"FA:63:AA:B4:65:DE:EB:50:F5:A0:F4:25:77:0E:E1:56:4B:9C:C5:1A","sha256":"00:CF:18:86:D3:98:19:21:01:C5:18:5F:25:57:AA:F6:D3:DA:44:53:A5:D9:94:57:ED:F3:B1:AA:3A:3D:38:9C"}}},"request":{"raw":"GET /sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/4/index.html HTTP/1.1\r\nHost: cdn.show-creative1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://otakustream.piraproxy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 02:38:59 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 05 Mar 2024 08:56:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B5kxJf%2FjQGCDOO5KjctxjTegYAeaNPQ8m8YHnKE5Uc%2F0XzavhGtDFdJKvOLJqF1FcRtZWkM4aID4kJp06Pp0xQSNBnyEbZBkcwcjjUVQ3Fo6CinpLEY%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9dd89fe11b9c8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1417,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"af6609658ec2967afc7b161423c3abb4","sha1":"fa2eec498662a31dd2d81627d091af2892be4068","sha256":"ab7e68f27419413f099dc82fa73d3787363d3d3a1397138678d62326c7ddd3a5","sha512":"2815961d4fa6d5f24c377133fbfe7605d995f9d681acbcfe12e1d42f928d8438639aa80c3e0ad0e87d0ba9875a927a217714767d336a5c9b397b04738f5015f2","ssdeep":"","tlshash":"1c21bb50aaedda35219345857f703f33e881e883cd4618a132bc8a549be6ed2c92730b","first_seen":"2025-11-17T23:38:06.456558Z","last_seen":"2026-04-04T10:21:40.297401Z","times_seen":73,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":25,"dns":3,"connect":1,"send":0,"wait":475,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/4/css/animate.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:59.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/4/css/animate.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://otakustream.piraproxy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 02:38:59 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 05 Mar 2024 08:56:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65e6de29-13591\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FTonEGXuNCV5YuFBHbU9j1s8uQJOLgDq4HZgKDo5wqP0%2BIGxjkglinUgmdxY42IRTpABLC6GH9DB898HnZt7RD3iNyCvPNdwdmmWcAd56iM%3D\"}]}\r\ncf-ray: 9dd89fe4a94d0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79249,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e1d8acd5ee9d1a90ea09313cbd8f2b02","sha1":"8a8327b115d1356715e63270d1ce6d46124c7b1a","sha256":"3028c87fc798ac3741f02079034e6c23462afc0c5e6c8d321188ce3716c8472a","sha512":"b942379b39b29577123ce4017a6566c046fe68c5a862f234302ddfdb08127e9e2d6b22bbf660ebcd5a196f63df0b34e4eaaa13c5f728e28b7cedfab2669f52f3","ssdeep":"384:ZFu8uVWgnu5uLlFlH/O/Qu7u/sjzbg/jxXlIPfL4jKgZQMkL0Vvaj7Z:ZFu8uEgnu5uBu7uhKgZQMkL0Vvaj7Z","tlshash":"bc731fad2991148452638a1d83df8e68673ce573181a9cef73c2488bcf8bf9c67c9147","first_seen":"2023-04-05T07:35:42Z","last_seen":"2026-04-04T10:21:40.312157Z","times_seen":4139,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":493,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:59.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 17 Mar 2026 02:38:59 GMT\r\ndate: Tue, 17 Mar 2026 02:38:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1936a90eef3ebd4c6b40eb59d72e164d","sha1":"4c698f8dc97e2e6186d46215e209aca1b1194a5d","sha256":"412d98c2f4410a048131a7d9362fb38456ce2ff67cd4731ea411708a7996a021","sha512":"07ad2431175e5566ae435738d94d4da3e96e4856a1fe1d5917c52474cab28808cd940fec0e8f75eb2f3d573e6fe8497fc12636ef4738d1b67e9144725192b580","ssdeep":"384:p9f59g9P9r9yU9/qY4+949Y9p9fM919W969yh9/qY4X9N9t949fd9k9D939yQ9/O:pDS99YURRuWDyjooYhREHPWP2ZZYQRVs","tlshash":"48721091041704009b834ce223cebf35fe1f52117142d0b5abfd9b6b9ddbca6526939d","first_seen":"2026-02-19T22:28:01.752187Z","last_seen":"2026-04-04T21:41:25.705536Z","times_seen":3053,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/4/img/close.svg","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:59.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/4/img/close.svg HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:59 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O4AvoGGNRwurbetUvmwqlL%2BUY6k8J4EOzTYA0Uid1HZtPF94XWWK5CXt4jiPXoPle9vGKsTrA%2BqrmkNmwfo%2BH4KSdn%2BxzNo%2FzG38sH1d9O4%3D\"}]}\r\nlast-modified: Tue, 05 Mar 2024 08:56:10 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: br\r\nage: 1482703\r\ncf-cache-status: HIT\r\netag: W/\"65e6de2a-4ff\"\r\ncf-ray: 9dd89fe7af5a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1279,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"369850b9873659adf0951d845f57dba1","sha1":"a64257186daa33b6b318943a457b6cf8d80b26b6","sha256":"9630c142a8c074cc1809ebf4109538cf29cc0baeb6c27726191f1cf5376e2e21","sha512":"6441b40e85c86e21362c7061a6b9610f52a5c801b274b246711546ad45c68c3e7f2f242f1621b90967eaeebf52709545d06283c2015d6b9ad7f6f7d37fb14a88","ssdeep":"","tlshash":"6821d8dc958f223ef324ff6189b316606ba423f6bb18c5bcb199a8157e1cb910c48e14","first_seen":"2023-04-07T22:39:47Z","last_seen":"2026-04-04T21:32:57.783578Z","times_seen":8754,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heartilyscales.com/pixel/sbs?c=1","fqdn":"heartilyscales.com","domain":"heartilyscales.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:39:00.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"heartilyscales.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 21:54:33 GMT","end":"Fri, 01 May 2026 21:54:32 GMT"},"fingerprint":{"sha1":"D7:D7:C3:2B:ED:15:06:17:54:C9:BC:9A:74:64:C6:8C:FD:9A:F8:99","sha256":"5A:C4:3A:8B:F7:8B:DC:E5:DB:AE:1A:A7:C5:65:1D:5B:AD:34:D0:A1:85:55:D5:FB:18:43:CB:08:F5:8A:0E:B5"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: heartilyscales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl15816950=1; u_pl22675059=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:39:00 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: heartilyscales.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/wp-content/uploads/2017/11/82596l.jpg","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /wp-content/uploads/2017/11/82596l.jpg HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/movie/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlocation: https://piraproxy.info\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rqs%2Ftb%2BsLvvMECpv%2B%2FDrF7%2FioUPkOtimv4NVEPMZAlSsp%2FMrdfr5nVUhCb2%2BTa79qO8vw%2FcjKolkNduUUxP6RyikvvH11UJTrSWJWR6z8Slclg2WWM8101w%3D\"}]}\r\ncf-ray: 9dd89fd80ea635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dirproxy.me/","fqdn":"dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 23:05:35 GMT","end":"Sat, 16 May 2026 23:05:34 GMT"},"fingerprint":{"sha1":"BC:1B:D0:F5:4D:A2:27:6C:DB:D8:6A:7D:BB:CA:C7:7D:81:69:40:EB","sha256":"16:46:B3:ED:F7:0A:A0:29:F3:85:40:E7:1A:B1:B3:E9:04:D5:43:71:37:B9:8D:B8:69:D2:39:BA:04:F1:01:66"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://otakustream.piraproxy.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":633,"timings":{"blocked":-1,"dns":289,"connect":123,"send":0,"wait":0,"receive":0,"ssl":203},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"dirproxy.me","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"dirproxy.me","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"dirproxy.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/4/css/style.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:59.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/4/css/style.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://otakustream.piraproxy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 02:38:59 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 05 Mar 2024 08:56:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65e6de28-129b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FUu8NPcJoVFjZxvykPfv6ucwX%2B2Ls6xKhLqU49t4Uo6WDxyxuy2aVV4JcdSd9HTb8j43zgiB7Ynfk3DUvZEIfASd4YLACG%2BTtBatT%2FG6XqM%3D\"}]}\r\ncf-ray: 9dd89fe4a9510731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4763,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"544a7e47f7d35bd6ee4e09c7bcf7f8de","sha1":"fd16f2e516a880028cb59379ca93cd84ba7d6f4b","sha256":"eed1d483223c8e405a69ddb3f7950894265170dc3b3f3aa22a98785ddde81a59","sha512":"701f7e562904832405eb99c34ef51a31b190adae78b554b2c7daba9514b9bfe7bb7ed4154a552e4832d21e80d49c569bab07b5591841ea4db9359e450887d369","ssdeep":"96:KTMXsWx0isO37Ur8nOHGrX45dUqbLvXVSWnO9PAs3xt4fAQn:gMXlIr8e2od/bTFRO9PAs3LuAQn","tlshash":"caa120966a630885b51be4a63f33274663184447ae0bc9797fc4738c8fc61dd85e3b8e","first_seen":"2025-10-14T12:27:32.901067Z","last_seen":"2026-04-04T10:21:40.294293Z","times_seen":145,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":462,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/wp-content/uploads/2018/05/37085l.jpg","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /wp-content/uploads/2018/05/37085l.jpg HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/movie/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlocation: https://dirproxy.me\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tD%2FfxN7REt8QyC%2FoI2OUGR%2BrLRiC702Y4UNmD6CNaxhenVH%2FXtXqUcmKufPc7%2Be2uXPuuLmMjZjtB4nnyg3mFN99w%2BLjjkjWb8r1h7ir4SaKYCV7AM26eII%3D\"}]}\r\ncf-ray: 9dd89fd82eb435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 01:24:35 GMT","end":"Thu, 28 May 2026 01:24:34 GMT"},"fingerprint":{"sha1":"66:45:2B:BB:A2:6D:D3:A2:B6:16:36:65:94:BA:4A:C6:5E:05:66:09","sha256":"A4:2E:A7:56:DB:44:FF:55:9A:FA:4D:EC:2A:78:CB:C5:02:CD:CF:B2:FB:A7:A7:75:77:EC:01:DB:19:71:C0:77"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:38:58 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: fe3a1813d18708bba878fd577e791d57\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-04T21:41:25.698368Z","times_seen":13230,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":11,"connect":32,"send":0,"wait":22,"receive":33,"ssl":123},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"18.193.176.129","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"statistics.it.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 18 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FF:73:E7:93:27:CB:4F:C3:84:85:D5:0E:06:52:E6:94:2D:2B:A5:C6","sha256":"09:27:72:13:57:CD:B4:25:3A:BE:58:AD:CC:13:D2:7D:D4:D4:F6:12:80:69:D9:B9:38:71:43:36:A9:56:FE:70"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://otakustream.piraproxy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 02:38:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://otakustream.piraproxy.xyz\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=a79d9c41-9d86-47e0-856b-38af963c4fbf:1:1; expires=Fri, 14 Mar 2036 02:38:58 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"360d8a3631a3e79884b0d4984decc761","sha1":"b0d3e77169b834e25eb65af35a73a0b3e78c7ada","sha256":"cedab385a43fb3d80bda99dbceebf863809f52485ed366c03b05d5c653667c2f","sha512":"b4ee7da452d730abe2eb4fb0ae94cead7b5552cb0e0fb7f8d6faccb3129b4340135f4c0c6b6cbc74e6f156abc468bcb7218fdcca324366d4c37a59c531123899","ssdeep":"","tlshash":"959002a151659081e5042a20144420345215228052aa114064255e454ed05980022814","first_seen":"2026-03-17T02:39:33.204375Z","last_seen":"2026-03-17T02:39:33.204375Z","times_seen":1,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":9,"dns":13,"connect":40,"send":0,"wait":21,"receive":0,"ssl":233},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exposuretigerphilip.com/impr.gif?sid=H4sIAAAAAAAC_1RSvYskRRyt3ltMDMRTzIQGDVTc2f6amW4vO_xIdFe9k0MMpD66935uTVdfV_fM7ER7npiJayZGPW92b5NDNDMSmTURQbiOnODWwD9BuEyRmR1YLajfR72ieO_36vNpfc46qPni3XfMhLTm292O5750i3JlRtbduen6Xse75t6ivBddc8fLUA5f88Oo473svpXKfbMdeL7n-Z7vvkllmpnx9goFFQ8Sv5N4nSjo-N0I4_L_va0dWO5ADc_ZVZBqn_oz-wgk58gH372e2v3KFK--Mag1r0yJoTr9IN_PzSjH4LLMSgdZfrq-DWNbxr7egMlP1wpghsdLBRDUso3nHkHkp2uaEMOTC6ZCI80h1JMYDedI9RzE55DmHkg9ZIBU2NlFPri_Y8oRP7hA-RJt2ebjv0Cjlm0-ehb54NvrmsbuDaPrikxuMc4a0HgO2pujqM9QTRzQ6Ayy-hSkfmPbj99GPjjetdqAVLNST9kc3Dqol5sc1JmDunAwUAs38uJI-jzsZYmSfS_iUaRS4SVx4Hk8kX3U8i5IHUGWhyjKQ-zTEeztBlY5sFXLnPcOMVTNidI2sM19pW0t_HUO1jlsZqbam_ITU-2lOQMvj1Cq5piKO_YeZHVlNsmsmpll4KJqZlyoZkaq2kB5Z_Gi5ycyS3iyFcRhtNXvCX8rEYHa6neF3495EPo8mBbn7Onl_JwP_7HYTxcu98JARCoMZcxT3ot5lCUijoKw2_MjkWWw1IDsxmo0E2pZv_0FBbWMffk7BD-D1WeQdAW8fh581IDfbjDJHygqi9KMDzrSDKBMg6LaRHXgTPU5e2b2_s3rP61s_PiVL5DKX9l6QZYNirLBJ_Qzw56--_1uUdGAJnzp642KV-kT4PTwhQCSWnb1m3T1wbp__wFZHMIWly9ZwyAKB5oYdHp5zkUD-59eXNZT-xn2SgdCOzOhS-dY6FJ_dUHS0sLNwjSQnhf3e34YZ6kfRkpm3ThKVI97YZiisi398OP83wAAAP__nwe6mt4DAAA=","fqdn":"exposuretigerphilip.com","domain":"exposuretigerphilip.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:39:00.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exposuretigerphilip.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 21:17:40 GMT","end":"Fri, 24 Apr 2026 21:17:39 GMT"},"fingerprint":{"sha1":"E6:1A:BC:6E:FC:B3:C6:D1:F1:0F:04:47:53:D8:32:72:71:8D:56:75","sha256":"E8:B8:3A:1E:16:ED:9F:2B:1E:CA:7C:79:2A:2D:68:EE:2C:0C:1D:8D:C9:6A:79:36:C5:F4:3D:3C:11:B3:19:BD"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSvYskRRyt3ltMDMRTzIQGDVTc2f6amW4vO_xIdFe9k0MMpD66935uTVdfV_fM7ER7npiJayZGPW92b5NDNDMSmTURQbiOnODWwD9BuEyRmR1YLajfR72ieO_36vNpfc46qPni3XfMhLTm292O5750i3JlRtbduen6Xse75t6ivBddc8fLUA5f88Oo473svpXKfbMdeL7n-Z7vvkllmpnx9goFFQ8Sv5N4nSjo-N0I4_L_va0dWO5ADc_ZVZBqn_oz-wgk58gH372e2v3KFK--Mag1r0yJoTr9IN_PzSjH4LLMSgdZfrq-DWNbxr7egMlP1wpghsdLBRDUso3nHkHkp2uaEMOTC6ZCI80h1JMYDedI9RzE55DmHkg9ZIBU2NlFPri_Y8oRP7hA-RJt2ebjv0Cjlm0-ehb54NvrmsbuDaPrikxuMc4a0HgO2pujqM9QTRzQ6Ayy-hSkfmPbj99GPjjetdqAVLNST9kc3Dqol5sc1JmDunAwUAs38uJI-jzsZYmSfS_iUaRS4SVx4Hk8kX3U8i5IHUGWhyjKQ-zTEeztBlY5sFXLnPcOMVTNidI2sM19pW0t_HUO1jlsZqbam_ITU-2lOQMvj1Cq5piKO_YeZHVlNsmsmpll4KJqZlyoZkaq2kB5Z_Gi5ycyS3iyFcRhtNXvCX8rEYHa6neF3495EPo8mBbn7Onl_JwP_7HYTxcu98JARCoMZcxT3ot5lCUijoKw2_MjkWWw1IDsxmo0E2pZv_0FBbWMffk7BD-D1WeQdAW8fh581IDfbjDJHygqi9KMDzrSDKBMg6LaRHXgTPU5e2b2_s3rP61s_PiVL5DKX9l6QZYNirLBJ_Qzw56--_1uUdGAJnzp642KV-kT4PTwhQCSWnb1m3T1wbp__wFZHMIWly9ZwyAKB5oYdHp5zkUD-59eXNZT-xn2SgdCOzOhS-dY6FJ_dUHS0sLNwjSQnhf3e34YZ6kfRkpm3ThKVI97YZiisi398OP83wAAAP__nwe6mt4DAAA= HTTP/1.1\r\nHost: exposuretigerphilip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl22675059=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:39:00 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 13\r\nHost: exposuretigerphilip.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 1fa9a21dc93a8a4bbe26699804d3d4ad\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/wp-content/uploads/2018/06/71213l.jpg","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /wp-content/uploads/2018/06/71213l.jpg HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/movie/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlocation: https://piracyproxy.page\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7yb2XVuSLIrLxwpqvyIkm53ljP%2FQ%2BIYFnFlfz7mz6BoZmG3ANL9FKk8wVSo41%2Bajh5RcSV7b07TDSsngUSCHyp3IPJpePa3BR60aQ6IjC2Lt5A%2FgpSwzkgg%3D\"}]}\r\ncf-ray: 9dd89fd80ea135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVAewA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://otakustream.piraproxy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 19304\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Mar 2026 15:02:48 GMT\r\nexpires: Fri, 12 Mar 2027 15:02:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 387370\r\nlast-modified: Mon, 15 Sep 2025 16:31:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19304,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19304, version 1.0","md5":"1ab20c159c8cf68283eae05c7d8a25aa","sha1":"f8c87ecaf523138096f926201df2379633e3505a","sha256":"3b50909a098195a8a3fda73fe29c260724e6f9ca624dd750cb8af7cb0c9198e2","sha512":"68db4f537178b380c45d209276432fc46fe13c6f0250486cfbed71d8ccf894f9650d90aad4648f6d376408476bb52a7ca62fd2ca2f1276c50dfcc6091a28ad98","ssdeep":"384:+/NZ1h0ruzwahfbbCPpzmfttzNyVitnDOpUtmiy4TxVcmuoWn7FYgZV/sc:wQuzwaQP0HNyVi9DOpimiydJk+5","tlshash":"5082cf855d4fc1b6dd8260a6e58c684068ba2a1235593ee783fbe4cadf3f919a1014ac","first_seen":"2025-09-17T02:13:44.663193Z","last_seen":"2026-04-04T21:24:28.085719Z","times_seen":5639,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":203,"connect":22,"send":0,"wait":55,"receive":1,"ssl":143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=e74e562e-bedb-42e0-9f20-1ce3a4c91b04\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=2200540f09f939738419313a1a090c32\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=2","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:39:05.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 22:12:10 GMT","end":"Wed, 27 May 2026 22:12:09 GMT"},"fingerprint":{"sha1":"F8:CE:1C:DD:8F:86:0E:25:10:C6:86:56:A7:A3:47:DA:38:11:C7:3A","sha256":"19:3B:E0:74:B6:FC:9E:17:C4:75:30:39:E3:6A:CB:EF:32:91:9E:69:12:DF:51:AC:FA:76:15:EE:1B:D3:36:B8"}}},"request":{"raw":"GET /pxf.gif?uuid=e74e562e-bedb-42e0-9f20-1ce3a4c91b04\u0026eb=bff3d6bf6d16c0bb5e58232c1a99ef63\u0026te=fe015aeda515c30449c87b1701cc307f\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=2200540f09f939738419313a1a090c32\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=2 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:39:05 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 763948cd260dfc1e63ba41292c3fdbac\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":675,"timings":{"blocked":287,"dns":0,"connect":96,"send":0,"wait":97,"receive":0,"ssl":191},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/wp-content/uploads/2017/12/74665l.jpg","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /wp-content/uploads/2017/12/74665l.jpg HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/movie/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlocation: https://dirproxy.com\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V0zdwK5Q6kMv9z7n8KfmyqB7h%2F9RoHS1NHve4DLwAocp14XEFAk2ebP1R576lEvhgG%2BlUbA0OTcWp%2FzxhzcTFMJfh%2FNsYUDYrn3a8VRb1XQ4rH0Xz%2Fa0Uyo%3D\"}]}\r\ncf-ray: 9dd89fd81eac35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/wp-content/uploads/2017/06/6fffa3b5b3f9c789031826d73ea65cee.jpg","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /wp-content/uploads/2017/06/6fffa3b5b3f9c789031826d73ea65cee.jpg HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/movie/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlocation: https://piracyproxy.org\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FBl3PjYisFaJKJ9RnX%2B7tYnQeJIqIH9DHusGc%2FKmXClpZ6y39N7DhAGfPKQkRP0SlZcr2kLW7rnGefWaL%2BdsJlv47EGNxqoHcEHBM7lP0GrHjeEFphMGwHw%3D\"}]}\r\ncf-ray: 9dd89fd82eb635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"123proxy.biz/","fqdn":"123proxy.biz","domain":"123proxy.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.628Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 123proxy.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://otakustream.piraproxy.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":324,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"123proxy.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dirproxy.me/","fqdn":"dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 23:05:35 GMT","end":"Sat, 16 May 2026 23:05:34 GMT"},"fingerprint":{"sha1":"BC:1B:D0:F5:4D:A2:27:6C:DB:D8:6A:7D:BB:CA:C7:7D:81:69:40:EB","sha256":"16:46:B3:ED:F7:0A:A0:29:F3:85:40:E7:1A:B1:B3:E9:04:D5:43:71:37:B9:8D:B8:69:D2:39:BA:04:F1:01:66"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://otakustream.piraproxy.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":271,"connect":122,"send":0,"wait":0,"receive":0,"ssl":192},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"dirproxy.me","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"dirproxy.me","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"dirproxy.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msdoj.com/hit","fqdn":"msdoj.com","domain":"msdoj.com","tld":"com"},"ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"msdoj.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 00:31:51 GMT","end":"Tue, 26 May 2026 00:31:50 GMT"},"fingerprint":{"sha1":"A9:0A:FF:26:3D:BF:51:D6:85:5A:D3:74:7F:82:5D:9F:8B:AF:66:11","sha256":"C2:DA:92:29:D5:E9:00:BD:45:3A:5E:78:BB:6C:02:70:1E:4B:F3:03:7B:7E:AB:7D:18:04:EA:1A:3B:A8:19:9A"}}},"request":{"raw":"POST /hit HTTP/1.1\r\nHost: msdoj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: multipart/form-data; boundary=---------------------------3799385093134880397141969992\r\nContent-Length: 1179\r\nOrigin: https://otakustream.piraproxy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1179,"data":"-----------------------------3799385093134880397141969992\r\nContent-Disposition: form-data; name=\"sid\"\r\n\r\n4dd7d833-3142-4a3f-a135-6fb1263ef9b8\r\n-----------------------------3799385093134880397141969992\r\nContent-Disposition: form-data; name=\"placement\"\r\n\r\n\r\n-----------------------------3799385093134880397141969992\r\nContent-Disposition: form-data; name=\"lid\"\r\n\r\n0\r\n-----------------------------3799385093134880397141969992\r\nContent-Disposition: form-data; name=\"d\"\r\n\r\n1\r\n-----------------------------3799385093134880397141969992\r\nContent-Disposition: form-data; name=\"rot\"\r\n\r\n0\r\n-----------------------------3799385093134880397141969992\r\nContent-Disposition: form-data; name=\"sub1\"\r\n\r\n\r\n-----------------------------3799385093134880397141969992\r\nContent-Disposition: form-data; name=\"sub2\"\r\n\r\n\r\n-----------------------------3799385093134880397141969992\r\nContent-Disposition: form-data; name=\"sub3\"\r\n\r\n\r\n-----------------------------3799385093134880397141969992\r\nContent-Disposition: form-data; name=\"sub4\"\r\n\r\n\r\n-----------------------------3799385093134880397141969992\r\nContent-Disposition: form-data; name=\"sub5\"\r\n\r\n\r\n-----------------------------3799385093134880397141969992--\r\n"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 17 Mar 2026 02:38:57 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 2\r\nConnection: keep-alive\r\nCache-Control: no-store, max-age=0\r\nAccept-Ch: Sec-CH-UA-Platform,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform-Version\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nSet-Cookie: av_sw_hit=1; expires=Wed, 18 Mar 2026 02:38:57 GMT; secure; SameSite=None\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-04-04T21:41:31.491902Z","times_seen":257464,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":112,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/other/adzilla/big/2/css/style.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:59.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/notifications/other/adzilla/big/2/css/style.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://otakustream.piraproxy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 02:38:59 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 11:31:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68c00ff6-960\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K2IXvs8p8Gc3AdKdGnxeItQdHd5HnAvqXid4uFHjzQjKBIWu%2BIpJ%2FsAvAJEd%2Bd5xyvCrLnYbbX21JgkQzB6uBWmPd672migS04023zGL0%2BY%3D\"}]}\r\ncf-ray: 9dd89fe53a360731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2400,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0bc9349d725e520dba5fb47062bb19be","sha1":"c9806f980f8eeaa8a76fc52dbba16d33694828a8","sha256":"0edf1ad930f16d22e747289baa84a2e99619bea81b16afd2b16410d2b240cf46","sha512":"cea8acfcc154ac659921060e590e0a586c8f25e56e473237d2dbb35acd473144ad74f27c3963fec582516f096e2ea085b67d76e3bda2bbfe1c6377380e6dd2d3","ssdeep":"","tlshash":"c04104556b7b1608712fe5b779122b0b67284017af0fdc74afd224489fc52ae427378b","first_seen":"2025-09-12T13:40:28.503848Z","last_seen":"2026-04-04T01:42:36.077401Z","times_seen":202,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:39:00.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://otakustream.piraproxy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 16 Mar 2026 19:50:51 GMT\r\nexpires: Tue, 16 Mar 2027 19:50:51 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 24489\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-04T21:46:28.129018Z","times_seen":62806,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://otakustream.piraproxy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 16 Mar 2026 19:50:51 GMT\r\nexpires: Tue, 16 Mar 2027 19:50:51 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 24487\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-04T21:41:37.578732Z","times_seen":199466,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":205,"connect":22,"send":0,"wait":21,"receive":6,"ssl":284},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heartilyscales.com/ren.gif?sid=H4sIAAAAAAAC_1RSvYskxRuu3lt-wc9AdMVMaMRAwZ3t7umZ6fayw4_E21Xv5ARBqI_uvdep6err6p6Zm2jPEwMT18zMnmd2b5NDNDMSmTUThOvICW4S_4JD2FhmdmC1oN6PeorieZ56v5pWS9ZCxRcf3DQT0prvdVqe-_odypQZWXf_tut7Le-6e4eybnjdHa9CMXzLb4ct7w33vUT2zV7g-Z7ne777LhVJasZ7axSUP479Vuy1wqDld0KMi__2tnJguQM1XLIXQap5_q_0U5CcIxv8-HZi-6XJ33xnUGlemgJDdfZx1s_MKMPgqkwLB2l2trkNYxvGvtuCyc42CmCGJysFENSwrZefQmRnG5oQw9NLpkIjySDUcxgN50j0HMTnkOYhSD1hgFTYP0A2eLRvihG_f4nyFdqw7Yu_QaOGbT99Cdnghxuaxu4to6uSTGYxTmvQeA46nCOvzlFOHNDoHLL8AqT-YHsX7yMbnBxYbUCqXqundA5uHVSrTQ6q1EGVOxiohRt6USh93u6msZI9L-RhqBLhxVHgeTyWPVTyAUgdQxZHyIsj9OkY9m4NqxzYsmHOh0cYqvpUaRvY-pHSthL-Jgeb3K5npjyc8lNTHiYZAy-OUaj6hPJ79iFkeW02Sa2amVXgoqxnXKh6RqrcQnFv8ZrnxzKNebwbRG1_t9cV_m7khXyXiyCIOyLsBWk4zZfshbV_zz65QD9ZuDyIurEX9GKf99JQxpGQwk8iP2gHgVS9CJZqkN1aWzOhhjn1Ejk1jH3zJwQ_h9XnkPQqePUK-KgGv1tjkj2uMqGN7CeqRQrK1MjLbZT3nalesp3ZR7dv_Lqm8dlOgUT-zjYLsqiRFzU-p98YDvWDnw7ykgY04at_vVXyMvkfODXs_8--hqSG7Ty5th6xzs3vIfMj2PzqLWsYRO5AE4NOrs65qGH_1Yuremq_xGHhQGhnJnThnAhd6G8vaVpauJ1AtLtR1E3Srkrbqh20VdzxkjjkcTeMww5K29DPv8z_CQAA__85uHM_4AMAAA==","fqdn":"heartilyscales.com","domain":"heartilyscales.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:58.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"heartilyscales.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 21:54:33 GMT","end":"Fri, 01 May 2026 21:54:32 GMT"},"fingerprint":{"sha1":"D7:D7:C3:2B:ED:15:06:17:54:C9:BC:9A:74:64:C6:8C:FD:9A:F8:99","sha256":"5A:C4:3A:8B:F7:8B:DC:E5:DB:AE:1A:A7:C5:65:1D:5B:AD:34:D0:A1:85:55:D5:FB:18:43:CB:08:F5:8A:0E:B5"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1RSvYskxRuu3lt-wc9AdMVMaMRAwZ3t7umZ6fayw4_E21Xv5ARBqI_uvdep6err6p6Zm2jPEwMT18zMnmd2b5NDNDMSmTUThOvICW4S_4JD2FhmdmC1oN6PeorieZ56v5pWS9ZCxRcf3DQT0prvdVqe-_odypQZWXf_tut7Le-6e4eybnjdHa9CMXzLb4ct7w33vUT2zV7g-Z7ne777LhVJasZ7axSUP479Vuy1wqDld0KMi__2tnJguQM1XLIXQap5_q_0U5CcIxv8-HZi-6XJ33xnUGlemgJDdfZx1s_MKMPgqkwLB2l2trkNYxvGvtuCyc42CmCGJysFENSwrZefQmRnG5oQw9NLpkIjySDUcxgN50j0HMTnkOYhSD1hgFTYP0A2eLRvihG_f4nyFdqw7Yu_QaOGbT99Cdnghxuaxu4to6uSTGYxTmvQeA46nCOvzlFOHNDoHLL8AqT-YHsX7yMbnBxYbUCqXqundA5uHVSrTQ6q1EGVOxiohRt6USh93u6msZI9L-RhqBLhxVHgeTyWPVTyAUgdQxZHyIsj9OkY9m4NqxzYsmHOh0cYqvpUaRvY-pHSthL-Jgeb3K5npjyc8lNTHiYZAy-OUaj6hPJ79iFkeW02Sa2amVXgoqxnXKh6RqrcQnFv8ZrnxzKNebwbRG1_t9cV_m7khXyXiyCIOyLsBWk4zZfshbV_zz65QD9ZuDyIurEX9GKf99JQxpGQwk8iP2gHgVS9CJZqkN1aWzOhhjn1Ejk1jH3zJwQ_h9XnkPQqePUK-KgGv1tjkj2uMqGN7CeqRQrK1MjLbZT3nalesp3ZR7dv_Lqm8dlOgUT-zjYLsqiRFzU-p98YDvWDnw7ykgY04at_vVXyMvkfODXs_8--hqSG7Ty5th6xzs3vIfMj2PzqLWsYRO5AE4NOrs65qGH_1Yuremq_xGHhQGhnJnThnAhd6G8vaVpauJ1AtLtR1E3Srkrbqh20VdzxkjjkcTeMww5K29DPv8z_CQAA__85uHM_4AMAAA== HTTP/1.1\r\nHost: heartilyscales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl15816950=1; u_pl22675059=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:38:58 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: heartilyscales.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 920be181d293c5f3faf76d292b053ace\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/other/adzilla/big/2/js/jquery-3.2.1.min.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:59.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/notifications/other/adzilla/big/2/js/jquery-3.2.1.min.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:59 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NiB315eIg9ED%2FdRNayi4vm5unJvb2I1o%2FXVWi63HnHdwxZyZYcuxQj3xM8MgF%2B3QZK05zw1znx5I5csjp2WvFdFgeIdZe3sIKlFOP3PFhFc%3D\"}]}\r\nlast-modified: Tue, 09 Sep 2025 11:23:23 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: br\r\nage: 503480\r\ncf-cache-status: HIT\r\netag: W/\"68c00e2b-1fa27\"\r\ncf-ray: 9dd89fe84f69120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129575,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (745)","md5":"e59a2e92b4756cc61e2e4f3082ee1360","sha1":"c96d002f642bd85adf1e5326bcc0679f9c3ee001","sha256":"42173a3ca70c715370ce99071f892ad61d3fee33dbf15426fa7eee549a4afca2","sha512":"94ab9f4e87fa268a76679ac3484952b84332bb01efb3bda37ec883310eea2536c7b5b50370553571d57beed05179749ba0bef6d53306896f2018ebd037c682a7","ssdeep":"1536:hLkR/QpfICJ5vJBQT6bTGw9S5HY6wm482+a02Yo+eKcGbp7E0bJy+jhklK4dy8Nj:hLkRNV48Ba02YowbCuyMSxtZxc9MuCx","tlshash":"8ac3518976e621319207f07a8d6fcc09b275544f1a8ded057d4c82a5af1883c97bafec","first_seen":"2023-03-08T15:21:31Z","last_seen":"2026-04-04T01:42:36.078218Z","times_seen":2054,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msdoj.com/sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8","fqdn":"msdoj.com","domain":"msdoj.com","tld":"com"},"ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"msdoj.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Feb 2026 00:31:51 GMT","end":"Tue, 26 May 2026 00:31:50 GMT"},"fingerprint":{"sha1":"A9:0A:FF:26:3D:BF:51:D6:85:5A:D3:74:7F:82:5D:9F:8B:AF:66:11","sha256":"C2:DA:92:29:D5:E9:00:BD:45:3A:5E:78:BB:6C:02:70:1E:4B:F3:03:7B:7E:AB:7D:18:04:EA:1A:3B:A8:19:9A"}}},"request":{"raw":"GET /sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8 HTTP/1.1\r\nHost: msdoj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://otakustream.piraproxy.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 17 Mar 2026 02:38:57 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 71318\r\nConnection: keep-alive\r\nCache-Control: no-store, max-age=0\r\nAccept-Ch: Sec-CH-UA-Platform,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform-Version\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":71318,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"39339c441d31d026ad980e7dc79326f8","sha1":"d2f482e0898f14866bd4f4d0f0316adca85f3b7f","sha256":"eca67e35188403ce56853c0cf039f366cca4fe7dc7e9c7cfdafdb578af08cd6d","sha512":"8cc0440ba7b9456f2ca63c2e83020f9749711b2b302455aa0aa4541c9b900472ce1035070fd3a2196c86dee8d252705d708cbf020b3ed168982ae95b70bd1a2f","ssdeep":"768:vCFlwCRCRvQXnmCvHZSRduUfqXLyvnx0WepCLCflGDn3t4sTJ+1XDGW9vzpfwC4m:MdKvQXnbH2du77yPNe3GDnCNwakt0h","tlshash":"3463c588b5d2f07146877069443f6107f23a6919209ec098f7b5cde1beb899ea533f39","first_seen":"2026-03-17T02:39:33.207907Z","last_seen":"2026-03-17T02:39:33.207907Z","times_seen":1,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":59,"dns":0,"connect":26,"send":0,"wait":70,"receive":28,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"piraproxy.com/","fqdn":"piraproxy.com","domain":"piraproxy.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.641Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: piraproxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://otakustream.piraproxy.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/other/adzilla/big/2/css/style.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:59.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/notifications/other/adzilla/big/2/css/style.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://otakustream.piraproxy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 02:38:59 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 11:31:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68c00ff6-960\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NHWwUgPGxIDJ1QbErDBSthKOaCaEBq%2FTxIqzvxqaT8rZyb0v9CSuHnyNiDvRsCRNbmvrZHfgcgWPChhGE4SxPmYPjsmN3e6tsmyjzkhEuw8%3D\"}]}\r\ncf-ray: 9dd89fe479150731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2400,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0bc9349d725e520dba5fb47062bb19be","sha1":"c9806f980f8eeaa8a76fc52dbba16d33694828a8","sha256":"0edf1ad930f16d22e747289baa84a2e99619bea81b16afd2b16410d2b240cf46","sha512":"cea8acfcc154ac659921060e590e0a586c8f25e56e473237d2dbb35acd473144ad74f27c3963fec582516f096e2ea085b67d76e3bda2bbfe1c6377380e6dd2d3","ssdeep":"","tlshash":"c04104556b7b1608712fe5b779122b0b67284017af0fdc74afd224489fc52ae427378b","first_seen":"2025-09-12T13:40:28.503848Z","last_seen":"2026-04-04T01:42:36.077401Z","times_seen":202,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":22,"dns":4,"connect":1,"send":0,"wait":461,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2Fmar24%2F4%2Fcss%2Fanimate.css\u0026l=79249\u0026fd=499","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:59.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 21:44:44 GMT","end":"Sun, 24 May 2026 21:44:43 GMT"},"fingerprint":{"sha1":"4C:9B:DC:71:4E:6F:7E:04:5A:F2:21:54:DA:06:E8:A0:34:82:CB:86","sha256":"23:FF:1C:4C:C9:81:C7:C0:A0:EB:2B:81:77:68:85:F3:47:33:36:DE:71:C4:DB:B4:66:77:5F:24:24:B9:A7:89"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Finterstitial%2Futility%2Fdefault%2Fblog%2Fflip_icon_fullpage%2Fmar24%2F4%2Fcss%2Fanimate.css\u0026l=79249\u0026fd=499 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:39:00 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":680,"timings":{"blocked":288,"dns":0,"connect":95,"send":0,"wait":98,"receive":0,"ssl":196},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/wp-content/uploads/2017/08/84833l.jpg","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /wp-content/uploads/2017/08/84833l.jpg HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/movie/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlocation: https://piracyproxy.app\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TVtu5SNuO987xBKHALgIuQrHT%2FSRwMr6eAVEMrmh56G9aK%2Bor08StF6DDLaPf6fzLtzTv847KVl3hv85i3nqUYJ0dXQsJKhPy5RbXo%2ByOFGMfjvZcSjQrIo%3D\"}]}\r\ncf-ray: 9dd89fd81ea935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"123proxy.info/","fqdn":"123proxy.info","domain":"123proxy.info","tld":"info"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"123proxy.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 23:05:25 GMT","end":"Sat, 16 May 2026 23:05:24 GMT"},"fingerprint":{"sha1":"10:3F:BE:6F:7E:71:90:1B:D8:4A:3A:6B:B3:EE:6C:3A:0A:C8:CB:9E","sha256":"88:88:5D:EE:A9:4E:C6:42:A4:12:F4:2B:51:9B:1A:D9:49:72:28:39:FB:7B:40:EE:D3:57:E0:30:4C:ED:41:F7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 123proxy.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://otakustream.piraproxy.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":278,"connect":124,"send":0,"wait":0,"receive":0,"ssl":194},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"123proxy.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 01:24:35 GMT","end":"Thu, 28 May 2026 01:24:34 GMT"},"fingerprint":{"sha1":"66:45:2B:BB:A2:6D:D3:A2:B6:16:36:65:94:BA:4A:C6:5E:05:66:09","sha256":"A4:2E:A7:56:DB:44:FF:55:9A:FA:4D:EC:2A:78:CB:C5:02:CD:CF:B2:FB:A7:A7:75:77:EC:01:DB:19:71:C0:77"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:38:58 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 89b3ab9c99836bfd84d40222ac04c49e\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-04T21:41:25.698368Z","times_seen":13230,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":33,"connect":32,"send":0,"wait":24,"receive":32,"ssl":123},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"18.193.176.129","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"statistics.it.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 18 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FF:73:E7:93:27:CB:4F:C3:84:85:D5:0E:06:52:E6:94:2D:2B:A5:C6","sha256":"09:27:72:13:57:CD:B4:25:3A:BE:58:AD:CC:13:D2:7D:D4:D4:F6:12:80:69:D9:B9:38:71:43:36:A9:56:FE:70"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://otakustream.piraproxy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 02:38:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://otakustream.piraproxy.xyz\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=23f2007c-301f-447a-83c3-231982b00b7c:1:1; expires=Fri, 14 Mar 2036 02:38:58 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"dbcf76502be6c3c5fee5bd6b7bd43653","sha1":"ebdf159ec88565e3babb7ad18b272c273b6d4d45","sha256":"0a1797d51cf56631d6f348b605fb676cee563b1c663e8423bdb03c709c925c5d","sha512":"e67ef265bb6e49c9673a3f89ecdd3656c492f053f3e7b32a2e69dd5c377be65fda604e1021156be0395f5c43b965e5d46c6798e7a50d0aed97a352bfb5a0e47b","ssdeep":"","tlshash":"f290044441c31017515f0c10413413570c04045d003131751c75dc71370d0411034015","first_seen":"2026-03-17T02:39:33.20885Z","last_seen":"2026-03-17T02:39:33.20885Z","times_seen":1,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":20,"connect":24,"send":0,"wait":21,"receive":0,"ssl":240},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/4/img/icon.jpg","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:59.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/4/img/icon.jpg HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 60775\r\nlast-modified: Tue, 05 Mar 2024 08:56:11 GMT\r\npriority: u=4,i=?0\r\netag: \"65e6de2b-ed67\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 503552\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FtEoVu%2BKxcw9%2FPV0IEkzuHtP63P9fqw9XgslrzSVBSAQ%2Fa9QUn6qSfiGcLoX1cwfKEq7w9ZEFQLgh9ESteQ0Zp3j6K1uFTwIYK2DoU3eP5Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dd89fe7af5b120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60775,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=821, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1232], progressive, precision 8, 500x333, components 3","md5":"ac0cd535f3d65fc693c5ebd29e04654f","sha1":"e83c6f5b3b02ce4e7339141d3dca6c070170c8f4","sha256":"25a24801fb185bed5d709d9cb3e483a6cdfb86229aaa1406cbe04fa9b2c794e1","sha512":"867301efa6af9b2ffc71e8848ada5f3999259503adcce4644eec3447187cce0f48ce88fd0b6bda37f5de07beae6c6b28df44d21f69e4bd0ab318b4aaa27234ed","ssdeep":"1536:enWyNTKuAswh+zNPTmKguaV7J4NMCreq0t:enWqKuAZmNPT2hy1rF0t","tlshash":"3053e12663a0cf13e2d56179d1b8d3a1e723bdd145b313827a9c2cc23bbd6938d09663","first_seen":"2025-11-17T23:38:06.540512Z","last_seen":"2026-04-04T10:21:40.304465Z","times_seen":71,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Fother%2Fadzilla%2Fbig%2F2%2Fcss%2Fanimate.css\u0026l=78693\u0026fd=539","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:59.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 21:44:44 GMT","end":"Sun, 24 May 2026 21:44:43 GMT"},"fingerprint":{"sha1":"4C:9B:DC:71:4E:6F:7E:04:5A:F2:21:54:DA:06:E8:A0:34:82:CB:86","sha256":"23:FF:1C:4C:C9:81:C7:C0:A0:EB:2B:81:77:68:85:F3:47:33:36:DE:71:C4:DB:B4:66:77:5F:24:24:B9:A7:89"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcreative-sb1.com%2Fsb%2Fnotifications%2Fother%2Fadzilla%2Fbig%2F2%2Fcss%2Fanimate.css\u0026l=78693\u0026fd=539 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:38:59 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heartilyscales.com/impr.gif?sid=H4sIAAAAAAAC_1RSvW8jRRydTSIKKBAE0SFtQQEScWa9a3uX6058NFwC3KETQkKaj93cD6939nZ2bcdVjkMUNISOjvVzcmlOCDoqhBwahIR0W-Hi0vAXIKQrEbJjKdxI8_uYNxq993vz5bS6YC1UYvH-DTOhNBW7nRZ3X7tNmTYj6-7dcj3e4tfc25R1g2vueBmK4ZueH7T46-67seqb3Tb3OPe4575DRZyY8e4KBeUPI68V8VbQbnmdAOPi6d5WDqxwoIcX7EWQbp7_K_kEpObIBj-8Fdt-afI33h5UqShNgaE--yjrZ2aUYXBVJoWDJDtb34axDWPfbsBkZ2sFMMOTpQJIatjGy48hs7M1Tcjh6SVTmSLOIPVzGA3niNM5SMyhzH2QfsQApbG3j2zwYM8UI3F4iYol2rCtJ_-ARg3bevwSssH311MauzdNWpVkMotxUoPGc9DBHHl1jnLigEbnUOXnIP0H233yHrLByb5NDUjXK_WUzCGsg2q5yUGVOKhyBwO9cAMeBsoTfjeJtOrxQASBjiWPwjbnIlI9VOoeSB9DFUfIiyP06Rj2Tg2rHdiyYc4HRxjq-lSntm3rBzq1lfTWub3Ofj0z5cFUnJryIM4YRHGMQtcnlN-196HKzdkksXpmlkHIsp4JqesZ6XIDxd3Fq9yLVBKJaKcd-tFOT_FkJ-J-Z0eHsd_zej3dkf40v2AvLOfnfPyvRT9euIL7bRlo31ehiEU3FEESyTBo-52uF8gkgaUaZDdWo5lQw3rNb8ipYezrPyHFOWx6DkWbENUrEKMa4k6NSfZQU5EXZnzYUmYAbWrk5RbKQ2eaXrDt2Ye3rv-ysvHT7QKx-p2tF1RRIy9qfEa_Mhyk937cz0sa0EQsfb1ZijJ-BoIa9uzfX0FRw7Yfba6-WOfGd1D5EWx-9ZY1DDJ3kBJDGl-dC1nD_q-XV_XUfoGDwoFMnZlMC-dEpkX6zSVNSws38eO24jzsdT0_TGLPD7RKOmEQ6a7gvh-jtA399PP8vwAAAP__IZLSf-ADAAA=","fqdn":"heartilyscales.com","domain":"heartilyscales.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:39:00.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"heartilyscales.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 21:54:33 GMT","end":"Fri, 01 May 2026 21:54:32 GMT"},"fingerprint":{"sha1":"D7:D7:C3:2B:ED:15:06:17:54:C9:BC:9A:74:64:C6:8C:FD:9A:F8:99","sha256":"5A:C4:3A:8B:F7:8B:DC:E5:DB:AE:1A:A7:C5:65:1D:5B:AD:34:D0:A1:85:55:D5:FB:18:43:CB:08:F5:8A:0E:B5"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSvW8jRRydTSIKKBAE0SFtQQEScWa9a3uX6058NFwC3KETQkKaj93cD6939nZ2bcdVjkMUNISOjvVzcmlOCDoqhBwahIR0W-Hi0vAXIKQrEbJjKdxI8_uYNxq993vz5bS6YC1UYvH-DTOhNBW7nRZ3X7tNmTYj6-7dcj3e4tfc25R1g2vueBmK4ZueH7T46-67seqb3Tb3OPe4575DRZyY8e4KBeUPI68V8VbQbnmdAOPi6d5WDqxwoIcX7EWQbp7_K_kEpObIBj-8Fdt-afI33h5UqShNgaE--yjrZ2aUYXBVJoWDJDtb34axDWPfbsBkZ2sFMMOTpQJIatjGy48hs7M1Tcjh6SVTmSLOIPVzGA3niNM5SMyhzH2QfsQApbG3j2zwYM8UI3F4iYol2rCtJ_-ARg3bevwSssH311MauzdNWpVkMotxUoPGc9DBHHl1jnLigEbnUOXnIP0H233yHrLByb5NDUjXK_WUzCGsg2q5yUGVOKhyBwO9cAMeBsoTfjeJtOrxQASBjiWPwjbnIlI9VOoeSB9DFUfIiyP06Rj2Tg2rHdiyYc4HRxjq-lSntm3rBzq1lfTWub3Ofj0z5cFUnJryIM4YRHGMQtcnlN-196HKzdkksXpmlkHIsp4JqesZ6XIDxd3Fq9yLVBKJaKcd-tFOT_FkJ-J-Z0eHsd_zej3dkf40v2AvLOfnfPyvRT9euIL7bRlo31ehiEU3FEESyTBo-52uF8gkgaUaZDdWo5lQw3rNb8ipYezrPyHFOWx6DkWbENUrEKMa4k6NSfZQU5EXZnzYUmYAbWrk5RbKQ2eaXrDt2Ye3rv-ysvHT7QKx-p2tF1RRIy9qfEa_Mhyk937cz0sa0EQsfb1ZijJ-BoIa9uzfX0FRw7Yfba6-WOfGd1D5EWx-9ZY1DDJ3kBJDGl-dC1nD_q-XV_XUfoGDwoFMnZlMC-dEpkX6zSVNSws38eO24jzsdT0_TGLPD7RKOmEQ6a7gvh-jtA399PP8vwAAAP__IZLSf-ADAAA= HTTP/1.1\r\nHost: heartilyscales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl15816950=1; u_pl22675059=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:39:00 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 8\r\nHost: heartilyscales.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 2a35a6707786f92fedeabd63048eb64e\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":88,"dns":0,"connect":0,"send":0,"wait":103,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/wp-content/themes/otakustream/static/assets/img/basic/otakustream_black.png","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /wp-content/themes/otakustream/static/assets/img/basic/otakustream_black.png HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/movie/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 17 Mar 2026 02:38:57 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6XspTuxjvo1HT%2BgLf0ea6Rb9faj8ekS%2Be%2B%2FF1ijkQS9ll5U7DZVmhayiVUsf5NRqHl%2BdcyEn%2FHoztaSakVrvhxEugejSjjjArCRwiHRSk4847dpgNK6uPF8%3D\"}]}\r\ncf-ray: 9dd89fd80e9f35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14641,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 476 x 96, 8-bit/color RGBA, non-interlaced","md5":"85adaa94772a0cb8129fb534a391b278","sha1":"505f749ce737035985c40432bcc4fe7bad114129","sha256":"3151983ddf95ad3f0bc8038b28c634d43b885039de8a2f5247711c1982b8d633","sha512":"1cd8298b98e76b212890ecc449895ae5f350f851b4ed85d9afd456deabc04e758ea05d10a2aa8f4d0416b3c65b2693a00bf1f2a01b0dc75daeb8428bb0f91196","ssdeep":"384:PakyP6+7v822TK9VwfYX1fAqig3DD0tFCx5AvokFC+RQQT:ivREqk8oqfkmQcQT","tlshash":"a062d0a95e9e1be67004e0dbd93a1cbca3c0749b4b15f18ad9d7e960ce38ac9074d533","first_seen":"2025-07-16T15:44:51.467752Z","last_seen":"2026-03-25T03:25:34.319126Z","times_seen":32,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/wp-content/uploads/2018/06/32167l.jpg","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /wp-content/uploads/2018/06/32167l.jpg HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/movie/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlocation: https://piraproxy.com\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O6BGMtM9kUiCIbCZcOBsMBLS%2FhvgsP%2BeGK3Ey9OHZFl2YpImZufDrs42RQmfC4EHdnrhMrm5%2BSah3aJSF%2FZ5K%2F8cU%2FO9G0Hj2a8qnZMKg%2FbZx%2BNjAxDovSo%3D\"}]}\r\ncf-ray: 9dd89fd81eab35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/wp-content/uploads/2018/05/23677l.jpg","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /wp-content/uploads/2018/05/23677l.jpg HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/movie/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlocation: https://piracyproxy.page\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=whuDGxiupjZostlkSW36jqtayr%2BTVHBalYdjbf9ize1A%2FpiWmaocyEQ347SMG%2Fq7H%2BYfWWIsSAYiy77%2FzZrFlR2PfSMf9xUkTGPSGnwmwo4u3ln4qXvn96Q%3D\"}]}\r\ncf-ray: 9dd89fd81eb235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans+Condensed:700|Open+Sans:400,400i,600,700\u0026v=50-40","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Open+Sans+Condensed:700|Open+Sans:400,400i,600,700\u0026v=50-40 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 17 Mar 2026 02:38:57 GMT\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25911,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"b1da25ada12cc9fa0d13236035eec87f","sha1":"603a4097b239892cc35c9328dec94fa9f0415ec0","sha256":"d632302cd6b77497e58a57a2d2d13df799849c6454a2d9a77db31ae816f8ae70","sha512":"a4c5fdce8ce03f9d636157512ad20629020b628168a7450a4dfadd997aecf8cb94127999173038f3465385cbaf982c05548f8d68cb96f7b73997f648792d2fe5","ssdeep":"384:+POmxG+CvxoqY49bjVjXqY4ahhqY4tU8qY4Z8h:jiaL3Jbc/","tlshash":"8fc24f91042b645067431dd233ce3e30ee0f92617084d0766bfe8b9aeedad6a63b435d","first_seen":"2025-09-22T04:20:17.437989Z","last_seen":"2026-03-25T03:25:34.331026Z","times_seen":30,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":37,"dns":0,"connect":7,"send":0,"wait":24,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"piracyproxy.org/","fqdn":"piracyproxy.org","domain":"piracyproxy.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piracyproxy.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 01:28:52 GMT","end":"Wed, 20 May 2026 01:28:51 GMT"},"fingerprint":{"sha1":"49:63:99:E4:F8:1B:6C:D6:12:88:5B:18:D6:CB:9F:1A:EE:FC:F6:96","sha256":"08:3D:56:8D:95:10:3B:CD:DA:84:43:85:84:9A:27:6F:79:A5:D3:39:06:0D:F7:AF:6B:E8:36:6C:B2:FA:52:61"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: piracyproxy.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://otakustream.piraproxy.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":273,"connect":123,"send":0,"wait":0,"receive":0,"ssl":197},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"piracyproxy.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"piracyproxy.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/4/js/script.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:59.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/interstitial/utility/default/blog/flip_icon_fullpage/mar24/4/js/script.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://otakustream.piraproxy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 02:38:59 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 05 Mar 2024 08:56:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FTZmeETR1bIjFWaOFm4b4TYEOcoJWnaBACMwlNI%2FFITduHvc71DhBVpJMg%2F1iQWVItntKr2CKnq2eMNf7ZLXAKSXM%2BPYK1PB7P%2BQNQmzv6Q%3D\"}]}\r\ncf-cache-status: MISS\r\netag: W/\"65e6de27-18d\"\r\ncontent-encoding: br\r\ncf-ray: 9dd89fe4b9670731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":397,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"999af189e50c58f1a44d672e4b3d5a3f","sha1":"a69c7a4d68885a14d01d33c26d136b95b42313d6","sha256":"28ec866098b037343646399a597ae93e16b11b66f90426ffb5cf743a3c41e38f","sha512":"c529c76b23058a6d81c9ab4a61460669f1a8175b35428a5be422eb933ba4d34820cf3c9eafdad1cd132d699bac6966414c0f27d561393b520eaa55cd679521ab","ssdeep":"","tlshash":"ede02b3861685234c7b7d1a2628f679f2630425fd00a425e702c174f0ee1fa612c1dab","first_seen":"2023-05-07T17:52:21Z","last_seen":"2026-04-04T10:21:40.307579Z","times_seen":426,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heartilyscales.com/impr.gif?sid=H4sIAAAAAAAC_1RSvYskRRyt3lsMNBBdMRMaMVBwZ6s_Zqbbyw4_Em9XvZMTBKE-uufKqenq6-qemZtozxMDE9fMzJ43u7fJIZoZicyaCcJ15AQ3iX_BImwsMzuwXkH9PuoVxXuvft9MqyVpoWKLj26aidKa7bVb1H3zjsqkGVl3_7br0Ra97t5RWSe87o5XoRi-4wVhi77lfpCIvtnzqUepRz33fVUkqRnvrVGo_HHstWLaCv2W1w4xLp7tbeXAMgdyuCQvQ8nmxX_Sz6HEHNng53cT2y9N_vZ7g0qz0hQYytNPs35mRhkGV2VaOEiz081tGNsQ8sMWTHa6UQAzPF4pAFcN2Xr1KXh2uqEJPjy5ZMo1kgxcvoDRcI5Ez6HYHMI8hJJPCCAk9g-QDR7tm2LE7l-ibIU2ZPviX6hRQ7afvoJs8NMNrcbuLaOrUpnMYpzWUOM5VG-OvDpDOXGgRmcQ5VdQ8i-yd_EhssHxgdUGStZr9Sqdg1kH1WorB1XqoModDOTCDWkUCo8FnTSWoktDFoYy4TSOfEpZLLqoxAMoeQRRHCIvDtFXR7B3a1jpwJYNcT4-xFDWJ1Jb39aPpLYV9zbZ3-SgnpmyN2UnpuwlGQErjlDI-ljl9-xDiPLabJJaOTOrwHhZzxiX9UzJcgvFvcUb1ItFGrN4148Cb7fb4d5uREO2y7jvx20edv00nOZL8tLav_PPLtBPFi7zo05M_W7ssW4aijjigntJ5PmB7wvZjWBVDWW31tZMVEOceolcNYR89zc4O4PVZxDqdbDqNbBRDXa3xiR7XGVcG9FPZEtJSFMjL7dR3nemekl2Zp_cvvH7msYXOwUS8SfZLIiiRl7U-FL9QdDTD345yEs1UBO2-tdbJSuT58BUQ54__xZCNWTnybX1iLVv_giRH8LmV29ZQ8BzB1oR6OTqnPEa9n89v6qn9mv0CgdcOzOuC-eY60J_f0nTqoWbBokvKI26HS-I0sQLQinSdhTGssNoECQobaN-_W3-XwAAAP__xdDj4eADAAA=","fqdn":"heartilyscales.com","domain":"heartilyscales.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:39:00.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"heartilyscales.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 21:54:33 GMT","end":"Fri, 01 May 2026 21:54:32 GMT"},"fingerprint":{"sha1":"D7:D7:C3:2B:ED:15:06:17:54:C9:BC:9A:74:64:C6:8C:FD:9A:F8:99","sha256":"5A:C4:3A:8B:F7:8B:DC:E5:DB:AE:1A:A7:C5:65:1D:5B:AD:34:D0:A1:85:55:D5:FB:18:43:CB:08:F5:8A:0E:B5"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RSvYskRRyt3lsMNBBdMRMaMVBwZ6s_Zqbbyw4_Em9XvZMTBKE-uufKqenq6-qemZtozxMDE9fMzJ43u7fJIZoZicyaCcJ15AQ3iX_BImwsMzuwXkH9PuoVxXuvft9MqyVpoWKLj26aidKa7bVb1H3zjsqkGVl3_7br0Ra97t5RWSe87o5XoRi-4wVhi77lfpCIvtnzqUepRz33fVUkqRnvrVGo_HHstWLaCv2W1w4xLp7tbeXAMgdyuCQvQ8nmxX_Sz6HEHNng53cT2y9N_vZ7g0qz0hQYytNPs35mRhkGV2VaOEiz081tGNsQ8sMWTHa6UQAzPF4pAFcN2Xr1KXh2uqEJPjy5ZMo1kgxcvoDRcI5Ez6HYHMI8hJJPCCAk9g-QDR7tm2LE7l-ibIU2ZPviX6hRQ7afvoJs8NMNrcbuLaOrUpnMYpzWUOM5VG-OvDpDOXGgRmcQ5VdQ8i-yd_EhssHxgdUGStZr9Sqdg1kH1WorB1XqoModDOTCDWkUCo8FnTSWoktDFoYy4TSOfEpZLLqoxAMoeQRRHCIvDtFXR7B3a1jpwJYNcT4-xFDWJ1Jb39aPpLYV9zbZ3-SgnpmyN2UnpuwlGQErjlDI-ljl9-xDiPLabJJaOTOrwHhZzxiX9UzJcgvFvcUb1ItFGrN4148Cb7fb4d5uREO2y7jvx20edv00nOZL8tLav_PPLtBPFi7zo05M_W7ssW4aijjigntJ5PmB7wvZjWBVDWW31tZMVEOceolcNYR89zc4O4PVZxDqdbDqNbBRDXa3xiR7XGVcG9FPZEtJSFMjL7dR3nemekl2Zp_cvvH7msYXOwUS8SfZLIiiRl7U-FL9QdDTD345yEs1UBO2-tdbJSuT58BUQ54__xZCNWTnybX1iLVv_giRH8LmV29ZQ8BzB1oR6OTqnPEa9n89v6qn9mv0CgdcOzOuC-eY60J_f0nTqoWbBokvKI26HS-I0sQLQinSdhTGssNoECQobaN-_W3-XwAAAP__xdDj4eADAAA= HTTP/1.1\r\nHost: heartilyscales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nCookie: pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl15816950=1; u_pl22675059=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:39:00 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 4\r\nHost: heartilyscales.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 2e5329efc3c59b7c6e8442469811f5d6\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"heartilyscales.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/wp-content/uploads/2018/01/26507.jpg","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /wp-content/uploads/2018/01/26507.jpg HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/movie/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlocation: https://dirproxy.me\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nwezY%2FQTAAZpcwROMCKF6gqGqLa4dRHuHuCOylOpmiC9gqu6pw%2Fks6HmqJBhCIWKI2cRaNPPBQk9a9p%2BG1%2BT5sNZXab2Bag4G2Um5zBFhAZ3rXMgU%2FLQlEE%3D\"}]}\r\ncf-ray: 9dd89fd80ea435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/wp-content/uploads/2017/10/42005l.jpg","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /wp-content/uploads/2017/10/42005l.jpg HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/movie/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlocation: https://piracyproxy.info\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6uRSEISg%2BcucqRdHEVzltnpsTP5CxNWUJSe%2BZaJmMK6%2BMUiHeoX%2BqVQKQ%2F6tQ7z%2FTwtJR1PY8ZevUCXNjMebYi%2BFaV7lBjDIzUCvCA7yKVNXSpbp%2F7VAqTc%3D\"}]}\r\ncf-ray: 9dd89fd81eaa35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"piracyproxy.page/","fqdn":"piracyproxy.page","domain":"piracyproxy.page","tld":"page"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piracyproxy.page","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 22:53:20 GMT","end":"Sat, 16 May 2026 22:53:19 GMT"},"fingerprint":{"sha1":"03:ED:AB:71:11:D8:48:43:E0:0B:C8:F6:10:24:A9:E7:42:AA:FE:F7","sha256":"63:A0:F9:F3:70:C6:65:0E:FA:95:8A:2F:9C:6E:EA:0F:94:D6:A3:9F:33:54:99:A8:9B:39:F3:41:36:79:19:CC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: piracyproxy.page\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://otakustream.piraproxy.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":272,"connect":113,"send":0,"wait":0,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"piracyproxy.page","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://otakustream.piraproxy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 16 Mar 2026 19:50:51 GMT\r\nexpires: Tue, 16 Mar 2027 19:50:51 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 24487\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-04T21:41:37.578732Z","times_seen":199466,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":204,"connect":7,"send":0,"wait":22,"receive":7,"ssl":260},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.72","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 01:24:35 GMT","end":"Thu, 28 May 2026 01:24:34 GMT"},"fingerprint":{"sha1":"66:45:2B:BB:A2:6D:D3:A2:B6:16:36:65:94:BA:4A:C6:5E:05:66:09","sha256":"A4:2E:A7:56:DB:44:FF:55:9A:FA:4D:EC:2A:78:CB:C5:02:CD:CF:B2:FB:A7:A7:75:77:EC:01:DB:19:71:C0:77"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:38:58 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 83659e47162b025d9df38a9aacd0731e\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-04-04T21:41:25.698368Z","times_seen":13230,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":22,"connect":32,"send":0,"wait":42,"receive":20,"ssl":89},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-16","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exposuretigerphilip.com/sbar.json?key=a032b4d33c8aea68a4f9b84235614bff","fqdn":"exposuretigerphilip.com","domain":"exposuretigerphilip.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:58.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"exposuretigerphilip.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 24 Jan 2026 21:17:40 GMT","end":"Fri, 24 Apr 2026 21:17:39 GMT"},"fingerprint":{"sha1":"E6:1A:BC:6E:FC:B3:C6:D1:F1:0F:04:47:53:D8:32:72:71:8D:56:75","sha256":"E8:B8:3A:1E:16:ED:9F:2B:1E:CA:7C:79:2A:2D:68:EE:2C:0C:1D:8D:C9:6A:79:36:C5:F4:3D:3C:11:B3:19:BD"}}},"request":{"raw":"GET /sbar.json?key=a032b4d33c8aea68a4f9b84235614bff HTTP/1.1\r\nHost: exposuretigerphilip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://otakustream.piraproxy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:38:58 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 2329\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://otakustream.piraproxy.xyz\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: pdhtkv=true; expires=Wed, 18 Mar 2026 02:38:58 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Wed, 18 Mar 2026 02:38:58 GMT; path=/; secure; SameSite=None\npdhtkv29=true; expires=Wed, 18 Mar 2026 02:38:58 GMT; path=/; secure; SameSite=None\nuncs29=1; expires=Wed, 18 Mar 2026 02:38:58 GMT; path=/; secure; SameSite=None\nu_pl22675059=1; expires=Wed, 18 Mar 2026 02:38:58 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 8\r\nHost: exposuretigerphilip.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 02abc8ce6bf3c62c3bbd9ccd944215d1\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":5039,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"df0dc43263b24eb0081240e7a020e38b","sha1":"c749c919a292058a8aa0ad4897641b1c2e4827ee","sha256":"428a06c40a1e1d01ee31bf313e3ad5c5df5216a829ca311014111abe260599fd","sha512":"8f60641d65f2cdc6aa2e56a0c38c02dd69e66030f1d6d39d94c2d9187b4647d01a4b84350ce0f970e5702fdde14f576a3e4bb8e73ff5f4aaf2da9501b771dfea","ssdeep":"96:97ITkl28fjR4IlkTkl28fjR4IyItjSqkpCMaMCjItjSqkpCMaMCzxNAsqRq:9N28bR4IlN28bR4IyIpkpCUkIpkpCUkr","tlshash":"27a14c1e11d4a781d5ce47504ec6acfc1dadbccac852a80cccba7bcf06ee8436554134","first_seen":"2026-03-17T02:39:33.21346Z","last_seen":"2026-03-17T02:39:33.21346Z","times_seen":1,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/notifications/other/adzilla/big/2/index.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:58.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 22:39:28 GMT","end":"Mon, 04 May 2026 23:38:03 GMT"},"fingerprint":{"sha1":"DE:44:B7:F9:65:9F:D2:6E:27:46:3E:12:7A:23:24:E9:D7:2B:16:7E","sha256":"E1:09:99:E2:19:59:48:E0:83:95:4C:4F:63:09:68:08:82:8E:16:17:8D:20:09:B6:93:1D:B5:84:B7:46:68:C1"}}},"request":{"raw":"GET /sb/notifications/other/adzilla/big/2/index.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://otakustream.piraproxy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 02:38:59 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 11:23:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jgvxkRPAB9Xte%2FHF9u%2FmLEaEbt0NJheTW9J5skufAsUZi3efliHf5Fi2FtBN38PF7CWQf11LYYLIFPhfV5jRyk0xdEoffi49BTlPtzyeWg%3D%3D\"}]}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9dd89fe11d5a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":844,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e3a2c9d994fe6c8d6beb127a100d3030","sha1":"da7e6974835b1f2a612825fdb05ae928edb816b6","sha256":"fdb2a8a5d0f3f9933b4d33b2cad3205d5e99aeed720383cf8c70b668d19ec117","sha512":"7ea95545c1685584d39b4a3e88a3d29d514125282b5f272e747b01f0d62a3d7560bddc88e03fb2c60e2733105f3c5e025f31b24f5369d5e97290cd2a53185547","ssdeep":"","tlshash":"7301049f2dae92f724c230a6be313edad4d6e18b4a0744103bee04104745b708e2324e","first_seen":"2025-09-14T23:01:21.732181Z","last_seen":"2026-03-30T18:41:29.074726Z","times_seen":102,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":24,"dns":2,"connect":1,"send":0,"wait":450,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vmuid.com/uid/send","fqdn":"vmuid.com","domain":"vmuid.com","tld":"com"},"ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vmuid.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 01:59:54 GMT","end":"Fri, 12 Jun 2026 01:59:53 GMT"},"fingerprint":{"sha1":"36:46:BC:C4:32:57:D2:F6:EB:83:61:72:F5:D0:A6:AE:C4:29:3B:E6","sha256":"C7:62:B2:40:07:03:2B:D4:73:EE:C3:9D:87:86:BB:6D:70:07:59:98:24:8F:51:71:D2:D7:F2:4E:D0:D4:E0:65"}}},"request":{"raw":"POST /uid/send HTTP/1.1\r\nHost: vmuid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://otakustream.piraproxy.xyz/\r\nContent-Type: multipart/form-data; boundary=---------------------------376840247541094403551523719792\r\nContent-Length: 323\r\nOrigin: https://otakustream.piraproxy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":323,"data":"-----------------------------376840247541094403551523719792\r\nContent-Disposition: form-data; name=\"uid\"\r\n\r\na5a9317e-5031-4789-8697-b876afc00590\r\n-----------------------------376840247541094403551523719792\r\nContent-Disposition: form-data; name=\"placement\"\r\n\r\n\r\n-----------------------------376840247541094403551523719792--\r\n"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 17 Mar 2026 02:38:57 GMT\r\nContent-Type: application/json\r\nContent-Length: 65\r\nConnection: keep-alive\r\nCache-Control: no-store, max-age=0\r\nAccept-Ch: Sec-CH-UA-Platform,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform-Version\r\nAccess-Control-Allow-Origin: https://otakustream.piraproxy.xyz\r\nAccess-Control-Allow-Headers: X-Requested-With, content-type, access-control-allow-origin, access-control-allow-methods, access-control-allow-headers, set-cookie, Cookie\r\nAccess-Control-Allow-Credentials: true\r\nSet-Cookie: guid=a5a9317e-5031-4789-8697-b876afc00590; expires=Wed, 31 Dec 2025 00:00:00 GMT; domain=vmuid.com; path=/; secure; SameSite=None\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1955cd9995ef12698d095a38825ac6ba","sha1":"bc9a2d594f9a709a80bfd59b989c53421653e3d3","sha256":"fa5ad1a4939d08b92833dd46350d275dc665467a7cc5f7461a7d004a0ce13189","sha512":"c79fcf7dc382416021a16ca0eb7c5ab1ecbd2093fc1b7cfc2465d51e7ba453cfffbdb12312ef9e3be5a6f9b6a3029c480c2a47cd17631f6c8d878ae60034d8dc","ssdeep":"","tlshash":"62a002b7924550f693d17681016fb65914a052908535d6e9454b6216fb15631348722f","first_seen":"2026-03-17T02:39:33.214787Z","last_seen":"2026-03-17T02:39:33.214787Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fnotifications%2Fother%2Fadzilla%2Fbig%2F2%2Findex.html\u0026l=844\u0026fd=492","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:59.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 21:44:44 GMT","end":"Sun, 24 May 2026 21:44:43 GMT"},"fingerprint":{"sha1":"4C:9B:DC:71:4E:6F:7E:04:5A:F2:21:54:DA:06:E8:A0:34:82:CB:86","sha256":"23:FF:1C:4C:C9:81:C7:C0:A0:EB:2B:81:77:68:85:F3:47:33:36:DE:71:C4:DB:B4:66:77:5F:24:24:B9:A7:89"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fnotifications%2Fother%2Fadzilla%2Fbig%2F2%2Findex.html\u0026l=844\u0026fd=492 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 17 Mar 2026 02:38:59 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":688,"timings":{"blocked":295,"dns":1,"connect":100,"send":0,"wait":96,"receive":0,"ssl":192},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/other/adzilla/big/2/img/1.jpg","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:59.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/notifications/other/adzilla/big/2/img/1.jpg HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 02:38:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 111559\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 11:23:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68c00e2f-1b3c7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 1039050\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qZi24vjcWHX%2Bl90JnSvzB9mPMljz8bCi3qqAsTRSW2TnQzsT9TUGYaL7PwXEEFlgZQKytc%2B40A0ErIS7ICf8DxMDd%2FaFZ3SDDEcTW11Eps0%3D\"}]}\r\ncf-ray: 9dd89fe4d9960731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111559,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:08:29 13:22:59], progressive, precision 8, 800x440, components 3","md5":"8ea42d150a20a7fa76544df0b619da09","sha1":"7b122e82465c774421f075baff5df74c356dda58","sha256":"bcac2efa74b5f4db3b7773cb650813da7fa53147a48c995126ef948faf644e81","sha512":"3bd6d3cfab9b2cc9d08c884d6214a3b559f5ef893a984c0b55a9267a00e2b0b8b0be7cc69c6147401cb16700e96b0b5fb35e4fa340128bb718a7898cfd2f6dbc","ssdeep":"3072:tBK1FgKCJd7bOLlBlQVGjg6lU3LG3gaxy:tmF3GvOLlwkjg3I7g","tlshash":"3bb3f1269be0dd65d4f7bb304a02eae1a715fd24c693710afc0c316b3f725618e89e45","first_seen":"2025-09-14T23:01:21.737138Z","last_seen":"2026-03-30T18:41:29.157659Z","times_seen":102,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/wp-content/uploads/2017/12/73611l.jpg","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /wp-content/uploads/2017/12/73611l.jpg HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/movie/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlocation: https://123proxy.info\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mWtug2KWLSP60PIhzOD%2BfZUMw3pdsdc00BkRPgse0IDUl%2FvZYG8XMnblrnJu0ShXEbgczAxk%2BIfc5pNt1baciP4pjTLBwrWVRzdErPYMGg4lc8fhoQ8XNtA%3D\"}]}\r\ncf-ray: 9dd89fd81ead35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/wp-content/uploads/2018/05/64563l.jpg","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /wp-content/uploads/2018/05/64563l.jpg HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/movie/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlocation: https://piracyproxy.biz\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uFZA%2Bhai0brLheG3Ar7s6oMJD1kIza1E%2BmGsq91ULu4M7ggvSOT%2Fqz2h8%2BDnmlmk6M%2Bd%2F25OJWsqeXVbdT6oawQ1FzDCk5cFbibKrMsC8H%2F1QsJ64SaC1ug%3D\"}]}\r\ncf-ray: 9dd89fd81eb335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"piracyproxy.org/","fqdn":"piracyproxy.org","domain":"piracyproxy.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piracyproxy.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Feb 2026 01:28:52 GMT","end":"Wed, 20 May 2026 01:28:51 GMT"},"fingerprint":{"sha1":"49:63:99:E4:F8:1B:6C:D6:12:88:5B:18:D6:CB:9F:1A:EE:FC:F6:96","sha256":"08:3D:56:8D:95:10:3B:CD:DA:84:43:85:84:9A:27:6F:79:A5:D3:39:06:0D:F7:AF:6B:E8:36:6C:B2:FA:52:61"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: piracyproxy.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://otakustream.piraproxy.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":285,"connect":123,"send":0,"wait":0,"receive":0,"ssl":190},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"piracyproxy.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"piracyproxy.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/other/adzilla/big/2/js/script.js","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:59.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/notifications/other/adzilla/big/2/js/script.js HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://otakustream.piraproxy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 02:38:59 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 11:23:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BIVkakKcXjjn1oLplsxcQI5QNIR3kYyiRwvmG0sp%2F%2BOU%2FKAUFCHm6Y4OoYF23rU9hDjx77wbNrYc14I842iAODmkGZffUwPj1gCuef9RlUQ%3D\"}]}\r\ncf-cache-status: MISS\r\netag: W/\"68c00e2b-18d\"\r\ncontent-encoding: br\r\ncf-ray: 9dd89fe56a780731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":397,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"37a36981025a4dc83117b1ea5348e389","sha1":"d13a13d8284819725e63b87a6206c71a23ef3242","sha256":"7e356a6794903f614c27ab41ac97b1b95ade6593d31bda3e94062df56ec05ad0","sha512":"96245d4bb7f97ca555e016d42422210d00360eeb2921b7b84acf5bef5b3643ba9297df42a3ac1c0e031f38d93b9a8e4c8834eb6aa6dd48f162ad597f4f3a7f05","ssdeep":"","tlshash":"11e02b38a2685274c7b7d2a2618f5b9f2630425fd00a029e702c534e0ee1fa612c1d6b","first_seen":"2025-09-12T13:40:28.363426Z","last_seen":"2026-04-04T01:42:36.094564Z","times_seen":201,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:39:00.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://otakustream.piraproxy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 16 Mar 2026 19:50:51 GMT\r\nexpires: Tue, 16 Mar 2027 19:50:51 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 24489\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-04T21:46:28.129018Z","times_seen":62806,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":22,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/movie/","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-17T02:38:56.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /movie/ HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BlgpqCf%2Fy44KFRwtXvfzb0uXcsoF%2BTkUWoatlyAjHe9vq1Ot2A6Yq9Tb%2B1v6UpkhMKkQeVo2cBeeGBrebCszOxsPBSCOjs9y7YKESAhEEXgUbyyK4g9pmzo%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 02:38:57 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9dd89fd50f1a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90103,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65452)","md5":"7826acb83e6875c5da80ba83e105400c","sha1":"f59396ed7f5bdc3b4ec6422b3a6bb59b192dbdd0","sha256":"fbc89219ff78da4e95653eef1f8f82ff918f9411e8d606e8d29e4aaaf2313aaf","sha512":"078faf022ada97d4604bf43ede3980e9ab6dc2497897b9030a052e7750428e03f395278cc40b6d1d8f86cb8cf1594bc9f71618e5865a3000921ecbb8c3493cee","ssdeep":"1536:DIDSDmYf4PVXh/EmrYUEaecw/BoDE+LldFmH9VqqpBuErx/C:4S2PVX5EmrYUEaecqBoDE+LldFmH9hC","tlshash":"1e93763278089437875b4ec91260671ca3d3cb0ec7db1d99f1aacbf45adad68da33215","first_seen":"2026-03-17T02:39:33.215953Z","last_seen":"2026-03-17T02:39:33.215953Z","times_seen":1,"resource_available":true,"data":null}},"time_used":355,"timings":{"blocked":54,"dns":37,"connect":1,"send":0,"wait":247,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vmuid.com/script.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8","fqdn":"vmuid.com","domain":"vmuid.com","tld":"com"},"ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vmuid.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 01:59:54 GMT","end":"Fri, 12 Jun 2026 01:59:53 GMT"},"fingerprint":{"sha1":"36:46:BC:C4:32:57:D2:F6:EB:83:61:72:F5:D0:A6:AE:C4:29:3B:E6","sha256":"C7:62:B2:40:07:03:2B:D4:73:EE:C3:9D:87:86:BB:6D:70:07:59:98:24:8F:51:71:D2:D7:F2:4E:D0:D4:E0:65"}}},"request":{"raw":"GET /script.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8 HTTP/1.1\r\nHost: vmuid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 17 Mar 2026 02:38:57 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 10786\r\nConnection: keep-alive\r\nCache-Control: no-store, max-age=0\r\nAccept-Ch: Sec-CH-UA-Platform,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform-Version\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10786,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10786), with no line terminators","md5":"eb58954d37b59dfbf3d3dfd7f9a9b7c9","sha1":"9113992e0cf8daa04b1a7bafe4d38d4e3eb1506c","sha256":"ea3ae5982dd7321db72935a1fb03ff0e06e946d8bf0ee0b07501a7479cc578ba","sha512":"c4ecc02393fb39c2e4a4fd5ef9acd0cc23f4346923c30d888ea96eca3ad146e4a32d58fe4188368bfed4eca94468f67e0ef1fab20b2ed51ecfa3380c00d8a0a7","ssdeep":"192:/4Rjn7CBVpFxiD7TCWuYShk8MhQEAf3UKqnoqN/timFgqRPr4SP93HY3L0U/3LA8:8j7gn+f2hk8H3lo9tizG8SlKgUzA8","tlshash":"4b22a5c9b2d2f06443d67560802f200bf23a686db59dc498e765d8e3bcb445ea227f7d","first_seen":"2026-03-16T11:03:52.199433Z","last_seen":"2026-04-03T18:56:21.985396Z","times_seen":172,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":48,"dns":0,"connect":28,"send":0,"wait":30,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"creative-sb1.com/sb/notifications/other/adzilla/big/2/css/animate.css","fqdn":"creative-sb1.com","domain":"creative-sb1.com","tld":"com"},"ip":{"addr":"172.67.210.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:59.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"creative-sb1.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 22:50:15 GMT","end":"Sat, 23 May 2026 23:48:46 GMT"},"fingerprint":{"sha1":"E0:64:EB:B0:39:B0:1B:31:05:CE:A0:93:C8:74:E7:A4:DE:D1:B3:77","sha256":"6D:BC:A3:C7:8F:67:2C:FE:E1:7A:88:EA:6C:8E:07:D4:1D:1F:CA:FD:54:30:02:80:22:B2:74:B5:95:C4:99:75"}}},"request":{"raw":"GET /sb/notifications/other/adzilla/big/2/css/animate.css HTTP/1.1\r\nHost: creative-sb1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://otakustream.piraproxy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 02:38:59 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 09 Sep 2025 11:23:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68c00e28-13365\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v0ANo8MIlEpV%2B5n8czDqg1qgH0NYXnRMRzILumygTciemobUdVWBYw6JjWcORaVd8vYzdiY3TKRIRwcz1z5ILgDNom6uUyDWUGE%2FDW2wNqQ%3D\"}]}\r\ncf-ray: 9dd89fe53a340731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78693,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5982c5377696d20476871062646b253f","sha1":"8bf2c93fa9ccc908f7df0fb7abb911bbac3e4242","sha256":"4e23a6449e6ef4614f0107cecf5c9eda75d2041c7c71f4a55d45f2a7e75450f4","sha512":"92592dac2a817293e8ec1d94bf99df639626a90d524420b01a12210398927c0650cc26fa8e730300096b29961563aa02efb707478c6d51ac8616bb1bde5a0cb2","ssdeep":"384:jvuAuF81dghu3uFlZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uhu7uNKwZiMUL6Vpaj7F","tlshash":"1d731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-02-12T20:28:38Z","last_seen":"2026-04-04T21:41:25.748119Z","times_seen":6243,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"creative-sb1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/wp-content/uploads/2019/04/99413l.jpg","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /wp-content/uploads/2019/04/99413l.jpg HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/movie/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 17 Mar 2026 02:38:57 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s%2FiOt%2BUMpr1frHnM4QBqd4Lj1H6TiBXxt12HnTYGBByY1hsNn0S9vACPSMPNzqLXvfyBtVMP%2FFXCBQaA3RFFTtAfCEZ80bOZwmZmVxsOV30WSeKVFxO69K0%3D\"}]}\r\ncf-ray: 9dd89fd82ebb35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57356,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x535, components 3","md5":"fcabd35b4215f7ddbe37be1b2fbbf802","sha1":"be030106fc2d788089b91d173c0e7b6be2755145","sha256":"2afe62ddeae5f8f200e198754738f501d0a876d031ce85bb7f0df911dd1c192b","sha512":"9a207e04ec15682bfe758f5b26a29af1412318ce798ac395c4efcea7411dfea51e1bd428b33229b05542d4ddcef3a3e827870f0ecbb2323ea43259513231db08","ssdeep":"1536:zIXlSvIdKoSh6LPWusIhrjvKif8AVNgXCZ9AyWa/p06CPI:csbxhcVKifbrgXC5+6v","tlshash":"f043f151fbb4f8416b29eeb7908cdba3f257b87a11f0232f407453f65d60aa541af089","first_seen":"2026-03-17T02:39:33.218228Z","last_seen":"2026-03-17T02:39:33.218228Z","times_seen":1,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dirproxy.com/","fqdn":"dirproxy.com","domain":"dirproxy.com","tld":"com"},"ip":{"addr":"104.21.26.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 23:12:41 GMT","end":"Sun, 14 Jun 2026 00:09:06 GMT"},"fingerprint":{"sha1":"57:EC:33:4E:94:F2:0A:D6:B2:1B:8D:90:A3:28:78:04:07:7B:09:BB","sha256":"6F:2C:DF:07:28:B1:25:81:1B:C3:8E:A4:07:78:50:67:91:65:E2:24:1F:1B:BD:A8:06:FF:07:59:F8:37:17:F4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dirproxy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://otakustream.piraproxy.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"9dd89fda183a783d\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TLnmK3%2FXeKPsCocgludvZb0zsGEGEKUB4ADHC%2BYXmCdWK7rehp38oxuIZcxnSBVOeyvsPozN9%2BZZSdJYrNM%2BJlBBgOmxkTNpB4Qeow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dd89fda183a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":7,"connect":1,"send":0,"wait":6,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"dirproxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"dirproxy.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://otakustream.piraproxy.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26596\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Mar 2026 15:06:04 GMT\r\nexpires: Fri, 12 Mar 2027 15:06:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 387174\r\nlast-modified: Mon, 15 Sep 2025 16:30:32 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26596, version 1.0","md5":"dae1850484b86d299c31bc08aaa563cf","sha1":"dca808d6d16965c40bfba4e4b3c8a819f843890d","sha256":"8f80f993e523f2e6c2d097552740fd26331658da23ffad31d26edcdd3aeec370","sha512":"69b34f2652aa731ad29fe49a8cea85ebe4ef402573a10048598667f94b7a7855e534121f22d7749b81762b3176f437de607745df82b71484c4ab7c9f8bfd40e9","ssdeep":"384:nYOl9Z/81DjYTaXQMfCMNASNEVM9mYQdpx1sLt/zEkNKxgmS8AXACAU:pJ8NY2XQk0omjdKvKxgCAXACAU","tlshash":"9ac2e13f487a2046c71227f8ee5fc9b571c360a35ab32345c26748650db0ea93f86776","first_seen":"2025-05-29T21:46:50.299968Z","last_seen":"2026-04-04T21:51:51.404923Z","times_seen":29360,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":195,"connect":22,"send":0,"wait":22,"receive":21,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: hu8935j4i9fq3hpuj9q39=true; s9ifs0idfjlwfie32dekl=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9dd89fdc6f0d35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27212,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/wp-content/uploads/2018/02/72593l.jpg","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /wp-content/uploads/2018/02/72593l.jpg HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/movie/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlocation: https://piracyproxy.info\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8zurLci%2Fqb%2F7WFCkJFtvBjFWuRgIoZ%2FUA0jya7%2F7bR0usdoAUoKzAnGA%2FDk4RQ7Jr%2FoXytukdkd976visM%2B%2FoR9Q5rJ2%2FwOHDzi2elCHQg5NG6kzNJgz9jg%3D\"}]}\r\ncf-ray: 9dd89fd81ea735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/wp-content/uploads/2018/05/27979l.jpg","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /wp-content/uploads/2018/05/27979l.jpg HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/movie/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlocation: https://piracyproxy.org\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ilnxibmWDEawq%2FZ%2FI%2BCPJqaYt1KGzHgoXNR%2F%2BDMRD0S584Oc4LDW3MxbqPZuRuBcqG6an1Chlu0ZT3zVBAa%2B0vZDTv2e%2BcRwLdDLq4evSLtlWxv1%2F3CWcAI%3D\"}]}\r\ncf-ray: 9dd89fd81eaf35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"piracyproxy.page/","fqdn":"piracyproxy.page","domain":"piracyproxy.page","tld":"page"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piracyproxy.page","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 22:53:20 GMT","end":"Sat, 16 May 2026 22:53:19 GMT"},"fingerprint":{"sha1":"03:ED:AB:71:11:D8:48:43:E0:0B:C8:F6:10:24:A9:E7:42:AA:FE:F7","sha256":"63:A0:F9:F3:70:C6:65:0E:FA:95:8A:2F:9C:6E:EA:0F:94:D6:A3:9F:33:54:99:A8:9B:39:F3:41:36:79:19:CC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: piracyproxy.page\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://otakustream.piraproxy.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":587,"timings":{"blocked":-1,"dns":275,"connect":114,"send":0,"wait":0,"receive":0,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"piracyproxy.page","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"piracyproxy.info/","fqdn":"piracyproxy.info","domain":"piracyproxy.info","tld":"info"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piracyproxy.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 23:03:50 GMT","end":"Sat, 16 May 2026 23:03:49 GMT"},"fingerprint":{"sha1":"BA:9D:AC:6F:74:93:A2:46:52:2A:EA:49:52:C9:D3:47:44:1F:62:46","sha256":"05:BE:F9:F2:4F:50:13:5D:91:1C:25:3E:8F:1B:9A:48:0B:AC:B3:2A:B2:69:56:BA:19:98:70:C6:5A:23:16:31"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: piracyproxy.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://otakustream.piraproxy.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":766,"timings":{"blocked":-1,"dns":537,"connect":110,"send":0,"wait":0,"receive":0,"ssl":119},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"piracyproxy.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/wp-content/themes/otakustream/static/assets/img/basic/back-to-top-min.png","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /wp-content/themes/otakustream/static/assets/img/basic/back-to-top-min.png HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/wp-content/cache/autoptimize/css/autoptimize_059185088f753f88cc6bae6f78fafc48.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 17 Mar 2026 02:38:57 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hIsq6EZ56V1RNVBd22T22pXq3NGqfuhkn1TOFR%2BHQqv55bfYhadJozYYVkUnpw1XROzbr%2BsM5b0dVtcidq%2Fv7zYDHVkTJextnQmF8toQAIFDkR%2F4As%2BQnHM%3D\"}]}\r\ncf-ray: 9dd89fda7ee735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5726,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 83, 8-bit colormap, non-interlaced","md5":"b0051ba70ceff0a37d2129d6e25ee9ac","sha1":"7480756a9e8896c72f0c27c5b8acf6ac99c7ff81","sha256":"a15690ed85b4d27fba64e82b457955567d5bcef816ce4a35ad4ae8ce1a5abef9","sha512":"7d81f2bde2cb9f897c69074aeade3d18b9bbffc4755e7357e2aa72036fb661b72a3e0a58243d33ec8060876b88360236c32b5bf0ee358974f74c79e451a4ac50","ssdeep":"96:egKgumQsGwrE2/clWbVtxIvfdeWzisVoxz/0QXmSe4eOggpwzmW+t:xbubsZE2s2tSteWfVoN/5Lbhgb6N","tlshash":"a3c19f6f9dbf4184fc850477d6b1c1233f3251869d9cb885c41f78912fb8739d662209","first_seen":"2025-07-16T15:44:51.480899Z","last_seen":"2026-03-25T03:25:34.351398Z","times_seen":32,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/wp-content/uploads/2018/01/28647l.jpg","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /wp-content/uploads/2018/01/28647l.jpg HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/movie/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlocation: https://piracyproxy.page\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vM9aucp7HU4VAjFvZTyP1GDgJUOogvFICeYWIOyfyVqPWaPpnL1zLY4BMstf3%2BA1WN9zPYJ0VmxSIT11ICO7HW3nNxrZRVQXOlA%2FMia%2FXPWGONydZ5g8PTs%3D\"}]}\r\ncf-ray: 9dd89fd82eb535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/wp-content/uploads/2019/04/99884l.jpg","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /wp-content/uploads/2019/04/99884l.jpg HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/movie/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 17 Mar 2026 02:38:57 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vHd%2ByIOWtJ6xH4mUrq7ZoWuCgymbZvK5vjboStQRgJ7jxLKGvSxAD7Ato6SrChwHvJ7ROJBa9urwKJc0jMRxQFhkkAifD71d4%2B2ZU3oJm%2BINirxEld7ZQlI%3D\"}]}\r\ncf-ray: 9dd89fd82eba35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44657,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 474x600, components 3","md5":"5bec942d7df6327f63181bf6514a92e5","sha1":"f424e63afe08832d1dd45b65c9c49644d39c885d","sha256":"d6a49509ee1550d327a97c7c0cab2b34008a3aeb1425c5866f2c8b33621f40d4","sha512":"026be26c74bc267055cdd98f63795296073332f05edf66e1859265170564ab97e0e8c446d49ec8382ec3d2b22dc207d2a9cd98200f85224fcf6629faccd61818","ssdeep":"768:8jxAE+xUQLWymBaxgDn4TqwhLH8FJQqqel3P94zbqy29m5LQokddg/n/hcw3r75q:PElCjmBaO742GLcFJQq3Gbi9m5LJG6n+","tlshash":"b01301c3ba9c41d7e1e4da3527d61b66317edc98a5a37afc983409f0544ee3e0988c74","first_seen":"2026-03-17T02:39:33.22057Z","last_seen":"2026-03-17T02:39:33.22057Z","times_seen":1,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"piracyproxy.info/","fqdn":"piracyproxy.info","domain":"piracyproxy.info","tld":"info"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piracyproxy.info","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Feb 2026 23:03:50 GMT","end":"Sat, 16 May 2026 23:03:49 GMT"},"fingerprint":{"sha1":"BA:9D:AC:6F:74:93:A2:46:52:2A:EA:49:52:C9:D3:47:44:1F:62:46","sha256":"05:BE:F9:F2:4F:50:13:5D:91:1C:25:3E:8F:1B:9A:48:0B:AC:B3:2A:B2:69:56:BA:19:98:70:C6:5A:23:16:31"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: piracyproxy.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://otakustream.piraproxy.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":774,"timings":{"blocked":-1,"dns":548,"connect":108,"send":0,"wait":0,"receive":0,"ssl":119},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"piracyproxy.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matomo.hellohi.me/matomo.js","fqdn":"matomo.hellohi.me","domain":"hellohi.me","tld":"me"},"ip":{"addr":"104.21.94.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hellohi.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Mar 2026 03:45:04 GMT","end":"Fri, 05 Jun 2026 04:43:35 GMT"},"fingerprint":{"sha1":"B8:B4:BB:D6:5E:42:AF:6F:E5:EB:A8:B3:5E:3A:60:23:BC:CB:C5:72","sha256":"30:8F:5C:02:C0:4E:CA:23:7A:DC:F9:A6:B6:5E:6E:14:98:8F:41:E7:BD:4B:9F:E2:85:1A:EB:5D:8D:7B:61:90"}}},"request":{"raw":"GET /matomo.js HTTP/1.1\r\nHost: matomo.hellohi.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bUq3DqrHnfMR3hVDbMXVpf8uWcV81P4MlZCsfE4NIsrw4iBej33zQT%2FKzWuvcomUj6A1TrkgM7z88cSgOA9za1trrM3%2BkZ2xr5g%2BYcM0xVrs\"}]}\r\nage: 126\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9dd89fdbedd2c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":192,"connect":1,"send":0,"wait":17,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/wp-content/uploads/2017/04/one-piece.jpg","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /wp-content/uploads/2017/04/one-piece.jpg HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/movie/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 17 Mar 2026 02:38:57 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QD3I%2Bf4eWWQ%2FEr14QkUrR8m%2BiDB65umwz15L88GTnZjia10ByRG0XXSyCDoJOw%2BAdTJ74JhMJCFzVFM752i5ItO1SD7eZJduR0wGIPmMqVJuAzC7aCHFLes%3D\"}]}\r\ncf-ray: 9dd89fd82ebc35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81152,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, orientation=upper-left, xresolution=110, yresolution=118, resolutionunit=2, software=The JPEG Wizard - Pegasus Imaging Corp - www.jpg.com, datetime=2011:09:21 22:21:01], progressive, precision 8, 400x500, components 3","md5":"2e0cfb3319a6c8d382b4a4bbda19c24d","sha1":"b1d951a54d0aa6f635ecde03125dc657ff044c11","sha256":"40c1e31fc73746aeddc81efe3bfeab75853229dc7be73addabf8610e0fe1bc77","sha512":"e6ab99316c24cfd8daf0832c329c815ed01d3d2f605e0a165f72067fa95e666c20034cf3ec0c9010c6d96d4ea102cdcbc07dc595ae8e4ea35253140a412f460e","ssdeep":"1536:07HRhRysLvu5BjZae7tKdGvFLeHzw92k0rq4cqWEm:07HJyAmjZae7eIFI0Ik0GDLh","tlshash":"7083126035bd2a01d200befad68e0158b1f61bf83eae83bdde054d8134b47e4d2a523d","first_seen":"2026-03-17T02:39:33.221584Z","last_seen":"2026-03-17T02:39:33.221584Z","times_seen":1,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otakustream.piraproxy.xyz/app/apx19.js","fqdn":"otakustream.piraproxy.xyz","domain":"piraproxy.xyz","tld":"xyz"},"ip":{"addr":"104.21.54.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otakustream.piraproxy.xyz/movie/","date":"2026-03-17T02:38:57.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 15 Mar 2026 05:28:44 GMT","end":"Sat, 13 Jun 2026 06:25:00 GMT"},"fingerprint":{"sha1":"5E:3B:20:34:71:8A:B6:2C:66:E2:0C:B7:34:A8:1E:BA:D6:B6:86:D4","sha256":"38:D1:8F:D4:B6:FC:3B:89:F0:78:5D:53:5D:8E:5B:55:82:90:B2:EC:D2:2E:C1:3E:B6:F6:8A:90:04:85:C1:78"}}},"request":{"raw":"GET /app/apx19.js HTTP/1.1\r\nHost: otakustream.piraproxy.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://otakustream.piraproxy.xyz/movie/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Mar 2026 02:38:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f2u35YtjjgtZVOZYfxD8zbGG4n%2BDD8UIyfx8fnW5JkbSbPHFgrtMDbHY9l6eGtB%2BiyxDY54q8LqzooIXAEIEaoed3X2pfbGIigD5aXDwj30%2B7seolx5hCoE%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 02 Feb 2026 23:47:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6981377f-23df\"\r\ncf-ray: 9dd89fd82ebd35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9183,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9183), with no line terminators","md5":"2344c3f05f624d595f6fb920e4d74ded","sha1":"eb4d1404ac2d5eecd307f4588aeeab5c8ef463f1","sha256":"3a28fe59e4a2af96d8edeeb12d7040c574cf71fa88fccb5cf49e9c0a1d4e4c7a","sha512":"b1660b062c77332a119e159c5c69d3f75d375915a33f141503232f424c4fdd990998a883c271efb94e8eb909f7837d235354ecae15b58fc23ab9d1908170e831","ssdeep":"192:yfBLCNsvzXnQQuWYQVN6nYaRB5c5FM/MR6Adpf04u7w2Br:4gNYXnrYtBONxpf05r","tlshash":"62126cc87ac7f00b53ed8a53ae1a66b8117b946362a47907d3bcf6cd15e920bc179cc4","first_seen":"2023-03-07T12:40:02Z","last_seen":"2026-04-03T18:56:21.982955Z","times_seen":3505,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"otakustream.piraproxy.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}