{"report_id":"5769ff61-59ce-4c84-b8ad-5291309653d3","version":6,"status":"done","tags":[],"date":"2025-08-13T15:30:35Z","url":{"schema":"http","addr":"2ww.me/s12L8","fqdn":"2ww.me","domain":"2ww.me","tld":"me"},"ip":{"addr":"104.21.20.80","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"2ww.me/s12L8","fqdn":"2ww.me","domain":"2ww.me","tld":"me"},"title":"Error - เว็บย่อลิงค์"},"submit":{"url":{"schema":"http","addr":"2ww.me/s12L8","fqdn":"2ww.me","domain":"2ww.me","tld":"me"},"ip":{"addr":"104.21.20.80","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-17T15:30:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-13T15:30:16Z","timestamp":1755099016,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.20","port":40312,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-08-13T15:30:16.150236+0000\",\"flow_id\":1011089773041530,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":40312,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"6huuh6io.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":467,\"bytes_toclient\":116,\"start\":\"2025-08-13T15:26:58.464762+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-13T15:30:18Z","timestamp":1755099018,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.20","port":40400,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-08-13T15:30:18.153148+0000\",\"flow_id\":449235036548138,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":40400,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"6huuh6io.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":587,\"bytes_toclient\":116,\"start\":\"2025-08-13T15:27:02.601130+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"2ww.me","ip":{"addr":"104.21.20.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-06","domain_rank":0,"first_seen":"2019-08-06T13:21:42Z","last_seen":"2025-08-13T07:41:37.045315Z","alert_count":0,"request_count":8,"received_data":365009,"sent_data":3401,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-08-13T15:10:36.82984Z","alert_count":0,"request_count":1,"received_data":45419,"sent_data":532,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-08-13T15:14:14.224423Z","alert_count":0,"request_count":1,"received_data":2179,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-13T15:30:16Z","timestamp":1755099016,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.20","port":40312,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-08-13T15:30:16.150236+0000\",\"flow_id\":1011089773041530,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":40312,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"6huuh6io.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":467,\"bytes_toclient\":116,\"start\":\"2025-08-13T15:26:58.464762+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-13T15:30:18Z","timestamp":1755099018,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.20","port":40400,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-08-13T15:30:18.153148+0000\",\"flow_id\":449235036548138,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":40400,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"6huuh6io.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":587,\"bytes_toclient\":116,\"start\":\"2025-08-13T15:27:02.601130+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"2ww.me/s12L8","fqdn":"2ww.me","domain":"2ww.me","tld":"me"},"ip":{"addr":"104.21.20.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e0c524622970015a1126a943d44845ed","sha1":"e9ccb9f28b2c58a89254345c31b3876624eeddf6","sha256":"51d47bed7e479739e9c4d58d89b6d98db87dc0775f7d4ae4202cb86487ec6300","sha512":"461894b6c03826d01c1c6c870f3ed6050706931357853473b7ccfc304285bc728cfc823a0a543ee8f14a0bae4b7d290f4627e5e2e18d2e0be7baa48e5447a685","ssdeep":"","tlshash":"caa002182ab2155886131566549aea851a51561777794aa9350ce1546b8123e44c339c","size":67,"data":"","first_seen":"2023-03-10T14:39:37Z","last_seen":"2026-02-13T09:51:06.554157Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ww.me/js/bootstrap.js","fqdn":"2ww.me","domain":"2ww.me","tld":"me"},"ip":{"addr":"104.21.20.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"33eee22cac655155b91eadd1e7b6e417","sha1":"539e456bb40d9e98244060186f5f131b1a7f4b33","sha256":"535a0eb07fb0fbd62a59719e584c1b27a71066285b222f21684eaf4606ea9e01","sha512":"410bded04f076faa7a88c67b38521f6e9b96adb317245862208e69cf73e78abdf5b9c914ee3a6f3b9233063db5e9991f1c604605ba79638c78c020b79a644686","ssdeep":"768:SZm3Q3ekDjN49wIypUTMBENbtCSeQa+sEo1XW1VWBgDJ:I30wWCSeQTeIJ","tlshash":"d0434f067bf930a14b4b71aa9cdf510c7238951b514bd42838ad93d06f50738a2abffd","size":55244,"data":"","first_seen":"2023-03-07T01:40:40Z","last_seen":"2026-04-06T04:11:33.808047Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ww.me/js/jquery-1.10.2.js","fqdn":"2ww.me","domain":"2ww.me","tld":"me"},"ip":{"addr":"104.21.20.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52e798fa363010f95feed65def07037b","sha1":"9cbc3e88ab78003783e7d440c6fb39445a4126be","sha256":"fa411409e767595b83bf12f7204d69a856031ec9466998358316f6cbbfedd8a6","sha512":"f61f7139b24abdfa008139f4228238b2be0cba9e0d0c5744599ef576eacb1c68be8d191c01a02a0c35a11285f851439ce7762622cc8f670be6c2f6a053e82c38","ssdeep":"1536:Z4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RAfDknv+p0WzH/Io9Z7qABZnu0sFn:ZGsKXAI2p0WP9bDrstfak","tlshash":"3993f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","size":93104,"data":"","first_seen":"2023-03-07T01:17:50Z","last_seen":"2026-04-04T07:02:45.806312Z","times_seen":522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"2ww.me/js/bootstrap.js","fqdn":"2ww.me","domain":"2ww.me","tld":"me"},"ip":{"addr":"104.21.20.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2ww.me/s12L8","date":"2025-08-13T15:30:13.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2ww.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 Aug 2025 13:58:30 GMT","end":"Mon, 03 Nov 2025 14:55:44 GMT"},"fingerprint":{"sha1":"B0:2B:21:23:9C:F2:E6:4C:01:15:66:99:D9:C0:23:31:F9:27:45:17","sha256":"B7:4D:2D:A4:33:2F:7D:4D:AE:27:8E:B4:37:55:67:CA:4C:1F:AD:85:EA:C4:AC:71:73:48:7A:F0:A6:D9:CE:36"}}},"request":{"raw":"GET /js/bootstrap.js HTTP/1.1\r\nHost: 2ww.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ww.me/s12L8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 13 Aug 2025 15:30:14 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 11102\r\nserver: cloudflare\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 06 Sep 2019 13:32:04 GMT\r\netag: \"d7cc-591e276c5f64e-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=trvJQ5fsUV2dT3encT5M9ycGoToQ%2BEdGxYQeo7PgqAjW8fYEPjWlxhdjHsADxN45G8OaUSqVmZ3pUm8Vseu%2ByGZbSqk%3D\"}]}\r\ncf-ray: 96e940a47a25569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55244,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"33eee22cac655155b91eadd1e7b6e417","sha1":"539e456bb40d9e98244060186f5f131b1a7f4b33","sha256":"535a0eb07fb0fbd62a59719e584c1b27a71066285b222f21684eaf4606ea9e01","sha512":"410bded04f076faa7a88c67b38521f6e9b96adb317245862208e69cf73e78abdf5b9c914ee3a6f3b9233063db5e9991f1c604605ba79638c78c020b79a644686","ssdeep":"768:SZm3Q3ekDjN49wIypUTMBENbtCSeQa+sEo1XW1VWBgDJ:I30wWCSeQTeIJ","tlshash":"d0434f067bf930a14b4b71aa9cdf510c7238951b514bd42838ad93d06f50738a2abffd","first_seen":"2023-03-07T01:40:40Z","last_seen":"2026-04-06T04:11:33.808047Z","times_seen":175,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/fjallaone/v15/Yq6R-LCAWCX3-6Ky7FAFrOF6kg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://2ww.me/s12L8","date":"2025-08-13T15:30:14.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/fjallaone/v15/Yq6R-LCAWCX3-6Ky7FAFrOF6kg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://2ww.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 44584\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 07 Aug 2025 10:09:53 GMT\r\nexpires: Fri, 07 Aug 2026 10:09:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 537621\r\nlast-modified: Mon, 03 Apr 2023 20:46:24 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44584,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 44584, version 1.0","md5":"e04669366cda1aca21161f9e22bac3ae","sha1":"157532ec5cdb07c395eb96aa6e9d0de1eeb869a7","sha256":"43a079fd739dffa727de659b5bbf44596031aa7542c8a8afbc54a243aab96b47","sha512":"6422cf1a0098e936f3f58e44338951cc255f72d3da13848850a3f84ace884947f622a03fdaad5e0c3c14943c9564af654faa326624b30b14748736e09342005d","ssdeep":"768:Fk3EENWe3OFWghUYjRfwX9434VKKRJKXuszWdndKD3NQfw/akZ9jz4Pp+8b+GW6:ece3ihZjRoE4VjrIasD9Qfw/aKz4h+Uf","tlshash":"6313f2625171995695f8dbb24284ecde0cf0b06568fb1d3b6e743058a0fe41ea3f4a0e","first_seen":"2023-04-09T15:41:32Z","last_seen":"2026-04-03T14:43:43.391969Z","times_seen":2710,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":77,"dns":1,"connect":8,"send":0,"wait":8,"receive":9,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ww.me/favicon.ico","fqdn":"2ww.me","domain":"2ww.me","tld":"me"},"ip":{"addr":"104.21.20.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2ww.me/s12L8","date":"2025-08-13T15:30:14.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2ww.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 Aug 2025 13:58:30 GMT","end":"Mon, 03 Nov 2025 14:55:44 GMT"},"fingerprint":{"sha1":"B0:2B:21:23:9C:F2:E6:4C:01:15:66:99:D9:C0:23:31:F9:27:45:17","sha256":"B7:4D:2D:A4:33:2F:7D:4D:AE:27:8E:B4:37:55:67:CA:4C:1F:AD:85:EA:C4:AC:71:73:48:7A:F0:A6:D9:CE:36"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 2ww.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ww.me/s12L8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Wed, 13 Aug 2025 15:30:14 GMT\r\nserver: cloudflare\r\nlocation: https://2ww.me/404\r\nvary: accept-encoding\r\ncontent-type: text/html; charset=iso-8859-1\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jQCd3zxdgs5cFFpoyk%2BpT%2BrxszxTbqUE8zmNM1fhh%2BIG2l6FvPPsJmUVArcBb2WIRivgO5FBDlCcHV7aQy0BjjY6%2Be8%3D\"}]}\r\ncf-ray: 96e940a82b2a7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5909,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T10:11:42.852405Z","times_seen":13418069,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ww.me/404","fqdn":"2ww.me","domain":"2ww.me","tld":"me"},"ip":{"addr":"104.21.20.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2ww.me/s12L8","date":"2025-08-13T15:30:14.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2ww.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 Aug 2025 13:58:30 GMT","end":"Mon, 03 Nov 2025 14:55:44 GMT"},"fingerprint":{"sha1":"B0:2B:21:23:9C:F2:E6:4C:01:15:66:99:D9:C0:23:31:F9:27:45:17","sha256":"B7:4D:2D:A4:33:2F:7D:4D:AE:27:8E:B4:37:55:67:CA:4C:1F:AD:85:EA:C4:AC:71:73:48:7A:F0:A6:D9:CE:36"}}},"request":{"raw":"GET /404 HTTP/1.1\r\nHost: 2ww.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2ww.me/s12L8\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 13 Aug 2025 15:30:15 GMT\r\nserver: cloudflare\r\nx-powered-by: PHP/5.6.40\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MVRTUS2OFpL2BZrdzPTlCEpQGULxcMg2ynDzAwpi0YgiJdE8jlSx2woxgSS9ADtdZcdRdJdvy49ngmr4TdFCePjzawE%3D\"}]}\r\nvary: Accept-Encoding,User-Agent\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\ncf-ray: 96e940aa1b567131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":5909,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (1501), with CRLF line terminators","md5":"8cd9cc75a8861d4ef9a07b71e5738112","sha1":"a4e3d6dff43388a3686824b8c0411b50436273b8","sha256":"582dbcf7ee6f49eedc04b9ff96c965af6b2ecbc99a6e2c1177e91f0206485ad8","sha512":"e820f0d804e9e74a38560f42fac745b13698f21fd42e03d3ef471f6e2f48539678093261a9301b17348fbd7b5055ecfa1e8c709eb9f7ec680017c5cc694a7c73","ssdeep":"96:qe8u2uUqKjGYTC5/+mNEkwlM1nzMzUpJKJUMMM5BzeyBep171ij1pB9nNVCbXzUx:r8u2uUTjGY0f+kwlM9zM4HKiMMM5Bzew","tlshash":"d6c1722d58d01032023a808f1a22bf5affd38617d25a25c135fd27eb2ff2f11a847991","first_seen":"2025-08-13T15:30:36.502848Z","last_seen":"2026-02-13T09:51:06.549421Z","times_seen":9,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":285,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ww.me/s12L8","fqdn":"2ww.me","domain":"2ww.me","tld":"me"},"ip":{"addr":"104.21.20.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-13T15:30:13.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2ww.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 Aug 2025 13:58:30 GMT","end":"Mon, 03 Nov 2025 14:55:44 GMT"},"fingerprint":{"sha1":"B0:2B:21:23:9C:F2:E6:4C:01:15:66:99:D9:C0:23:31:F9:27:45:17","sha256":"B7:4D:2D:A4:33:2F:7D:4D:AE:27:8E:B4:37:55:67:CA:4C:1F:AD:85:EA:C4:AC:71:73:48:7A:F0:A6:D9:CE:36"}}},"request":{"raw":"GET /s12L8 HTTP/1.1\r\nHost: 2ww.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 13 Aug 2025 15:30:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: PHP/5.6.40\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding,User-Agent\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hXfgEtPi4Srk56ipOpYEag%2BpUGLFePGDZSYWb9p1J%2BPVPuUDE7%2FFPMVeIRg9beh3u8n3Rd00%2BX8E1v4ovGbgvqxB%2BKE%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 96e940a1be40569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:1.10.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":5909,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (1501), with CRLF line terminators","md5":"8cd9cc75a8861d4ef9a07b71e5738112","sha1":"a4e3d6dff43388a3686824b8c0411b50436273b8","sha256":"582dbcf7ee6f49eedc04b9ff96c965af6b2ecbc99a6e2c1177e91f0206485ad8","sha512":"e820f0d804e9e74a38560f42fac745b13698f21fd42e03d3ef471f6e2f48539678093261a9301b17348fbd7b5055ecfa1e8c709eb9f7ec680017c5cc694a7c73","ssdeep":"96:qe8u2uUqKjGYTC5/+mNEkwlM1nzMzUpJKJUMMM5BzeyBep171ij1pB9nNVCbXzUx:r8u2uUTjGY0f+kwlM9zM4HKiMMM5Bzew","tlshash":"d6c1722d58d01032023a808f1a22bf5affd38617d25a25c135fd27eb2ff2f11a847991","first_seen":"2025-08-13T15:30:36.502848Z","last_seen":"2026-02-13T09:51:06.549421Z","times_seen":9,"resource_available":true,"data":null}},"time_used":345,"timings":{"blocked":30,"dns":1,"connect":1,"send":0,"wait":285,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ww.me/css/style.css","fqdn":"2ww.me","domain":"2ww.me","tld":"me"},"ip":{"addr":"104.21.20.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2ww.me/s12L8","date":"2025-08-13T15:30:13.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2ww.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 Aug 2025 13:58:30 GMT","end":"Mon, 03 Nov 2025 14:55:44 GMT"},"fingerprint":{"sha1":"B0:2B:21:23:9C:F2:E6:4C:01:15:66:99:D9:C0:23:31:F9:27:45:17","sha256":"B7:4D:2D:A4:33:2F:7D:4D:AE:27:8E:B4:37:55:67:CA:4C:1F:AD:85:EA:C4:AC:71:73:48:7A:F0:A6:D9:CE:36"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: 2ww.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ww.me/s12L8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 13 Aug 2025 15:30:14 GMT\r\ncontent-type: text/css\r\ncontent-length: 1576\r\nserver: cloudflare\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 06 Sep 2019 14:16:26 GMT\r\netag: \"170d-591e3156c797d-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=myq59UADXCwOMrCtXXuHqzV%2FhpzlECI3TrxazbBA4bbCVGIAA67OLV1XPmOI14p8tSaliq3ocq60KDO2SC6v1JTSN2E%3D\"}]}\r\ncf-ray: 96e940a47a1c569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5901,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"31d2510c7f296c7e8efa1dfb277b15fd","sha1":"f9c59d6be8733794f40844e00f5e51b9be106ed6","sha256":"187a97a11666af4c583e56882e460302a4e0412b1ee480cadf16130895b777e9","sha512":"8d3948143290b09a8b6f790dfd7b773d45ae88a4fbce4ed94b274d74e3efd5b97dbd22c9089001114a71ad62ed756c795a08ddc45d83f942c505d2e07b0ca9a6","ssdeep":"96:U/JCLtKii5JxiUIuD7Ml6JMlsYVPz55AYQ0g:Cg9sxtmP5AYQ0g","tlshash":"18c1adaec16122ca32139f5c6ff5ca516f2941b09d6d5b7d70bb29a842880bc3d339d9","first_seen":"2023-12-05T10:39:42Z","last_seen":"2026-02-13T09:51:06.547298Z","times_seen":15,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ww.me/js/jquery-1.10.2.js","fqdn":"2ww.me","domain":"2ww.me","tld":"me"},"ip":{"addr":"104.21.20.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2ww.me/s12L8","date":"2025-08-13T15:30:13.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2ww.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 Aug 2025 13:58:30 GMT","end":"Mon, 03 Nov 2025 14:55:44 GMT"},"fingerprint":{"sha1":"B0:2B:21:23:9C:F2:E6:4C:01:15:66:99:D9:C0:23:31:F9:27:45:17","sha256":"B7:4D:2D:A4:33:2F:7D:4D:AE:27:8E:B4:37:55:67:CA:4C:1F:AD:85:EA:C4:AC:71:73:48:7A:F0:A6:D9:CE:36"}}},"request":{"raw":"GET /js/jquery-1.10.2.js HTTP/1.1\r\nHost: 2ww.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ww.me/s12L8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 13 Aug 2025 15:30:14 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 32808\r\nserver: cloudflare\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 06 Sep 2019 13:32:06 GMT\r\netag: \"16bb0-591e276d81711-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6B0RPZOAIW4RCbjirJlNkMJI8Q99vEVv8UviUhuRC0vLca0DbGK0g0ww%2BMjDrCbMw7m9oW4Zs%2FIbQxbHt1fB59epFK8%3D\"}]}\r\ncf-ray: 96e940a47a22569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93104,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32072), with CRLF line terminators","md5":"52e798fa363010f95feed65def07037b","sha1":"9cbc3e88ab78003783e7d440c6fb39445a4126be","sha256":"fa411409e767595b83bf12f7204d69a856031ec9466998358316f6cbbfedd8a6","sha512":"f61f7139b24abdfa008139f4228238b2be0cba9e0d0c5744599ef576eacb1c68be8d191c01a02a0c35a11285f851439ce7762622cc8f670be6c2f6a053e82c38","ssdeep":"1536:Z4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RAfDknv+p0WzH/Io9Z7qABZnu0sFn:ZGsKXAI2p0WP9bDrstfak","tlshash":"3993f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","first_seen":"2023-03-07T01:17:50Z","last_seen":"2026-04-04T07:02:45.806312Z","times_seen":522,"resource_available":true,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ww.me/css/bootstrap.css","fqdn":"2ww.me","domain":"2ww.me","tld":"me"},"ip":{"addr":"104.21.20.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2ww.me/s12L8","date":"2025-08-13T15:30:13.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2ww.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 Aug 2025 13:58:30 GMT","end":"Mon, 03 Nov 2025 14:55:44 GMT"},"fingerprint":{"sha1":"B0:2B:21:23:9C:F2:E6:4C:01:15:66:99:D9:C0:23:31:F9:27:45:17","sha256":"B7:4D:2D:A4:33:2F:7D:4D:AE:27:8E:B4:37:55:67:CA:4C:1F:AD:85:EA:C4:AC:71:73:48:7A:F0:A6:D9:CE:36"}}},"request":{"raw":"GET /css/bootstrap.css HTTP/1.1\r\nHost: 2ww.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ww.me/s12L8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 13 Aug 2025 15:30:14 GMT\r\ncontent-type: text/css\r\ncontent-length: 18485\r\nserver: cloudflare\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 06 Sep 2019 14:15:51 GMT\r\netag: \"1e0bf-591e3135633e8-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HunK7UwqMOlxnBAR%2FCNb5Pkurw1IwvQPg4rphVyVKxGN%2BYrkR3Sm5GC3LOXfbmqFlLAonxeeG3mu8ezghsFTrnfkFXk%3D\"}]}\r\ncf-ray: 96e940a47a12569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123071,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (540)","md5":"a8ed04d490c750fb0e50a607bf15a169","sha1":"7fa4ac8a2d4d763db34f1014c298e8cfab08555c","sha256":"0d91a12594fa303332eeda3d04201cab7c3e36201643a31e51dec0e80a800050","sha512":"2ae092ce1c14e4ac5b2f96b8f5103b126f60892c400a69b564a851ceee9d2ea654ef6e161c11a91acd59094c41672d5b33b5dec2f66efe01bc6062814c649027","ssdeep":"1536:/il5UTAyPPAn2PvN4bWICLmF88+6A9h/okj+SA7bF65D5iEq:/eUTAu429zLA/A9h/okj+SA7bF656","tlshash":"fbc374d8f6b039407223c09934938e52771d6042e51fed7ab7e6396cafc91858973b8b","first_seen":"2023-08-03T21:19:51Z","last_seen":"2026-02-13T09:51:06.545932Z","times_seen":25,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ww.me/css/animate.css","fqdn":"2ww.me","domain":"2ww.me","tld":"me"},"ip":{"addr":"104.21.20.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2ww.me/s12L8","date":"2025-08-13T15:30:13.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2ww.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 05 Aug 2025 13:58:30 GMT","end":"Mon, 03 Nov 2025 14:55:44 GMT"},"fingerprint":{"sha1":"B0:2B:21:23:9C:F2:E6:4C:01:15:66:99:D9:C0:23:31:F9:27:45:17","sha256":"B7:4D:2D:A4:33:2F:7D:4D:AE:27:8E:B4:37:55:67:CA:4C:1F:AD:85:EA:C4:AC:71:73:48:7A:F0:A6:D9:CE:36"}}},"request":{"raw":"GET /css/animate.css HTTP/1.1\r\nHost: 2ww.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ww.me/s12L8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 13 Aug 2025 15:30:14 GMT\r\ncontent-type: text/css\r\ncontent-length: 4534\r\nserver: cloudflare\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 06 Sep 2019 13:31:13 GMT\r\netag: \"fcf8-591e273b99eb0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eExbJCr5S48h3AyEpK76oQTRfYgaqX8SLz4uOtTXGwOCj5vHX%2FNjpQODhG3VQOyeV3A924SWOn3wIi4yjPKqezE9dz8%3D\"}]}\r\ncf-ray: 96e940a47a17569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64760,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (460)","md5":"edcd231f4e709a77463ee30c63a77825","sha1":"4c5845c6eea62c760b6d540e5cc771fd0a3c833d","sha256":"87cd6ae461f517c68a89ff087e07d230d68fc2871d32f628f629ad3579818b25","sha512":"3653a3cd0acb3501de613e10643710b7bf3566ecb5359d885b7f78b6b83f55e2a579fc6852e321360f0c3922e1dbdec38292751992d8cbe87f7278ea4687e927","ssdeep":"192:xIQHn4gf+rvqgfrRUiFG+2UWVbHUUAmLsUuN1zTKWRjfUZ/LSdzmqZr8rH2kz+z2:xIWgOqS","tlshash":"6c5318692da2104466374a1587df5e78263ce1a31826ecfeb3de548b8f41fac23c9717","first_seen":"2023-04-06T21:13:40Z","last_seen":"2026-03-20T18:01:17.734677Z","times_seen":48,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Fjalla+One","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2ww.me/s12L8","date":"2025-08-13T15:30:13.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css?family=Fjalla+One HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ww.me/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 13 Aug 2025 15:30:14 GMT\r\ndate: Wed, 13 Aug 2025 15:30:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1493,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"29c8727df2a7b0a54ff98afd8b9de508","sha1":"444678f12c4ae03dae38027bb79eaab99b54d91b","sha256":"4e7eb54d1700402da4265768eb892c78eff85ae1cfac9e79a4135c62dadcfa76","sha512":"26be8fa230e23499cd6382ea66adcbb16079d6b302596fcf111e8c89894a5b2018fca9af24fc88efdd057e32bd2246b30f72cbc61a3a0d152d0a3211320f2f59","ssdeep":"","tlshash":"c031aae1197aa84093831ec663ce7c328e5e61507841d4757ffe1c9ded9ac25326570e","first_seen":"2025-02-27T06:21:34.911193Z","last_seen":"2025-09-15T18:29:52.296055Z","times_seen":179,"resource_available":false,"data":null}},"time_used":574,"timings":{"blocked":268,"dns":1,"connect":20,"send":0,"wait":31,"receive":0,"ssl":250},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}