{"report_id":"5c260b02-31f0-4f73-948e-7b192b33827e","version":6,"status":"done","tags":[],"date":"2025-09-13T18:25:11Z","url":{"schema":"http","addr":"2ddl.dirproxy.me/","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.32.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"2ddl.dirproxy.me/","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"title":"TwoDDL - Direct Download Latest Movies, TV Shows, Games"},"submit":{"url":{"schema":"http","addr":"2ddl.dirproxy.me/","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.32.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-18T18:25:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-13","alert":"Sinkholed","trigger":"gtag","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-13","alert":"Sinkholed","trigger":"directlycascade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"2ddl.dirproxy.me","ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-02-15","domain_rank":0,"first_seen":"2025-09-13T18:25:11.841166Z","last_seen":"2025-09-13T18:25:11.841167Z","alert_count":0,"request_count":46,"received_data":1997476,"sent_data":25019,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"DataTables","description":"DataTables is a plug-in for the jQuery Javascript library adding advanced features like pagination, instant search, themes, and more to any HTML table.","website":"https://datatables.net","common_platform_enumeration":"cpe:2.3:a:datatables:datatables.net:*:*:*:*:*:*:*:*","icon":"DataTables.png","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"WordPress:5.2.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"gtag","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2024-10-13T04:55:28.159097Z","last_seen":"2025-09-06T12:44:09.105227Z","alert_count":2,"request_count":2,"received_data":0,"sent_data":828,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-10T15:11:19.040403Z","alert_count":0,"request_count":5,"received_data":173783,"sent_data":2766,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-10T15:14:38.264059Z","alert_count":0,"request_count":4,"received_data":89151,"sent_data":1963,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"origunix.com","ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-11-30","domain_rank":343993,"first_seen":"2021-11-30T12:40:27Z","last_seen":"2025-09-09T03:50:44.002735Z","alert_count":0,"request_count":1,"received_data":64541,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"msdoj.com","ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-07-01","domain_rank":211684,"first_seen":"2025-07-02T02:58:17.140394Z","last_seen":"2025-09-11T11:42:32.484667Z","alert_count":0,"request_count":1,"received_data":64496,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"matomo.hellohi.me","ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-07-03","domain_rank":0,"first_seen":"2019-07-03T20:13:04Z","last_seen":"2025-09-11T11:42:33.295666Z","alert_count":0,"request_count":1,"received_data":599,"sent_data":416,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"directlycascade.com","ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2025-09-10","domain_rank":0,"first_seen":"2025-09-10T21:14:18.585097Z","last_seen":"2025-09-10T21:14:18.585097Z","alert_count":2,"request_count":2,"received_data":188412,"sent_data":906,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"vmuid.com","ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2018-10-22","domain_rank":182910,"first_seen":"2019-07-09T14:53:12Z","last_seen":"2025-09-08T17:17:57.816484Z","alert_count":0,"request_count":1,"received_data":10466,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"metrica-yandex.com","ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-09-14","domain_rank":422485,"first_seen":"2021-09-19T04:17:37Z","last_seen":"2025-09-11T12:51:12.53921Z","alert_count":0,"request_count":1,"received_data":61009,"sent_data":427,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"heartilyscales.com","ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2022-12-16","domain_rank":2862533,"first_seen":"2022-12-16T08:32:11Z","last_seen":"2025-09-11T11:42:33.26704Z","alert_count":0,"request_count":1,"received_data":77468,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i.ibb.co","ip":{"addr":"45.43.142.6","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"2010-07-20","domain_rank":21643,"first_seen":"2018-11-25T10:13:48Z","last_seen":"2025-09-07T21:30:13.247298Z","alert_count":0,"request_count":1,"received_data":5916,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"theusualsuspectz.biz","ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-01-27","domain_rank":2024659,"first_seen":"2023-01-27T01:27:31Z","last_seen":"2025-09-11T11:42:32.415076Z","alert_count":0,"request_count":1,"received_data":49091,"sent_data":421,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"2ddl.dirproxy.me/","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5779365b0a28c08298ca5847c65b769d","sha1":"3076ad9e094690cd6c4ee200ae254e6e7260fd30","sha256":"57c620405714b8baa51067e0ca9bc9a9b252985292b857360aec8a9936688709","sha512":"cab14c9b7afc3b08d77e93fa0f8bd5c6c1a6ad4966a4e6981b11ef0e5fad899e4cc63bdbfbaade0d418e0e97045088da763fc5584a61ad0bfe1573d39a34e5cf","ssdeep":"","tlshash":"a8800080c0a300a008002308c2008033802020803002000083088ce38808838b0302ea","size":26,"data":"","first_seen":"2023-03-07T12:40:02Z","last_seen":"2026-02-07T15:24:54.16288Z","times_seen":1726,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"336b4b067dcb50351d5e2d7c92cf1631","sha1":"9709109f27eaad0c5a1e50facc142f8f197a11b6","sha256":"ef2f7f28db32250196ae2c8242611a7f7159c2a539dabd40b82071b1c07561c6","sha512":"43c83e5907dbc25a8620884fadba33a679e0668095a659e79e711c8b6d6331d778849aab0f19bef0131cfd5537e462f2ca238dc9134732ec6867ddd945ff5676","ssdeep":"","tlshash":"d3b012343c25b42d192b300c31df53643c3a4140fa016940d07e78441433f550b01f8c","size":102,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-04-20T12:59:11.72298Z","times_seen":36193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/themes/oneway/assets/js/skip-link-focus-fix.js?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ac6ce1d039e5410667542e433bd70c6","sha1":"77568c718f1dbd26147f0db69c0c0238d77d26eb","sha256":"1d90eb1c95ad3319ed02d62eae704975c6d5afd51bd455bda5cdf9ff172bd38e","sha512":"fe24209e223835160ad2d90e3007dd36d959de75da3dbc51d63fadfa43536aa72b575af6a2f52cc9d5e3c5871a8dd049c40700601dc4d478a765cc2972077921","ssdeep":"","tlshash":"3be0f1beb512c47500cfb237399f039e3b3a86939c16a4409828cc80bb38cc01037ce4","size":418,"data":"","first_seen":"2025-01-01T17:19:31.484758Z","last_seen":"2025-10-08T16:50:52.13216Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-includes/js/wp-embed.min.js?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3e654205e0bf11c024f461fcf4ccab9","sha1":"1d27d4138abcf565adb681e741ae9b6029fe10b9","sha256":"da6fdd72e787076d6c01077598425f57d2ea729f099b4e43002320a188915c35","sha512":"cd027762bc44d66b6167d24796a8130eb43977c658b936aa57aaa9d139766093a0bee0bff9bcc387b7414fffec2947921912cc95b3b1ae5aea04d22c932c2fd2","ssdeep":"","tlshash":"9021112a3338153b10db51e7b9ac75c7d6f207ef244121e28e78c880ea94fa39956fd5","size":1397,"data":"","first_seen":"2025-01-01T17:19:31.486208Z","last_seen":"2025-11-21T16:59:44.116187Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a63c18de4e67dd296f758a46eaf6857c","sha1":"1d7ee238ed3b66e4367234d202d99335731815be","sha256":"def8557e8b07a4f2a5e55985a067b8a325f859c768b9b28b4e4d6c7fc3368973","sha512":"e956c37dd02ea7844a780b53c053a46659fe4361c0983c4139d94689d907a2182d65609892378826561ebd902daf6ef4cc9d118eb2ae382c20047f62aa6350d8","ssdeep":"","tlshash":"1d4134363761684a62e528b3f16f5b0e7e35420350c8ea36d294e4d4287ddd0e0bbd0d","size":2173,"data":"","first_seen":"2025-09-13T18:25:15.686814Z","last_seen":"2025-09-13T18:25:15.686814Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/themes/oneway/js/one_way_script.js?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6dd014915a9d7278bc0eee21f085db9","sha1":"70e8d1d641d33acdbaea96249c5c325a26dee770","sha256":"2f4625e56c12e7d70807ce182098d41b55dbd5ebd3dfc2865551a6ea12c45230","sha512":"7e8dbc84d39728e0cc4472870543fb0b94a4269483317288da3013b6a2865debbad07cda9786c3b83c83fee8313f28cd914631e24f5a974697743da7d10028e1","ssdeep":"","tlshash":"a341e4567930b2f7813649cde83b37f8b4f7e0897480858dfd79d0026b58ada816066b","size":2166,"data":"","first_seen":"2025-01-01T17:19:31.475279Z","last_seen":"2026-03-05T08:34:57.57005Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/themes/oneway/js/bootstrap.js?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb42dbb03fc1e97d1bb911de412abad7","sha1":"e5476b9fd137677bf070e2cc7342bd754a41aa58","sha256":"55bc9f2781b1ecc356559a9dce959ac034a39484eeeee9cdf2b213fc071560c7","sha512":"6aaf7f93f69aa93ec4fc6ed35182847bc59f816c3c39bf3fe50fcb5acc6bc09347fee713673c05ad45f5dca1f1af50af5035f5bd262e5fff280befb4c42f41e9","ssdeep":"","tlshash":"9811ef5c2b8066b34263d71a71df511833b8c1a2af76909cfb196a930a5384e0233e74","size":1000,"data":"","first_seen":"2025-09-13T18:25:15.688106Z","last_seen":"2025-09-13T18:25:15.688106Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dfbd7b16d142d0989b75f58334b0a3b9","sha1":"bf6c5991484eead7ace2e5ac4a8fcaeadbaee54a","sha256":"ef8d85b16eeee18db85c92399df98daf6b81c4f086ff09fd17d144c04c9dcd15","sha512":"2a9e78e97b052cb4dd5165f3454ef0c8ef0b1a9e7ab018e6779a4493ed10199371409d252fe6be08ea05fac028805f8f2464e6973ba0b22486261d7f378c48ff","ssdeep":"","tlshash":"46c02b87211f0cb189e753c08b3fcb41a400f2091ee0da33050df3454d00e039718804","size":151,"data":"","first_seen":"2025-01-01T17:19:31.472668Z","last_seen":"2025-09-13T18:25:15.689539Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-includes/js/jquery/jquery-migrate.min.js?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc9f68a1b68d69c66f6794e85a422fec","sha1":"ce437dfb6162bf40e69b0fef12b8adea1e367e9a","sha256":"ff97b352cd2a08c08c03d1769351c8fb0a7d2198416277a5c52caec6d9878358","sha512":"910135661c03bb2a112718f78c73e9a2d8eb8b73711dc9fcdbee35e92f3876d4c76f714d97838596b2081990f11c74c23513db61993e4fd3c635ea7ace934280","ssdeep":"192:kZrk/GNyd31svs7wkX8KzJcqSDdAcHX4YE5NLy:srhNyNO0kkMKzFSDdAcIYwLy","tlshash":"8622c79db29a70625fba35f8617fc11b717a94fc2118d9e4a08c8ed1387dc9c403ab39","size":10054,"data":"","first_seen":"2023-06-12T19:23:09Z","last_seen":"2026-04-19T08:43:20.683236Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4ba344022a9145a772326d111eaac5c","sha1":"0a0848bcc5bafc6dd25c3b6e9ed7f8bfa70c2dfe","sha256":"0f7a3e4a52f7e6ff1609700ac4a2d2bebf78d8ec41567188b9bc4eda369b238b","sha512":"e99aee03e4b16e8200bb71a8fa5dcbcd17c0c345a93cd76bdc5a04d4f1aa44ad7a3ccd55bb54cf4c529451a3670aa156ec57e87d81ddfab443370ae885a204dc","ssdeep":"","tlshash":"b3319ce9a3a14f6f983e5a13ed34ec8c98f209e587c7b0978627b1adc5792c18764241","size":1825,"data":"","first_seen":"2025-01-01T17:19:31.473934Z","last_seen":"2025-09-13T18:25:15.691131Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/themes/oneway/js/jquery.nicescroll.min.js?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a55137e8531550af5b6c6b362fac9512","sha1":"b393c1bf6111421e4638b744d350d1a57021300a","sha256":"fa19ad38afe9fefc79f89faf441827df716603c909cad277220d9ab475ab7f21","sha512":"7064fd8a18b143a4741d2fff1c1810e056e5938bb6a51f22a6c1c98819e52c7ce1398112bbd8f6a4880193a15411db32eabb50393fef0fe706947a6f5874e1ec","ssdeep":"","tlshash":"6f1189ceb03420637f1b02b7d92e464b302af436659645b937b468e5ad9011907ab778","size":1000,"data":"","first_seen":"2025-09-13T18:25:15.692004Z","last_seen":"2025-09-13T18:25:15.692004Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/themes/oneway/js/bootstrap.min.js?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5184430beeb2e0a1ab5a288f7b7f3810","sha1":"bc459e3128d0e0a197c8ba0d2f76f4984092491b","sha256":"46eb15434b9a4bf67f06ad454b10d50607fa072e907cce26be8133a062cd3b97","sha512":"e30d2e145990059d3966a300d57949e2289a3eed7938d501d9a77cacfebc84b0142262b9f9eaaefe77b046b09fa003c0be62defe4ca88af916cb1e8935ae5473","ssdeep":"","tlshash":"fc11cc48a79020a08263da9a62ef410474388022bba6a08ef38651974c7394d1273fb5","size":1000,"data":"","first_seen":"2024-12-26T13:02:47.763207Z","last_seen":"2026-04-13T08:32:14.351576Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/app/apx19.js","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2344c3f05f624d595f6fb920e4d74ded","sha1":"eb4d1404ac2d5eecd307f4588aeeab5c8ef463f1","sha256":"3a28fe59e4a2af96d8edeeb12d7040c574cf71fa88fccb5cf49e9c0a1d4e4c7a","sha512":"b1660b062c77332a119e159c5c69d3f75d375915a33f141503232f424c4fdd990998a883c271efb94e8eb909f7837d235354ecae15b58fc23ab9d1908170e831","ssdeep":"192:yfBLCNsvzXnQQuWYQVN6nYaRB5c5FM/MR6Adpf04u7w2Br:4gNYXnrYtBONxpf05r","tlshash":"62126cc87ac7f00b53ed8a53ae1a66b8117b946362a47907d3bcf6cd15e920bc179cc4","size":9183,"data":"","first_seen":"2023-03-07T12:40:02Z","last_seen":"2026-04-19T13:34:02.410673Z","times_seen":3531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-includes/js/jquery/jquery.js?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.js?x27119 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:43 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fGTkg75AViqvgWxL1K%2BTH55X9htRL%2FRsmof0Bp85S4wSNZjGPmUEHMhEgqNRaLBrfwoUtFBK7q%2ButWUV%2B2wj5P2zzFazfhUbadCrCBoqW%2Bo%3D\"}]}\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:42 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97e9aed4587d2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81237,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3b9d790df1296c8ae6170330ec3ec9b9","sha1":"76504ffa5033b66d36dd51835f2257dff787ff85","sha256":"3af4ba50c81cad832fadddc3a3d957ddd23eb532a6540e7db0fe19f2c7b77119","sha512":"e37d5d1136b13a7f2195412a6ced69a287cadcddc65ad693272b4dd565b92b00d1f38bfdc332fa07ed18676fb704b9a53b399493f7b7aab1c7f7d0a8e5612b32","ssdeep":"1536:RYE1fGBiByJsbfXXeRJ/shgWCyLLccneZVHk04ssx+/mvaSIFSgt43tpXJIGV4Y:ZscgPpsxTva/FSgK5","tlshash":"9383e7d9b3d6716297b730a850bf410bf17a98dab80c4d60e058d8e47e78e89507bf2c","first_seen":"2025-01-01T17:19:31.457637Z","last_seen":"2025-11-19T08:34:53.647275Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1366,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtag/js?id=UA-128891502-1","fqdn":"gtag","domain":"gtag","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.700Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /js?id=UA-128891502-1 HTTP/1.1\r\nHost: gtag\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-13","alert":"Sinkholed","trigger":"gtag","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/themes/oneway/js/bootstrap.js?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/themes/oneway/js/bootstrap.js?x27119 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:42 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dPtb8cte8%2FLpTO4DJ9hnWqiwJpHc%2FckwdvUVia0LPq8cdG2WgVCeiQe7X1IlywolruRRQYhihAkoxAUMOQ%2FkEkEiwYVwTKl31DGg26cB1io%3D\"}]}\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:42 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97e9aed4988f2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47166,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (444)","md5":"dfa9b1f3a173846aa4b2ac8d49e92e60","sha1":"cc376c499b3c37d2237a52c7ee091ba15960460b","sha256":"deca54e1c31f19ae516e7a09ad7bbe428b56b6b45cb2e3a5f84037efebd11818","sha512":"bcad521d9277e5d248444720c3cf79b4a3656d5a8ed2b71de42a46122a044ad1d513f700e8d644878b0c0a8345af2beb6bf88da3ab32010561e12757663ce4ad","ssdeep":"768:SmDCi7vanUnkpjpI7huYdv3dsqN4k+KSIVPYAPlrV1:ZXiW/fr+KS6Pp","tlshash":"e423b6067630316202ffa1a7904b234d733d6629940ad0bcb8b99bd03e75d45b26bf7e","first_seen":"2025-01-01T17:19:31.440335Z","last_seen":"2025-11-21T16:59:44.12155Z","times_seen":9,"resource_available":true,"data":null}},"time_used":758,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":757,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/themes/oneway/js/one_way_script.js?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/themes/oneway/js/one_way_script.js?x27119 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:42 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O47y3qz6T%2BZBq9kntHU00i%2BqNsM%2BSJzwCbVMlNMPv6W862e0ylJeC%2B4j9WNRrEYm4oeiz%2BEtR%2F0ZTuopGTnnv0GjME7J844Hnz%2Fyujas6KA%3D\"}]}\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:42 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97e9aed498912678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2166,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (669)","md5":"c6dd014915a9d7278bc0eee21f085db9","sha1":"70e8d1d641d33acdbaea96249c5c325a26dee770","sha256":"2f4625e56c12e7d70807ce182098d41b55dbd5ebd3dfc2865551a6ea12c45230","sha512":"7e8dbc84d39728e0cc4472870543fb0b94a4269483317288da3013b6a2865debbad07cda9786c3b83c83fee8313f28cd914631e24f5a974697743da7d10028e1","ssdeep":"","tlshash":"a341e4567930b2f7813649cde83b37f8b4f7e0897480858dfd79d0026b58ada816066b","first_seen":"2025-01-01T17:19:31.475279Z","last_seen":"2026-03-05T08:34:57.57005Z","times_seen":20,"resource_available":true,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":610,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directlycascade.com/22/00/54/2200540f09f939738419313a1a090c32.js","fqdn":"directlycascade.com","domain":"directlycascade.com","tld":"com"},"ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"directlycascade.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 11:12:27 GMT","end":"Tue, 09 Dec 2025 11:12:26 GMT"},"fingerprint":{"sha1":"76:17:4A:20:73:64:94:52:3B:6A:50:E2:7C:F7:F5:73:52:38:47:A4","sha256":"66:CD:95:7F:5E:D7:56:27:7A:6F:3B:80:CB:84:DC:89:A0:F0:BB:44:49:55:B4:81:76:24:2E:38:E3:FC:78:29"}}},"request":{"raw":"GET /22/00/54/2200540f09f939738419313a1a090c32.js HTTP/1.1\r\nHost: directlycascade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Sat, 13 Sep 2025 18:24:42 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 39475\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: directlycascade.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 368bb96cc18062a7f7e907b3eaa1fdb2\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":110137,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9a27d5d50cde21d0d8db12fb5cd7eea9","sha1":"0096ee1177531a2e94e1a62a2373701469574b86","sha256":"5e97fff240495387c80de44511ef8830d6056920813dd5c2b441485ddb7fd470","sha512":"8798af3862690e18e97141d2d83f38cb74f88f6eaf13140f050c4bd98ad606de33fadd077c13fbe5b05c149846f5d7bdef76236f46e4e1afbd0527dd00c6f3e3","ssdeep":"1536:x8FO2Og6h8Z1zbcz7eg3Z+FhVO1TOCo8PkiYYo170BEEtlwn0KyI:TD8vCGVIl+RPEtlW","tlshash":"01b3b7887f80f56c115630b2232fa05af2e91e41a8ccd548f557fde92a2d377b439a78","first_seen":"2025-09-11T15:43:46.568463Z","last_seen":"2025-09-26T10:00:31.099416Z","times_seen":39,"resource_available":true,"data":null}},"time_used":782,"timings":{"blocked":278,"dns":13,"connect":94,"send":0,"wait":104,"receive":94,"ssl":194},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-13","alert":"Sinkholed","trigger":"directlycascade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/themes/oneway/css_fonts/raleway-semibold-webfont.woff2","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:43.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/themes/oneway/css_fonts/raleway-semibold-webfont.woff2 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/wp-content/themes/oneway/css_fonts/font_style.css?x27119\r\nCookie: view=1; view=1; view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 502 Bad Gateway\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncontent-length: 6407\r\ndate: Sat, 13 Sep 2025 18:24:44 GMT\r\ncf-ray: 97e9aee028f82678-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6407,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"053285310e092ef4b5616722d85b35dc","sha1":"3a25c430220f0a47b8cc289df01a5fcad5b8f673","sha256":"721b3568972397b085898bf8e46e0b2ec8b14ad2ba3bbed697b383d33a4a8602","sha512":"fe02a432c3844b5652f37c46fad81bc99c1a76cb49e5cc223d42b0c49fd9492e1c9605966d397fe86f3e83352e0a8ac22345129899e5a13fa0f780a8b1379830","ssdeep":"96:1j9jwIjYjQcDK/D9KUn5G4Fh8/G4F85e424FS+skKmtmnijf7RLlYaQxP:1j9jhjYjpK/Br5eynUVMnjf71ljeP","tlshash":"e0d15471b1f5127610a3c2923695ff1a79e0c613cbef4494b3dcc2632f9ee85a903195","first_seen":"2025-09-13T18:25:15.609952Z","last_seen":"2025-09-13T18:25:15.609952Z","times_seen":1,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":495,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:43.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 08:41:01 GMT","end":"Mon, 17 Nov 2025 08:41:00 GMT"},"fingerprint":{"sha1":"41:D2:08:38:86:84:32:C2:76:B6:A0:7C:F7:02:4C:C5:55:4E:2F:1E","sha256":"A5:34:21:73:D5:FC:24:AF:0D:8A:56:A2:A7:5C:BD:41:46:45:3B:DE:78:A3:6B:67:9C:80:C8:44:02:A9:12:D0"}}},"request":{"raw":"GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://2ddl.dirproxy.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48332\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 11 Sep 2025 15:48:02 GMT\r\nexpires: Fri, 11 Sep 2026 15:48:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 182201\r\nlast-modified: Wed, 28 May 2025 18:06:59 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48332,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48332, version 1.0","md5":"5734e133a619a6ae6ee21a6c00a95eba","sha1":"57c0ac17302d07bd4f968240098afe5ed53d4ad2","sha256":"d7a547581722aa055a7fb5b9912aebf3f3e928e1db3e5af9e54cf158cb4c4c4a","sha512":"a881b689d0990693ef7feb11d55155a8fa63f94e870bfeb5c61edbb9a7891990bb920147b05d371d302f91c0562fb87f46d334afd70d1cba36228e41dcd5ec55","ssdeep":"768:VRQzlrtlSlX2HnXb438KRr2FGTI8pGRY+rbma2NHhd37ohZ4Dge99ZBN62GcC7jr:mlrtlnL68gqF98URY+rbmd9XoAD/r42+","tlshash":"2e23f1de20f58f0bf84693f864eb9562506f706877721aa6bee1c1b48e757033267520","first_seen":"2025-05-29T17:20:03.50604Z","last_seen":"2026-04-20T11:02:13.385429Z","times_seen":51155,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":96,"dns":0,"connect":0,"send":0,"wait":24,"receive":14,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Libre+Franklin%3A300%2C300i%2C400%2C400i%2C600%2C600i%2C800%2C800i\u0026subset=latin%2Clatin-ext","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 08:41:02 GMT","end":"Mon, 17 Nov 2025 08:41:01 GMT"},"fingerprint":{"sha1":"ED:FC:A5:F2:F4:07:8E:0E:EA:C7:96:D8:BE:47:04:EE:34:72:47:E9","sha256":"42:1D:9B:CD:2D:EC:4C:72:94:02:2C:88:B5:FF:BC:A2:B8:35:1B:C6:E0:B5:97:71:DB:7D:5B:6A:FA:CA:C1:8A"}}},"request":{"raw":"GET /css?family=Libre+Franklin%3A300%2C300i%2C400%2C400i%2C600%2C600i%2C800%2C800i\u0026subset=latin%2Clatin-ext HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 13 Sep 2025 18:24:41 GMT\r\ndate: Sat, 13 Sep 2025 18:24:41 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14772,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"df973569529a6aa107c555f59483161b","sha1":"22b8bee12e8f54dbfce6f77f0e651526f645b412","sha256":"6c0bcab54b4b691be8bd8b905caf1fda86ac49fe7800557b108c0ed891db4f12","sha512":"35170aad768dc29eef45183a30907bd73026d86e7aee7e998580ce035b850010dbe21c7cd38f8616b42faaed2bad4e4061ecc1275da9473d5b92e6458170c3b5","ssdeep":"384:2FGG37LksGF3qO7SG33U4xwG53Gy6jiMRGFYQ:f","tlshash":"db62dd936817a080a3ab1cc263cf7e368e4f61487046d575dffd1a989cbad266325f1c","first_seen":"2025-09-09T10:08:54.177693Z","last_seen":"2026-04-20T13:50:22.931057Z","times_seen":683,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":139,"dns":1,"connect":10,"send":0,"wait":20,"receive":0,"ssl":139},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/app/apx19.js","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /app/apx19.js HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 12 Sep 2025 20:23:11 GMT\r\netag: W/\"68c4812f-23df\"\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bh2M0zo3pwnjRvEAbhqjTGRosbemgU8fILkywwJbnpaTOtbu6mwLTuQshrQLp9wkUlBIydDOiDA3REVJrRFM%2B4%2BAA45I1YXqRRAjDmZzZEg%3D\"}]}\r\ncf-ray: 97e9aed4a8972678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9183,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9183), with no line terminators","md5":"2344c3f05f624d595f6fb920e4d74ded","sha1":"eb4d1404ac2d5eecd307f4588aeeab5c8ef463f1","sha256":"3a28fe59e4a2af96d8edeeb12d7040c574cf71fa88fccb5cf49e9c0a1d4e4c7a","sha512":"b1660b062c77332a119e159c5c69d3f75d375915a33f141503232f424c4fdd990998a883c271efb94e8eb909f7837d235354ecae15b58fc23ab9d1908170e831","ssdeep":"192:yfBLCNsvzXnQQuWYQVN6nYaRB5c5FM/MR6Adpf04u7w2Br:4gNYXnrYtBONxpf05r","tlshash":"62126cc87ac7f00b53ed8a53ae1a66b8117b946362a47907d3bcf6cd15e920bc179cc4","first_seen":"2023-03-07T12:40:02Z","last_seen":"2026-04-19T13:34:02.410673Z","times_seen":3531,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vmuid.com/script.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8","fqdn":"vmuid.com","domain":"vmuid.com","tld":"com"},"ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vmuid.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 01:38:16 GMT","end":"Fri, 17 Oct 2025 01:38:15 GMT"},"fingerprint":{"sha1":"B9:61:53:79:E1:11:9F:49:D4:F0:7A:18:26:5A:A4:47:64:FA:A8:3A","sha256":"27:10:60:8D:0D:93:6E:DB:B5:37:F2:A2:F3:9D:D9:7C:5E:DA:B5:A4:8C:92:FA:BE:08:1A:7E:D9:11:8C:6D:8E"}}},"request":{"raw":"GET /script.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8 HTTP/1.1\r\nHost: vmuid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 13 Sep 2025 18:24:41 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 10178\r\nConnection: keep-alive\r\nCache-Control: no-store, max-age=0\r\nAccept-Ch: Sec-CH-UA-Platform,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform-Version\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10178,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10178), with no line terminators","md5":"dedd352338543b137f608adc8d0d4aa8","sha1":"100edb4e8fef9b6da043d51135077e68d2a61b22","sha256":"b338a91ba1d2ab7c3a7a0dd659426f5ffa4cd699be38e2bed5075c4d3e773a48","sha512":"e2fab4d95d5baa013a7c248945156524478341282dcffc462fb2de318f55ba29dcafba0db3abcfb6399c6164f6f630f06d48a7323b73f8ea05d5978cd60a4c5c","ssdeep":"192:ATn+ip4qxJ/gzuvu3fo8idwqnOqgStYc1qRP44+PHlCXXZE7904AxF:YbRJYz3oe+3tYGGx+NGXZCAn","tlshash":"2b22b5c9b2d2f06443d77161942f2007f23b2869b54dc498eb66e8d3bcb045ea227f79","first_seen":"2024-01-26T05:18:07Z","last_seen":"2025-12-29T12:17:25.567723Z","times_seen":3656,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":96,"dns":19,"connect":32,"send":0,"wait":35,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:43.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 08:41:01 GMT","end":"Mon, 17 Nov 2025 08:41:00 GMT"},"fingerprint":{"sha1":"41:D2:08:38:86:84:32:C2:76:B6:A0:7C:F7:02:4C:C5:55:4E:2F:1E","sha256":"A5:34:21:73:D5:FC:24:AF:0D:8A:56:A2:A7:5C:BD:41:46:45:3B:DE:78:A3:6B:67:9C:80:C8:44:02:A9:12:D0"}}},"request":{"raw":"GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://2ddl.dirproxy.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48332\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 11 Sep 2025 15:48:02 GMT\r\nexpires: Fri, 11 Sep 2026 15:48:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 182201\r\nlast-modified: Wed, 28 May 2025 18:06:59 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48332,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48332, version 1.0","md5":"5734e133a619a6ae6ee21a6c00a95eba","sha1":"57c0ac17302d07bd4f968240098afe5ed53d4ad2","sha256":"d7a547581722aa055a7fb5b9912aebf3f3e928e1db3e5af9e54cf158cb4c4c4a","sha512":"a881b689d0990693ef7feb11d55155a8fa63f94e870bfeb5c61edbb9a7891990bb920147b05d371d302f91c0562fb87f46d334afd70d1cba36228e41dcd5ec55","ssdeep":"768:VRQzlrtlSlX2HnXb438KRr2FGTI8pGRY+rbma2NHhd37ohZ4Dge99ZBN62GcC7jr:mlrtlnL68gqF98URY+rbmd9XoAD/r42+","tlshash":"2e23f1de20f58f0bf84693f864eb9562506f706877721aa6bee1c1b48e757033267520","first_seen":"2025-05-29T17:20:03.50604Z","last_seen":"2026-04-20T11:02:13.385429Z","times_seen":51155,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":113,"dns":3,"connect":15,"send":0,"wait":33,"receive":9,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:43.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 08:41:01 GMT","end":"Mon, 17 Nov 2025 08:41:00 GMT"},"fingerprint":{"sha1":"41:D2:08:38:86:84:32:C2:76:B6:A0:7C:F7:02:4C:C5:55:4E:2F:1E","sha256":"A5:34:21:73:D5:FC:24:AF:0D:8A:56:A2:A7:5C:BD:41:46:45:3B:DE:78:A3:6B:67:9C:80:C8:44:02:A9:12:D0"}}},"request":{"raw":"GET /s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://2ddl.dirproxy.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23040\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 11 Sep 2025 18:00:13 GMT\r\nexpires: Fri, 11 Sep 2026 18:00:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 174270\r\nlast-modified: Tue, 02 May 2023 15:07:25 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23040,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23040, version 1.0","md5":"de69cf9e514df447d1b0bb16f49d2457","sha1":"2ac78601179c3a63ba3f3f3081556b12ddcaf655","sha256":"c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49","sha512":"4aebb7e54d88827d4a02808f04901c0d09b756c518202b056a6c0f664948f5585221d16967f546e064187c6545acef15d59b68d0a7a59897bd899d3e9dda37b1","ssdeep":"384:adpABC4a0HkBpR1HWtGu06B6lsoAKiwY0HcLKglV6Z+DVb35PJZDdiZeJ1vqYg:0AHa0Ezf2tZn6lsoABwTKK46ZQb3V7wD","tlshash":"fca2e1c05cc1e2d4ae02daf7fda5a4eab4e2f01123a8f65f8f114b75d505993640fe01","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-04-20T13:51:30.315646Z","times_seen":142469,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":84,"dns":1,"connect":15,"send":0,"wait":17,"receive":9,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/app/x12.js","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /app/x12.js HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 12 Sep 2025 20:23:11 GMT\r\netag: W/\"68c4812f-2bac\"\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xFOi88%2FQurXdzmJtDuFb84Vvt5SKPbRHqAeUZ41OqsPU1omSnwqbbsi7zGHdWDb2AWrCmr%2F9uVb1j4%2BeUGH280%2FlumVN5jwY9gE9alJKOWo%3D\"}]}\r\ncf-ray: 97e9aed4a89b2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11180,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (11180), with no line terminators","md5":"94efa3c05291ac5cccd32cc3a11c9724","sha1":"3a033e4d6f5e5eaf76030a81c8a05c619de436c2","sha256":"58c753f7ffcb584d2ed43470ec9bdd30a4cd4723f368d83de6163413d5555102","sha512":"1361f500a2951e29fd5dd415cb0a6985015eb4b28f6196b778e009ae39dbc55b3447113d63306c43fa6f5bbffaa6b926787dabb86b0672a9040e9e309b3e01f3","ssdeep":"192:72ClBFvbH6N6c7rMLsiCAEDvOpIiOsPhQZqiSq5zHl8RJW8+1Z1tJka:LTzal7XiJ0sg195zHmedJka","tlshash":"5b329c887ed6f107279d5a53ef1a6af9017ba0a662f4350bc3a8f6cc14f910bc179c84","first_seen":"2023-03-07T12:40:02Z","last_seen":"2026-02-07T15:24:54.090901Z","times_seen":1807,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/themes/oneway/images/postpage_movie_meta_icon02.png","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:43.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/themes/oneway/images/postpage_movie_meta_icon02.png HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/wp-content/themes/oneway/style.css?x27119\r\nCookie: view=1; view=1; view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":1234,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 22 x 18, 8-bit/color RGBA, non-interlaced","md5":"2f4b7b04e716521baad2ccb40d464f60","sha1":"5b257edba0ac5f8d133174421c679cb5e6958856","sha256":"2e7441dddc6c088edc4322b88f1b446a21e14a7f8b230e12f8c0dc145d65dbde","sha512":"683ff9ad133225bbc3e8a58835840dc8b8d13c568cdf51ff44542b5fc3baacd4d2dd2b38abed8cba034585b90493de08ec6cce092930f96e05a5ce563651a16e","ssdeep":"","tlshash":"d521545dfe407802914cd9411cebf83bc9024d409ac8f06aecce847248b05f5469d4db","first_seen":"2025-01-01T17:19:31.448051Z","last_seen":"2026-03-05T08:34:57.584982Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1649,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1648,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metrica-yandex.com/metrika/tag.js?1001","fqdn":"metrica-yandex.com","domain":"metrica-yandex.com","tld":"com"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metrica-yandex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 21:36:59 GMT","end":"Sun, 23 Nov 2025 22:36:40 GMT"},"fingerprint":{"sha1":"36:60:61:C3:46:B1:69:30:CB:F4:DD:56:E4:BE:E9:41:81:0D:97:D8","sha256":"15:6A:48:19:CB:B8:8D:F9:EF:81:78:C4:66:96:7B:98:09:07:E9:2C:22:A8:A5:54:6B:9A:C1:8C:4F:39:CB:FF"}}},"request":{"raw":"GET /metrika/tag.js?1001 HTTP/1.1\r\nHost: metrica-yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Sep 2025 18:24:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 13 Aug 2025 18:40:13 GMT\r\netag: W/\"689cdc0d-eb6f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nage: 1341673\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Khm%2FD9xoH1Cwj0S4IC0f1F%2B4WB9G1zNcaRLWjzgfpjkZaj%2BkXFcxty%2BO1VHl14KRuimcMXa4FYD0g98YRftlV%2F%2FxnbWXbXPoGk1vcpwM3Ik%3D\"}]}\r\ncf-ray: 97e9aed56ea456c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60271,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (60271), with no line terminators","md5":"ea67b2343fc359662afdae5d4c8c8e03","sha1":"7f07219a8cd9d6d5c17e20bd7e80fac0281c2b18","sha256":"5e31460a6eacabdc5895ad2ad898a4a570ac88f2794c61ddce6b0beee304eb11","sha512":"d3d560c1a9320de2150f1f153e70254ba7a67153047d8551ffdb47b1feca1124ff27dd29b79cada58239b0af49160f2ede93905015e54909a34250e51d01e29c","ssdeep":"768:QzbSRKFe9crazKUmq5VxapzxVJI927WE8mccSN4WDhbc6tfJGPmAsV:ZKycrU2q5IxPI+hDhW9c6dJGPmAG","tlshash":"f8431e1c7cc260092953e2bb016b31957b25b1009da96df6b414e3a3ee7468f9dc3fda","first_seen":"2023-03-07T12:40:02Z","last_seen":"2026-02-07T15:24:54.107455Z","times_seen":1747,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":161,"dns":24,"connect":1,"send":0,"wait":12,"receive":0,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heartilyscales.com/a2/86/90/a286902791a7f4c98bcb1e812322cd78.js","fqdn":"heartilyscales.com","domain":"heartilyscales.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"heartilyscales.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Aug 2025 21:31:25 GMT","end":"Sun, 02 Nov 2025 21:31:24 GMT"},"fingerprint":{"sha1":"8C:BC:E6:45:99:A6:42:A8:C3:7C:33:7D:77:C5:9E:C7:70:2A:A9:6C","sha256":"44:0D:F2:B1:46:00:9E:72:AB:F2:58:53:DB:2A:6F:97:C8:DF:54:6F:43:D4:84:F7:D4:6A:D5:F7:8B:ED:15:C2"}}},"request":{"raw":"GET /a2/86/90/a286902791a7f4c98bcb1e812322cd78.js HTTP/1.1\r\nHost: heartilyscales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 13 Sep 2025 18:24:42 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 30061\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: 4b4e7ab587d59b22ad7bcd2439afc363_FEATURES-2379=0; expires=Sat, 13 Sep 2025 18:24:42 GMT; secure; SameSite=None\r\nx-envoy-upstream-service-time: 4\r\nHost: heartilyscales.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: ce455053d2f442ee018641380a04412d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76500,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e5b5c1a0670bf2490311b81986df192d","sha1":"e8f0e0f0fb0b13910b3a747a21ca4ca56fb01592","sha256":"99f7d8757ed64f9bd085a0854910621e613fcce30913d042380fe5f75907598a","sha512":"dff22ed62389b10fbe568dbf9474ec64359cd49f529aff59ee8c77b267fc4f9df072570dceca0200c9865dbb44f0a3cd30c3bb11291060243a18ac84128c9971","ssdeep":"768:4LxyFuc4NZiUUZDAKLWSCmizSjxRVYiZR8jkXWfCTkAH7JUiKCgmRqXaJIqJtn0D:4zZfCzOmKmY8U+5q8TdAjrHMVfIerJy","tlshash":"1f73c5897f46b36902b26073216f1407f02b1c9654acd458d607fadc2f24b6ef976b39","first_seen":"2025-09-11T15:43:46.535904Z","last_seen":"2025-09-17T08:17:27.593383Z","times_seen":9,"resource_available":false,"data":null}},"time_used":823,"timings":{"blocked":298,"dns":52,"connect":91,"send":0,"wait":103,"receive":92,"ssl":184},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/user.php","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:43.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"POST /user.php HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 39\r\nOrigin: https://2ddl.dirproxy.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 502 Bad Gateway\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncontent-length: 6407\r\ndate: Sat, 13 Sep 2025 18:24:44 GMT\r\ncf-ray: 97e9aee0a8fd2678-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6407,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"acae6e25eba56a9c2f60fe04ec93e3c9","sha1":"b0f8efd5f5a58de804d2714d60e90b0a258f7c95","sha256":"d0411decfd06d1380912a33cf722f59779d9397de9eda3c3e85cfa9979d2378d","sha512":"3fc1d9b3edacc25f6c5274585170e9d3a66fbeda37a25d017f888521c91362fe77e56571d524a90fb9dbca38bb7e2d8582ce5bdfe80ac9206f54f78b4d7ceb6a","ssdeep":"96:1j9jwIjYjQcDK/D9KUn5G4Fh8/G4F85e424FS+skKmtmniS7RLlYaQxP:1j9jhjYjpK/Br5eynUVMnS71ljeP","tlshash":"9bd15471b1f5127610a3c2923695ff1a79e0c613cbef4494b3dcc2632f9ee86a903195","first_seen":"2025-09-13T18:25:15.61636Z","last_seen":"2025-09-13T18:25:15.61636Z","times_seen":1,"resource_available":false,"data":null}},"time_used":732,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":731,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/themes/oneway/css/bootstrap.min.css?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/themes/oneway/css/bootstrap.min.css?x27119 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:42 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f7ywgAPTtRT%2Fp9%2BLXtJv7Wtlx8s7M2CCZ%2BE2u2Bpc5gUZ7yZOQgKNsGhOArRCRr9yuGdRTdvoH90Kkwx7nlON54k8bkU7pV8u%2FHXr4HTfEQ%3D\"}]}\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:42 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97e9aed448752678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121201,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65367)","md5":"48f2e927a063777a155535a6d075c46c","sha1":"9f60b49cf598d606be119aebeb69659d06d7cdec","sha256":"978c3b755d09e54fb41f85b70dd1bdd2db2aea822680104451e6349d5b661fa6","sha512":"72e60566478e4fcf1884a984ba67582b57c044c6af85150e57587c94352ca640c60a5b07da066120a91c2952884f91990310dc3b6702dfd2f6c38b54e942f0db","ssdeep":"768:vy3Gxd/6c/dQlJxtQOIuiHlq5mzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1FC:hd/ZUfIuiHlq5mN8lDbNmPbP","tlshash":"d7c3c7a0f21031ea7333c55a75d0ed872219a153e56a4fb7f22f25d88f845ca1673f1a","first_seen":"2025-01-01T17:19:31.456234Z","last_seen":"2025-10-06T17:08:21.242056Z","times_seen":9,"resource_available":false,"data":null}},"time_used":962,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":933,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/themes/oneway/css/font-awesome.min.css?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/themes/oneway/css/font-awesome.min.css?x27119 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:43 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sRiobE1RHjxOMnCj0okLDBRnwUuBWHQ%2B3eKP1AYH97cv865q1q6Wb53dAyoOV1D2q6ym%2BEgP1DsKihGLuS50p3MLwxJ0nFVeP%2BY%2FXbvL2BA%3D\"}]}\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:42 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97e9aed4587b2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23736,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (23571), with CRLF line terminators","md5":"dca36e8b6b58761c1cb60342ddb79220","sha1":"7911201602e4146749c72eccaa4c2f304a94cfe7","sha256":"46151f4bd3820737a911fe04190bf67c8e2baeb2b02566d7847de1d8b19f9a5d","sha512":"fac237307981744d4bcacab84ce27ab1e1973a915b0f2b1ffc8cd220e3acb1e6d2e647dd1a6fdc6a046a9dcfa00f3b5215d3e2ee528d06a01aeada08782cdbaa","ssdeep":"192:U1MrZX8W+ab2edrKeTUKuErArKlcZJVrL3ee+cR6wafm215bvfhf5DrkHUasT:Xs5yWeTUKb+KlkJ5Le2UfmyTfhYUasT","tlshash":"fcb240f8e54d01d66731c48bff85b36862baf73dd5800d99f01f291c29d22a512c9bba","first_seen":"2025-01-01T17:19:31.445545Z","last_seen":"2025-11-19T08:34:53.696003Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/uploads/2019/03/cropped-TwoDDL-Logo-GOT.png","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/uploads/2019/03/cropped-TwoDDL-Logo-GOT.png HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:42 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WE%2F9TtGYNv3iwOL6vFpIOcJNKnRi5j7IRMAzVyIG5%2FfCthp1rANsNMMvK2UNylVXiim0LhspKI2b5ER9wFUlqyON8Tv2uZ6eVj7Uhn5gq8M%3D\"}]}\r\ncf-ray: 97e9aed478812678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71396,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 561 x 250, 8-bit/color RGBA, non-interlaced","md5":"7ecb1e9b65f286a48623b55d9e3c5eba","sha1":"7a13cb9a36ac835a773fbf56d5e30e007f402407","sha256":"31dfab84d763d80dc2563c3c4e760748762e9c7acda827992de5969247084d56","sha512":"a19e6877720d53d54d8d7667b5dfbc8aff0c7d6addafb11ceefe1a99f3ee51d21c380fd6fa22d0018b1faa8dba660f3bc76f510de892857c024d2d2a4609654c","ssdeep":"1536:in95U/abYuqCfiU+0KrcO0/tuv3XNlXxbJU1YfX:i95U/aMuqCJ+4N/Qv3/PUifX","tlshash":"2e630285308dca80f6f3579f6abffc5f4f3679a5683d90a78306b4c6ae0065e9583601","first_seen":"2025-06-05T20:53:03.383444Z","last_seen":"2025-09-13T18:25:15.619574Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1184,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/uploads/2019/06/R-6157386-1412514192-7038.jpeg-e1561442412966.jpg?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/uploads/2019/06/R-6157386-1412514192-7038.jpeg-e1561442412966.jpg?x27119 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:42 GMT\r\ncontent-type: image/jpeg\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ATmffXocVKZ464OfsvWORLUJ96s3DuYBgUV8lbSW%2B3bEsrmiZ52V29eUpzHEyZUQfhUPtdpGldM6dYmmunKCbc%2BVHms6Or5mHh6jYERoug%3D\"}]}\r\ncf-ray: 97e9aed478832678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20257,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x287, components 3","md5":"0b06236f9290991b51a5e808c3b4028c","sha1":"2d7e05948cd91b205b0084a8115ba7c6f319499b","sha256":"5118a47064f7493744550ad6705ea15da5c635b3da18c30b8f6601dc15d51480","sha512":"cfba64562eab0e33077d58974ed5f18e4afc18adce0b1eb0de3a748b5ac634f983c7920f33646ec5574c0bd3ee14933b211cdc66f0f8a02325d2aaefbd5c03d6","ssdeep":"384:4nzBo0kLQBKCLzhOgdbUjwUIa/SwBNpt2bJ0nvEGRQaBrfKSZ06h:4zBPQCLbmpL2bScGealh","tlshash":"f692d03542c1a2f0d01a8dd26ac84b79dfce7796a3812b9e1bb09d10f765ddc9d8981c","first_seen":"2025-01-01T17:19:31.46221Z","last_seen":"2025-10-08T16:50:51.944325Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1326,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/uploads/2019/06/004b80b8-e1561442120281.jpg?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/uploads/2019/06/004b80b8-e1561442120281.jpg?x27119 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:43 GMT\r\ncontent-type: image/jpeg\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C89jdxXiT%2FS9id2%2FyLZyWc8r5NoRaps%2Fuh8zvc2c5u8bPSnXH%2FX2S3SqZy5qyQsz%2FMYVSkMJEnhFpTR%2FWqbAfjWgt6s6l5GpEPrcfj7%2BRGI%3D\"}]}\r\ncf-ray: 97e9aed478852678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25749,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x298, components 3","md5":"add122a2292d200699be1727f5556bbf","sha1":"b4a45968044488b74be5b3db828edb8ba7d195f9","sha256":"668e58c9611e721be9cbc03372534af90ac2ccd5cb7c4bae6f59667d105e828e","sha512":"f1701d14113f7708814750bb42ee18e9a06b213b084dc9eaf7abe845e8e36d61b0511aba6b784ae410efad01b67d5a74a01cf8848cdf75b1eafbb9ce692b417b","ssdeep":"384:1LWViA/mUyfQa4tdDZ9uignuXcl2GY8sEpecZvtKffhrTuhTFsFdpoxh9r+nLad:1LW+6acDtmuXckGzbo3hrTuhhsFA0K","tlshash":"82c2e11ba3e357c4e3175cbe5c1aab4a8ae07485a10216bfeff9f018044f1cb9165b4e","first_seen":"2025-01-01T17:19:31.436968Z","last_seen":"2026-03-05T08:34:57.522455Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1372,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/uploads/2019/02/frndlduck-usnt-300.jpg?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/uploads/2019/02/frndlduck-usnt-300.jpg?x27119 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:42 GMT\r\ncontent-type: image/jpeg\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rGabjAWNfzCAjWRQyNt6P2sc8A0PSzNuILTE0GtueHMILT2tUFHwmuMmyQXLTuOEUsxZldZECOfG297vGPTcrxiBHmSOA8k8LNZmifMBrKs%3D\"}]}\r\ncf-ray: 97e9aed4888c2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34903,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 300x250, components 3","md5":"a931a71991b9f3f10a690ba79b4780af","sha1":"be865077e301bb82e39c30eb53be22065a915928","sha256":"da81b74f097818a76ec9c02b8a45154d65f55e3f696fcbae0c749ef576952aa1","sha512":"af248ffca517a59309ab63e1210c17f38d71b983f6cc6823b109acbf790d33242ad97e2a8231c1e0f5ddb20dd38501cf70e8b922b1e4e534aae5bcc4357c877a","ssdeep":"768:cQAdOF1DIDFWaQFt8MXRY0lRXieyRsfOcPEowXurFU:cPdO2WbkcViXqPwXuRU","tlshash":"87f2f261e6988c2be09db837a3c7df39f5118495a1db1301fa6a348c1c398ae3f5185b","first_seen":"2025-01-01T17:19:31.402403Z","last_seen":"2026-03-05T08:34:57.572955Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1117,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/themes/oneway/images/postpage_movie_meta_icon01.png","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:43.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/themes/oneway/images/postpage_movie_meta_icon01.png HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/wp-content/themes/oneway/style.css?x27119\r\nCookie: view=1; view=1; view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:44 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i5RzyA2G7WYo3IYtKhRI5Ph4af5LFxoewEwBA4K6qIlPtgoqeZYH4gRQbENy6EpKqJvhiW%2F1kzI8MVat%2F9f5oNthYHqKULVhM6IWUTTLne4%3D\"}]}\r\ncf-ray: 97e9aedfe8f22678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1209,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 22 x 18, 8-bit/color RGBA, non-interlaced","md5":"ddd5e121710230292810d94faf48363c","sha1":"11fd60bb1df83ec8b978c3d9ace7cbfda939d89e","sha256":"1117b6d81c670eb8ee5ed4e5b9b71a4c786d53201da8b34deb108d5d9f499937","sha512":"cce05d324d9bf82f659c458fba152d057cf29bad7f085e72aa5ffc0abf583fcc03e3bdfdfb2b89b96e8bea52d81319c300b7d66cf11e86610ad678e2c86a6a7c","ssdeep":"","tlshash":"0021a74df9806f61a10cf99118db4027994a4c4049d0e0bdfeefd8558f665f356195cb","first_seen":"2025-01-01T17:19:31.413176Z","last_seen":"2026-03-05T08:34:57.518353Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1476,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1476,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato:100,100i,300,300i,400,400i,700,700i,900,900i","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 08:41:02 GMT","end":"Mon, 17 Nov 2025 08:41:01 GMT"},"fingerprint":{"sha1":"ED:FC:A5:F2:F4:07:8E:0E:EA:C7:96:D8:BE:47:04:EE:34:72:47:E9","sha256":"42:1D:9B:CD:2D:EC:4C:72:94:02:2C:88:B5:FF:BC:A2:B8:35:1B:C6:E0:B5:97:71:DB:7D:5B:6A:FA:CA:C1:8A"}}},"request":{"raw":"GET /css?family=Lato:100,100i,300,300i,400,400i,700,700i,900,900i HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 13 Sep 2025 18:24:41 GMT\r\ndate: Sat, 13 Sep 2025 18:24:41 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7824,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"49e98ad376df74925e917c8b9a7a41f1","sha1":"3283f8caaef8725e131fc5475b30c308a3ef6b4e","sha256":"cab013a057ac951ff3181d435b41da0c32736eaaea08f1e2b1e9a8c1f96f6bfa","sha512":"f970068c5b209941090356ff2775ef5adac47a9f8febebc0708afc84bc42bdfb58da6f9c1f1c23b4cbb499d04689ff6d5f3579f744bb5116b64824633b451c8a","ssdeep":"192:437Q337RliJ3lilkF3kBpii3piUTio3TiT71O7su6JMnI2uSkQM:43g31ARAl2gMuMUm8mTkg","tlshash":"7ff1df92086fb518d7931dc212ca7d32ef4fa29464459831eefe14d8bc93d6a9372b0c","first_seen":"2024-12-22T05:54:36.016682Z","last_seen":"2025-11-14T10:37:24.539547Z","times_seen":723,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":122,"dns":0,"connect":7,"send":0,"wait":23,"receive":0,"ssl":142},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/themes/oneway/js/jquery.dataTables.js?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/themes/oneway/js/jquery.dataTables.js?x27119 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:43 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y9qBUB5U6JL43KXM4URQf8YBMQiOUrPN4nGeq6ViQKTwRToy2Zzem68T7GlzqD7%2F6BU2CwvVv%2BGFWIbA2PI3eddpOnhlJVzYyLWNJA32Svg%3D\"}]}\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:42 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97e9aed468802678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129396,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1346)","md5":"14fce601e12ae03f10b5bcf2077356b7","sha1":"f83eeff2b95ab60deba34465f8e2c64c90bf4afc","sha256":"d958ed4b7ce14f5dfe0593c84d58d576be5acf8026ac649950db7893c2ba5b17","sha512":"f16adc2a77d1acfa62bf2e1e6edc9135203f05907ae5449db95d35626dbc02d60f4fc87950e2b524eb2af78e07764a769e1aad4d366aaa29d0d032eb4fcb04dd","ssdeep":"1536:6D6yEJ0wKQGfODjDnK9DhDYvQS/79Vgk+1N3jxvFTNh7B6mzfVmsX/gK+o9TDzbS:MG0wKQn/YdNR/4","tlshash":"a4c3d59a7601742e4adfb0f2c49f4f0aa43648834598f474a574c8c51eb1cd6b2bfdad","first_seen":"2025-06-05T20:53:03.382048Z","last_seen":"2025-09-25T05:45:45.00407Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1791,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1762,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/pyC2VvJ/alert-xxl.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.6","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:17:47 GMT","end":"Sun, 16 Nov 2025 07:17:46 GMT"},"fingerprint":{"sha1":"30:62:E2:16:F0:8D:8F:C4:30:EF:67:44:60:2F:45:29:D1:5B:AF:94","sha256":"EE:AB:93:C9:6B:44:94:94:F6:EE:CA:98:DE:CE:BF:A6:25:9F:C8:76:A5:43:59:77:38:DD:D2:23:F7:9C:B1:70"}}},"request":{"raw":"GET /pyC2VvJ/alert-xxl.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 13 Sep 2025 18:24:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 5554\r\nlast-modified: Mon, 07 Aug 2023 04:09:39 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5554,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"8d0eed07b450044fdca282d1daf8a58c","sha1":"794e1284cdf81fd60154955c1805282ae21240cd","sha256":"baac89456a2d4dfdcdc14244fbe50a04ade7a401c82de605938a92e16f35c1af","sha512":"d1aab3205c8b00f207ea21f0996cbcfae1c9816fb73e749a4a85daf6eed19d5e40f90240c212bbe2ec17346b6e56132e467cb33c22aaf884efa910c482c304f3","ssdeep":"96:Pj88irwxhMv5KVO4+lcN+egT9cxF2gvPMdj80d7PJjOjSscgZ:PoWeGulq+eaSvUdXPFkc0","tlshash":"84b19e259de1cfcc6f774669d28af3f450520d90439276c83fdd8e710852288bc42724","first_seen":"2023-08-08T02:54:42Z","last_seen":"2026-04-19T08:43:20.604847Z","times_seen":3371,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":31,"dns":3,"connect":24,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/uploads/2019/06/eomvYt.jpg?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/uploads/2019/06/eomvYt.jpg?x27119 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:42 GMT\r\ncontent-type: image/jpeg\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0QBpvUAe4devlfID8I5pkGi%2FpvC2ODIn44Re4eIAUcx6GlC5A8Ody6%2FNIBrLccicWr7K%2B1QhX8iqHRrLmoA5YcuewCgruCE8HWwTdIAVP3E%3D\"}]}\r\ncf-ray: 97e9aed4888a2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138774,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=500, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1500], progressive, precision 8, 520x170, components 3","md5":"48319af66572a98d5f670eccd9f21083","sha1":"391b87da0b73ce2ff8929cb347210f92e9827f3f","sha256":"83489df8065464aabfb927cdc7370cd176b3a368f844b8ee16d4d1eb677f6624","sha512":"ffeb6b537557913c62cc42c75d734fc03c5ae2a158890639cf8bd4e9ca2d65241fe0177636b3b54a6d20ee381f966c3b61e5a244181b19abd03ab114b6d6cb6e","ssdeep":"3072:4ELEdKGce95SfgwGXgaULqsy8YdWf9oOMM4DSiswJ+yFqUmK:4GCKsIq1ULqfDd6UlSislK","tlshash":"d6d312232a259f6bffc01235618ae389b7127ec22ad357a6710c3597bf383c15c2b255","first_seen":"2025-01-01T17:19:31.438562Z","last_seen":"2026-03-05T08:34:57.553066Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1274,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/themes/oneway/assets/js/skip-link-focus-fix.js?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/themes/oneway/assets/js/skip-link-focus-fix.js?x27119 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:43 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ab6bsQcKHk%2FPwFGyT47qXwUM6HcBRhM8lND7DrnQVNYLsVkxA9RughdsN6LzuNkhWBUci%2BKqmKL4IVCCt4QX0OeCLdm1sROpu%2BuWRxzQtU%3D\"}]}\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:42 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97e9aed4888d2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":418,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"2ac6ce1d039e5410667542e433bd70c6","sha1":"77568c718f1dbd26147f0db69c0c0238d77d26eb","sha256":"1d90eb1c95ad3319ed02d62eae704975c6d5afd51bd455bda5cdf9ff172bd38e","sha512":"fe24209e223835160ad2d90e3007dd36d959de75da3dbc51d63fadfa43536aa72b575af6a2f52cc9d5e3c5871a8dd049c40700601dc4d478a765cc2972077921","ssdeep":"","tlshash":"3be0f1beb512c47500cfb237399f039e3b3a86939c16a4409828cc80bb38cc01037ce4","first_seen":"2025-01-01T17:19:31.484758Z","last_seen":"2025-10-08T16:50:52.13216Z","times_seen":10,"resource_available":true,"data":null}},"time_used":1358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/hy.js?q22q2q2","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /hy.js?q22q2q2 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 12 Sep 2025 20:23:12 GMT\r\netag: W/\"68c48130-db43\"\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FgW7qeuJJjZplYPSac18rZhAw2TX6ZEpBzKvf036fUj5q%2Ba308Hi42PO8bTY6B2HJoIM40K79vh1LvWGkC6dtvENxOMZLEIJhAj8Tkx6EeU%3D\"}]}\r\ncf-ray: 97e9aed4a8962678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56131,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (56131), with no line terminators","md5":"667d77da844b6d5ad62b2f26e77b4b12","sha1":"01ae61192a38af73a93c67468fb8271d7bbfa4f6","sha256":"f240ce7fa62cd81d92f29081815f2cd2376ea6867887d17d5625009ebdf355b1","sha512":"397db4a7e265ee50bc3f41dcd8dbd9707a7e5b4c8286d284aa7ec098723f197845b1527c620f05683dc7de9ad93f5ad3cda3c5e2371a8af8b75d328b2b817650","ssdeep":"768:NEytvasZSSTV4dNQkBd9AuNe6wDC4V4JB4JrfeGkFhJT:iytvTZn+b5SuN2DC4vJ7eGkFhp","tlshash":"6d43428c7cc260642556f2ba006f39da362571218c5a9cf3a415d3a3ee719cf8d93fda","first_seen":"2023-03-07T12:40:02Z","last_seen":"2026-02-07T15:24:54.077105Z","times_seen":1813,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/themes/oneway/images/postpage_movie_meta_icon03.png","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:43.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/themes/oneway/images/postpage_movie_meta_icon03.png HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/wp-content/themes/oneway/style.css?x27119\r\nCookie: view=1; view=1; view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:45 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uHsOmLzg94Vy9z3fbqGzVChB4w1DwHgYoWIBLxLaH6RcwDMQ4tSe0I2TkIcb7%2FTOyDIuUpjnM2XnOhQy1bEXTAyi38zcS6MkP5L0UFRayTw%3D\"}]}\r\ncf-ray: 97e9aedfe8f42678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1304,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 22 x 18, 8-bit/color RGBA, non-interlaced","md5":"5cbaca0a0c22fcadb97adc21d5265638","sha1":"501cad6adf1e0188f0770837a52bd115c5662952","sha256":"3beb790b70ec0298ff5d3b16f036e7de16675dfcd0161cb7be493ca90e55fbf0","sha512":"c93bc72003b43a4094b502f0bc3b8f85a3cd49829f9c0e73acbf81fd9cb6a9af9b1bba69dec002935cbf57d5efeea921303a3b24f228fce28096aabb66a20299","ssdeep":"","tlshash":"ad212069f680bc1165d8b94018fb8017d8961a90dad9f4a7adefc42218720fad41e9e3","first_seen":"2025-01-01T17:19:31.460498Z","last_seen":"2026-03-05T08:34:57.574345Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1648,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1647,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/uploads/2019/06/1477236103_1-e1561441817628.jpg?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/uploads/2019/06/1477236103_1-e1561441817628.jpg?x27119 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:43 GMT\r\ncontent-type: image/jpeg\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OK4IaK5Rk1JLosnDx8AouIOiHv0qkA%2B%2BzhFFCzL68BOF0LVR8M%2Bu3gPhIY1gpNgDOOVAgFF2nRmRCS8UftDbxtRXr7H%2FAOT2X6thxpxshTQ%3D\"}]}\r\ncf-ray: 97e9aed478842678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20399,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x266, components 3","md5":"1ed62a5aaf1f0a19c388265450cd647b","sha1":"4657e773ec9aa2f00f62d618225ccae808d45e62","sha256":"ad1146a127835b66bbe1fd13da24c4648e940bfda4095c9e874e2775f42a8487","sha512":"3a2e25c14597f6d038b0a0b24106ab11011017daeaab2774c533756e08554f8482b02d6bcfe51c154754196905a8d6ecbcca843c49b2d40ee28fa3eec62c986e","ssdeep":"384:VfcyYFMVaLWsl4cZysAbPgKYlVXaaHaGn0c/ZApGjweM4aIpSPbo7y:VfcyCca2FsifYeaHaGn1yGjwlZbT","tlshash":"ea92c05d273051b46171ad66b6205863c6077d70bba43d5e3372e4a3c52e6c4e822ffb","first_seen":"2025-01-01T17:19:31.414913Z","last_seen":"2026-03-05T08:34:57.564124Z","times_seen":20,"resource_available":false,"data":null}},"time_used":2000,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1971,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/themes/oneway/images/postpage_movie_middle_right_infot_image01.png?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/themes/oneway/images/postpage_movie_middle_right_infot_image01.png?x27119 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:42 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TqIjqOw%2BqZDAEQ2XivpzYYo9nh%2B%2BAs9bbcegi88vGEXk5FViFHiZr3c4iufvD6ZFq80%2FV97IoZSP37yr5NzmsIMQYCQ2kB36eiSWJIMhdZg%3D\"}]}\r\ncf-ray: 97e9aed488882678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7241,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 16, 8-bit/color RGBA, interlaced","md5":"224590a85e94fb71a24fc4e0311fb517","sha1":"3a11546931b023c20b13409b5f572325bef72b65","sha256":"c0c4a0ba79689392a7f1a7fcf72226613457ba80a1161e3e95be5747a0c4a559","sha512":"c3d96a7eb96b5a9c780f138c9ba688f75e08192c52beb3c6f25c8588c65977b8db71105273d992c105111658468c3cc1d74c848c88e16e732c7a98727a2da8bd","ssdeep":"192:HSooONgOLPXsAYnVFeeOsY+PDNg66yJwZZVRRnh8A:ylOWOLv5qVFeXGPxg66fxRWA","tlshash":"5de1bf50f405fdd9e46f0d5fcfba8c4846752f19a15aa2faff520f0121c25ac6ac58a4","first_seen":"2025-01-01T17:19:31.425124Z","last_seen":"2026-03-05T08:34:57.531842Z","times_seen":20,"resource_available":false,"data":null}},"time_used":957,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":957,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/uploads/2019/06/whose.jpg?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/uploads/2019/06/whose.jpg?x27119 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:42 GMT\r\ncontent-type: image/jpeg\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VOhQnun51QLunRrena%2B%2F14R4NrqZ3yBOo%2BCh%2B3d7pve6Rt7lVn%2FvFFSDr7ydYtBbZPC80ePnorRdFbFmQkjNyzWtJ%2Bi5LDqlS6pJfq9WkU8%3D\"}]}\r\ncf-ray: 97e9aed488892678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108571,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2013:07:17 13:45:53], progressive, precision 8, 520x170, components 3","md5":"312bd682de4155924479da89b54e917a","sha1":"fc56c7dd902f439949f7f03549a5c8c62f390d81","sha256":"bd65d8a10c6f7ff8656721d47b2ff1bdfcef562b7b2271f189a437adb6ff32d1","sha512":"ecc44d74ca4c44188070c83b41628bd79929f9bdfba51133d3459c01bb221706c9613523cd9c8ff0e4a8897e22d58a0e3b38f9adeb26393e7c838a3b100699ca","ssdeep":"3072:PSnIcsjTraH5MohAltte/sSqa9UBPXSCKo6:aIcsns3AU/sba9UB/Sbo6","tlshash":"35b3021a6b21cea3ffc401764426d4f7b335479255e38e4a78ac3586bb21383ced6749","first_seen":"2025-01-01T17:19:31.400175Z","last_seen":"2026-03-05T08:34:57.540852Z","times_seen":20,"resource_available":false,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":492,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theusualsuspectz.biz/j/m/qqqq.js","fqdn":"theusualsuspectz.biz","domain":"theusualsuspectz.biz","tld":"biz"},"ip":{"addr":"104.21.48.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theusualsuspectz.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 13:45:33 GMT","end":"Wed, 26 Nov 2025 14:43:06 GMT"},"fingerprint":{"sha1":"D4:9A:25:78:D6:9A:39:F7:27:C4:D2:C3:FD:38:10:B3:17:FB:0D:70","sha256":"14:1C:1C:86:65:CB:A4:0B:4B:D9:90:87:F5:D6:48:5E:0C:C9:1C:0D:D6:1C:2F:BF:7D:09:46:5F:B0:05:E7:55"}}},"request":{"raw":"GET /j/m/qqqq.js HTTP/1.1\r\nHost: theusualsuspectz.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Sep 2025 18:24:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 13 Aug 2025 18:32:56 GMT\r\netag: W/\"689cda58-bcdf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nage: 1335415\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rFmhRvVfgq%2B72tDd5OxgYlX73M4CvvQ00xm5CusUB0iP1Ndo%2Ft%2BMhf2EGlbLT1xHSZuvV79sgmbE9jhmflRkcm0RV3DSkTnePNz26h5o%2BpHL8w%3D%3D\"}]}\r\ncf-ray: 97e9aed50de456ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48351,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (48351), with no line terminators","md5":"febd5bfc829d7c8aa363e93e2e61f414","sha1":"10d66213a9249bea47b15acf295323f01d217ef0","sha256":"ff391f38fc73325f58d0626b9415ac121f1461407d74e86ebddefd8180050d76","sha512":"ae47caa16d48f665df6ee05555456e0903d93c33a107bd7b40993344dc55f65a240a41b72dbb2a0ee32cc933bba8a5c64d5765db8ebb99f3b3da6fae90199749","ssdeep":"768:oqjcGGdPJhox3bX/R/OHz+kdAi0qm+3RfxK6KZ+BcWp8rpyw+3fyyzYVXVlBa9uP:oY/hm8zxi104k/rX07S5jXl","tlshash":"5f23408573d0bc86138bdb76332bb5e5f16a49d9749804caf100fce0f5ed902eaa9671","first_seen":"2023-03-07T12:40:02Z","last_seen":"2026-01-03T13:41:18.081574Z","times_seen":1838,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":24,"dns":35,"connect":1,"send":0,"wait":12,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:43.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 08:41:01 GMT","end":"Mon, 17 Nov 2025 08:41:00 GMT"},"fingerprint":{"sha1":"41:D2:08:38:86:84:32:C2:76:B6:A0:7C:F7:02:4C:C5:55:4E:2F:1E","sha256":"A5:34:21:73:D5:FC:24:AF:0D:8A:56:A2:A7:5C:BD:41:46:45:3B:DE:78:A3:6B:67:9C:80:C8:44:02:A9:12:D0"}}},"request":{"raw":"GET /s/roboto/v49/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://2ddl.dirproxy.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20612\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 08 Sep 2025 23:18:38 GMT\r\nexpires: Tue, 08 Sep 2026 23:18:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:08:15 GMT\r\ncontent-type: font/woff2\r\nage: 414365\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20612,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20612, version 1.0","md5":"b07da7aa3e4f363c5cdbc11312239e8c","sha1":"47bf5b2f24ea4a4caafccc89b9d2a6677ef9e3b8","sha256":"e44c11f4834bdd4d6b6da7b8ee5eaebc8acb41250cd6bce5cc82ea8262140eaa","sha512":"420729406b315d8af34b62b78f39e763f5cf33cbf94467457b393fde0573dd7ffc6a23f25680988f9b82a4a3b719876ff76f3e1db047ce82615f544fc3a82532","ssdeep":"384:k5Eu+yl5Y9RpwjjmD/8Qu+POP9w+oB7rezldH9W4EMs8qCr9WvS80M8T4PTEXPFw:YEu+/Jw3FF+WP9DC/ez79jcCrb8BK4Eq","tlshash":"8192df6bce71497ac711262c773917addb8b44f627f91f2ba0562411c7b8e015c2cc7a","first_seen":"2025-01-09T06:25:34.419113Z","last_seen":"2026-04-20T07:09:48.610164Z","times_seen":45959,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":86,"dns":1,"connect":28,"send":0,"wait":31,"receive":2,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"origunix.com/sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8","fqdn":"origunix.com","domain":"origunix.com","tld":"com"},"ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"origunix.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 00:53:46 GMT","end":"Fri, 17 Oct 2025 00:53:45 GMT"},"fingerprint":{"sha1":"19:BA:64:D8:30:D6:B9:3C:BF:AC:E3:49:9C:66:B5:6D:F8:FE:2A:D4","sha256":"86:07:FE:D2:D6:90:33:40:BC:4D:3B:43:3D:8F:31:1A:49:74:46:25:8F:B8:1A:4B:37:B7:A4:8D:56:7C:7A:14"}}},"request":{"raw":"GET /sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8 HTTP/1.1\r\nHost: origunix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Sat, 13 Sep 2025 18:24:41 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store, max-age=0\r\nAccept-Ch: Sec-CH-UA-Platform,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform-Version\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nLocation: https://msdoj.com/sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64136,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":100,"dns":21,"connect":31,"send":0,"wait":32,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/themes/oneway/css_fonts/raleway-light-webfont.woff2","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:43.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/themes/oneway/css_fonts/raleway-light-webfont.woff2 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/wp-content/themes/oneway/css_fonts/font_style.css?x27119\r\nCookie: view=1; view=1; view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:44 GMT\r\ncontent-type: application/octet-stream\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lDpdc6joanufU2X9uiTNDUtFeINR8H0QAR6URlrRx%2BLy4mhnZWp0t%2Fk4JSxMcqKoyZ15bjRzvdFAN%2B12XUeOLWAa1vPtWqjpiN2jedBpQfQ%3D\"}]}\r\ncf-ray: 97e9aee169022678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25524,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 25524, version 3.0","md5":"395a451dcfdedb959747c659a79fdf76","sha1":"6663e6aa8ba6fa2597c862d3a1316f7fcff0bb49","sha256":"bb7dd8e612604352dd6b7c0a4447ba7be30c5c534130aa8865646cf807ce4534","sha512":"5e4184ffac7b5bafe57c6a8c371a4040b817b9eeabaffbad8eded3b4ef3fde3b586d0f927a58938073da2699199eec50bfd7e9aaa1ba0a8f03b9cecb872bcb0e","ssdeep":"768:Z89PY5hH3BYWAS8/e24cuBsemZ4fu7QnQ:Z8ZY5F3BAfj1uBAWG7QnQ","tlshash":"f6b2f1c392b0b55eb925af305a0f07d89edc9700f0dbcb92c825da7ee6ab15134d3129","first_seen":"2025-01-01T17:19:31.467004Z","last_seen":"2026-03-05T08:34:57.588689Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1223,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/themes/oneway/images/1way-favicon.png?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:46.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/themes/oneway/images/1way-favicon.png?x27119 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; view=1; view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:48 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xXvSnwdtCOOpTWwQiiGXj8MxMgJDGbWJNo6hrhOhnFH%2BdFDbspiceIDdjTFyXLlcjn30IUrkRjr6wFcSto%2BZb6cHhitO90dPhgwK2wGEMfI%3D\"}]}\r\ncf-ray: 97e9aef2aa352678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1825,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced","md5":"cf9a55d799f1b6c88c4606dbf2ec8019","sha1":"4d14db9e653fbf6a8be94665f3999f50da77f083","sha256":"4d54bb11faf50c1e1a12fbc90c46e385e6b664a9b30428becb343fa2eee337c5","sha512":"474dfdfaf4735325e54ff9ac9178fbaa4e9d26aef472223cf0b17eaabaa71fcbed9ccc4630f4573c1ddc5eade45c84f2cb1d147e5dba4a3b52332889ef09f02a","ssdeep":"","tlshash":"1c31e9851b256b3a801614a1e76776084898fab12fb2100c848d571fdd8aa9fa4397a8","first_seen":"2025-06-05T20:53:03.43653Z","last_seen":"2026-03-05T08:34:57.556186Z","times_seen":19,"resource_available":false,"data":null}},"time_used":2243,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-includes/js/jquery/jquery-migrate.min.js?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?x27119 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:42 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=01qlGUGO%2FrHkc%2FAZQDcBlmpbFvL5J62GqeJdRyg3pXuRvFJZ04186fonuNJpl0wkiquQHlqe%2FaaBbmo%2F6ftRn5gqwNIEzxdxVjXe0VP9ZhY%3D\"}]}\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:42 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97e9aed4587e2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10054,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9957)","md5":"cc9f68a1b68d69c66f6794e85a422fec","sha1":"ce437dfb6162bf40e69b0fef12b8adea1e367e9a","sha256":"ff97b352cd2a08c08c03d1769351c8fb0a7d2198416277a5c52caec6d9878358","sha512":"910135661c03bb2a112718f78c73e9a2d8eb8b73711dc9fcdbee35e92f3876d4c76f714d97838596b2081990f11c74c23513db61993e4fd3c635ea7ace934280","ssdeep":"192:kZrk/GNyd31svs7wkX8KzJcqSDdAcHX4YE5NLy:srhNyNO0kkMKzFSDdAcIYwLy","tlshash":"8622c79db29a70625fba35f8617fc11b717a94fc2118d9e4a08c8ed1387dc9c403ab39","first_seen":"2023-06-12T19:23:09Z","last_seen":"2026-04-19T08:43:20.683236Z","times_seen":33,"resource_available":true,"data":null}},"time_used":939,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":938,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/uploads/2019/06/6ddf3da481faa903398310cebbf9afc2-e1561441951852.jpg?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/uploads/2019/06/6ddf3da481faa903398310cebbf9afc2-e1561441951852.jpg?x27119 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:43 GMT\r\ncontent-type: image/jpeg\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BKWywe74gPZTuK7X2wGh2VRRNHM%2F9VtViNxsEMyYjcr2ghgnLTf%2BLxv4POWlyuCWAy6ZXxk64%2BgCGUYS4N1h39vDWCweNWIW0jnD3iuktC4%3D\"}]}\r\ncf-ray: 97e9aed478862678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17180,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"5dcb0c327505f31f2ccfe62c143818dc","sha1":"2ba24c398dc10a173c58b6aaee8902406d75d635","sha256":"4d3294dc701fe5138b1a13c7b91f19842f1fd9e4c6a262ec07970ee13ed9da75","sha512":"add494ea875eabdefc08e78c86fd9722e079ea74f596af2146663d47693cf432f9baf9e2fa89688a215ac1a6e9c89b860ad8381ea1b1e0d7f7bcf0038da3e968","ssdeep":"384:HAquqBT1QMFEXXtdEzNISSNKdV61uMpxahwXqFcgRTVRzB+7nJfU:HcKxQMFIKBe0Q1xh4VRKntU","tlshash":"8b72e10cd302c1483e293df48a52332ad1591a2dfc5652936b7cc7e69598ededd41c22","first_seen":"2025-01-01T17:19:31.465611Z","last_seen":"2026-03-05T08:34:57.582934Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1373,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-includes/js/wp-embed.min.js?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-includes/js/wp-embed.min.js?x27119 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:42 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3jUyzrG5qbQ%2FtfwSo0Vi8NQ6rghP0Vkn3cb32EjZjPZ9d%2B6ZWUu6dtbYkPYGAV1NDqGqYO0VcMz4NCOG4IQ7WcsvhQfQMtAKJzKNkv3Y3JM%3D\"}]}\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:42 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97e9aed4a8942678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1397,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1397), with no line terminators","md5":"e3e654205e0bf11c024f461fcf4ccab9","sha1":"1d27d4138abcf565adb681e741ae9b6029fe10b9","sha256":"da6fdd72e787076d6c01077598425f57d2ea729f099b4e43002320a188915c35","sha512":"cd027762bc44d66b6167d24796a8130eb43977c658b936aa57aaa9d139766093a0bee0bff9bcc387b7414fffec2947921912cc95b3b1ae5aea04d22c932c2fd2","ssdeep":"","tlshash":"9021112a3338153b10db51e7b9ac75c7d6f207ef244121e28e78c880ea94fa39956fd5","first_seen":"2025-01-01T17:19:31.486208Z","last_seen":"2025-11-21T16:59:44.116187Z","times_seen":9,"resource_available":true,"data":null}},"time_used":971,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":971,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-includes/css/dist/block-library/style.min.css?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?x27119 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:42 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uho0QbnStLNccOTg0cz%2BSoP00AgI5kYVnjMAybax98AFYjHPlFvmYglWqmA88uYSZvd%2F2rR88dgzWEYelKRlZ9LdZ9e99G4hv4w2yd4h8WY%3D\"}]}\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:42 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97e9aed448792678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29295,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (29295), with no line terminators","md5":"375bd65d60ff3c8723fccc343afb1b9b","sha1":"b06ba18a307bdf4821dded9ebffd2489f7b01d6a","sha256":"4b8fe5c3d0e5ef7a6582185cbf5c535b5d369c8df1da98c03ed69833e55f474d","sha512":"938011c747f4f036d7662907b388c5985d1c3200145303e646437b143a9dafcad9f5f7431492bbeccb755916e0a8843c0a2f49a3599be8ff51bc5eb2c648426a","ssdeep":"384:Z9pkPdCB9xe/R8ME6e/C/q/c/yKikR0utc5g9dPo/HxdNhM:Z9pkPDc5g9dPo/HxHhM","tlshash":"ebd21b25637accfd26afb73c9ddca2943186a900d68a87f6f416d050620c94a5de3f1b","first_seen":"2023-04-07T07:08:49Z","last_seen":"2026-04-20T11:40:55.425397Z","times_seen":1103,"resource_available":false,"data":null}},"time_used":689,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":689,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/themes/oneway/style.css?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/themes/oneway/style.css?x27119 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:42 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L7bIYwLYgnQjJk7Wh0yCKbzY71g9HMqes8W8WSbs4aVD9Rh%2Fv1X4B%2BuibKOtIEVNJ%2Ffim9nkM3TVY4kZS7gFgiQmftlERjU%2FjaTLoMMBe1E%3D\"}]}\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:42 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97e9aed4587a2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142466,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"91ad0e37bdeb432ce1eea46a49db1b74","sha1":"68c089cd9dad933570c02751eaf7375102ea83d0","sha256":"999651a04d68ecf03f848c435f03af616431355ecc11a44f09430b822aeaf92c","sha512":"97f90c3c598efba1f1ad1937d2743d6006fb9333b8d454f79f631e2a09389fca9aedb9bbcda54e683ef5035484543b01c50886d4c2f4e0028fe67f5a556ff939","ssdeep":"3072:49gA5s5V5Yq5D5F5Y5y5T52bo0D5c565g5A5p5s5iCgsR5xf:49r5s5V5Yq5D5F5Y5y5T5a5c565g5A56","tlshash":"d3d3a22a92e0630fb32b873bf9d279ad3d194705f5820feae651d76083c25d7a326705","first_seen":"2025-01-01T17:19:31.451086Z","last_seen":"2026-03-05T08:34:57.549084Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1014,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":984,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/themes/oneway/images/ajax-loader-admin.gif?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/themes/oneway/images/ajax-loader-admin.gif?x27119 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:42 GMT\r\ncontent-type: image/gif\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fZNYHfemsY%2BpV9rn0Rbhzb%2Ftrnl2qB1azOTBvFDujhnJXmqqJSiDppM66ZvM9DadAq%2F%2Bpkdbc6%2BuWrKiRpAwFqeKAAb0vGnVffw5EN7B220%3D\"}]}\r\ncf-ray: 97e9aed478822678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1924,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 54 x 55","md5":"fdd2b1e9c0cd3a616c3f45adc519bf4a","sha1":"09e9768619193e5843031cd09f647dea432433b7","sha256":"4e8eb537232963e2ea1ed21ac7cd5ef4bbb315ef5ab4253cd8755babf27fd7ed","sha512":"2dc63b9f5b0d6258cfa67950c472cb26918b4e966eb5cdf02719e2824feb4a9ff02e09ebfd43e5c30c8f2cbdf14ecded0b7417eb2cecd50c361b647dc3f6936e","ssdeep":"","tlshash":"c241795892c70c03ff5891784c69b0863e32999479875fcadcf74726ce23266b1946eb","first_seen":"2025-01-01T17:19:31.446854Z","last_seen":"2026-03-05T08:34:57.577103Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/themes/oneway/js/bootstrap.min.js?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/themes/oneway/js/bootstrap.min.js?x27119 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:43 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YAyuxUwfchbnF5r9RvGmtf7LK%2BtmKVKPkNzKJ59jDSkT0OWVZR5O6Ktyf3yQSHE%2FToK6Kdto%2BvQL71czHiriw7XUMN0xH02CQDVO0J7byik%3D\"}]}\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:42 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97e9aed4988e2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37025,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32013), with CRLF line terminators","md5":"081e343ebb76f77f526c161fcc46ffe9","sha1":"673e62cdaf6c736b28f1b66a9591e985d24c3acc","sha256":"73fcc773c43b0013301185b86889cc86f4eee7e55cc29b96bbd8173edb7bbb47","sha512":"48d2c848f793a64f06394fe62e483f17fc942ad2838688900cd8d7ebffed4be366a9b4cafc1989f4c9da3a36c405ef5578d1df9f67b25ee343f381a4dfaa4a6f","ssdeep":"768:72rGy27UwleqMl95qN/Cwejhqs84hmi+PSFXfg+8Gf3Zn7n:yg7ofhqAVvgk3Z7n","tlshash":"81f28606b23031a147efb1e1515b020e7239696ee906907c78b99af53db9c48717bf3d","first_seen":"2025-01-01T17:19:31.42691Z","last_seen":"2025-11-19T05:47:40.948595Z","times_seen":9,"resource_available":true,"data":null}},"time_used":1356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/themes/oneway/fonts/fontawesome-webfont.woff2?v=4.3.0","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:43.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/themes/oneway/fonts/fontawesome-webfont.woff2?v=4.3.0 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/wp-content/themes/oneway/css/font-awesome.min.css?x27119\r\nCookie: view=1; view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:45 GMT\r\ncontent-type: application/octet-stream\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xb2dClBTBGHVmZyCPoHvR7UPeTJvq%2F4xUhhJe2F52WdGQPKO%2BRLcWrFXCNKdDqlBxaedh27H%2BqGVV1fWV%2BhGB8eUivievmwPtjHzQQ8vCtk%3D\"}]}\r\ncf-ray: 97e9aee008f62678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56780,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 56780, version 4.197","md5":"97493d3f11c0a3bd5cbd959f5d19b699","sha1":"1075231650f579955905bb2f6527148a8e2b4b16","sha256":"aadc3580d2b64ff5a7e6f1425587db4e8b033efcbf8f5c332ca52a5ed580c87c","sha512":"bfe4679bbe5d1db21f6ecb2d6c2810dd02d3b698efdd50004cc355c1d0bc51de8dd102707c796b26e8250c600b4b64db88b67d3f28157777b68e36ad7930bfc0","ssdeep":"1536:zxwdj+K8kLkunGAASpdw6hsxD/G+zSIoiCQN+n:zxmVY6dwJThoiCQE","tlshash":"eb430269f84b577202275a0509ee0d34ef804962eef247fbb1fb90c5d6309ac1ea1b56","first_seen":"2023-04-05T09:41:17Z","last_seen":"2026-04-20T13:10:19.4971Z","times_seen":23270,"resource_available":false,"data":null}},"time_used":1632,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1574,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/themes/oneway/css/simple-likes-public.css?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/themes/oneway/css/simple-likes-public.css?x27119 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:43 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D%2FMD763EHxV7Nlk%2Bdo0skyVQqbRBQyUmUF5dcE63yjjrMGMRW2L4vNZvE%2FjIsMEOZhI86DpzK%2BZLKtqc%2FeIVxGltb49VRlPQa6OacFaIRgo%3D\"}]}\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:42 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97e9aed448762678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1456,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1456), with no line terminators","md5":"6c37cf28e0a60e8ecda7ebe767f81968","sha1":"4bfebb0dfc44dbadec7ee2cada9f7d8e4cecdc20","sha256":"8205029b0dc5e606207b45ff9c90d7da124f3aa3fab4cf9e571efa2393668a25","sha512":"df6780d5ee0fb1cc9f302724b5dc886d562dea591f7e6fc62d0d941d57dc1748ea36a190fe29be673cde554ba05bd7d67aa6c3b9e1fd10e162f83b15b06c6375","ssdeep":"","tlshash":"663120204261a105d22fc357a78cd9502976fd72e1b30a2bf2272a0ecbd34ee7342719","first_seen":"2025-06-05T20:53:03.391495Z","last_seen":"2026-03-05T08:34:57.581525Z","times_seen":19,"resource_available":false,"data":null}},"time_used":1466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1466,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:42.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 08:41:02 GMT","end":"Mon, 17 Nov 2025 08:41:01 GMT"},"fingerprint":{"sha1":"ED:FC:A5:F2:F4:07:8E:0E:EA:C7:96:D8:BE:47:04:EE:34:72:47:E9","sha256":"42:1D:9B:CD:2D:EC:4C:72:94:02:2C:88:B5:FF:BC:A2:B8:35:1B:C6:E0:B5:97:71:DB:7D:5B:6A:FA:CA:C1:8A"}}},"request":{"raw":"GET /css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 13 Sep 2025 18:24:42 GMT\r\ndate: Sat, 13 Sep 2025 18:24:42 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58085,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"2d3261e7a5630e984eec10236e590f89","sha1":"8316411c84a81f833ec925c9dbf713a6da45c655","sha256":"0475157ed09f1ebac282855599ce11346539e288b07fc75710376236e9746b71","sha512":"9f3562ad5cf2269bf81136ed62c21ad18ab46215e8980db5f41dd2627b678e35fc9d83773d17212e06adf690060c6dbc8609b9daba0310d0f784f5b8f0427266","ssdeep":"384:+VO5CCtxQv8qY49vn4lwOEzFt0rvVqY49mnjyCOqNzt6RvzqY49sntYJO9G+tFEK:Qk48FVQ/z0o8spZPlTawEYhv2U","tlshash":"e9430c91041b244066436dd233ee3e30ee0fa2247144c076abfd9b8beedad6562b435d","first_seen":"2025-05-29T18:00:12.750932Z","last_seen":"2025-09-16T23:48:53.86241Z","times_seen":3987,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/themes/oneway/css_fonts/raleway-regular-webfont.woff2","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:43.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/themes/oneway/css_fonts/raleway-regular-webfont.woff2 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/wp-content/themes/oneway/css_fonts/font_style.css?x27119\r\nCookie: view=1; view=1; view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:45 GMT\r\ncontent-type: application/octet-stream\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JMDs1p%2Fes3dhMAbtd3vZBt7l9ZqgPK4%2F%2FukH7EkptrdzE6Iv0KLmW5v5DEi5ULPF2fsjoDXLehwFxjBe3Nqi0z2gN60s7Zlc7%2BcRt2uxtbM%3D\"}]}\r\ncf-ray: 97e9aedff8f52678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25400,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 25400, version 3.0","md5":"fa72575da53e4197449e96fe990d0bb7","sha1":"06384332f4ce0679f7ef6ddfc760933b1e420b36","sha256":"38b5c21aa90c13722b37da43d7c62dee9aa2cba7feace7753c025b6f30652319","sha512":"7a15c87374232e0073eea6397d6622358f8e47febae4799c0516b0ad9d1a070a5cf47439db5c342478f12112be871268e7e1a17f1a59ace263a182ff6c6ed13d","ssdeep":"768:C0wn1tOr94M0i830yQsJqO3y3uR1IdEV36ihZ:8Or91oYoqu/Rc8hZ","tlshash":"2ab2e1655c20fd03e97925ba9c47309de890b070409e64a1bf06aad97f3cc4fed45ee6","first_seen":"2025-01-01T17:19:31.442337Z","last_seen":"2026-03-05T08:34:57.495021Z","times_seen":18,"resource_available":false,"data":null}},"time_used":2390,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2361,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/themes/oneway/css_fonts/font_style.css?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/themes/oneway/css_fonts/font_style.css?x27119 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:43 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SQ2%2BiY81hsSCqdOIZ89gZYxCoVWX4YxD%2Bh%2BDl2ka6odRJzdvey2XevsN6FQv7%2F9fHKdXt3NMbB2D1X2Bk0dMWfe8gtRdoIVuqn8lIrBYnx8%3D\"}]}\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:42 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97e9aed4587c2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7852,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (7852), with no line terminators","md5":"9c4f4babe44fea50d4cd9442486a008f","sha1":"f53658d20da4d59aebbc851b376f96f6cc540c5d","sha256":"08b6f3682bd8a9b694a6bb9437095da74f1a37b1abec1219d0c768fa7f7af5eb","sha512":"6c366e2c821522a04e1a88aab0bd56d56e92364ddd1fff5da19554424934cd1363a6f9f5d19f2e91ba1bcedbb1ca1e4a946322094aa4a8de0700f860901d79ee","ssdeep":"192:v/9oMuWGDZogSiSOkGFVC815yF2tC+E+zz3:v/WMuWGDqgSiV13","tlshash":"adf1a493cf594102d8522e89b9cb6791da9bbcd19817e063c63af82cddf767e1140f28","first_seen":"2025-01-01T17:19:31.433632Z","last_seen":"2026-03-05T08:34:57.579169Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/themes/oneway/js/jquery.min.js?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/themes/oneway/js/jquery.min.js?x27119 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:42 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OkH5Gl3d8ewVf%2Fa0tLRL7IivIo5vmeFBS1sTkPbIVjZipBfob%2B76knEOFTUS%2FWFDV7kuMtXPnRAeym8GD%2FeUx3faYQHV0Sn9jP8rmp1ELhI%3D\"}]}\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:42 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97e9aed4587f2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72569,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32006)","md5":"669aaa5e13e4d2667609a849a6c03be5","sha1":"2a0a3eef25e63007d9e7565d5a439d5d169d5a25","sha256":"a1d6b09c5f2bf644df15624085277c0c1a64e8b3cdd2571004f1a8fdc38cf50a","sha512":"56960f451cfa32bf58403da36d72e11006c768d3185607aa1535eec3933269cca2328928925a5339cae9cac6e9dc0d58bbc5e2525d553086c2a53d38653d5439","ssdeep":"1536:DdhEyijTikEJqRdXXe9J578godsWXdLVhNLKz4DTAjnWotoZqwsRmKKHNU2:Ckcd5hNLxTwn3t0iU5","tlshash":"f063c4d9b3d67062977730a850bf010bf07a98dab44c8da4f168d9e57db4a49807bf2c","first_seen":"2025-01-01T17:19:31.409686Z","last_seen":"2025-10-08T16:50:51.973451Z","times_seen":9,"resource_available":false,"data":null}},"time_used":882,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":849,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@400\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 08:41:02 GMT","end":"Mon, 17 Nov 2025 08:41:01 GMT"},"fingerprint":{"sha1":"ED:FC:A5:F2:F4:07:8E:0E:EA:C7:96:D8:BE:47:04:EE:34:72:47:E9","sha256":"42:1D:9B:CD:2D:EC:4C:72:94:02:2C:88:B5:FF:BC:A2:B8:35:1B:C6:E0:B5:97:71:DB:7D:5B:6A:FA:CA:C1:8A"}}},"request":{"raw":"GET /css2?family=Roboto:wght@400\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 13 Sep 2025 18:24:41 GMT\r\ndate: Sat, 13 Sep 2025 18:24:41 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5746,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"017672004526d49c616a83a1885ca6cb","sha1":"317c4a759af5149d1777a5c195c2030c842d4b70","sha256":"6ad67efe8c01a7f843a39344a43ca877e30726dd0cae6db3ce719a22a63bbc70","sha512":"f1dbb144b98e0a05fcaefd0367bb48be095ce28add6c7e8e8ac4d6b4b31dd76e2a7edaa4587bb78841aac8d679c53ba06e7a98775e9c6eaeee11c18c4f251ed7","ssdeep":"96:1OEbaNllOEbaNsFZKOEbaNWOEbaNVTOEbaNVy+aZjzBrgOEbaNIubqGIFuV4yOE6:2NlmNMNVNVkNVqbNfbqGIwV4BNdNzwNY","tlshash":"9bc1fd91041704409b835cd227ce7f34fe1f92116544d0b9abfc9b6beddbda6426836e","first_seen":"2025-09-08T23:56:02.073922Z","last_seen":"2026-03-05T16:22:21.514891Z","times_seen":5277,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":128,"dns":2,"connect":25,"send":0,"wait":20,"receive":0,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/zpp/zpp4.js?q22q2q2","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /zpp/zpp4.js?q22q2q2 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 12 Sep 2025 20:23:11 GMT\r\netag: W/\"68c4812f-9853\"\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8YJMk0QX%2BZw3YBLW8zhjel1MczsbkrKGgXCvHsO9Ub08WmCXlBHldkBG6KC4EsutqS9M2BahBByf5XevZBFky83gJmlzabay6p6ll3CVxHs%3D\"}]}\r\ncf-ray: 97e9aed4a8992678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38995,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (38995), with no line terminators","md5":"7dc63553536847077855df4f82f1ec18","sha1":"146c3aac34cb4e7e1e9c692ccd0161b2e4f018de","sha256":"3a18b1964d1d209c46d754459b9ef98d4a9a85065e245f8311be727ffee3f960","sha512":"16a867da1604319c7340f60b78619567731ed0e290cd804defb58f679f047b027d7e2beba8ac6893faa92dc6ed2d44eb9368ff832329b7eb6b858f6d27062b4b","ssdeep":"768:uAWlJPlQwU1CNCHq625Q3jh3GEUlb6haABXR4q:uduwU1CNwq62Ua6haABXRx","tlshash":"4d0384dc7cc270613a6371aa55ef3259937776001d9e6164a029e0e37d3588fd2a3eec","first_seen":"2023-03-07T12:40:02Z","last_seen":"2026-02-07T15:24:54.098703Z","times_seen":1821,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":571,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/uploads/2019/04/TwoDDL-bgd-GOT-John.png","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:43.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/uploads/2019/04/TwoDDL-bgd-GOT-John.png HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:44 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QENSLppO1puUNC27bLF%2FjfOnOC3tQruwizcJQDmuGA%2BFXzzvedTt0nJqEJwK0%2FyhnFFH4s5Vztxkhxi49KnqA29tqfxl60KjuACI4h%2B5tw8%3D\"}]}\r\ncf-ray: 97e9aedfd8f12678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":260895,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1300 x 146, 8-bit/color RGB, interlaced","md5":"cbbf7bce9e9a2cf060e97b0de6f09423","sha1":"2e0ab30481a2e96ecb7b873f4f67fa06c9b04dac","sha256":"e24446c83d165452b4453b94b7cbb947b5c0e34879c95a8201189492ad14c151","sha512":"d603b473005a960ca95ea6577f86b0d35368c3481c05e33e3d1c296cc6825e463d36e6db295d9c68ef2562338208911a43dcc04149dd902a11cbe43502ee53d1","ssdeep":"6144:/IOSmJoLg0ZdhrRMevv1ABFf4ry4kSsyiklH+LIrBCUQwdhQr:wmJIkeifcktxkQkr3bdyr","tlshash":"5944238ae9c63afe7dc8405af0b177a8ee583543121116b91225f8f5927f1faed4d310","first_seen":"2025-06-05T20:53:03.427728Z","last_seen":"2026-03-05T08:34:57.533961Z","times_seen":19,"resource_available":false,"data":null}},"time_used":1450,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1123,"receive":327,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/themes/oneway/css_fonts/raleway-medium-webfont.woff2","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:43.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/themes/oneway/css_fonts/raleway-medium-webfont.woff2 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/wp-content/themes/oneway/css_fonts/font_style.css?x27119\r\nCookie: view=1; view=1; view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:44 GMT\r\ncontent-type: application/octet-stream\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gkzKztTqpPYRmE9jah2rc5Cbw0oeiMSv37%2Bo5XHiP79dvSWjgUaKnitFlMJ6P5%2BTm7gQdsXgyozpy8IB%2Bt7vBWngzDeXkqJ19KftspP1x3k%3D\"}]}\r\ncf-ray: 97e9aee038f92678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25513,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 25964, version 3.0","md5":"f776e3783e95c3f3167a5d352653824d","sha1":"9684f51a0cfa53f082a449af7d6e802bda406c71","sha256":"992c182c4963a1632ee1a82049eb0bb4ad5a9a492b6016a3e18d26490a46fc69","sha512":"56fd40cced3fcef6a1106bdedf92edf6f3f49beffedb642c6c141d341b12f1d5d323932fc591c87b6aef7f3745ab87310600c756288c2c5542b03a316bdda347","ssdeep":"384:3YzhiAx548Yi/5ZEtmBgW+LvcyY3z4MhsinmXgQgFE9zjsufFxlmtO1PhpM0aMqv:o3x5HYi/Y40MNmXgQ77fnctO5hpMZpv","tlshash":"3cb2d0cb05e7eda1c12179ad7236fdac4f1991c34fb2243a610fe57568993b8f9e10a0","first_seen":"2025-01-01T17:19:31.420832Z","last_seen":"2026-03-05T08:34:57.535699Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1167,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":1137,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-13T18:24:39.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Sep 2025 18:24:41 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B84MWPrajxEOCxxR6Fw9C1%2B2rplaLO1u0R6eWyhOAfYiojjN3YFnAAsjxm0etpHJq3507MN%2BIGgkb6xYuQK%2FgcLoisoMAO6V0MtCKBGU\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:40 GMT\nPHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd; Path=/\r\ncf-ray: 97e9aec94b3c5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"DataTables","description":"DataTables is a plug-in for the jQuery Javascript library adding advanced features like pagination, instant search, themes, and more to any HTML table.","website":"https://datatables.net","common_platform_enumeration":"cpe:2.3:a:datatables:datatables.net:*:*:*:*:*:*:*:*","icon":"DataTables.png","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"WordPress:5.2.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":120555,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3129), with CRLF, LF line terminators","md5":"4612e7a57f7be609faedf0d402ec6725","sha1":"0cb00e9bdadbd8051004a16b427c8deca7fddb4c","sha256":"b657bdbfceaac7f7c1cf222b877c53508f3e053daa4fb335cae7054a1305c249","sha512":"7ce9fb9fd52c422b27b6ac96086ec8283a110e141e41e2624decf93ec3c2d1aa858c8a18b715885a708eac36370b9f4bf55ca2199799c0d03944e2ca5a8c53c6","ssdeep":"3072:pPzFq/OilGMVlGMBlGMPMM+Rpp0wi3ZddXgeefR9DqPJIK:e/OilGMVlGMBlGMPMhtTK","tlshash":"f9c3d8f357a4c0ba457f29e9ee727f1e788e5176ee424d45a2f8db898783ec2d604400","first_seen":"2025-09-13T18:25:15.673258Z","last_seen":"2025-09-13T18:25:15.673258Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1652,"timings":{"blocked":69,"dns":46,"connect":1,"send":0,"wait":1514,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/uploads/2018/12/colbert.png?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/uploads/2018/12/colbert.png?x27119 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:42 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vLERnnnwzfskYQL%2FPU0sgO76hLT%2BbEE%2FMTEIe%2Bw5qI4R6o7MDJZ%2FqNi4SC3DOf2rxoRTRgBOKnoqNeGUHUJDxkKoAfEaUi2LQgLArwgwTNo%3D\"}]}\r\ncf-ray: 97e9aed488872678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61898,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 442 x 145, 8-bit/color RGB, non-interlaced","md5":"da3a5bdf7cc0b31edace751c773ac71f","sha1":"38a09d42f526ea696f872ff701db87d12c0995fd","sha256":"0be40139b4c2b68ccd1eb2bd08aa78911716da180ff38ee05abb681f6fd1fcee","sha512":"661dce7f01b0c086f886e9b78b6f3797ed980168ec37199d0ee61f29e200e3fd1d87025b685c7059622d000aba05676963333f0e65c2b37e4dcb517abce78ca9","ssdeep":"768:/Zi/Acq0w2aO25a3RVxdKq05vDpP2ke9WhifoyFOy2N+OjVnJB2DVpjocUVW8Lh1:BiJraO6aBVaq0RQkGLgycyg+Dzv4Lplz","tlshash":"ac53024dd3215acf696654c5efc0416236aae8bf5c85b38f5ccbfc1a3e8c80414669af","first_seen":"2025-01-01T17:19:31.423757Z","last_seen":"2026-03-05T08:34:57.483215Z","times_seen":20,"resource_available":false,"data":null}},"time_used":868,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":807,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/themes/oneway/js/jquery.nicescroll.min.js?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/themes/oneway/js/jquery.nicescroll.min.js?x27119 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:43 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FGVOF37KF%2BXTsnzsj7FoShNDF40UGJvY8%2F9kfWAp2C0F7O%2FquF%2BtJEEjFRHWMaEXJqB9%2BXrxLYt5HuhW7M%2B3%2BDXwRA8nN5Y258cCNyUL%2Bxs%3D\"}]}\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:42 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97e9aed498902678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60031,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (59932)","md5":"49fe6a4a6084f455fa6e0ae8a56ea06f","sha1":"00685bce63fd98d67b2907b244841e43b13d071d","sha256":"6cd7b6480ced1011bc2eb150b85f07f2895d6d07f1760941d6d8a5862f0d368b","sha512":"6bf379d8c78e68241dc74a5902e1c375f287ce36ad051b984e9abd1e76f948966717170af69dd0304b1b66956a5215cafa989dcc17eef86c6c012d631fb87b95","ssdeep":"768:8Jza49Lluc96Hj113vGPPjDhiz7o2D00SJUcZ:8Jh673AjUz7oYUlZ","tlshash":"e943c6ceb521706a01cf9236d0cb4746613ae55a670a84d8b138dcf82e75ab5b237f7c","first_seen":"2025-01-01T17:19:31.404232Z","last_seen":"2025-11-21T16:59:44.076039Z","times_seen":10,"resource_available":true,"data":null}},"time_used":1439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1410,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/app/apx14.js","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /app/apx14.js HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:42 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 12 Sep 2025 20:23:11 GMT\r\netag: W/\"68c4812f-1def\"\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i3JzI%2FmTlPdAgQ%2FNhjclci18HVBeiCd8XOa0TA8AtmWl5dpD3b8toyum4ReNKARowJMoJZ1wSPt7CqAJ902QqNVpx6GXXXopKDSmmQjxqRw%3D\"}]}\r\ncf-ray: 97e9aed4a89a2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7663,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7663), with no line terminators","md5":"dfb1f327618e201778f2de85cfbcd173","sha1":"fceb89a2221463e5bc5a71feff1247683ab08cc5","sha256":"dc03bc8b63938916a73dd976e186d05559ddc61da2725e1063b7936fa9f0fc33","sha512":"045078f42281ee89b820f40a68d9d04931683f596c8e3ced0a1b10781d2b57b37d6c006dd8d576ba717ae9093da9fa3ba26b40fcd04b76289024aa9e08154e81","ssdeep":"192:aHvolQ/u7VCKYVYmodXskiQUfZNk5Xs590AoLkK0Nqk:aQK7zVWdXsiq5BShG","tlshash":"c8f18c887ad6f00b179d5913ae5f2abd107b54a2a2e47507c3a8f6cd14ed10bc17adc8","first_seen":"2023-03-07T12:40:02Z","last_seen":"2026-02-07T15:24:54.140606Z","times_seen":1824,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directlycascade.com/a0/32/b4/a032b4d33c8aea68a4f9b84235614bff.js","fqdn":"directlycascade.com","domain":"directlycascade.com","tld":"com"},"ip":{"addr":"192.243.59.20","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"directlycascade.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 11:12:27 GMT","end":"Tue, 09 Dec 2025 11:12:26 GMT"},"fingerprint":{"sha1":"76:17:4A:20:73:64:94:52:3B:6A:50:E2:7C:F7:F5:73:52:38:47:A4","sha256":"66:CD:95:7F:5E:D7:56:27:7A:6F:3B:80:CB:84:DC:89:A0:F0:BB:44:49:55:B4:81:76:24:2E:38:E3:FC:78:29"}}},"request":{"raw":"GET /a0/32/b4/a032b4d33c8aea68a4f9b84235614bff.js HTTP/1.1\r\nHost: directlycascade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.5\r\nDate: Sat, 13 Sep 2025 18:24:42 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 30080\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nSet-Cookie: 4b4e7ab587d59b22ad7bcd2439afc363_FEATURES-2379=0; expires=Sat, 13 Sep 2025 18:24:42 GMT; secure; SameSite=None\r\nHost: directlycascade.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: b071bb9637c60be6efcf92bcf3853eca\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.19.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76529,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9d589972b9b34d860a13bf3e69dcd83a","sha1":"3c5b953f19642a42b0c7c66807dee3dee615a932","sha256":"d2efd98f78273b9a92b0df45019ec7d1c44d1302fcd089a33f195158837b9fbb","sha512":"49be52f7d09801fafb46e7a5d7df9e32791f82399cd425fbb334d037796b3a6871e7ed4d22f2cf82690a0a8ec356049b6c029cabd4ceaccad0fffbaa45f7a29f","ssdeep":"768:4L+yFuc4NZiUUZDAKLWSCmizSjxRVYiZR8jkXWfCTkAH7JUiKCgmRnXaJLqJtn0x:4QZfCzOmKmt89+5q8TdAjrHMVfITh+q","tlshash":"e673c58a7f46b36902b26073216f1407f02b1c9654acd448d607fadc2f25b6df976b39","first_seen":"2025-09-11T11:42:38.474395Z","last_seen":"2025-09-16T12:28:24.34534Z","times_seen":8,"resource_available":false,"data":null}},"time_used":762,"timings":{"blocked":269,"dns":12,"connect":94,"send":0,"wait":102,"receive":94,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-13","alert":"Sinkholed","trigger":"directlycascade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msdoj.com/sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8","fqdn":"msdoj.com","domain":"msdoj.com","tld":"com"},"ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"msdoj.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 00:32:12 GMT","end":"Fri, 28 Nov 2025 00:32:11 GMT"},"fingerprint":{"sha1":"A8:56:C4:4B:26:AD:D5:72:31:67:E8:75:28:D7:6C:F5:D6:A1:E2:B5","sha256":"65:DA:95:54:55:5B:C8:18:65:43:99:33:52:5B:EF:99:EF:5E:0F:AC:FB:6E:F7:6A:27:0B:3B:6A:69:3C:78:C7"}}},"request":{"raw":"GET /sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8 HTTP/1.1\r\nHost: msdoj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://2ddl.dirproxy.me/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 13 Sep 2025 18:24:42 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 64136\r\nConnection: keep-alive\r\nCache-Control: no-store, max-age=0\r\nAccept-Ch: Sec-CH-UA-Platform,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform-Version\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64136,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64136), with no line terminators","md5":"39e1b98384d6fec52b44a5050fde0a29","sha1":"1298a7e75b14e0548b0cd285cf1a471622698b98","sha256":"d0d1ae14134848c9613d890e353005584cdd1c3ef5217016906c713db42e8e77","sha512":"e1030da1a5cdd7d569f6fbcc09fc5ee21deb3d2a5bf0d0cf4bbbbf498f80fbe44532e51f60c52535031ad8a8b7916c602a19964a63b4af31833c44350b764449","ssdeep":"768:hCflSCRC850RCX+4D+R8WyX+86wA6C8CflJu4sTJ+zaXeXgtA9zk4sTJ+HXJpZ6k:qvV50gPowAzJfTqUF","tlshash":"1753d698b5d2f1a102c370b8543f6106b2366929248dc098f7b5ded5ad78d6ea633f3c","first_seen":"2025-09-13T18:25:15.679668Z","last_seen":"2025-09-13T18:25:15.679668Z","times_seen":1,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":157,"dns":58,"connect":31,"send":0,"wait":63,"receive":33,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gtag/js?id=UA-128891502-1","fqdn":"gtag","domain":"gtag","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:43.457Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /js?id=UA-128891502-1 HTTP/1.1\r\nHost: gtag\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-13","alert":"Sinkholed","trigger":"gtag","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/themes/oneway/css_fonts/raleway-bold-webfont.woff2","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:43.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/themes/oneway/css_fonts/raleway-bold-webfont.woff2 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/wp-content/themes/oneway/css_fonts/font_style.css?x27119\r\nCookie: view=1; view=1; view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:44 GMT\r\ncontent-type: application/octet-stream\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8o%2F4KPHS8qgCARA2aV0%2B5%2BZueIABDfyo0GmcOubjpnctWLx4UZZ1DS8vCkOV%2FBtQFuuAoqmrFnQKSXlCEzvz%2FwvffyYAXDWxbNlaYh6oLjs%3D\"}]}\r\ncf-ray: 97e9aee008f72678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25392,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 25392, version 3.0","md5":"6f1db4785e50e4d8543737721afe92c9","sha1":"d699a926586d532f4e41bb859ec47f090d57026b","sha256":"24caceddf170581b440267ce4a1fe0269cf10aa634cec1f5a08aac9d36f9bd1f","sha512":"137f520b6df7104877f7705b2cff469db587e4c1769d2851888c3f0da223984e2b73d2f516dfefc3e33f362263cad15a661e1f8228aa76bbd9529e13f8dcf204","ssdeep":"384:92dUzT+WHUx4+8oMh9utfA3ippgcRscIrN/JQuTQ5C5wSlvwMsocTSKa:cdUzTRC9HtK6pgsCxQJqvwip","tlshash":"d7b2d1b8074ead22e662a7f0d0346e13d1fba94322491777895e3a619f816c78483fdd","first_seen":"2025-01-01T17:19:31.463696Z","last_seen":"2026-03-05T08:34:57.504697Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1013,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":984,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/librefranklin/v20/jizDREVItHgc8qDIbSTKq4XkRiUf2zc.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:43.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 08:41:01 GMT","end":"Mon, 17 Nov 2025 08:41:00 GMT"},"fingerprint":{"sha1":"41:D2:08:38:86:84:32:C2:76:B6:A0:7C:F7:02:4C:C5:55:4E:2F:1E","sha256":"A5:34:21:73:D5:FC:24:AF:0D:8A:56:A2:A7:5C:BD:41:46:45:3B:DE:78:A3:6B:67:9C:80:C8:44:02:A9:12:D0"}}},"request":{"raw":"GET /s/librefranklin/v20/jizDREVItHgc8qDIbSTKq4XkRiUf2zc.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://2ddl.dirproxy.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29292\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 08 Sep 2025 23:20:16 GMT\r\nexpires: Tue, 08 Sep 2026 23:20:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 17:58:55 GMT\r\ncontent-type: font/woff2\r\nage: 414267\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29292,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29292, version 1.0","md5":"bc34823f42d59bf550e99604c4a1cb08","sha1":"cfaf56855c8113d9e461e154d1e225e09b8a258d","sha256":"52e605852c72cc2df1473df1fb7f26a3a0be58e31835bc8f33f29b1918c82cbd","sha512":"ea2cde28aa5332697b4538e0a67bdcb61afa2c0603f302268cc3ffb6866409916539c919b1f1d4a05b480072c417d70e73c060198325e8730b7a54483e8c2b5d","ssdeep":"384:xRWnMC/6Y9cLA6b8+K2Wn2iMJmtaHqkmBJ4SYe2KOeugFKnGgWz/kUN2zWppbt9U:uMTpA0AimtaHoLYe2KfKGP/5NYsp5jdO","tlshash":"dbd2f1578470a5c488452db4922ccdc9c7d89ff1a9bc0a0a1cd274b9cbf05ddd1cabc9","first_seen":"2025-09-09T00:23:24.758315Z","last_seen":"2026-04-20T13:53:53.660006Z","times_seen":3739,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":113,"dns":1,"connect":15,"send":0,"wait":16,"receive":9,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"matomo.hellohi.me/matomo.js","fqdn":"matomo.hellohi.me","domain":"hellohi.me","tld":"me"},"ip":{"addr":"104.21.64.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:43.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hellohi.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 02:30:09 GMT","end":"Wed, 10 Dec 2025 03:27:45 GMT"},"fingerprint":{"sha1":"77:E9:73:0D:B1:FF:D8:33:D2:70:E5:D7:AC:43:15:25:3B:5E:8E:B7","sha256":"1F:E0:AF:A2:3A:69:98:87:C5:49:EF:0B:41:08:52:24:C5:3A:2B:56:AD:92:AD:93:7F:5C:00:22:3F:66:FE:4E"}}},"request":{"raw":"GET /matomo.js HTTP/1.1\r\nHost: matomo.hellohi.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 13 Sep 2025 18:24:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NqkuiE%2Bs2Cpzglp0zNFeOWiTOUVQXeqQfgohRsFk3preHAv%2Bb4y4fE5UNlOjzHdMZvRdJfFQ9KXBSnOITOC%2FpyFp5GRggZKRtkCpYpPbnrRc\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 97e9aee0e9c721fe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":44,"dns":23,"connect":1,"send":0,"wait":134,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2ddl.dirproxy.me/wp-content/uploads/2019/06/t3465346443-e1561441264820.jpg?x27119","fqdn":"2ddl.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2ddl.dirproxy.me/","date":"2025-09-13T18:24:41.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /wp-content/uploads/2019/06/t3465346443-e1561441264820.jpg?x27119 HTTP/1.1\r\nHost: 2ddl.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2ddl.dirproxy.me/\r\nCookie: view=1; PHPSESSID=tgo5h82g9ng6kleqvr8epl3kpd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 18:24:42 GMT\r\ncontent-type: image/jpeg\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 18:24:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sm8vvXHfFXoM7DANHCs3VT8aA66%2F5klbIueR6ERpdX1S900SRWPrqvWdmgsKPfGBZDp6vrvrgUxhHlTb%2F1MkREosCLduTjZ9XDySbNxMPH8%3D\"}]}\r\ncf-ray: 97e9aed4888b2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7814,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"7eef4b07fe78c6cd9fa32ae982674786","sha1":"1b219834462a9b120eed34a6574cb445788253d4","sha256":"0ffea93d505283a65ab45501fd0db2da4dc8ae2f2f4aa97ec7276c79d02ce62d","sha512":"8e056102257771f60a79a7284570723be79d0024e9ba61b1419a1e3abaadb06e65d44839c43c6cbf2886a970cfaa6389f13b41ef1f371598909d2486aecb2166","ssdeep":"192:/fp1a0rJUQ0/+Twe/pOJFM7ONFfZ6RoQGD9zOx:Hp1z9hUe/eZe094","tlshash":"6cf18ca3de364dd35b2a8ffd2f924c75629ba4202b4076d51b72c56347002c56dee1c9","first_seen":"2025-01-01T17:19:31.45367Z","last_seen":"2026-03-05T08:34:57.567103Z","times_seen":20,"resource_available":false,"data":null}},"time_used":803,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":801,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}