{"report_id":"83af2717-c624-4c8f-b3e1-c4802ca0a4ad","version":6,"status":"done","tags":[],"date":"2025-09-13T16:35:05Z","url":{"schema":"http","addr":"ilcorsaronero.piraproxy.net/","fqdn":"ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ilcorsaronero.piraproxy.net/","fqdn":"ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"title":"ilcorsaronero.piraproxy.net - iTALiAN Torrent Search Engine"},"submit":{"url":{"schema":"http","addr":"ilcorsaronero.piraproxy.net/","fqdn":"ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-18T16:35:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-13","alert":"Sinkholed","trigger":"directlycascade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-10T15:14:38.264059Z","alert_count":0,"request_count":1,"received_data":6432,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"s-ilcorsaronero.piraproxy.net","ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-02-15","domain_rank":0,"first_seen":"2025-09-13T16:35:05.959088Z","last_seen":"2025-09-13T16:35:05.959088Z","alert_count":0,"request_count":23,"received_data":61619,"sent_data":11696,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ilcorsaronero.piraproxy.net","ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-02-15","domain_rank":0,"first_seen":"2025-09-13T16:35:05.97001Z","last_seen":"2025-09-13T16:35:05.97001Z","alert_count":0,"request_count":7,"received_data":183595,"sent_data":3613,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"vmuid.com","ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2018-10-22","domain_rank":182910,"first_seen":"2019-07-09T14:53:12Z","last_seen":"2025-09-08T17:17:57.816484Z","alert_count":0,"request_count":1,"received_data":10466,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"msdoj.com","ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-07-01","domain_rank":211684,"first_seen":"2025-07-02T02:58:17.140394Z","last_seen":"2025-09-11T11:42:32.484667Z","alert_count":0,"request_count":1,"received_data":64496,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"origunix.com","ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-11-30","domain_rank":343993,"first_seen":"2021-11-30T12:40:27Z","last_seen":"2025-09-09T03:50:44.002735Z","alert_count":0,"request_count":1,"received_data":64541,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-10T15:11:19.040403Z","alert_count":0,"request_count":1,"received_data":21447,"sent_data":579,"comment":"","tags":null,"fingerprints":null},{"fqdn":"feeds.feedburner.com","ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2003-12-02","domain_rank":3664,"first_seen":"2012-05-21T20:26:33Z","last_seen":"2025-09-11T20:36:52.362163Z","alert_count":0,"request_count":1,"received_data":1413,"sent_data":486,"comment":"","tags":null,"fingerprints":null},{"fqdn":"heartilyscales.com","ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2022-12-16","domain_rank":2862533,"first_seen":"2022-12-16T08:32:11Z","last_seen":"2025-09-11T11:42:33.26704Z","alert_count":0,"request_count":1,"received_data":77443,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"matomo.hellohi.me","ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-07-03","domain_rank":0,"first_seen":"2019-07-03T20:13:04Z","last_seen":"2025-09-11T11:42:33.295666Z","alert_count":0,"request_count":1,"received_data":601,"sent_data":427,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"directlycascade.com","ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2025-09-10","domain_rank":0,"first_seen":"2025-09-10T21:14:18.585097Z","last_seen":"2025-09-10T21:14:18.585097Z","alert_count":2,"request_count":2,"received_data":188376,"sent_data":928,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i.ibb.co","ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"2010-07-20","domain_rank":21643,"first_seen":"2018-11-25T10:13:48Z","last_seen":"2025-09-07T21:30:13.247298Z","alert_count":0,"request_count":1,"received_data":5916,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"metrica-yandex.com","ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-09-14","domain_rank":422485,"first_seen":"2021-09-19T04:17:37Z","last_seen":"2025-09-11T12:51:12.53921Z","alert_count":0,"request_count":1,"received_data":60999,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"theusualsuspectz.biz","ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-01-27","domain_rank":2024659,"first_seen":"2023-01-27T01:27:31Z","last_seen":"2025-09-11T11:42:32.415076Z","alert_count":0,"request_count":1,"received_data":49085,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ilcorsaronero.piraproxy.net/","fqdn":"ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5779365b0a28c08298ca5847c65b769d","sha1":"3076ad9e094690cd6c4ee200ae254e6e7260fd30","sha256":"57c620405714b8baa51067e0ca9bc9a9b252985292b857360aec8a9936688709","sha512":"cab14c9b7afc3b08d77e93fa0f8bd5c6c1a6ad4966a4e6981b11ef0e5fad899e4cc63bdbfbaade0d418e0e97045088da763fc5584a61ad0bfe1573d39a34e5cf","ssdeep":"","tlshash":"a8800080c0a300a008002308c2008033802020803002000083088ce38808838b0302ea","size":26,"data":"","first_seen":"2023-03-07T12:40:02Z","last_seen":"2026-02-07T15:24:54.16288Z","times_seen":1726,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@400\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:43.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 08:41:02 GMT","end":"Mon, 17 Nov 2025 08:41:01 GMT"},"fingerprint":{"sha1":"ED:FC:A5:F2:F4:07:8E:0E:EA:C7:96:D8:BE:47:04:EE:34:72:47:E9","sha256":"42:1D:9B:CD:2D:EC:4C:72:94:02:2C:88:B5:FF:BC:A2:B8:35:1B:C6:E0:B5:97:71:DB:7D:5B:6A:FA:CA:C1:8A"}}},"request":{"raw":"GET /css2?family=Roboto:wght@400\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ilcorsaronero.piraproxy.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 13 Sep 2025 16:34:43 GMT\r\ndate: Sat, 13 Sep 2025 16:34:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5746,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"017672004526d49c616a83a1885ca6cb","sha1":"317c4a759af5149d1777a5c195c2030c842d4b70","sha256":"6ad67efe8c01a7f843a39344a43ca877e30726dd0cae6db3ce719a22a63bbc70","sha512":"f1dbb144b98e0a05fcaefd0367bb48be095ce28add6c7e8e8ac4d6b4b31dd76e2a7edaa4587bb78841aac8d679c53ba06e7a98775e9c6eaeee11c18c4f251ed7","ssdeep":"96:1OEbaNllOEbaNsFZKOEbaNWOEbaNVTOEbaNVy+aZjzBrgOEbaNIubqGIFuV4yOE6:2NlmNMNVNVkNVqbNfbqGIwV4BNdNzwNY","tlshash":"9bc1fd91041704409b835cd227ce7f34fe1f92116544d0b9abfc9b6beddbda6426836e","first_seen":"2025-09-08T23:56:02.073922Z","last_seen":"2026-03-05T16:22:21.514891Z","times_seen":5277,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":120,"dns":0,"connect":7,"send":0,"wait":19,"receive":0,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s-ilcorsaronero.piraproxy.net/images/details.gif","fqdn":"s-ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:43.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 22:10:23 GMT","end":"Thu, 16 Oct 2025 23:08:47 GMT"},"fingerprint":{"sha1":"11:AF:80:6B:A4:DB:8D:A6:3D:BD:32:97:52:F3:BE:55:C2:80:84:56","sha256":"FB:27:A7:CA:E0:F0:6F:8A:A4:CC:F0:A9:FA:55:EF:11:22:B0:4E:70:92:B8:B3:51:FD:2D:B2:F1:7A:A2:C6:CD"}}},"request":{"raw":"GET /images/details.gif HTTP/1.1\r\nHost: s-ilcorsaronero.piraproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ilcorsaronero.piraproxy.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 16:34:44 GMT\r\ncontent-type: image/gif\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 16:34:44 GMT\nPHPSESSID=sor4g4448h77rtg0927u2gh5b4; Path=/\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3ybIOre7SQk0OUrmN6NJLKUW0Fm%2BiU7wDmFMzjIJ96QgsvlTMagnCT%2B%2FVnKN6ctH%2BL0VqRCOQIwF3ysPfym1V71PN9ercnJdBv69tMzs%2FvThepYaE6KBdqKK7A%3D%3D\"}]}\r\ncf-ray: 97e90dc0892e5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 12 x 13","md5":"2a22c9c6b3b21659a7923b05bdcab066","sha1":"f1c9253b0444867fb9ae427e6ca061c513b8b70d","sha256":"4b85658183a2016b229c09c48a96e5b8f4ebea6b3ccfb08dc8d1ccf8f71a67f4","sha512":"a35c2f80b488fab21c5c59c5d65e69e998f090018fbee64d12a3565bd867a694eb0fba3c503688973b2653c6d2c3f6165e1f65a14dad43e7bbf9906bb740a001","ssdeep":"","tlshash":"27a024d17dcc04304d3cc0710d37034d351400dc0c0c10c0700c100f347d0755530d14","first_seen":"2023-05-10T10:01:16Z","last_seen":"2025-09-15T00:13:34.578322Z","times_seen":18,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":598,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s-ilcorsaronero.piraproxy.net/images/mu.gif","fqdn":"s-ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:43.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 22:10:23 GMT","end":"Thu, 16 Oct 2025 23:08:47 GMT"},"fingerprint":{"sha1":"11:AF:80:6B:A4:DB:8D:A6:3D:BD:32:97:52:F3:BE:55:C2:80:84:56","sha256":"FB:27:A7:CA:E0:F0:6F:8A:A4:CC:F0:A9:FA:55:EF:11:22:B0:4E:70:92:B8:B3:51:FD:2D:B2:F1:7A:A2:C6:CD"}}},"request":{"raw":"GET /images/mu.gif HTTP/1.1\r\nHost: s-ilcorsaronero.piraproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ilcorsaronero.piraproxy.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 16:34:44 GMT\r\ncontent-type: image/gif\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 16:34:44 GMT\nPHPSESSID=hcedsqjp32o3vr6v8lclh6m163; Path=/\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YuhwqHs8mfJx5zTlKoD7ZA7V8NmI1CJ39vqRwG1mjnEpyD8PZ0xCngz9LltVOWrjaMFdEWDnrg2S%2FHI9b1hjxGt2JWlB9fSXs1YkuOtoG3s7aLIE8AI6JPsNHw%3D%3D\"}]}\r\ncf-ray: 97e90dc089305685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2264,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 124 x 27","md5":"e5b00a667467b4a869462b9ccbf72404","sha1":"dedfe6e6fea8bea6bca5f7d4311ffdbba861ac10","sha256":"d2fc0a32dc4cf0c819565960caf95dc1db64474ab468a9494160a3290c88ad70","sha512":"47a5531148b42c681a299fa641df2e0a1a62a055994ff545dfa9792bcc4643b2f9be1168312d2b15d9c41b95ecfe31c8146e8c8084ff646cc41d9c3b50418742","ssdeep":"","tlshash":"eb41086572464410f29e46fd930bada2ec13a50833927e41ecfe9292a0b99221992576","first_seen":"2023-05-10T10:01:16Z","last_seen":"2025-09-16T09:27:36.638007Z","times_seen":18,"resource_available":false,"data":null}},"time_used":701,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":659,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ilcorsaronero.piraproxy.net/zpp/zpp4.js?q22q2q2","fqdn":"ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:43.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 22:10:23 GMT","end":"Thu, 16 Oct 2025 23:08:47 GMT"},"fingerprint":{"sha1":"11:AF:80:6B:A4:DB:8D:A6:3D:BD:32:97:52:F3:BE:55:C2:80:84:56","sha256":"FB:27:A7:CA:E0:F0:6F:8A:A4:CC:F0:A9:FA:55:EF:11:22:B0:4E:70:92:B8:B3:51:FD:2D:B2:F1:7A:A2:C6:CD"}}},"request":{"raw":"GET /zpp/zpp4.js?q22q2q2 HTTP/1.1\r\nHost: ilcorsaronero.piraproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ilcorsaronero.piraproxy.net/\r\nCookie: view=1; PHPSESSID=vfvu4opcbs2680eihgol918tmo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 16:34:44 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 12 Sep 2025 19:15:08 GMT\r\netag: W/\"68c4713c-9853\"\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xWwAQ8e2yruOWh7%2BmdfiIaXPtsZDUGtyFD2ZMZpI1weXdtYmzERTzQad9ZMtMHjG%2B0iu7J2tyU%2B2BKIf%2B5tDYIiOOfILN9jal6CIP%2F3GREKTP66X%2F7IjZFg%3D\"}]}\r\ncf-ray: 97e90dc029245685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38995,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (38995), with no line terminators","md5":"7dc63553536847077855df4f82f1ec18","sha1":"146c3aac34cb4e7e1e9c692ccd0161b2e4f018de","sha256":"3a18b1964d1d209c46d754459b9ef98d4a9a85065e245f8311be727ffee3f960","sha512":"16a867da1604319c7340f60b78619567731ed0e290cd804defb58f679f047b027d7e2beba8ac6893faa92dc6ed2d44eb9368ff832329b7eb6b858f6d27062b4b","ssdeep":"768:uAWlJPlQwU1CNCHq625Q3jh3GEUlb6haABXR4q:uduwU1CNwq62Ua6haABXRx","tlshash":"4d0384dc7cc270613a6371aa55ef3259937776001d9e6164a029e0e37d3588fd2a3eec","first_seen":"2023-03-07T12:40:02Z","last_seen":"2026-02-07T15:24:54.098703Z","times_seen":1821,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ilcorsaronero.piraproxy.net/app/apx14.js","fqdn":"ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:43.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 22:10:23 GMT","end":"Thu, 16 Oct 2025 23:08:47 GMT"},"fingerprint":{"sha1":"11:AF:80:6B:A4:DB:8D:A6:3D:BD:32:97:52:F3:BE:55:C2:80:84:56","sha256":"FB:27:A7:CA:E0:F0:6F:8A:A4:CC:F0:A9:FA:55:EF:11:22:B0:4E:70:92:B8:B3:51:FD:2D:B2:F1:7A:A2:C6:CD"}}},"request":{"raw":"GET /app/apx14.js HTTP/1.1\r\nHost: ilcorsaronero.piraproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ilcorsaronero.piraproxy.net/\r\nCookie: view=1; PHPSESSID=vfvu4opcbs2680eihgol918tmo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 16:34:44 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 12 Sep 2025 19:15:09 GMT\r\netag: W/\"68c4713d-1def\"\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=icdwBli8HZvyttqkBx%2F1ZHyGjFz9omzNrIcANtaXxWjTKHakJywJBnqDowgyDuOTgHf7%2BmO9F7bWkrqJgOwB282kZ3TWxOrK%2F2j7SNBh7TDrI6VB1pU7qR0%3D\"}]}\r\ncf-ray: 97e90dc029255685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7663,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7663), with no line terminators","md5":"dfb1f327618e201778f2de85cfbcd173","sha1":"fceb89a2221463e5bc5a71feff1247683ab08cc5","sha256":"dc03bc8b63938916a73dd976e186d05559ddc61da2725e1063b7936fa9f0fc33","sha512":"045078f42281ee89b820f40a68d9d04931683f596c8e3ced0a1b10781d2b57b37d6c006dd8d576ba717ae9093da9fa3ba26b40fcd04b76289024aa9e08154e81","ssdeep":"192:aHvolQ/u7VCKYVYmodXskiQUfZNk5Xs590AoLkK0Nqk:aQK7zVWdXsiq5BShG","tlshash":"c8f18c887ad6f00b179d5913ae5f2abd107b54a2a2e47507c3a8f6cd14ed10bc17adc8","first_seen":"2023-03-07T12:40:02Z","last_seen":"2026-02-07T15:24:54.140606Z","times_seen":1824,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directlycascade.com/a0/32/b4/a032b4d33c8aea68a4f9b84235614bff.js","fqdn":"directlycascade.com","domain":"directlycascade.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:43.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"directlycascade.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 11:12:27 GMT","end":"Tue, 09 Dec 2025 11:12:26 GMT"},"fingerprint":{"sha1":"76:17:4A:20:73:64:94:52:3B:6A:50:E2:7C:F7:F5:73:52:38:47:A4","sha256":"66:CD:95:7F:5E:D7:56:27:7A:6F:3B:80:CB:84:DC:89:A0:F0:BB:44:49:55:B4:81:76:24:2E:38:E3:FC:78:29"}}},"request":{"raw":"GET /a0/32/b4/a032b4d33c8aea68a4f9b84235614bff.js HTTP/1.1\r\nHost: directlycascade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ilcorsaronero.piraproxy.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 13 Sep 2025 16:34:44 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 30506\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nSet-Cookie: 4b4e7ab587d59b22ad7bcd2439afc363_FEATURES-2379=1; expires=Sat, 13 Sep 2025 16:34:44 GMT; secure; SameSite=None\r\nHost: directlycascade.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: fc80168b6dce005eb90291830fda2ebd\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76494,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"15c278471b0d0a0e967a174bbe2d8523","sha1":"e157988b4ea6682f1b1ca4f5e72025bf386280ab","sha256":"686c2e42d9c8e137cbe8b9caff1f9dad96677d23365af008e7bb8d14d04469a0","sha512":"3325be205a5d523955e65faa164d9cd808c2b4b238f6b1e68be42518304dda70936df544e12d6c7cc1189c41f00465d1c957fcb444f6bd8c42229b064357af08","ssdeep":"1536:qvxKuAEEm3pEEim4m8dMI6mXpH1fPzdsRt:XuAQWRHm6MI6m5Jwt","tlshash":"5073b8897f50b05cc3da6577322fa40ae06a1d42a14cf45ce122e8a4ffaa71df53b958","first_seen":"2025-09-11T15:43:46.485021Z","last_seen":"2025-09-17T07:56:24.38977Z","times_seen":11,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":1,"connect":92,"send":0,"wait":103,"receive":93,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-13","alert":"Sinkholed","trigger":"directlycascade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s-ilcorsaronero.piraproxy.net/images/global/menu/on_audio.gif","fqdn":"s-ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:44.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 22:10:23 GMT","end":"Thu, 16 Oct 2025 23:08:47 GMT"},"fingerprint":{"sha1":"11:AF:80:6B:A4:DB:8D:A6:3D:BD:32:97:52:F3:BE:55:C2:80:84:56","sha256":"FB:27:A7:CA:E0:F0:6F:8A:A4:CC:F0:A9:FA:55:EF:11:22:B0:4E:70:92:B8:B3:51:FD:2D:B2:F1:7A:A2:C6:CD"}}},"request":{"raw":"GET /images/global/menu/on_audio.gif HTTP/1.1\r\nHost: s-ilcorsaronero.piraproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s-ilcorsaronero.piraproxy.net/css/main.css\r\nCookie: view=1; PHPSESSID=sor4g4448h77rtg0927u2gh5b4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 16:34:45 GMT\r\ncontent-type: image/gif\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 16:34:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IA4Hdd%2ByymBRpMf%2FmmlUJwPPWTWcpA%2Fo56ILLW0tB2tpwLx5RwNbWKNEzEJKM%2BGQk1Qw6Oe1eHbyoiRezfh5KD%2BcdyoVqGuDWRjz54fs4aHcqRjZ9Dg%2FYgYEng%3D%3D\"}]}\r\ncf-ray: 97e90dc489555685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 16","md5":"60e8b6007b06a89b948fbfee60ffd40b","sha1":"39894b06463c3a99300f5db7282c9604b1ba6585","sha256":"ad3e24cac018065ce5c94a16238c3bec6075f8be520f859861bc5c03d70f8d34","sha512":"308bfcf7d550676aee71e74a546b673dbb74f788a2e7f59ea4fe1b09fff18e005ed3aface64e38d86bc3a56f54aad0ee5d2a7127f5c22d5975199224d02dea19","ssdeep":"","tlshash":"61b02200c282f8b0f2c0b33028000cb0322f0b3802c8a30cca300080feb282008008a3","first_seen":"2023-05-10T10:01:16Z","last_seen":"2025-09-15T00:13:34.58367Z","times_seen":20,"resource_available":false,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":624,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s-ilcorsaronero.piraproxy.net/images/global/menu/on_brand.gif","fqdn":"s-ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:44.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 22:10:23 GMT","end":"Thu, 16 Oct 2025 23:08:47 GMT"},"fingerprint":{"sha1":"11:AF:80:6B:A4:DB:8D:A6:3D:BD:32:97:52:F3:BE:55:C2:80:84:56","sha256":"FB:27:A7:CA:E0:F0:6F:8A:A4:CC:F0:A9:FA:55:EF:11:22:B0:4E:70:92:B8:B3:51:FD:2D:B2:F1:7A:A2:C6:CD"}}},"request":{"raw":"GET /images/global/menu/on_brand.gif HTTP/1.1\r\nHost: s-ilcorsaronero.piraproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s-ilcorsaronero.piraproxy.net/css/main.css\r\nCookie: view=1; PHPSESSID=sor4g4448h77rtg0927u2gh5b4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 16:34:45 GMT\r\ncontent-type: image/gif\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 16:34:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SMcanDNZexUK%2BCObF%2BE70CyDLKWGWx3ocbvXNVlbGulNKkxoiTmvoGo2BoB9hXSX2uipQ4EkhlB9rDQDbiNdX5u3SKl16gcm%2BIeaFOUd%2Fyx3nyNATXV3TVF6Fw%3D%3D\"}]}\r\ncf-ray: 97e90dc489565685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 16","md5":"5b90ac3653a29fe263d6279909d73cb6","sha1":"bf71c5f5214449ca7ecd2d7fd9a00d1a580ea939","sha256":"00e49c35782be76d3dfc2fe9975553862d98b1b7b9518c383ba3f2baab750ecb","sha512":"720b9f4563667f65b2dea51fc226918be958787be81cce66228be894689924c831c2808704cd2ffb5b72f309d9af6ec7688cfe728aeb80f323838ec0c4373ec8","ssdeep":"","tlshash":"68b00215e3e4b4b0d7949532e80a1380a696a62ae3c40f4ef52888d5fcfe1d54a169e6","first_seen":"2023-05-10T10:01:16Z","last_seen":"2025-09-15T00:13:34.581126Z","times_seen":17,"resource_available":false,"data":null}},"time_used":584,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":584,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ilcorsaronero.piraproxy.net/","fqdn":"ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-13T16:34:42.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 22:10:23 GMT","end":"Thu, 16 Oct 2025 23:08:47 GMT"},"fingerprint":{"sha1":"11:AF:80:6B:A4:DB:8D:A6:3D:BD:32:97:52:F3:BE:55:C2:80:84:56","sha256":"FB:27:A7:CA:E0:F0:6F:8A:A4:CC:F0:A9:FA:55:EF:11:22:B0:4E:70:92:B8:B3:51:FD:2D:B2:F1:7A:A2:C6:CD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ilcorsaronero.piraproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Sep 2025 16:34:43 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ayPLOSq2yCR%2BRB777s%2FiyNxPg%2Bf7EgPefOpLqzEvArzPFCaGLUPjHIQYUWpEHUZg%2BE2sfHhPFsLEACl4hF625k9wO1hxxYs9913PG3QlzymQNZoYyG9qk0jJ6A%3D%3D\"}]}\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 16:34:43 GMT\nPHPSESSID=vfvu4opcbs2680eihgol918tmo; Path=/\r\ncf-ray: 97e90dbae92d35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55782,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6870), with CRLF, LF line terminators","md5":"b1e144234b25ca253dfb57ba0a1568b0","sha1":"f55d30bc559a235246934f92a6e1c557cf6d3eb3","sha256":"08d8ecc99daca4bf0d49d86e9a76ea1e9fc194902b30328316d8f1570bb1c943","sha512":"6e8b322e5e3576aefe10b1289d3230d9c623caf6db1ab0ce0b0a94ace0fcdd27db9b5efd132970ec5230422e080f3af44dae4f0f5b10f33e2a1642f54d17268c","ssdeep":"768:36k6U22hpAkm2LrB4uJOmCeUZXzMZ0qqstK9pBuEoK:3/6UXhpAkm2mEOm7eM2qjK9pBuEoK","tlshash":"6443b6625b81053bc0a351f7b201bf6ccce0b846e6244b1c39bf516f5fc6f9a5a25b89","first_seen":"2025-09-13T16:35:08.633398Z","last_seen":"2025-09-13T16:35:08.633398Z","times_seen":1,"resource_available":false,"data":null}},"time_used":705,"timings":{"blocked":30,"dns":10,"connect":1,"send":0,"wait":644,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s-ilcorsaronero.piraproxy.net/images/global/bg/footer_shade.gif","fqdn":"s-ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:44.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 22:10:23 GMT","end":"Thu, 16 Oct 2025 23:08:47 GMT"},"fingerprint":{"sha1":"11:AF:80:6B:A4:DB:8D:A6:3D:BD:32:97:52:F3:BE:55:C2:80:84:56","sha256":"FB:27:A7:CA:E0:F0:6F:8A:A4:CC:F0:A9:FA:55:EF:11:22:B0:4E:70:92:B8:B3:51:FD:2D:B2:F1:7A:A2:C6:CD"}}},"request":{"raw":"GET /images/global/bg/footer_shade.gif HTTP/1.1\r\nHost: s-ilcorsaronero.piraproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s-ilcorsaronero.piraproxy.net/css/main.css\r\nCookie: view=1; PHPSESSID=sor4g4448h77rtg0927u2gh5b4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 16:34:45 GMT\r\ncontent-type: image/gif\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 16:34:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ma%2BdgWJJ6BPqKD3ZXXKBwq1GHAY4lGh8YJHt1B%2FG2qZrlRMQClBOsFouZxbt86cuv%2BYaumWDQ5kb0MNebtGyT6BQ8P6a81dlT4QI4rQKr1HBYaWR6YfXORdQxA%3D%3D\"}]}\r\ncf-ray: 97e90dc4995c5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":177,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 86","md5":"d6646c5291ac8df29ecc19040b28924e","sha1":"f35b6a6896cbd5d5d07db03787395430be1b41e7","sha256":"8818dc3dea118b730b1b14a1a9dc3727accb18c64127c32ad6b9c98098fa3971","sha512":"12dd26a48395f42810bf41122431cdfc7ec5d344451aca771823324915cf901944d1af1be7e4a86aeec1b931ce2e07d2730e2c6e42277aff4a5bf74dee9cba4a","ssdeep":"","tlshash":"5fc08c8691a3d182ea47c377d8a14590202766ac5f88146a95d231b0f39599278eda46","first_seen":"2023-05-10T10:01:16Z","last_seen":"2025-09-15T00:13:34.581606Z","times_seen":18,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":490,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ilcorsaronero.piraproxy.net/user.php","fqdn":"ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:44.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 22:10:23 GMT","end":"Thu, 16 Oct 2025 23:08:47 GMT"},"fingerprint":{"sha1":"11:AF:80:6B:A4:DB:8D:A6:3D:BD:32:97:52:F3:BE:55:C2:80:84:56","sha256":"FB:27:A7:CA:E0:F0:6F:8A:A4:CC:F0:A9:FA:55:EF:11:22:B0:4E:70:92:B8:B3:51:FD:2D:B2:F1:7A:A2:C6:CD"}}},"request":{"raw":"POST /user.php HTTP/1.1\r\nHost: ilcorsaronero.piraproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 39\r\nOrigin: https://ilcorsaronero.piraproxy.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ilcorsaronero.piraproxy.net/\r\nCookie: view=1; PHPSESSID=vfvu4opcbs2680eihgol918tmo\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 16:34:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JaMU6x12j092WXuJRa3Qh70%2BGNl9oozTWGEmBXP2mtnQJoBDiZh2n0dRMPnfXI5NfjClt2ETkbTngeX2EAR9Oip0iltGC%2Be02BdyIVU%2Bo2Qn4m0fkLB9Bao%3D\"}]}\r\ncf-ray: 97e90dc4e95e5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":611,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":611,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s-ilcorsaronero.piraproxy.net/images/g.gif","fqdn":"s-ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:43.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 22:10:23 GMT","end":"Thu, 16 Oct 2025 23:08:47 GMT"},"fingerprint":{"sha1":"11:AF:80:6B:A4:DB:8D:A6:3D:BD:32:97:52:F3:BE:55:C2:80:84:56","sha256":"FB:27:A7:CA:E0:F0:6F:8A:A4:CC:F0:A9:FA:55:EF:11:22:B0:4E:70:92:B8:B3:51:FD:2D:B2:F1:7A:A2:C6:CD"}}},"request":{"raw":"GET /images/g.gif HTTP/1.1\r\nHost: s-ilcorsaronero.piraproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ilcorsaronero.piraproxy.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 16:34:44 GMT\r\ncontent-type: image/gif\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 16:34:44 GMT\nPHPSESSID=179j8lf2ka4dieobr5o1knh7tp; Path=/\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dTYOYi9js%2Bj2%2F4T9Vlcr%2B3e9uWWwa6tVCl7vMiMBmDQ9J4Nq46i98vCdH94qspYBPn5XHwiZ5gFd6RA3d0LEsgbu1VqBizkGJr%2BGVc0rYZQjrvJHsBb6qOTUuQ%3D%3D\"}]}\r\ncf-ray: 97e90dc0892c5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2341,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 124 x 27","md5":"b9bc4a9316f060765e5d3bc9a91530ad","sha1":"faac2e5b94c5ab17960e0575d574cc1b310e6e4d","sha256":"cde7d2afb33200439d5453857f122d78ad5f0a998274a3e27643079fc61405f3","sha512":"47f1aff70e470338aedbe704e3cea07a8a31789e663c5571310b8f35cf0f5798764c5e5e3d39d358d596bce2bc3cfe9237306967521e63e2283bbc72c99b007a","ssdeep":"","tlshash":"5f410ac293edbe60db064673a1253907944090b318c8c5ac00f4b622f9cfe0ab1baae4","first_seen":"2023-05-10T10:01:16Z","last_seen":"2025-09-16T09:27:36.651262Z","times_seen":18,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":511,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s-ilcorsaronero.piraproxy.net/images/nfo.gif","fqdn":"s-ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:43.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 22:10:23 GMT","end":"Thu, 16 Oct 2025 23:08:47 GMT"},"fingerprint":{"sha1":"11:AF:80:6B:A4:DB:8D:A6:3D:BD:32:97:52:F3:BE:55:C2:80:84:56","sha256":"FB:27:A7:CA:E0:F0:6F:8A:A4:CC:F0:A9:FA:55:EF:11:22:B0:4E:70:92:B8:B3:51:FD:2D:B2:F1:7A:A2:C6:CD"}}},"request":{"raw":"GET /images/nfo.gif HTTP/1.1\r\nHost: s-ilcorsaronero.piraproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ilcorsaronero.piraproxy.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 16:34:44 GMT\r\ncontent-type: image/gif\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 16:34:44 GMT\nPHPSESSID=chehep4eppesi7mmvf9uqkqldi; Path=/\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7uv2V0Dk%2FxOi%2BflKAWTB1wZCt6tTVrH4HtWq3N0DJsUQRpufQJLawAAdSliMQcRgLCDgV4IAomtT7M2B8tJ18Lb6h%2FNTiuhrQ69A%2FA3IFbE%2FHlfciyAoblDu9g%3D%3D\"}]}\r\ncf-ray: 97e90dc089325685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":367,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 14 x 13","md5":"700f54ccccc4461966adad8bfd65a783","sha1":"bc91b80f4ed871e80840cab29da68ceb9f2d65c2","sha256":"e10e796e8ce23dff1dc5112e87a360cf57dd84d59d59ed8d5f4f5ed3847273fa","sha512":"98a84ad42507069a5383f5200ce895b5012cb2d398a8df390971b3e3f79407e19c19264ba0d3d2a256caee90d458e9fa284f4ade7f0e6d4b3a7c4d88bd7eb924","ssdeep":"","tlshash":"8be07d435468c848cc7cf0f7c48b014aa084d64f2af3fc417d24863981341c4c45dbc7","first_seen":"2023-05-21T19:07:28Z","last_seen":"2025-10-05T13:42:22.761403Z","times_seen":22,"resource_available":false,"data":null}},"time_used":623,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":580,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ilcorsaronero.piraproxy.net/app/x12.js","fqdn":"ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:43.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 22:10:23 GMT","end":"Thu, 16 Oct 2025 23:08:47 GMT"},"fingerprint":{"sha1":"11:AF:80:6B:A4:DB:8D:A6:3D:BD:32:97:52:F3:BE:55:C2:80:84:56","sha256":"FB:27:A7:CA:E0:F0:6F:8A:A4:CC:F0:A9:FA:55:EF:11:22:B0:4E:70:92:B8:B3:51:FD:2D:B2:F1:7A:A2:C6:CD"}}},"request":{"raw":"GET /app/x12.js HTTP/1.1\r\nHost: ilcorsaronero.piraproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ilcorsaronero.piraproxy.net/\r\nCookie: view=1; PHPSESSID=vfvu4opcbs2680eihgol918tmo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 16:34:44 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 12 Sep 2025 19:15:09 GMT\r\netag: W/\"68c4713d-2bac\"\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k1xxFgLFTWpFotfQYIPvIi%2FjZZIdgp7JgqdB6cMLKrvTER2ZsXghhnrlDE1P7r4i9TtmNWbmfhbFjEaVvHUkrR61MJWj8WDXjqXrrc3BYF9CLycRuWRGtR8%3D\"}]}\r\ncf-ray: 97e90dc029265685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11180,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (11180), with no line terminators","md5":"94efa3c05291ac5cccd32cc3a11c9724","sha1":"3a033e4d6f5e5eaf76030a81c8a05c619de436c2","sha256":"58c753f7ffcb584d2ed43470ec9bdd30a4cd4723f368d83de6163413d5555102","sha512":"1361f500a2951e29fd5dd415cb0a6985015eb4b28f6196b778e009ae39dbc55b3447113d63306c43fa6f5bbffaa6b926787dabb86b0672a9040e9e309b3e01f3","ssdeep":"192:72ClBFvbH6N6c7rMLsiCAEDvOpIiOsPhQZqiSq5zHl8RJW8+1Z1tJka:LTzal7XiJ0sg195zHmedJka","tlshash":"5b329c887ed6f107279d5a53ef1a6af9017ba0a662f4350bc3a8f6cc14f910bc179c84","first_seen":"2023-03-07T12:40:02Z","last_seen":"2026-02-07T15:24:54.090901Z","times_seen":1807,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s-ilcorsaronero.piraproxy.net/images/global/bg/top_grade.gif","fqdn":"s-ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:44.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 22:10:23 GMT","end":"Thu, 16 Oct 2025 23:08:47 GMT"},"fingerprint":{"sha1":"11:AF:80:6B:A4:DB:8D:A6:3D:BD:32:97:52:F3:BE:55:C2:80:84:56","sha256":"FB:27:A7:CA:E0:F0:6F:8A:A4:CC:F0:A9:FA:55:EF:11:22:B0:4E:70:92:B8:B3:51:FD:2D:B2:F1:7A:A2:C6:CD"}}},"request":{"raw":"GET /images/global/bg/top_grade.gif HTTP/1.1\r\nHost: s-ilcorsaronero.piraproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s-ilcorsaronero.piraproxy.net/css/main.css\r\nCookie: view=1; PHPSESSID=sor4g4448h77rtg0927u2gh5b4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 16:34:45 GMT\r\ncontent-type: image/gif\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 16:34:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fyObGfh6RWpfjuxOohvGjwORws75K6jtHIxb4I6XNlmRLUhLoN8SuZOSCu%2F9jIMhmeFXCYCA%2FCySZc%2F3cIwx60lE8rxNi9MStTXCPJ6nT3XPjzVJL1N8yT9azg%3D%3D\"}]}\r\ncf-ray: 97e90dc479525685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":462,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 15 x 275","md5":"1bbdc88aa140893e15aa988be3413f90","sha1":"47b96a7973a237459deb04d9a9da53129d499b6b","sha256":"dbab9249867d49a37db90214e88f48dc43e5ad661c11163cd7bfeefec79325bc","sha512":"d3be408460343fa3fc18db4317349277adc1896cb181a3d28dcfa196af0daa6c13878694472b428fd3c82a1ddc8d86b44a5fa5451d171f1ddeea3e0c629eecdf","ssdeep":"","tlshash":"e4f023c6d135d362d63716f71727008b049a4c6818d17c5a04d16d10fc1226640dcc0a","first_seen":"2023-05-10T10:01:16Z","last_seen":"2025-09-15T00:13:34.58263Z","times_seen":20,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s-ilcorsaronero.piraproxy.net/css/main.css","fqdn":"s-ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:43.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 22:10:23 GMT","end":"Thu, 16 Oct 2025 23:08:47 GMT"},"fingerprint":{"sha1":"11:AF:80:6B:A4:DB:8D:A6:3D:BD:32:97:52:F3:BE:55:C2:80:84:56","sha256":"FB:27:A7:CA:E0:F0:6F:8A:A4:CC:F0:A9:FA:55:EF:11:22:B0:4E:70:92:B8:B3:51:FD:2D:B2:F1:7A:A2:C6:CD"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: s-ilcorsaronero.piraproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ilcorsaronero.piraproxy.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 16:34:44 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2Bsu3Fmip6CGeXuYAcDySaPV%2F8HCD5Ww8wB6on6bJQLc5EEEYOUQODhGvmbCH13jyYzz1CZgY0BDG9D0ciXjzkFX%2FpXYvEVjKKRTKM9EHu6eBavbKgpC4ht9NA%3D%3D\"}]}\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 16:34:44 GMT\nPHPSESSID=9if4n22uhm7lemfani5uh1p967; Path=/\r\nvary: accept-encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97e90dc0892a5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21100,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"8efe671899ff433a3728d2611ad6a0f9","sha1":"3299292a12caeee1e36b68d0ebf237dfaacea157","sha256":"decd9e2e8208f3057056fbd2fc7c19b2b8eb716fd81836c0a5925f5fbfb11d4f","sha512":"55aa97f5bef3e5ff572a8dd3a4b63762affe5aa7acf423a25bf0410a14b1f494520214830cbb4ace05d0a717fe81c35690d2d8af7429896d2141913ac6be8b51","ssdeep":"384:Mx0euR6FI9vHYHfmGJCLVPxRVLVSV28MA2ccai5Rjw2e:Mx0eucFI54/mGJCLdxRZAV29A2cca4RA","tlshash":"a5922198ee87708f7307e659fb319b61de188095de0f4b7cb1bd2674a1844a8347e2c9","first_seen":"2023-05-10T10:01:16Z","last_seen":"2025-09-16T09:27:36.655006Z","times_seen":20,"resource_available":false,"data":null}},"time_used":606,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":544,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s-ilcorsaronero.piraproxy.net/images/h_logo4.svg","fqdn":"s-ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:43.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 22:10:23 GMT","end":"Thu, 16 Oct 2025 23:08:47 GMT"},"fingerprint":{"sha1":"11:AF:80:6B:A4:DB:8D:A6:3D:BD:32:97:52:F3:BE:55:C2:80:84:56","sha256":"FB:27:A7:CA:E0:F0:6F:8A:A4:CC:F0:A9:FA:55:EF:11:22:B0:4E:70:92:B8:B3:51:FD:2D:B2:F1:7A:A2:C6:CD"}}},"request":{"raw":"GET /images/h_logo4.svg HTTP/1.1\r\nHost: s-ilcorsaronero.piraproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ilcorsaronero.piraproxy.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 16:34:44 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mqMrNWtmOvOBsYaZ3g8dYWkEQeh0NrTmP1PUOy%2Fx69MYMrsRxa3CpwF8sOKZYNhOYHrTZufkFT8%2BxMY9LqIYI8cElfo3c8l2ykHmTIOoxD9l6AbrY0pOGC23qQ%3D%3D\"}]}\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 16:34:44 GMT\nPHPSESSID=jv3nbicjgm65ga5u865ptk16dc; Path=/\r\nvary: accept-encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97e90dc0892b5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9386,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"09b6b18c48d6d3bb1604f324b5cfa46a","sha1":"772d7d64921c60c134f717da1ed3b3acadc85f66","sha256":"8a5e7101a5e7e43625bacd1a731851019660cc04e8d7e47fdf28ed7d1ee2e8c7","sha512":"a9deaf4820fc505fe734e243f971288c0502faa29c1fcca002ace4931254ebb17da0aefc10398b7c95ae02251e1320c2f3921004cff30d730858e8efd4a2c6af","ssdeep":"192:WQAqQrYZiou19mUWa9n+bPuol6SH1R0l+bDBka3sOew0ka3ssBFY:WQAXZou19ltp+bPu/SVRS+T3sai3sgW","tlshash":"8712f35e5334c7e8389526e0de3a26c73b7091ada8b5d140f306ac259147dbf662cea4","first_seen":"2023-05-10T10:01:16Z","last_seen":"2025-09-28T06:58:20.494865Z","times_seen":10,"resource_available":false,"data":null}},"time_used":714,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":662,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s-ilcorsaronero.piraproxy.net/images/tv.gif","fqdn":"s-ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:43.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 22:10:23 GMT","end":"Thu, 16 Oct 2025 23:08:47 GMT"},"fingerprint":{"sha1":"11:AF:80:6B:A4:DB:8D:A6:3D:BD:32:97:52:F3:BE:55:C2:80:84:56","sha256":"FB:27:A7:CA:E0:F0:6F:8A:A4:CC:F0:A9:FA:55:EF:11:22:B0:4E:70:92:B8:B3:51:FD:2D:B2:F1:7A:A2:C6:CD"}}},"request":{"raw":"GET /images/tv.gif HTTP/1.1\r\nHost: s-ilcorsaronero.piraproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ilcorsaronero.piraproxy.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 16:34:44 GMT\r\ncontent-type: image/gif\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 16:34:44 GMT\nPHPSESSID=tk4rlar51k795i6rghp3afppdd; Path=/\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2KS1vZ8Ma95nY%2F%2FPia92htMufqH%2FiaHguUGCSkDiRq9KgxU5ZqlmPVRgId5RcHMS2KdrC9bu81fI8aNYe%2BDwp1kNj10QwtVgZT%2B%2F3ViJpOoplwrf1Z7nQ%2BNbUQ%3D%3D\"}]}\r\ncf-ray: 97e90dc089345685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2306,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 124 x 27","md5":"9976fe6680d1cb6b496cd038384665f4","sha1":"c9b0a9bb66be4ed604e61b2115530cbda90b5f50","sha256":"914f4ae15f76320dd96a4ffc9f79d1f4c2f6cf6daee39c3c314f8ae2de6dae72","sha512":"13b8a56620171fb3cda542bdac31886e6be26700cd4f850364ecdff501aa5966ffadf18e4025082ca5188477f6089af730b7329353ff86b1f3ed3e3f5dd80c9a","ssdeep":"","tlshash":"5c412bc114490748c8d9ba7167dc97102a38d24cdead588f191bc7fa367a105bbdc00f","first_seen":"2023-05-10T10:01:16Z","last_seen":"2025-09-28T06:58:20.522635Z","times_seen":19,"resource_available":false,"data":null}},"time_used":547,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":506,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"origunix.com/sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8","fqdn":"origunix.com","domain":"origunix.com","tld":"com"},"ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:43.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"origunix.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 00:53:46 GMT","end":"Fri, 17 Oct 2025 00:53:45 GMT"},"fingerprint":{"sha1":"19:BA:64:D8:30:D6:B9:3C:BF:AC:E3:49:9C:66:B5:6D:F8:FE:2A:D4","sha256":"86:07:FE:D2:D6:90:33:40:BC:4D:3B:43:3D:8F:31:1A:49:74:46:25:8F:B8:1A:4B:37:B7:A4:8D:56:7C:7A:14"}}},"request":{"raw":"GET /sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8 HTTP/1.1\r\nHost: origunix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ilcorsaronero.piraproxy.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Sat, 13 Sep 2025 16:34:43 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store, max-age=0\r\nAccept-Ch: Sec-CH-UA-Platform,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform-Version\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nLocation: https://msdoj.com/sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64136,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":1,"connect":32,"send":0,"wait":32,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:44.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 08:41:01 GMT","end":"Mon, 17 Nov 2025 08:41:00 GMT"},"fingerprint":{"sha1":"41:D2:08:38:86:84:32:C2:76:B6:A0:7C:F7:02:4C:C5:55:4E:2F:1E","sha256":"A5:34:21:73:D5:FC:24:AF:0D:8A:56:A2:A7:5C:BD:41:46:45:3B:DE:78:A3:6B:67:9C:80:C8:44:02:A9:12:D0"}}},"request":{"raw":"GET /s/roboto/v49/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ilcorsaronero.piraproxy.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20612\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 08 Sep 2025 20:07:11 GMT\r\nexpires: Tue, 08 Sep 2026 20:07:11 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:08:15 GMT\r\ncontent-type: font/woff2\r\nage: 419253\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20612,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20612, version 1.0","md5":"b07da7aa3e4f363c5cdbc11312239e8c","sha1":"47bf5b2f24ea4a4caafccc89b9d2a6677ef9e3b8","sha256":"e44c11f4834bdd4d6b6da7b8ee5eaebc8acb41250cd6bce5cc82ea8262140eaa","sha512":"420729406b315d8af34b62b78f39e763f5cf33cbf94467457b393fde0573dd7ffc6a23f25680988f9b82a4a3b719876ff76f3e1db047ce82615f544fc3a82532","ssdeep":"384:k5Eu+yl5Y9RpwjjmD/8Qu+POP9w+oB7rezldH9W4EMs8qCr9WvS80M8T4PTEXPFw:YEu+/Jw3FF+WP9DC/ez79jcCrb8BK4Eq","tlshash":"8192df6bce71497ac711262c773917addb8b44f627f91f2ba0562411c7b8e015c2cc7a","first_seen":"2025-01-09T06:25:34.419113Z","last_seen":"2026-04-05T11:12:12.625456Z","times_seen":45645,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":129,"dns":1,"connect":20,"send":0,"wait":23,"receive":6,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"feeds.feedburner.com/~fc/ilCorSaRoNero?bg=000000\u0026fg=FFFF00\u0026anim=1","fqdn":"feeds.feedburner.com","domain":"feedburner.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:45.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 08:40:10 GMT","end":"Mon, 17 Nov 2025 08:40:09 GMT"},"fingerprint":{"sha1":"D2:BD:4A:1D:82:92:D2:B5:70:47:3B:EC:F1:9A:56:08:51:64:3C:B4","sha256":"A2:67:3D:33:53:D5:9F:EC:CD:B0:EB:FF:9A:8B:4D:A2:B0:5A:FB:DB:D0:DF:41:A8:B4:BC:25:61:8C:AB:9A:70"}}},"request":{"raw":"GET /~fc/ilCorSaRoNero?bg=000000\u0026fg=FFFF00\u0026anim=1 HTTP/1.1\r\nHost: feeds.feedburner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ilcorsaronero.piraproxy.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 13 Sep 2025 16:34:46 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/RaichuFeedServer/cspreport, script-src 'nonce-qHMV3fMU5K3p_4wOtFN3xQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/RaichuFeedServer/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/RaichuFeedServer/cspreport/allowlist\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":82,"dns":62,"connect":21,"send":0,"wait":55,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s-ilcorsaronero.piraproxy.net/images/h_logo2.gif","fqdn":"s-ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:43.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 22:10:23 GMT","end":"Thu, 16 Oct 2025 23:08:47 GMT"},"fingerprint":{"sha1":"11:AF:80:6B:A4:DB:8D:A6:3D:BD:32:97:52:F3:BE:55:C2:80:84:56","sha256":"FB:27:A7:CA:E0:F0:6F:8A:A4:CC:F0:A9:FA:55:EF:11:22:B0:4E:70:92:B8:B3:51:FD:2D:B2:F1:7A:A2:C6:CD"}}},"request":{"raw":"GET /images/h_logo2.gif HTTP/1.1\r\nHost: s-ilcorsaronero.piraproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ilcorsaronero.piraproxy.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 16:34:44 GMT\r\ncontent-type: image/gif\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 16:34:44 GMT\nPHPSESSID=75ilnldb05e1dh0m6aghv25t2h; Path=/\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pBmiYVbcXI3byeIuYS2u91w%2BpLrkQCaQedvJ%2F1GprlJRBjbLK5rfqtxXk6JVbhJLrzy5rnEN9oCfaH5paGJW8OO5aDzRKPbnqLtTCfUZsmrSiM7KpNsd1Il12g%3D%3D\"}]}\r\ncf-ray: 97e90dc089315685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1883,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 202 x 16","md5":"8d3763b5574fa0aaa4968dcbc66fdcf6","sha1":"1911a863b7d8222665851e8233dffb56445aed90","sha256":"e003b76850167a5d3a9753cde08c4531c732c011325e8f12470f7d89f1c20ec3","sha512":"83892ad1bcb02b2f3c9e65ccc8fdba20d8bb22df59ed4b1072394317203480d8542f70d4b2bfb63b4678d96c4dec364b612b49de1e9439ad170dc06866d4b871","ssdeep":"","tlshash":"b141ca64335184d9c197643f0f953e1888b364dde1e16558ab8ceaf62315452309b1c5","first_seen":"2023-05-21T19:07:28Z","last_seen":"2025-10-05T13:42:22.742147Z","times_seen":23,"resource_available":false,"data":null}},"time_used":571,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":521,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s-ilcorsaronero.piraproxy.net/images/arrow-asc.png","fqdn":"s-ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:43.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 22:10:23 GMT","end":"Thu, 16 Oct 2025 23:08:47 GMT"},"fingerprint":{"sha1":"11:AF:80:6B:A4:DB:8D:A6:3D:BD:32:97:52:F3:BE:55:C2:80:84:56","sha256":"FB:27:A7:CA:E0:F0:6F:8A:A4:CC:F0:A9:FA:55:EF:11:22:B0:4E:70:92:B8:B3:51:FD:2D:B2:F1:7A:A2:C6:CD"}}},"request":{"raw":"GET /images/arrow-asc.png HTTP/1.1\r\nHost: s-ilcorsaronero.piraproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ilcorsaronero.piraproxy.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 16:34:44 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 16:34:44 GMT\nPHPSESSID=37s9mhdec0mf8aaq43r371jme5; Path=/\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z%2Bj0PuWP%2BGrpXBxSPEbLRbKvk8CjJCfWZOlQRUih93n8zECzMLJYPRGJsk2gwQVGOZVyJvpK0jHrNW9Q%2FLIrnMHYjRVUYivus7lClJQrWorBRTZrey49uJnSiA%3D%3D\"}]}\r\ncf-ray: 97e90dc0892d5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 11 x 6, 8-bit/color RGBA, non-interlaced","md5":"d812f38147cd4af6e0b3b695217de6b1","sha1":"b5db0a64ed3b75240cc913585255fa4daccb9c0f","sha256":"3596f60295194a5e0acd8865308b612624f952ea9e3a82734667c3e4a5a2427c","sha512":"ab4d7e3f5c9274d642a51a0063c9ac103ae6b525c5b90b19ec7a27a6d2e9d5a7a0c57f2c7efcb5c36b4e631ea9833a3648508998109a2e247a131519d26e6112","ssdeep":"","tlshash":"ecc02bc373c10c7fc5175415910f2c10cc338864d054030a5591c9240001548c42012b","first_seen":"2023-05-10T10:01:16Z","last_seen":"2025-10-05T13:42:22.746424Z","times_seen":19,"resource_available":false,"data":null}},"time_used":625,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":576,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ilcorsaronero.piraproxy.net/app/apx19.js","fqdn":"ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:43.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 22:10:23 GMT","end":"Thu, 16 Oct 2025 23:08:47 GMT"},"fingerprint":{"sha1":"11:AF:80:6B:A4:DB:8D:A6:3D:BD:32:97:52:F3:BE:55:C2:80:84:56","sha256":"FB:27:A7:CA:E0:F0:6F:8A:A4:CC:F0:A9:FA:55:EF:11:22:B0:4E:70:92:B8:B3:51:FD:2D:B2:F1:7A:A2:C6:CD"}}},"request":{"raw":"GET /app/apx19.js HTTP/1.1\r\nHost: ilcorsaronero.piraproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ilcorsaronero.piraproxy.net/\r\nCookie: view=1; PHPSESSID=vfvu4opcbs2680eihgol918tmo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 16:34:44 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 12 Sep 2025 19:15:09 GMT\r\netag: W/\"68c4713d-23df\"\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zLdlXHVkS7yuCjqhru8Ue1lEo2dWCqqLGa%2Boe558qObEiLMY0HxXydw7V6z%2FcpNUfwsz56CWa66ZE%2F5lf%2FFZWAnRZvppLHSRld2jfUGFb6uWGHB%2Fy5ed87U%3D\"}]}\r\ncf-ray: 97e90dc019225685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9183,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9183), with no line terminators","md5":"2344c3f05f624d595f6fb920e4d74ded","sha1":"eb4d1404ac2d5eecd307f4588aeeab5c8ef463f1","sha256":"3a28fe59e4a2af96d8edeeb12d7040c574cf71fa88fccb5cf49e9c0a1d4e4c7a","sha512":"b1660b062c77332a119e159c5c69d3f75d375915a33f141503232f424c4fdd990998a883c271efb94e8eb909f7837d235354ecae15b58fc23ab9d1908170e831","ssdeep":"192:yfBLCNsvzXnQQuWYQVN6nYaRB5c5FM/MR6Adpf04u7w2Br:4gNYXnrYtBONxpf05r","tlshash":"62126cc87ac7f00b53ed8a53ae1a66b8117b946362a47907d3bcf6cd15e920bc179cc4","first_seen":"2023-03-07T12:40:02Z","last_seen":"2026-04-03T18:56:21.982955Z","times_seen":3505,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ilcorsaronero.piraproxy.net/hy.js?q22q2q2","fqdn":"ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:43.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 22:10:23 GMT","end":"Thu, 16 Oct 2025 23:08:47 GMT"},"fingerprint":{"sha1":"11:AF:80:6B:A4:DB:8D:A6:3D:BD:32:97:52:F3:BE:55:C2:80:84:56","sha256":"FB:27:A7:CA:E0:F0:6F:8A:A4:CC:F0:A9:FA:55:EF:11:22:B0:4E:70:92:B8:B3:51:FD:2D:B2:F1:7A:A2:C6:CD"}}},"request":{"raw":"GET /hy.js?q22q2q2 HTTP/1.1\r\nHost: ilcorsaronero.piraproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ilcorsaronero.piraproxy.net/\r\nCookie: view=1; PHPSESSID=vfvu4opcbs2680eihgol918tmo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 16:34:44 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 12 Sep 2025 19:15:09 GMT\r\netag: W/\"68c4713d-db43\"\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eLuwuYGy9WgL0KzT51AolN%2BFz2hrKwHTLYlUmvAePnHHB4yez1NGFzYa%2Bm6GSyJJTk13pfiuEyYC%2Bk%2FPs%2FAFhEvRcmLmicjPdGfo27TIA0BcVg0kmHF4eUI%3D\"}]}\r\ncf-ray: 97e90dc019235685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56131,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (56131), with no line terminators","md5":"667d77da844b6d5ad62b2f26e77b4b12","sha1":"01ae61192a38af73a93c67468fb8271d7bbfa4f6","sha256":"f240ce7fa62cd81d92f29081815f2cd2376ea6867887d17d5625009ebdf355b1","sha512":"397db4a7e265ee50bc3f41dcd8dbd9707a7e5b4c8286d284aa7ec098723f197845b1527c620f05683dc7de9ad93f5ad3cda3c5e2371a8af8b75d328b2b817650","ssdeep":"768:NEytvasZSSTV4dNQkBd9AuNe6wDC4V4JB4JrfeGkFhJT:iytvTZn+b5SuN2DC4vJ7eGkFhp","tlshash":"6d43428c7cc260642556f2ba006f39da362571218c5a9cf3a415d3a3ee719cf8d93fda","first_seen":"2023-03-07T12:40:02Z","last_seen":"2026-02-07T15:24:54.077105Z","times_seen":1813,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"directlycascade.com/22/00/54/2200540f09f939738419313a1a090c32.js","fqdn":"directlycascade.com","domain":"directlycascade.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:43.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"directlycascade.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Sep 2025 11:12:27 GMT","end":"Tue, 09 Dec 2025 11:12:26 GMT"},"fingerprint":{"sha1":"76:17:4A:20:73:64:94:52:3B:6A:50:E2:7C:F7:F5:73:52:38:47:A4","sha256":"66:CD:95:7F:5E:D7:56:27:7A:6F:3B:80:CB:84:DC:89:A0:F0:BB:44:49:55:B4:81:76:24:2E:38:E3:FC:78:29"}}},"request":{"raw":"GET /22/00/54/2200540f09f939738419313a1a090c32.js HTTP/1.1\r\nHost: directlycascade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ilcorsaronero.piraproxy.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 13 Sep 2025 16:34:44 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 39484\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: directlycascade.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 88fa6cff1078a012b1b014479d153b5c\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":110136,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3a7828ab297a87e05a49b81c0ae2cf21","sha1":"ddfa31a95eeb80241f0985fcf818e0a23180bb1a","sha256":"7ced6f5e840018d6ba470b543d9257062977a76ca777622630b4470f3f2971cc","sha512":"3053649995d493087f4a969fe747897fea390bca9c527193b92c7e7081064a628c3fc1ae6828ea9d8d8886b3e18cf7efd2d1b9c9b339fd08fdece97922926b71","ssdeep":"1536:x8FO2Og6h8Z1zbcz7eg3Z+FhVO1TOCo8PkiYYo170BEEtlwnxKyI:TD8vCGVIl+RPEtlx","tlshash":"e8b3b7887f80f56c115630b2232fa05af2e91e41a8ccd548f557fde92a2d377b439a78","first_seen":"2025-09-11T12:51:16.659134Z","last_seen":"2025-09-25T18:54:42.715563Z","times_seen":54,"resource_available":true,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":1,"connect":95,"send":0,"wait":104,"receive":94,"ssl":192},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-13","alert":"Sinkholed","trigger":"directlycascade.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vmuid.com/script.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8","fqdn":"vmuid.com","domain":"vmuid.com","tld":"com"},"ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:43.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vmuid.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 01:38:16 GMT","end":"Fri, 17 Oct 2025 01:38:15 GMT"},"fingerprint":{"sha1":"B9:61:53:79:E1:11:9F:49:D4:F0:7A:18:26:5A:A4:47:64:FA:A8:3A","sha256":"27:10:60:8D:0D:93:6E:DB:B5:37:F2:A2:F3:9D:D9:7C:5E:DA:B5:A4:8C:92:FA:BE:08:1A:7E:D9:11:8C:6D:8E"}}},"request":{"raw":"GET /script.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8 HTTP/1.1\r\nHost: vmuid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ilcorsaronero.piraproxy.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 13 Sep 2025 16:34:44 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 10178\r\nConnection: keep-alive\r\nCache-Control: no-store, max-age=0\r\nAccept-Ch: Sec-CH-UA-Platform,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform-Version\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10178,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10178), with no line terminators","md5":"dedd352338543b137f608adc8d0d4aa8","sha1":"100edb4e8fef9b6da043d51135077e68d2a61b22","sha256":"b338a91ba1d2ab7c3a7a0dd659426f5ffa4cd699be38e2bed5075c4d3e773a48","sha512":"e2fab4d95d5baa013a7c248945156524478341282dcffc462fb2de318f55ba29dcafba0db3abcfb6399c6164f6f630f06d48a7323b73f8ea05d5978cd60a4c5c","ssdeep":"192:ATn+ip4qxJ/gzuvu3fo8idwqnOqgStYc1qRP44+PHlCXXZE7904AxF:YbRJYz3oe+3tYGGx+NGXZCAn","tlshash":"2b22b5c9b2d2f06443d77161942f2007f23b2869b54dc498eb66e8d3bcb045ea227f79","first_seen":"2024-01-26T05:18:07Z","last_seen":"2025-12-29T12:17:25.567723Z","times_seen":3656,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":1,"connect":37,"send":0,"wait":35,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msdoj.com/sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8","fqdn":"msdoj.com","domain":"msdoj.com","tld":"com"},"ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:44.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"msdoj.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 00:32:12 GMT","end":"Fri, 28 Nov 2025 00:32:11 GMT"},"fingerprint":{"sha1":"A8:56:C4:4B:26:AD:D5:72:31:67:E8:75:28:D7:6C:F5:D6:A1:E2:B5","sha256":"65:DA:95:54:55:5B:C8:18:65:43:99:33:52:5B:EF:99:EF:5E:0F:AC:FB:6E:F7:6A:27:0B:3B:6A:69:3C:78:C7"}}},"request":{"raw":"GET /sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8 HTTP/1.1\r\nHost: msdoj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ilcorsaronero.piraproxy.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 13 Sep 2025 16:34:44 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 64136\r\nConnection: keep-alive\r\nCache-Control: no-store, max-age=0\r\nAccept-Ch: Sec-CH-UA-Platform,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform-Version\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64136,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64136), with no line terminators","md5":"9b6deb55ff8ec8ad652eb5543c385866","sha1":"c64e3fb04e95c3938b9422f017ee6ae21942a33d","sha256":"3ff9489ac5ab046e138298549e4951854818186b5d16a27a7f1519542aa5c66b","sha512":"a32ac76d19dde8f03319a4a9f0d67ff9bec5b494c9469c7fb60aafbdea7bcfaaf5b2332afc60b356f394f11f659856c45d26912b08c9cd8437ea9d9dd7286e08","ssdeep":"768:hCflSCRC850RCX+4D+R8WyX+86wA6C8CflJu4sTJ+zaXeXgtA9zk4sTJ+HXJpZ6L:qvV50gPowAzJfTqFF","tlshash":"9053d698b5d2f1a102c370b8543f6106b2366929248dc098f7b5ded5ad78d6ea633f3c","first_seen":"2025-09-13T16:35:08.65393Z","last_seen":"2025-09-13T16:35:08.65393Z","times_seen":1,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":96,"dns":1,"connect":30,"send":0,"wait":61,"receive":32,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s-ilcorsaronero.piraproxy.net/images/global/menu/on_web.gif","fqdn":"s-ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:44.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 22:10:23 GMT","end":"Thu, 16 Oct 2025 23:08:47 GMT"},"fingerprint":{"sha1":"11:AF:80:6B:A4:DB:8D:A6:3D:BD:32:97:52:F3:BE:55:C2:80:84:56","sha256":"FB:27:A7:CA:E0:F0:6F:8A:A4:CC:F0:A9:FA:55:EF:11:22:B0:4E:70:92:B8:B3:51:FD:2D:B2:F1:7A:A2:C6:CD"}}},"request":{"raw":"GET /images/global/menu/on_web.gif HTTP/1.1\r\nHost: s-ilcorsaronero.piraproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s-ilcorsaronero.piraproxy.net/css/main.css\r\nCookie: view=1; PHPSESSID=sor4g4448h77rtg0927u2gh5b4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 16:34:45 GMT\r\ncontent-type: image/gif\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 16:34:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LRmmhuy5vt77JKIpS7%2FWcf3bdPIFZj2%2BX3pow%2Bv37ltbnv3xGLKg8xXqFlLqWI5oMlFpb44BYxro16OZObNmu8yVh4pNxiJszLVLEMP0nZHBh9yPiPHwIROZ%2Bw%3D%3D\"}]}\r\ncf-ray: 97e90dc489575685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 16","md5":"370ddf79f9b2e74ba7c294ba9066bfe5","sha1":"de781d16f76b1645beec651830c074e1dce71bad","sha256":"940326118895610ca4cbcbd65e3ed4d93b6d3d0548b5cfda0aca6275b4999f78","sha512":"d1c54f25ffae7e607b90760b0c182fd8cdc01f1595a53c831f8e71a728f018969e2d17196bd8fb9c288442891c9020ee8bd6f39a84d260f3f551213676ab74bf","ssdeep":"","tlshash":"10b02228e3c0fa2ac30accf008080200f0238af00380200fe38b8002ac330a0080cb20","first_seen":"2023-05-10T10:01:16Z","last_seen":"2025-09-15T00:13:34.576614Z","times_seen":20,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s-ilcorsaronero.piraproxy.net/images/download.gif","fqdn":"s-ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:44.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 22:10:23 GMT","end":"Thu, 16 Oct 2025 23:08:47 GMT"},"fingerprint":{"sha1":"11:AF:80:6B:A4:DB:8D:A6:3D:BD:32:97:52:F3:BE:55:C2:80:84:56","sha256":"FB:27:A7:CA:E0:F0:6F:8A:A4:CC:F0:A9:FA:55:EF:11:22:B0:4E:70:92:B8:B3:51:FD:2D:B2:F1:7A:A2:C6:CD"}}},"request":{"raw":"GET /images/download.gif HTTP/1.1\r\nHost: s-ilcorsaronero.piraproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s-ilcorsaronero.piraproxy.net/css/main.css\r\nCookie: view=1; PHPSESSID=sor4g4448h77rtg0927u2gh5b4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 16:34:45 GMT\r\ncontent-type: image/gif\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 16:34:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JznTgJ4g%2B3L9eApQt9xrc0HdJC2KCc2RjVV0Wzl6OJBmE7z9h9o1TrFrHo0O1yE6lF7TK%2BZ4F2ho%2B0tDjQJKWQUZruH5IW%2F1Q9hjvAMh2jHyQHC22hJXXhfdqQ%3D%3D\"}]}\r\ncf-ray: 97e90dc4995b5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 9 x 11","md5":"62316e22711f0caaa7da2e529e9df0c6","sha1":"2b50ae8ea9b90c31ed605508b9153aad57429d6d","sha256":"6d0142599d912016a18edf7e4280b33ce0d04b3f8c6b62c5ab3dc23ebc2aad36","sha512":"bca658dc363fd4fedad93316bc6a8c89edc4c6b3633fbb8a3a29c28624ee568c766b74b42ff051d4511e0047733bb84119eae1d7920c4cb91dffaf0f9a4ac281","ssdeep":"","tlshash":"1ab0220e8280e800eb00203ba00c8a20a3b838220208308a3a28bf02a20ce02228a2c8","first_seen":"2023-05-10T10:01:16Z","last_seen":"2025-09-15T00:13:34.586872Z","times_seen":19,"resource_available":false,"data":null}},"time_used":566,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":566,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/pyC2VvJ/alert-xxl.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:43.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:17:47 GMT","end":"Sun, 16 Nov 2025 07:17:46 GMT"},"fingerprint":{"sha1":"30:62:E2:16:F0:8D:8F:C4:30:EF:67:44:60:2F:45:29:D1:5B:AF:94","sha256":"EE:AB:93:C9:6B:44:94:94:F6:EE:CA:98:DE:CE:BF:A6:25:9F:C8:76:A5:43:59:77:38:DD:D2:23:F7:9C:B1:70"}}},"request":{"raw":"GET /pyC2VvJ/alert-xxl.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ilcorsaronero.piraproxy.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 13 Sep 2025 16:34:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 5554\r\nlast-modified: Mon, 07 Aug 2023 04:09:39 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5554,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"8d0eed07b450044fdca282d1daf8a58c","sha1":"794e1284cdf81fd60154955c1805282ae21240cd","sha256":"baac89456a2d4dfdcdc14244fbe50a04ade7a401c82de605938a92e16f35c1af","sha512":"d1aab3205c8b00f207ea21f0996cbcfae1c9816fb73e749a4a85daf6eed19d5e40f90240c212bbe2ec17346b6e56132e467cb33c22aaf884efa910c482c304f3","ssdeep":"96:Pj88irwxhMv5KVO4+lcN+egT9cxF2gvPMdj80d7PJjOjSscgZ:PoWeGulq+eaSvUdXPFkc0","tlshash":"84b19e259de1cfcc6f774669d28af3f450520d90439276c83fdd8e710852288bc42724","first_seen":"2023-08-08T02:54:42Z","last_seen":"2026-04-03T18:56:21.861812Z","times_seen":3346,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":40,"dns":1,"connect":23,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s-ilcorsaronero.piraproxy.net/images/top_bg.png","fqdn":"s-ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:44.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 22:10:23 GMT","end":"Thu, 16 Oct 2025 23:08:47 GMT"},"fingerprint":{"sha1":"11:AF:80:6B:A4:DB:8D:A6:3D:BD:32:97:52:F3:BE:55:C2:80:84:56","sha256":"FB:27:A7:CA:E0:F0:6F:8A:A4:CC:F0:A9:FA:55:EF:11:22:B0:4E:70:92:B8:B3:51:FD:2D:B2:F1:7A:A2:C6:CD"}}},"request":{"raw":"GET /images/top_bg.png HTTP/1.1\r\nHost: s-ilcorsaronero.piraproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s-ilcorsaronero.piraproxy.net/css/main.css\r\nCookie: view=1; PHPSESSID=sor4g4448h77rtg0927u2gh5b4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 16:34:45 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 16:34:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uXvTS1Qc%2F7yHek7JlbSh47tFKfIPFb5fW3%2FwUXNBFO9BOckRF6iRD%2Fsj3UEsLxHVM8VuAlAFYll6Ppkew8drJWJEkSwm%2FAx3OkuTKl2uYmeJGEqN04YCUECiJA%3D%3D\"}]}\r\ncf-ray: 97e90dc469515685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3 x 20, 8-bit/color RGBA, non-interlaced","md5":"9f69fc827d2beaf059b07491dc4ee669","sha1":"33614b7f70dc656e50bca9e3a7a81402b526a660","sha256":"7bf5e69a9b2b372a0a5c4f347c19fcc9578a47f20a190f356ce896e27ff1c340","sha512":"47ade0d627c0c22c156d6b72973b18536c099bddfbabe25795c03d15b4a458720d0ad10d8ffb1552534f6836e0d1f7a5d98158d9dbc38fa543ce5d3a178548aa","ssdeep":"","tlshash":"b3c08cc212a84daa815b893921ea082768ba9a1ac21b9206006900680a2288880a8362","first_seen":"2023-05-10T10:01:16Z","last_seen":"2025-09-15T00:13:34.587813Z","times_seen":21,"resource_available":false,"data":null}},"time_used":706,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":706,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s-ilcorsaronero.piraproxy.net/images/global/menu/on_video.gif","fqdn":"s-ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:44.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 22:10:23 GMT","end":"Thu, 16 Oct 2025 23:08:47 GMT"},"fingerprint":{"sha1":"11:AF:80:6B:A4:DB:8D:A6:3D:BD:32:97:52:F3:BE:55:C2:80:84:56","sha256":"FB:27:A7:CA:E0:F0:6F:8A:A4:CC:F0:A9:FA:55:EF:11:22:B0:4E:70:92:B8:B3:51:FD:2D:B2:F1:7A:A2:C6:CD"}}},"request":{"raw":"GET /images/global/menu/on_video.gif HTTP/1.1\r\nHost: s-ilcorsaronero.piraproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s-ilcorsaronero.piraproxy.net/css/main.css\r\nCookie: view=1; PHPSESSID=sor4g4448h77rtg0927u2gh5b4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 16:34:45 GMT\r\ncontent-type: image/gif\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 16:34:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WakyeN47v8Hc83yZPK1TcLcpoePuA%2B93jckQo7zl7Ge%2F4QuO2Jdh8sSSFH7vxNRv%2BBn4JupN7TcUBSBPFg3o4EZsjAr1WLrUGFuLMtyJSHs8rMjCMoKpUvv3AA%3D%3D\"}]}\r\ncf-ray: 97e90dc489545685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 16","md5":"e58783bb801d08d4f2e3bbc229dc6377","sha1":"add62e1ba3e0cec936581bed3875ab13ea48f212","sha256":"6b39fbd0c9b825173787fc2ee202e19775b8b0ccf4fe912d03600620eed91626","sha512":"970cc2b79f39dd11ad01cbc19c86415951c39ae390720a9ffe7e5a54db4e0dad07ab05d12da45b1705ca9a6d5ff4f609c4c9e7bbd8245f6258da836917ca3285","ssdeep":"","tlshash":"29b02280e0b3f2e0c2aab03080280fc802200a30b200002a803203a0ffbe0f228cbcc2","first_seen":"2023-05-10T10:01:16Z","last_seen":"2025-09-15T00:13:34.566728Z","times_seen":17,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s-ilcorsaronero.piraproxy.net/images/global/menu/on_about.gif","fqdn":"s-ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:44.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 22:10:23 GMT","end":"Thu, 16 Oct 2025 23:08:47 GMT"},"fingerprint":{"sha1":"11:AF:80:6B:A4:DB:8D:A6:3D:BD:32:97:52:F3:BE:55:C2:80:84:56","sha256":"FB:27:A7:CA:E0:F0:6F:8A:A4:CC:F0:A9:FA:55:EF:11:22:B0:4E:70:92:B8:B3:51:FD:2D:B2:F1:7A:A2:C6:CD"}}},"request":{"raw":"GET /images/global/menu/on_about.gif HTTP/1.1\r\nHost: s-ilcorsaronero.piraproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s-ilcorsaronero.piraproxy.net/css/main.css\r\nCookie: view=1; PHPSESSID=sor4g4448h77rtg0927u2gh5b4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 16:34:45 GMT\r\ncontent-type: image/gif\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 16:34:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=edvQyQdgnaOzKKm3a8MrxdEC8Wm7cx0k92KBSzGp%2FaT1kZ%2FL3cihqS2iIpPqaWdi13Byw9V6eYB2gcjhddx9jlyj4F7vauRJ5DZi7Yvjgh0u6G44jfCPbG0mCA%3D%3D\"}]}\r\ncf-ray: 97e90dc499595685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 16","md5":"731c78314b2ff744ce047639082684c3","sha1":"ab6034474f3406ee1434ab6528565b2b760edfcc","sha256":"22c9ba4ee539f0dde299d2231ed672988975d8984bb550f223492db5409c7c38","sha512":"dba4f5f3953ad3d77d53fbca875b0cefbc219fc7249843a45d80e2ec7ca3e2627b662b0c63d952c23c896588563f88655e6d27ff80d2b8d4aca1a6f3b164599e","ssdeep":"","tlshash":"9cb02222ee88b22ff288e8300a0002823330823883a82008a8bc0002fc2a3e20822c00","first_seen":"2023-05-10T10:01:16Z","last_seen":"2025-09-15T00:13:34.567854Z","times_seen":18,"resource_available":false,"data":null}},"time_used":711,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":711,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metrica-yandex.com/metrika/tag.js?1001","fqdn":"metrica-yandex.com","domain":"metrica-yandex.com","tld":"com"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:43.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metrica-yandex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 21:36:59 GMT","end":"Sun, 23 Nov 2025 22:36:40 GMT"},"fingerprint":{"sha1":"36:60:61:C3:46:B1:69:30:CB:F4:DD:56:E4:BE:E9:41:81:0D:97:D8","sha256":"15:6A:48:19:CB:B8:8D:F9:EF:81:78:C4:66:96:7B:98:09:07:E9:2C:22:A8:A5:54:6B:9A:C1:8C:4F:39:CB:FF"}}},"request":{"raw":"GET /metrika/tag.js?1001 HTTP/1.1\r\nHost: metrica-yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ilcorsaronero.piraproxy.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Sep 2025 16:34:44 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 13 Aug 2025 18:40:13 GMT\r\netag: W/\"689cdc0d-eb6f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nage: 1335076\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4VQE4eTPgsvFS2kp8WLlZVxBtUROq2cJp323WSQhA5YLktlkoNqW5%2FZK8321pS7MDHrBJiKE20Y444oSJeU3DpIiVMSI6JNhBy93ya2e3Bo%3D\"}]}\r\ncf-ray: 97e90dc3ef8a56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60271,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (60271), with no line terminators","md5":"ea67b2343fc359662afdae5d4c8c8e03","sha1":"7f07219a8cd9d6d5c17e20bd7e80fac0281c2b18","sha256":"5e31460a6eacabdc5895ad2ad898a4a570ac88f2794c61ddce6b0beee304eb11","sha512":"d3d560c1a9320de2150f1f153e70254ba7a67153047d8551ffdb47b1feca1124ff27dd29b79cada58239b0af49160f2ede93905015e54909a34250e51d01e29c","ssdeep":"768:QzbSRKFe9crazKUmq5VxapzxVJI927WE8mccSN4WDhbc6tfJGPmAsV:ZKycrU2q5IxPI+hDhW9c6dJGPmAG","tlshash":"f8431e1c7cc260092953e2bb016b31957b25b1009da96df6b414e3a3ee7468f9dc3fda","first_seen":"2023-03-07T12:40:02Z","last_seen":"2026-02-07T15:24:54.107455Z","times_seen":1747,"resource_available":false,"data":null}},"time_used":1242,"timings":{"blocked":608,"dns":21,"connect":1,"send":0,"wait":10,"receive":0,"ssl":598},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heartilyscales.com/a2/86/90/a286902791a7f4c98bcb1e812322cd78.js","fqdn":"heartilyscales.com","domain":"heartilyscales.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:43.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"heartilyscales.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Aug 2025 21:31:25 GMT","end":"Sun, 02 Nov 2025 21:31:24 GMT"},"fingerprint":{"sha1":"8C:BC:E6:45:99:A6:42:A8:C3:7C:33:7D:77:C5:9E:C7:70:2A:A9:6C","sha256":"44:0D:F2:B1:46:00:9E:72:AB:F2:58:53:DB:2A:6F:97:C8:DF:54:6F:43:D4:84:F7:D4:6A:D5:F7:8B:ED:15:C2"}}},"request":{"raw":"GET /a2/86/90/a286902791a7f4c98bcb1e812322cd78.js HTTP/1.1\r\nHost: heartilyscales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ilcorsaronero.piraproxy.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 13 Sep 2025 16:34:44 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 30365\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nset-cookie: 4b4e7ab587d59b22ad7bcd2439afc363_FEATURES-2379=1; expires=Sat, 13 Sep 2025 16:34:44 GMT; secure; SameSite=None\r\nx-envoy-upstream-service-time: 2\r\nHost: heartilyscales.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: b16e4c0d1c10d148bd7939541c077029\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76475,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a6108380b882f991beaebeaac716c39a","sha1":"b4c2292d4b8dbd927909dd6d8185bb9d1c6f504c","sha256":"44388fc57f66e6a8be888215219040d17377230e3b693c6047d77ffaaad1e40a","sha512":"70051ff45d43d9fdf8f3f07769757f0ac30a99b0c43d22b5b428b296227c7178718dbdb9a5c727022daffe2c9d50e72bdfd239cef805ab7d0a401ef332e11253","ssdeep":"1536:a8xKuAEEm3pEEim4mfdMN6mXpH1fPzdsRt:UuAQWRHmlMN6m5Jwt","tlshash":"9073c8897f50b05cc3da6577322fa40af06a1d42614cf45ce122e8a4ffaa71df53b968","first_seen":"2025-09-11T15:59:13.062818Z","last_seen":"2025-09-15T11:50:51.514801Z","times_seen":7,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":16,"connect":92,"send":0,"wait":97,"receive":92,"ssl":190},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s-ilcorsaronero.piraproxy.net/images/global/menu/on_stills.gif","fqdn":"s-ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:44.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 22:10:23 GMT","end":"Thu, 16 Oct 2025 23:08:47 GMT"},"fingerprint":{"sha1":"11:AF:80:6B:A4:DB:8D:A6:3D:BD:32:97:52:F3:BE:55:C2:80:84:56","sha256":"FB:27:A7:CA:E0:F0:6F:8A:A4:CC:F0:A9:FA:55:EF:11:22:B0:4E:70:92:B8:B3:51:FD:2D:B2:F1:7A:A2:C6:CD"}}},"request":{"raw":"GET /images/global/menu/on_stills.gif HTTP/1.1\r\nHost: s-ilcorsaronero.piraproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s-ilcorsaronero.piraproxy.net/css/main.css\r\nCookie: view=1; PHPSESSID=sor4g4448h77rtg0927u2gh5b4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 16:34:45 GMT\r\ncontent-type: image/gif\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 16:34:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dn7pnajz%2Bke77w6mZJGb%2B%2BQimpUTyB0KBdF6dY%2Fmu5dCj9XKtYPKTIoqztqO1h62Iph492VMur1LV6K1kgwNVPuInIEpHa4q2J42BZ22CG5QHbv34wGTORKOBA%3D%3D\"}]}\r\ncf-ray: 97e90dc479535685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 16","md5":"32c2d1d315dabf0803de32621daec43e","sha1":"74f6488dd4b9dd18a90f9a8313da2d0c59ee7eaf","sha256":"9b7fe85880cb0b65214258341f40bfcb8775670c3247dacf3a34fa78ac2c4927","sha512":"f9bee1ce6282778b2ee35fd82216f315725fbc800ad5c71729012af11d52df195145babed7a59541cacb63e5e0bc8f6964fda068087e10d6f28ab9f284b637d7","ssdeep":"","tlshash":"84b022a2c200fcb0f3e0a0308c2a0800003c0aae820c0c0ec30bc008fe2a2a088e0088","first_seen":"2023-05-10T10:01:16Z","last_seen":"2025-09-15T00:13:34.560523Z","times_seen":20,"resource_available":false,"data":null}},"time_used":584,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":584,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s-ilcorsaronero.piraproxy.net/images/global/menu/on.gif","fqdn":"s-ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:44.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 22:10:23 GMT","end":"Thu, 16 Oct 2025 23:08:47 GMT"},"fingerprint":{"sha1":"11:AF:80:6B:A4:DB:8D:A6:3D:BD:32:97:52:F3:BE:55:C2:80:84:56","sha256":"FB:27:A7:CA:E0:F0:6F:8A:A4:CC:F0:A9:FA:55:EF:11:22:B0:4E:70:92:B8:B3:51:FD:2D:B2:F1:7A:A2:C6:CD"}}},"request":{"raw":"GET /images/global/menu/on.gif HTTP/1.1\r\nHost: s-ilcorsaronero.piraproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s-ilcorsaronero.piraproxy.net/css/main.css\r\nCookie: view=1; PHPSESSID=sor4g4448h77rtg0927u2gh5b4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 16:34:45 GMT\r\ncontent-type: image/gif\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 16:34:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UJnRjIFaauytHGvtPnPqL7Uri0OHfa1vKCRpE57sjbEHfaQA8vnrjjV5pvY13Bccu01tBNcekf1vkdgPEyqroZ%2Ffbuc7Rl%2BcBOwSH47YcwfeR7raxoJOnDoOqQ%3D%3D\"}]}\r\ncf-ray: 97e90dc489585685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 16","md5":"d9f2f2309f0c7a06687bfa7302f290de","sha1":"f36260e2bfe8e13e10a595db2c8b90a6638a5997","sha256":"0317b74bf30d2513a3881578afb283c01458b0f5cc39554f159771b502d9137c","sha512":"82676a433e7c4e39f027a86e9599128d5499e83dcb97ad48719a3c6fb487ea5bc5afec65081dd1ae446ac6f2d67f633ae387ce5682352085afce732734cd5953","ssdeep":"","tlshash":"77b022c0e2afa8b0feac8830380003800300e3b82230030cc2080a80fc3e0220c22e80","first_seen":"2023-05-10T10:01:16Z","last_seen":"2025-09-15T00:13:34.574035Z","times_seen":21,"resource_available":false,"data":null}},"time_used":627,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":627,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s-ilcorsaronero.piraproxy.net/images/global/menu/on_contact.gif","fqdn":"s-ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:44.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 22:10:23 GMT","end":"Thu, 16 Oct 2025 23:08:47 GMT"},"fingerprint":{"sha1":"11:AF:80:6B:A4:DB:8D:A6:3D:BD:32:97:52:F3:BE:55:C2:80:84:56","sha256":"FB:27:A7:CA:E0:F0:6F:8A:A4:CC:F0:A9:FA:55:EF:11:22:B0:4E:70:92:B8:B3:51:FD:2D:B2:F1:7A:A2:C6:CD"}}},"request":{"raw":"GET /images/global/menu/on_contact.gif HTTP/1.1\r\nHost: s-ilcorsaronero.piraproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s-ilcorsaronero.piraproxy.net/css/main.css\r\nCookie: view=1; PHPSESSID=sor4g4448h77rtg0927u2gh5b4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 16:34:45 GMT\r\ncontent-type: image/gif\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 16:34:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xm40GB6o%2FhoC9riTnKzXX2%2B%2Fsk76eBQ9QgwiwdUhbFCQcqR3P7QXdyzrmtQqd7H8IQeeAf%2BhA9o3TsQ53ofOaZmPv3ALbg1XHsPvJeOw2q3562csf2u9NdYjxQ%3D%3D\"}]}\r\ncf-ray: 97e90dc4995a5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 16","md5":"52fea8be5cce9a916f57761e7da8d4a8","sha1":"e1298b1d00abcba7867a112e7bfaaa3347b5a0da","sha256":"2b9d8d50e58ca2a6b64b96d5cba28a19766c762ae17f8d4c049a2a315305dd88","sha512":"7ed35d60a546f3bc6c0d29fb7b54116c50742e6c389bc30be6f73dbfac57a9df0b0af2e32b25d035c944aa8f221585214231c927ec4cf6094623ef37c34df708","ssdeep":"","tlshash":"a6b0222ce0e0e032c3cceab0fc0803800208c228020a0028c8fc0032ee3e2020c20eb0","first_seen":"2023-05-10T10:01:16Z","last_seen":"2025-09-15T00:13:34.568872Z","times_seen":20,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"matomo.hellohi.me/matomo.js","fqdn":"matomo.hellohi.me","domain":"hellohi.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:44.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hellohi.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Sep 2025 02:30:09 GMT","end":"Wed, 10 Dec 2025 03:27:45 GMT"},"fingerprint":{"sha1":"77:E9:73:0D:B1:FF:D8:33:D2:70:E5:D7:AC:43:15:25:3B:5E:8E:B7","sha256":"1F:E0:AF:A2:3A:69:98:87:C5:49:EF:0B:41:08:52:24:C5:3A:2B:56:AD:92:AD:93:7F:5C:00:22:3F:66:FE:4E"}}},"request":{"raw":"GET /matomo.js HTTP/1.1\r\nHost: matomo.hellohi.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ilcorsaronero.piraproxy.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 13 Sep 2025 16:34:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SQrWPg4slKXmsy0lQMCmvQE4Hx9bzjdCe6bMeWs1bWGAcb6nUTJnLLbWOnNzUYW8a0kWFzNH1iyYbsd82C2DOQO0IblSaLwrxJ%2BBgwT%2B6w%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 97e90dc52a935696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":38,"dns":22,"connect":1,"send":0,"wait":141,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s-ilcorsaronero.piraproxy.net/images/arrow-desc.png","fqdn":"s-ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:43.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 22:10:23 GMT","end":"Thu, 16 Oct 2025 23:08:47 GMT"},"fingerprint":{"sha1":"11:AF:80:6B:A4:DB:8D:A6:3D:BD:32:97:52:F3:BE:55:C2:80:84:56","sha256":"FB:27:A7:CA:E0:F0:6F:8A:A4:CC:F0:A9:FA:55:EF:11:22:B0:4E:70:92:B8:B3:51:FD:2D:B2:F1:7A:A2:C6:CD"}}},"request":{"raw":"GET /images/arrow-desc.png HTTP/1.1\r\nHost: s-ilcorsaronero.piraproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ilcorsaronero.piraproxy.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 16:34:44 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 16:34:44 GMT\nPHPSESSID=f53i6fqv4h4d4s834tqn3idloi; Path=/\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5GEG5uLn%2B8G10cKz1YP%2FFwWGb4XExPzDOpSFQK%2B3iVeFxIadf6iRTR7PFv6c9KYHctOX4JMkxeA48WNuLtX%2BnElJT5XisoKg2dDhBIwNxRDIjJIP6yGV6sPgPA%3D%3D\"}]}\r\ncf-ray: 97e90dc0892f5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":131,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 11 x 6, 8-bit/color RGBA, non-interlaced","md5":"f253b93e8cedcd285138ec1ba61da6d4","sha1":"6dc4f538a3b10949ec986ce1acdbe0d72c6fc12b","sha256":"0de73bbc7d0a43ddaa04da3d805de602821f7dde3f174015c9a69222f92b8571","sha512":"e5c8edd0e4b1e346e3389c53078d7627c08af3b1f2ff05f5fe79b55b53883ca72ee5bd14332e0e1748b85d4e662dbfd05d6f6192cf28747ff05c0f3d86b2acc7","ssdeep":"","tlshash":"eac092d26be1687ed229843692230861e9321928886267ab610ac96e0602a8955e939a","first_seen":"2023-05-21T19:07:28Z","last_seen":"2025-09-15T00:13:34.582113Z","times_seen":16,"resource_available":false,"data":null}},"time_used":580,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":532,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s-ilcorsaronero.piraproxy.net/images/m.gif","fqdn":"s-ilcorsaronero.piraproxy.net","domain":"piraproxy.net","tld":"net"},"ip":{"addr":"104.21.67.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:43.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"piraproxy.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 22:10:23 GMT","end":"Thu, 16 Oct 2025 23:08:47 GMT"},"fingerprint":{"sha1":"11:AF:80:6B:A4:DB:8D:A6:3D:BD:32:97:52:F3:BE:55:C2:80:84:56","sha256":"FB:27:A7:CA:E0:F0:6F:8A:A4:CC:F0:A9:FA:55:EF:11:22:B0:4E:70:92:B8:B3:51:FD:2D:B2:F1:7A:A2:C6:CD"}}},"request":{"raw":"GET /images/m.gif HTTP/1.1\r\nHost: s-ilcorsaronero.piraproxy.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ilcorsaronero.piraproxy.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 13 Sep 2025 16:34:44 GMT\r\ncontent-type: image/gif\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Sun, 14 Sep 2025 16:34:44 GMT\nPHPSESSID=9ei1607aq8bmtvaodajd8cuidt; Path=/\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d24RGaiK6EmhLufxgigBMt0mKXaO0HcB7aKk4I5qLIH5Na%2BTCIhaIHb678JVWtcwd3pG%2BX2JUFMYx2PrLqIIb6TXA45IjbxyWNw0%2BG3HUNbdbeMNnYN8sD0C4w%3D%3D\"}]}\r\ncf-ray: 97e90dc089335685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2378,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 124 x 27","md5":"b1a3c5a8c5d6a7bfe3f533d0b30d1470","sha1":"fa106aa6b0787f603598d268fa1cd63f90e5b011","sha256":"89f366181460acc33bfa4c25de9585de13ea2b0a35cd3a4ac9f5609040241f60","sha512":"f073249a79524fe637f7f0cd7136e50156382a4e9e5d453580aded69564c119e3eaf3269bac8df7743b1f1c76f546d91f18f719d7aaddefb006941f21fc58111","ssdeep":"","tlshash":"35414a38a2e598c1ea22c83323d1789865e7371e16fd850c311d08135aa2138912e9b0","first_seen":"2023-05-10T10:01:16Z","last_seen":"2025-09-16T09:27:36.667065Z","times_seen":18,"resource_available":false,"data":null}},"time_used":635,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":592,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theusualsuspectz.biz/j/m/qqqq.js","fqdn":"theusualsuspectz.biz","domain":"theusualsuspectz.biz","tld":"biz"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ilcorsaronero.piraproxy.net/","date":"2025-09-13T16:34:43.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theusualsuspectz.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 13:45:33 GMT","end":"Wed, 26 Nov 2025 14:43:06 GMT"},"fingerprint":{"sha1":"D4:9A:25:78:D6:9A:39:F7:27:C4:D2:C3:FD:38:10:B3:17:FB:0D:70","sha256":"14:1C:1C:86:65:CB:A4:0B:4B:D9:90:87:F5:D6:48:5E:0C:C9:1C:0D:D6:1C:2F:BF:7D:09:46:5F:B0:05:E7:55"}}},"request":{"raw":"GET /j/m/qqqq.js HTTP/1.1\r\nHost: theusualsuspectz.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ilcorsaronero.piraproxy.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 13 Sep 2025 16:34:43 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 13 Aug 2025 18:32:56 GMT\r\netag: W/\"689cda58-bcdf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nage: 1328817\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v7Of4gl830Byv5f34e0w7rrIHMPLy3tkSG1fy5eJbt2lArtLwMLpAut8BIotvFHPxy2o0u7TfObhIXLe%2BZQ6tlpijJyEFU4cwxw8YWPBRZOYZA%3D%3D\"}]}\r\ncf-ray: 97e90dc06a5056c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48351,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (48351), with no line terminators","md5":"febd5bfc829d7c8aa363e93e2e61f414","sha1":"10d66213a9249bea47b15acf295323f01d217ef0","sha256":"ff391f38fc73325f58d0626b9415ac121f1461407d74e86ebddefd8180050d76","sha512":"ae47caa16d48f665df6ee05555456e0903d93c33a107bd7b40993344dc55f65a240a41b72dbb2a0ee32cc933bba8a5c64d5765db8ebb99f3b3da6fae90199749","ssdeep":"768:oqjcGGdPJhox3bX/R/OHz+kdAi0qm+3RfxK6KZ+BcWp8rpyw+3fyyzYVXVlBa9uP:oY/hm8zxi104k/rX07S5jXl","tlshash":"5f23408573d0bc86138bdb76332bb5e5f16a49d9749804caf100fce0f5ed902eaa9671","first_seen":"2023-03-07T12:40:02Z","last_seen":"2026-01-03T13:41:18.081574Z","times_seen":1838,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":22,"connect":1,"send":0,"wait":11,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}