{"report_id":"eba79589-067f-43a4-9ef4-6386a26cedcf","version":6,"status":"done","tags":[],"date":"2025-09-02T07:25:13Z","url":{"schema":"http","addr":"graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.64.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"title":"Minim Powerpoint Template » Free Download Vector Stock Image Photoshop Icon"},"submit":{"url":{"schema":"http","addr":"graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.64.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-07T07:25:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"equilibriumfestive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"theusualsuspectz.biz","ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-01-27","domain_rank":2024659,"first_seen":"2023-01-27T01:27:31Z","last_seen":"2025-08-28T08:22:54.642035Z","alert_count":0,"request_count":1,"received_data":49087,"sent_data":426,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-08-27T15:14:26.687687Z","alert_count":0,"request_count":1,"received_data":6432,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"graphicex.dirproxy.me","ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-02-15","domain_rank":0,"first_seen":"2025-08-28T08:25:00.90542Z","last_seen":"2025-08-28T08:25:00.90542Z","alert_count":0,"request_count":34,"received_data":484061,"sent_data":19151,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"DataLife Engine","description":"","website":"https://dle-news.ru","common_platform_enumeration":"cpe:2.3:a:dleviet:datalife_engine:*:*:*:*:*:*:*:*","icon":"DataLife Engine.svg","categories":["CMS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-08-27T15:11:05.791298Z","alert_count":0,"request_count":1,"received_data":21447,"sent_data":573,"comment":"","tags":null,"fingerprints":null},{"fqdn":"metrica-yandex.com","ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-09-14","domain_rank":422485,"first_seen":"2021-09-19T04:17:37Z","last_seen":"2025-08-28T08:22:54.380341Z","alert_count":0,"request_count":1,"received_data":61008,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"i.ibb.co","ip":{"addr":"45.43.142.4","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"2010-07-20","domain_rank":21643,"first_seen":"2018-11-25T10:13:48Z","last_seen":"2025-08-31T21:26:38.308296Z","alert_count":0,"request_count":1,"received_data":5916,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"heartilyscales.com","ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2022-12-16","domain_rank":2862533,"first_seen":"2022-12-16T08:32:11Z","last_seen":"2025-08-28T08:22:54.463315Z","alert_count":0,"request_count":1,"received_data":73437,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"equilibriumfestive.com","ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"domain_registered":"2025-04-19","domain_rank":741204,"first_seen":"2025-04-23T00:51:49.572617Z","last_seen":"2025-08-28T08:22:55.674838Z","alert_count":2,"request_count":2,"received_data":180094,"sent_data":922,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"origunix.com","ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-11-30","domain_rank":343993,"first_seen":"2021-11-30T12:40:27Z","last_seen":"2025-09-01T17:32:17.640225Z","alert_count":0,"request_count":1,"received_data":64541,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"matomo.hellohi.me","ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-07-03","domain_rank":0,"first_seen":"2019-07-03T20:13:04Z","last_seen":"2025-08-28T08:22:54.461798Z","alert_count":0,"request_count":1,"received_data":601,"sent_data":421,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"vmuid.com","ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2018-10-22","domain_rank":182910,"first_seen":"2019-07-09T14:53:12Z","last_seen":"2025-09-01T15:59:35.979681Z","alert_count":0,"request_count":1,"received_data":10466,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"msdoj.com","ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-07-01","domain_rank":211684,"first_seen":"2025-07-02T02:58:17.140394Z","last_seen":"2025-08-28T08:22:55.673365Z","alert_count":0,"request_count":1,"received_data":64496,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5779365b0a28c08298ca5847c65b769d","sha1":"3076ad9e094690cd6c4ee200ae254e6e7260fd30","sha256":"57c620405714b8baa51067e0ca9bc9a9b252985292b857360aec8a9936688709","sha512":"cab14c9b7afc3b08d77e93fa0f8bd5c6c1a6ad4966a4e6981b11ef0e5fad899e4cc63bdbfbaade0d418e0e97045088da763fc5584a61ad0bfe1573d39a34e5cf","ssdeep":"","tlshash":"a8800080c0a300a008002308c2008033802020803002000083088ce38808838b0302ea","size":26,"data":"","first_seen":"2023-03-07T12:40:02Z","last_seen":"2026-02-07T15:24:54.16288Z","times_seen":1726,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"graphicex.dirproxy.me/templates/graphicEx/images/vector.png","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:49.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /templates/graphicEx/images/vector.png HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html\r\nCookie: PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:50 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Wed, 03 Sep 2025 07:24:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DlSt2O2zxXWx8eJJn%2BY9Ks8a5i2QiLlEUdSvvXS%2BCnYuNVR5asD2ea13cRSViW2u%2B0x63rieWuamsQ8k6h9sABOFrjdRpd30ZVV9LHJ3V8XC7aY%3D\"}]}\r\ncf-ray: 978b451a69ccb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2116,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced","md5":"b85d9760fbac0d2fb83897695e6e3f0a","sha1":"bcca5d02ce7a286f4a2642ab9c0ac70f7221bc6c","sha256":"74245d9e69786df79cc243ce80ad80e40f4b9ee7327471e7bb9940ca3b3b8431","sha512":"73ec0fbcfd69d1abc7b9d4a72650fa0d1bd0fea5f69fd78de7d57310302a54448e27b35ad8a108977fad559f94a716080b64bd29058c682cdf4b0d73f349f6e2","ssdeep":"","tlshash":"8b41d800fd456ad0476fa8411dd94017f8379c80d6d198a6accecd9b892837398ec6d7","first_seen":"2024-08-20T08:54:10.690869Z","last_seen":"2025-11-25T21:30:53.36809Z","times_seen":198,"resource_available":false,"data":null}},"time_used":754,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":754,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:50.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:22:25 GMT","end":"Mon, 03 Nov 2025 19:22:24 GMT"},"fingerprint":{"sha1":"F5:9E:5D:EB:46:9B:ED:9F:D2:D7:E8:D1:06:43:DF:9D:0C:13:7E:75","sha256":"AA:C4:C0:AF:38:AE:91:75:3F:86:CE:32:70:A9:8F:C4:2F:7F:D2:28:D1:34:AD:0A:C8:E2:6C:6E:4D:46:72:23"}}},"request":{"raw":"GET /s/roboto/v48/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://graphicex.dirproxy.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20612\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 Aug 2025 10:25:01 GMT\r\nexpires: Fri, 28 Aug 2026 10:25:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 421189\r\nlast-modified: Thu, 29 May 2025 23:35:01 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20612,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20612, version 1.0","md5":"b07da7aa3e4f363c5cdbc11312239e8c","sha1":"47bf5b2f24ea4a4caafccc89b9d2a6677ef9e3b8","sha256":"e44c11f4834bdd4d6b6da7b8ee5eaebc8acb41250cd6bce5cc82ea8262140eaa","sha512":"420729406b315d8af34b62b78f39e763f5cf33cbf94467457b393fde0573dd7ffc6a23f25680988f9b82a4a3b719876ff76f3e1db047ce82615f544fc3a82532","ssdeep":"384:k5Eu+yl5Y9RpwjjmD/8Qu+POP9w+oB7rezldH9W4EMs8qCr9WvS80M8T4PTEXPFw:YEu+/Jw3FF+WP9DC/ez79jcCrb8BK4Eq","tlshash":"8192df6bce71497ac711262c773917addb8b44f627f91f2ba0562411c7b8e015c2cc7a","first_seen":"2025-01-09T06:25:34.419113Z","last_seen":"2026-04-04T11:20:55.701021Z","times_seen":45624,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":58,"dns":1,"connect":7,"send":0,"wait":9,"receive":1,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/favicon.ico","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:51.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html\r\nCookie: PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:51 GMT\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Wed, 03 Sep 2025 07:24:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BvlenE1OQ%2FUIHbaSmJynnIpelysLZ8YGuBl3xoHHRr9M7PEzgctZ4eT1PQLpyRvvPaSYgMmvouETyqzGKUcaXGg%2FtgcVVzei52l5ImnrmBpwxv4%3D\"}]}\r\ncf-ray: 978b45276a37b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10343,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (6876), with CRLF, LF line terminators","md5":"4f05699747d9a66bfe71eb23f2d396c8","sha1":"355556b99e68b0078907084b5921b909ae6217be","sha256":"1a9df3591c3d56ee76236d4f0783cf7ace1fd71cd0fde062e444d7d19bfda7e7","sha512":"68ec866a4b70828329f2f2b6e04ad2f21d8a61442906b62ef84b34f7554ea6b503091705d29a722ee0840b6a1b2903d95d0cb5508e6506ed16b6cd67dd21e3a8","ssdeep":"192:SVEHSE/rqTOb9eSDpcMQy9QVpBuEuFPPVEHSE/NOwJ:OqqTO19JQnpBuEuv2","tlshash":"c422a663fec29109921701d4f9b2fb7cb879250497128f3890e87278a385be73e65b49","first_seen":"2025-09-02T07:25:16.601261Z","last_seen":"2025-09-02T07:25:16.601261Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/zpp/zpp4.js?q22q2q2","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:49.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /zpp/zpp4.js?q22q2q2 HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html\r\nCookie: PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 13 Aug 2025 22:04:56 GMT\r\netag: W/\"689d0c08-9853\"\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aJcCmBx7T1qqZT%2B5tu9tqoHmb4%2FVUmN%2Fsh1SNsv8a6rGdk1k73c8Wkyco34pPofhxH1w049HumWkawjEHlILL9xAL2dZTdGaN1uYQwnibcEaVgQ%3D\"}]}\r\ncf-ray: 978b451a79dfb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38995,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (38995), with no line terminators","md5":"7dc63553536847077855df4f82f1ec18","sha1":"146c3aac34cb4e7e1e9c692ccd0161b2e4f018de","sha256":"3a18b1964d1d209c46d754459b9ef98d4a9a85065e245f8311be727ffee3f960","sha512":"16a867da1604319c7340f60b78619567731ed0e290cd804defb58f679f047b027d7e2beba8ac6893faa92dc6ed2d44eb9368ff832329b7eb6b858f6d27062b4b","ssdeep":"768:uAWlJPlQwU1CNCHq625Q3jh3GEUlb6haABXR4q:uduwU1CNwq62Ua6haABXRx","tlshash":"4d0384dc7cc270613a6371aa55ef3259937776001d9e6164a029e0e37d3588fd2a3eec","first_seen":"2023-03-07T12:40:02Z","last_seen":"2026-02-07T15:24:54.098703Z","times_seen":1821,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/app/x12.js","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:49.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /app/x12.js HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html\r\nCookie: PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 13 Aug 2025 22:04:57 GMT\r\netag: W/\"689d0c09-2bac\"\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gadniu2JsaO7dC4W%2FUp8yvUlyV9p08V7H%2B7csMQZVqD115%2FCKBm6lx5PdxDjWjSJFB4Y4Ly5hoZkl7%2FocNIIiIJCLhjFDcdMkzWaQFGdgoP9PT0%3D\"}]}\r\ncf-ray: 978b451a79e1b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11180,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (11180), with no line terminators","md5":"94efa3c05291ac5cccd32cc3a11c9724","sha1":"3a033e4d6f5e5eaf76030a81c8a05c619de436c2","sha256":"58c753f7ffcb584d2ed43470ec9bdd30a4cd4723f368d83de6163413d5555102","sha512":"1361f500a2951e29fd5dd415cb0a6985015eb4b28f6196b778e009ae39dbc55b3447113d63306c43fa6f5bbffaa6b926787dabb86b0672a9040e9e309b3e01f3","ssdeep":"192:72ClBFvbH6N6c7rMLsiCAEDvOpIiOsPhQZqiSq5zHl8RJW8+1Z1tJka:LTzal7XiJ0sg195zHmedJka","tlshash":"5b329c887ed6f107279d5a53ef1a6af9017ba0a662f4350bc3a8f6cc14f910bc179c84","first_seen":"2023-03-07T12:40:02Z","last_seen":"2026-02-07T15:24:54.090901Z","times_seen":1807,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metrica-yandex.com/metrika/tag.js?1001","fqdn":"metrica-yandex.com","domain":"metrica-yandex.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:49.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metrica-yandex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 21:36:59 GMT","end":"Sun, 23 Nov 2025 22:36:40 GMT"},"fingerprint":{"sha1":"36:60:61:C3:46:B1:69:30:CB:F4:DD:56:E4:BE:E9:41:81:0D:97:D8","sha256":"15:6A:48:19:CB:B8:8D:F9:EF:81:78:C4:66:96:7B:98:09:07:E9:2C:22:A8:A5:54:6B:9A:C1:8C:4F:39:CB:FF"}}},"request":{"raw":"GET /metrika/tag.js?1001 HTTP/1.1\r\nHost: metrica-yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Sep 2025 07:24:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 13 Aug 2025 18:40:13 GMT\r\netag: W/\"689cdc0d-eb6f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nage: 351681\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gqXNRuK0h%2FbTaVI5oIRinXwQg%2BpKHpCw7x5fVJyXMHSt3GFRCxGhphXZDdMcddxswpZZ%2BXwgym75eo8OWlU9xaBoNBaXSmXoC82MbME4951JdA%3D%3D\"}]}\r\ncf-ray: 978b451adc726d02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60271,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (60271), with no line terminators","md5":"ea67b2343fc359662afdae5d4c8c8e03","sha1":"7f07219a8cd9d6d5c17e20bd7e80fac0281c2b18","sha256":"5e31460a6eacabdc5895ad2ad898a4a570ac88f2794c61ddce6b0beee304eb11","sha512":"d3d560c1a9320de2150f1f153e70254ba7a67153047d8551ffdb47b1feca1124ff27dd29b79cada58239b0af49160f2ede93905015e54909a34250e51d01e29c","ssdeep":"768:QzbSRKFe9crazKUmq5VxapzxVJI927WE8mccSN4WDhbc6tfJGPmAsV:ZKycrU2q5IxPI+hDhW9c6dJGPmAG","tlshash":"f8431e1c7cc260092953e2bb016b31957b25b1009da96df6b414e3a3ee7468f9dc3fda","first_seen":"2023-03-07T12:40:02Z","last_seen":"2026-02-07T15:24:54.107455Z","times_seen":1747,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":48,"dns":42,"connect":1,"send":0,"wait":9,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/templates/graphicEx/style/engine.css","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:49.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /templates/graphicEx/style/engine.css HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html\r\nCookie: PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:50 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9UEVC1dCXqVs8mLsHX1rMdzJp%2Fa0z%2Bs7HZLWFRknL843%2F%2F8VbLAWPrBm66YMY5wDon%2FRBUlo0V%2F6cenCONkkzFxI7B%2BldIXI1wsYfwk5NVTirZM%3D\"}]}\r\nset-cookie: view=1; Max-Age=86400; Expires=Wed, 03 Sep 2025 07:24:49 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 978b451a69c8b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37405,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"assembler source, ASCII text, with very long lines (1570)","md5":"694ceb9747f82b0d720ba9974b79f6d8","sha1":"e9917f5ef37b14daa4b2ca722a7a24300d20689c","sha256":"24d9437b73249a290d6a53e68dca1c5b4d4dd268a97ed4af1230f01a11854393","sha512":"0fbee2bcd9791424bcf02a9564aebcccba57c167df943f2743ea50a788a3901f4e0e1c5835c8d1cb472f572c3dbcbfc0866b4f4e5a52b13fac853cbaa142f0b4","ssdeep":"768:N1grlB8pk8hJQnbNYURHRM04ZazPhyVAxW7l:/82pk8hmbNhRKVszpVM","tlshash":"92f28135f481152eb12bc5ebb8a1b7ad262c8553e6030fbfe5ab76f8c7416d90033126","first_seen":"2024-08-20T08:54:10.64096Z","last_seen":"2025-11-25T21:30:53.346919Z","times_seen":199,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/pyC2VvJ/alert-xxl.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.4","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:49.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:17:47 GMT","end":"Sun, 16 Nov 2025 07:17:46 GMT"},"fingerprint":{"sha1":"30:62:E2:16:F0:8D:8F:C4:30:EF:67:44:60:2F:45:29:D1:5B:AF:94","sha256":"EE:AB:93:C9:6B:44:94:94:F6:EE:CA:98:DE:CE:BF:A6:25:9F:C8:76:A5:43:59:77:38:DD:D2:23:F7:9C:B1:70"}}},"request":{"raw":"GET /pyC2VvJ/alert-xxl.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 02 Sep 2025 07:24:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 5554\r\nlast-modified: Mon, 07 Aug 2023 04:09:39 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5554,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"8d0eed07b450044fdca282d1daf8a58c","sha1":"794e1284cdf81fd60154955c1805282ae21240cd","sha256":"baac89456a2d4dfdcdc14244fbe50a04ade7a401c82de605938a92e16f35c1af","sha512":"d1aab3205c8b00f207ea21f0996cbcfae1c9816fb73e749a4a85daf6eed19d5e40f90240c212bbe2ec17346b6e56132e467cb33c22aaf884efa910c482c304f3","ssdeep":"96:Pj88irwxhMv5KVO4+lcN+egT9cxF2gvPMdj80d7PJjOjSscgZ:PoWeGulq+eaSvUdXPFkc0","tlshash":"84b19e259de1cfcc6f774669d28af3f450520d90439276c83fdd8e710852288bc42724","first_seen":"2023-08-08T02:54:42Z","last_seen":"2026-04-03T18:56:21.861812Z","times_seen":3346,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":40,"dns":1,"connect":23,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/templates/graphicEx/images/photo.png","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:49.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /templates/graphicEx/images/photo.png HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html\r\nCookie: PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:50 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Wed, 03 Sep 2025 07:24:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ws1Qsd7B9ZGU1Onqh7jXqpByBYeeADParGn7c%2BTvMaEckvWkyu8Crd9OJzRH3yruTZIb62T0RhcVPvFchYSrkWZkA9BY3WYaLpTgyTiz8rn%2BowE%3D\"}]}\r\ncf-ray: 978b451a69cdb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2277,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced","md5":"315405f44f6c46a8112e957a1ed2713f","sha1":"2f2c18e4229d6a8492c81f08d02a64046f4c3de0","sha256":"51b3e9cb61bab4af1af75cafe5cf6dfab12d01463d877fbab8903fe5a2e75579","sha512":"a3681d456b8377d424ab286baa581f420584a25bccdffa88bf0f495ffd09893c4acb5398159e13040686abfd59c8033b247f13950b99d763e77601e3d64886dd","ssdeep":"","tlshash":"48410b0afe35600289fd968220f3452895322cc1fc74a73af4cfc44e161a7e95a9d7d7","first_seen":"2024-08-20T08:54:10.6646Z","last_seen":"2025-11-25T21:30:53.361763Z","times_seen":196,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/templates/graphicEx/images/font.png","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:49.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /templates/graphicEx/images/font.png HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html\r\nCookie: PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:49 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Wed, 03 Sep 2025 07:24:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HuGC8eJLH9BBBQZPc2VSmXrp0M7mJ4dtUgPHyNM6tzTo%2FJA9ERAUL%2BT7Sg62a19M2QaPA%2BMk1NfP%2Fd6XNkjYHxvZ15i2eAOKxnlYZrI0PfhrGSE%3D\"}]}\r\ncf-ray: 978b451a69d7b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1869,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced","md5":"1f288df5b747d49b4e9bd5b2323629e8","sha1":"bdc5231365cde700d4d9f383fe27270936cde7bc","sha256":"08d4a74b4ebc3c0745b1b18036b56d2cfbfa4efa6a47fbdbb98b31773eb340b0","sha512":"d917570d021af74f6c0e4fb6e6c351c501e5e687a8d47219368b08735b373d122cf33485a2ca67043d600dc8eb6fffe422afbb91da0e89a15e9b42437a45745b","ssdeep":"","tlshash":"fc311915e6933c01f75875e738d190536f210ea0e6f4b59afb8dde688b960a0886e9c3","first_seen":"2024-08-20T08:54:10.691855Z","last_seen":"2025-11-25T21:30:53.340161Z","times_seen":199,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/templates/graphicEx/images/Inspirational.png","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:49.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /templates/graphicEx/images/Inspirational.png HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html\r\nCookie: PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:50 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Wed, 03 Sep 2025 07:24:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GROWNkoOzrcDI8eTKZ3HO7RmqLtYtjlOBvL25xF%2Fa%2F9zwaTYp8zHcmayXCNQWYizsBGw4Wr7wp2rVsNUTIsBVZJSHZrmYuwLr5sZp90KAwCxa3I%3D\"}]}\r\ncf-ray: 978b451a79d8b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2292,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced","md5":"acbe0bf0777df1d594fb7fe24cc0d276","sha1":"74364da732bde1a8e04acda4a54d9306c15bcc22","sha256":"ff5c7205821e0abf27783b9f560e8bede470b2adf473e538d9e4d65badd1d760","sha512":"2d86be82e5470751c842f05c57c1e60e911962916f2712db35faac406c81b12c11e8da8a4c175a09428230b64eb7b36551d79eb1800a0d7f9053a5a8c1f48520","ssdeep":"","tlshash":"5941394afda15c43f208c2d62dfc952ba5055589c2b1f153ae87c1231f2456a446fce7","first_seen":"2024-08-20T08:54:10.705508Z","last_seen":"2025-11-25T21:30:53.340982Z","times_seen":198,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/templates/graphicEx/images/menu_dropdown_level1_bg.png","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:50.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /templates/graphicEx/images/menu_dropdown_level1_bg.png HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/templates/graphicEx/style/styles.css\r\nCookie: view=1; PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:50 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Wed, 03 Sep 2025 07:24:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F1sYYxYGs7LJGgX8Ov3iatspW16ADyundRHKVOPmvflVrZ3wd62gbKF6u0J%2Ft02VCZkdyDIvkiaWowBr6Ig1J4TPSLpHhLKmZ6HEYWiHMiPOOZM%3D\"}]}\r\ncf-ray: 978b451e09f7b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":934,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 49, 8-bit/color RGB, non-interlaced","md5":"5b8cb9a6e7d6d86fa893e5ea2991c0c2","sha1":"408b2131c9b2f545c0c854b8b7ffda5bef45987e","sha256":"7b682092c773d1151c7c3e299e334277468a922f1616fe23c1435665e9bc8c9a","sha512":"029193db28d50c1e268f9d02d1c82e94de549c3e036d953451ef98e352fc1bca3bd334e05d04e373a8cb4f1b7534462f3c5aa06fe60c3c2d4b22c577b0932d18","ssdeep":"","tlshash":"f41104cafba05c0156d5dc8518ebc213da334541c9d1f07af9decc1206752f61a09adb","first_seen":"2024-08-20T08:54:10.677417Z","last_seen":"2025-11-25T21:30:53.337238Z","times_seen":195,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/templates/graphicEx/images/menu_line_item.png","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:50.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /templates/graphicEx/images/menu_line_item.png HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/templates/graphicEx/style/styles.css\r\nCookie: view=1; PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:50 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Wed, 03 Sep 2025 07:24:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ai3%2FT4MUG0s76KgUZ6ThqdhmS7iMoL5YYZWL4D4PlMEXtiOsx9yBOxjKNyzrKdkp9suiIhXdb6Bf0v2hiWoW8YvKjsjXwcTiP9wOTdL%2BBnhRioY%3D\"}]}\r\ncf-ray: 978b451e3a03b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":237,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 25, 8-bit/color RGBA, non-interlaced","md5":"d344a2731fc688e175dd9386de9f9477","sha1":"18d8cd56509c22026944d2b013548bea48afb999","sha256":"c6c9aed467ed45f7bb2aa9fe2bf72918d6a82b6e36412886f30304ecf1af9f76","sha512":"b49a8d39d28f15e7f578cd5d89d45fe2f411511f4b0812accfd6d00c12282b6c9bbf5e0ffab4766f86fd954dc62bb5b4e436ec43444da02f83298b93f4b64147","ssdeep":"","tlshash":"88d097c3f7590dadc33eec318be00000b0370ac892029b140881f21100cdcc8817e222","first_seen":"2023-07-03T21:45:52Z","last_seen":"2026-02-09T03:43:19.45679Z","times_seen":202,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/templates/graphicEx/images/icon-info.png","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:50.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /templates/graphicEx/images/icon-info.png HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/templates/graphicEx/style/styles.css\r\nCookie: view=1; PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:51 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Wed, 03 Sep 2025 07:24:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RgQGmoz%2FaPoU1RXspngWCjgRfqqYJnBLEdYGuUtuYwOTbnhjtTyejyD0LqgcO5Tnnixw3Z2gdpf4jfBHMdDNlJG0WA23snkAQD0i1rutvixgNhI%3D\"}]}\r\ncf-ray: 978b451e3a01b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3018,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"423087c7d264fd4cdae02f67e4cdca01","sha1":"91b64ee7faa02453aff74fc745c24b92166466e2","sha256":"4c706bf246149d6a9e2cba24b56feb7b6fb3eb3d7d7686be59b362d16b3c18a4","sha512":"56b40a1f92d59e575000e87057cbdf659aa886f4326a45757f9e6d5a188f2e6f5bc6bf46b622d8576f99e46d3490e4ac75a8cb9a66336aa96da3b1a8c8ef5066","ssdeep":"","tlshash":"c35119de39d99402c149e08444fb586aaf0314e2eec0b55ce8c9c9238e1a6e99846bde","first_seen":"2025-08-12T22:32:55.516859Z","last_seen":"2025-11-25T21:30:53.353089Z","times_seen":161,"resource_available":false,"data":null}},"time_used":869,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":869,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/templates/graphicEx/images/footer.png","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:50.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /templates/graphicEx/images/footer.png HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/templates/graphicEx/style/styles.css\r\nCookie: view=1; PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:51 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Wed, 03 Sep 2025 07:24:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VcXBM5D9WGMi8RDwSE6vjnOPtvPoB7q3INBHkEHBSkxL9EZNDVsbRBxbcYIBE6R76gCI8mh1eAHBZlkTdrjXm7BYEDxaW3m6U6LlcXlh2hslhQg%3D\"}]}\r\ncf-ray: 978b451e3a02b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":209,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 9, 8-bit/color RGBA, non-interlaced","md5":"0451e594d44bfad910db68d24dae7f21","sha1":"7a40a7834c6d75a385fce7129cb8473903cd8929","sha256":"1077cf043b22c21e5f04f16beafec0b938d8b74f54511642a40b0735e4342827","sha512":"bf10c1e542dfd8daf27ccce6e10a3db70459485a58212d7a54cff9fbad895cdcf2b5e882d77e4f11dc7f7eefbf6eadbb3c75d3caa2a6aeed5f09bf8d9e84c9ea","ssdeep":"","tlshash":"95d022eba7988ca497bec633823f2010b0264b9542033f384808f0612bce5cc816d2a2","first_seen":"2023-06-27T06:52:28Z","last_seen":"2025-11-25T21:30:53.327098Z","times_seen":197,"resource_available":false,"data":null}},"time_used":821,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":821,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/templates/graphicEx/images/panel_author.png","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:49.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /templates/graphicEx/images/panel_author.png HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html\r\nCookie: PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:49 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Wed, 03 Sep 2025 07:24:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XFtoRNpAlHgL4bgYNrmfXtPFLqLzsMgk%2F1afla%2BP9zEOUtqp1t8YdndoEnnZu87KPMxof7zxNYswrY%2Bi%2B5xwFLlouVkz5fLhnsSKUHaJufgWs%2BY%3D\"}]}\r\ncf-ray: 978b451a79dbb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3398,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced","md5":"450c5fd6cbbeeb248cf1596e685ae3ad","sha1":"76f79f0d12ee605368c0fff90447eb73f950c24e","sha256":"ede5329bd1bf9080914dfef91ed4af20bf0ad4b9a4b0fe2af38459d80f334e12","sha512":"2f19a23a9d69b96fc602ae09fba52e8257a34626200a1f11e583f4dcbe333244eb99da705e66eb18c354cba280a617aa2872f24108882094cd0f94f30ab1b45b","ssdeep":"","tlshash":"d6619eae4c60249ef5cdfa5209ce0111e366217c89d33b7c50d2b2df106be4b67924f8","first_seen":"2024-08-20T08:54:10.706957Z","last_seen":"2025-11-25T21:30:53.334149Z","times_seen":194,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theusualsuspectz.biz/j/m/qqqq.js","fqdn":"theusualsuspectz.biz","domain":"theusualsuspectz.biz","tld":"biz"},"ip":{"addr":"104.21.32.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:49.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theusualsuspectz.biz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 13:45:33 GMT","end":"Wed, 26 Nov 2025 14:43:06 GMT"},"fingerprint":{"sha1":"D4:9A:25:78:D6:9A:39:F7:27:C4:D2:C3:FD:38:10:B3:17:FB:0D:70","sha256":"14:1C:1C:86:65:CB:A4:0B:4B:D9:90:87:F5:D6:48:5E:0C:C9:1C:0D:D6:1C:2F:BF:7D:09:46:5F:B0:05:E7:55"}}},"request":{"raw":"GET /j/m/qqqq.js HTTP/1.1\r\nHost: theusualsuspectz.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Sep 2025 07:24:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 21 Jun 2025 04:02:03 GMT\r\netag: W/\"68562ebb-bcdf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nage: 5361751\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tu4296yrZM9owdv3PvtiKrusEOi8ovVQbwhjscxh59c9a0u5%2BvL4xubCLZOCKDugEOp7sAe8CGCXr69NlgwY%2FnrfkgDj9EPxTCC5AjWZyqDPBQ%3D%3D\"}]}\r\ncf-ray: 978b451ae9a2b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48351,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (48351), with no line terminators","md5":"febd5bfc829d7c8aa363e93e2e61f414","sha1":"10d66213a9249bea47b15acf295323f01d217ef0","sha256":"ff391f38fc73325f58d0626b9415ac121f1461407d74e86ebddefd8180050d76","sha512":"ae47caa16d48f665df6ee05555456e0903d93c33a107bd7b40993344dc55f65a240a41b72dbb2a0ee32cc933bba8a5c64d5765db8ebb99f3b3da6fae90199749","ssdeep":"768:oqjcGGdPJhox3bX/R/OHz+kdAi0qm+3RfxK6KZ+BcWp8rpyw+3fyyzYVXVlBa9uP:oY/hm8zxi104k/rX07S5jXl","tlshash":"5f23408573d0bc86138bdb76332bb5e5f16a49d9749804caf100fce0f5ed902eaa9671","first_seen":"2023-03-07T12:40:02Z","last_seen":"2026-01-03T13:41:18.081574Z","times_seen":1838,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":23,"dns":37,"connect":1,"send":0,"wait":13,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heartilyscales.com/a2/86/90/a286902791a7f4c98bcb1e812322cd78.js","fqdn":"heartilyscales.com","domain":"heartilyscales.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:49.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"heartilyscales.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 04 Aug 2025 21:31:25 GMT","end":"Sun, 02 Nov 2025 21:31:24 GMT"},"fingerprint":{"sha1":"8C:BC:E6:45:99:A6:42:A8:C3:7C:33:7D:77:C5:9E:C7:70:2A:A9:6C","sha256":"44:0D:F2:B1:46:00:9E:72:AB:F2:58:53:DB:2A:6F:97:C8:DF:54:6F:43:D4:84:F7:D4:6A:D5:F7:8B:ED:15:C2"}}},"request":{"raw":"GET /a2/86/90/a286902791a7f4c98bcb1e812322cd78.js HTTP/1.1\r\nHost: heartilyscales.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 02 Sep 2025 07:24:50 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 29330\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: heartilyscales.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 55d6e3b2b4bddc0cb6a91e1bda06518a\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":72593,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"15feda490ca59a12b2ac5cd940f4de14","sha1":"e04bde7189430ebd8e1061a1854d6b0f40b209f4","sha256":"2a94ac1efc0312901322e6bf6d38273009303ea0288b48046a1e8bb12b39313f","sha512":"62d9cfa289588388f71ae20bf02178757970657b926c5217d775eed4da4aa41600f8d0a0c570baaff53c37fdb3461803b5c273d5e2dee20d6c9578491bd26c4e","ssdeep":"768:Y2ZkYsm5xoqw648+QhS8u+Jcj/XcdNjNhmOdY08kUbTehzbcepwPf:Y2ZkAN4x5O+jvc5dY0U3fX","tlshash":"c363c7483f51b27802e6b8fa712fa61af0265c0195d8e4d8f503f4deae66719f036f25","first_seen":"2025-08-21T08:11:08.888458Z","last_seen":"2025-09-02T13:40:29.609629Z","times_seen":39,"resource_available":true,"data":null}},"time_used":796,"timings":{"blocked":283,"dns":42,"connect":92,"send":0,"wait":97,"receive":92,"ssl":188},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"equilibriumfestive.com/a0/32/b4/a032b4d33c8aea68a4f9b84235614bff.js","fqdn":"equilibriumfestive.com","domain":"equilibriumfestive.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:49.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"equilibriumfestive.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 00:04:48 GMT","end":"Sun, 16 Nov 2025 00:04:47 GMT"},"fingerprint":{"sha1":"D2:AA:FC:FB:06:47:CF:F8:51:E2:C8:89:A1:E8:AE:CA:03:75:53:C1","sha256":"23:26:E2:CC:FF:88:B6:7F:0A:AB:71:23:B9:BB:ED:09:46:80:52:35:8A:AB:D1:F9:5B:C8:2A:3D:1F:F3:BD:8A"}}},"request":{"raw":"GET /a0/32/b4/a032b4d33c8aea68a4f9b84235614bff.js HTTP/1.1\r\nHost: equilibriumfestive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 02 Sep 2025 07:24:50 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 29357\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: equilibriumfestive.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: b059360793dd7d30f2295405b86a9d85\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72585,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"59bd7a16b2a6b5c41ba62d08aa6f8f91","sha1":"947320de6a3123cd89593d443e87564252b65c30","sha256":"1efea2c386c70bce7da0a59da173d73acbbd6125c79bae341449893e0179d99a","sha512":"37ae3096d982314322161e8eca790f3f7702be98b622d817b1e77b71b7e83eb4f18963651f4535e6098642b9d8e955585932bf227e4d813d879f71f7b3da8574","ssdeep":"768:Y2bkYbmwjSqw648+QhS8u+Jcj/XcdNjN0mOdY08kUbTehzbcepw4f:Y2bk054x5O+jvc6dY0U3fm","tlshash":"0763c7483f91b27802e6b8fa712fa61af0261c1195d8e4d8f503f4deae66719f035f25","first_seen":"2025-08-20T10:42:33.616019Z","last_seen":"2025-09-02T13:35:19.41972Z","times_seen":54,"resource_available":true,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":54,"connect":92,"send":0,"wait":95,"receive":93,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"equilibriumfestive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/templates/graphicEx/style/styles.css","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:49.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /templates/graphicEx/style/styles.css HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html\r\nCookie: PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:49 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tHDz7Gn2Qo1p%2BTZvLDgyfO%2F1AVUND7mMR%2F%2BJxkCMLO01PDMpSk4%2FQySZuCSBw2r0pp1UjNT5vIMCjb0JKlxIc%2BLHKiUF7rvPPF4XgKopsjU%2BwVk%3D\"}]}\r\nset-cookie: view=1; Max-Age=86400; Expires=Wed, 03 Sep 2025 07:24:49 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 978b451a69c7b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26014,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (497)","md5":"592a79ead0f379ecfbbb6b92abf00255","sha1":"0b4f80cd0df48685f823532953f7efc16d64ea7e","sha256":"fa6dff1daf8f4a76b17e292be720b6bde17e95d5d51de426247344d05291488b","sha512":"d03879b906d60830f39992d21ade3f93ce0f3728ed83e4ecbb747978fa9935a0ad1dc23792fcb6ed56a4a1fa1e0df30d8f3ed186d5dbe93a7ce8293331b589f8","ssdeep":"384:/O5N8FhGhBJgKCndj62dUSYatrsWvcn0s9Ga0dVePM:2Do8Klndj62mSYatrs8Y0sUF","tlshash":"cdc2a6314e9821aeb41bd325bcd197db21794002fa970abdfa3a723cea434f545b395c","first_seen":"2025-07-13T06:49:25.908128Z","last_seen":"2025-11-25T21:30:53.323775Z","times_seen":200,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@400\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:49.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:22:25 GMT","end":"Mon, 03 Nov 2025 19:22:24 GMT"},"fingerprint":{"sha1":"05:AF:87:21:D4:6B:A6:86:ED:A7:D2:07:92:06:E4:D4:79:84:27:E8","sha256":"F6:EC:75:67:99:66:34:CC:0C:0F:9D:D7:8B:6A:04:94:98:0C:7B:B5:47:E2:47:37:A6:F8:E2:08:99:72:AB:BE"}}},"request":{"raw":"GET /css2?family=Roboto:wght@400\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 02 Sep 2025 07:24:49 GMT\r\ndate: Tue, 02 Sep 2025 07:24:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5746,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"de7e697b2ba2c2cc63ea8a9f63d22ad9","sha1":"726cd824dedfe6246875cbd81bfcf95da1efb4e2","sha256":"7eeaa18ea1e4245acccd54af188f48004ea2f276f7457cbbe97adf4552791bfa","sha512":"fafa7f3e74aeb63245aec1b003dcf4d278a80828d127382e7acbac2adcc630abe6bde345a1481e2ed06c6ce563fde30026f1100b4d7890e78f31b15fd52a7151","ssdeep":"96:1OEbaNOlOEbaN9FZKOEbaNBOEbaN2TOEbaNmy+aZjzBrgOEbaNdubqGIFuV4yOED:2NOmN3NiN2kNmqbN4bqGIwV4BNcNMwN9","tlshash":"2ac10d91041704409b835ce227cebf34fe1f92116145d0b9ebfc9b6baddbda642a835e","first_seen":"2025-06-02T17:30:25.109073Z","last_seen":"2025-11-03T16:06:01.384154Z","times_seen":4956,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":159,"dns":0,"connect":20,"send":0,"wait":30,"receive":0,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/templates/graphicEx/images/photoshop.png","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:49.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /templates/graphicEx/images/photoshop.png HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html\r\nCookie: PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:50 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Wed, 03 Sep 2025 07:24:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k1VHOfXIcgDnBXk21sG7f2pJ7ew3%2FHpzJ2TVHhp9I1tpO7WbVSZRqqmBopqGFZYG79wqqWJoOtn5GMa62bzRACARxz%2Bk0hPc9ZHNnWCkEsrrLlM%3D\"}]}\r\ncf-ray: 978b451a69ceb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2052,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced","md5":"5ec5aac351304dea6c73ec622cc4ec4f","sha1":"394873763b78b8f4b74855d6aec760e4f8b3ff9c","sha256":"0e06ded0f2982263751ae87a3708102ec44d597a1fbd1fa539a2d753fc6d5661","sha512":"173bb3844ab85f26625c17825de68a4b31860931d7594d24ac072049e83b077a96252439ac59810ef668afb9aec07a6d3828745a9b7f4df8a95beb6374bfd433","ssdeep":"","tlshash":"5341f606e941da83a11cea827dfa0067e6538584cef0c817f08bc48e68655e2ed371eb","first_seen":"2024-08-20T08:54:10.69624Z","last_seen":"2025-11-25T21:30:53.368983Z","times_seen":197,"resource_available":false,"data":null}},"time_used":703,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":703,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/templates/graphicEx/images/menu_dropdown_level1_active.png","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:50.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /templates/graphicEx/images/menu_dropdown_level1_active.png HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/templates/graphicEx/style/styles.css\r\nCookie: view=1; PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:50 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Wed, 03 Sep 2025 07:24:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=75pQRjNQ7vRAqrd0ZLzQ2WvEHX7y77Ph2vqIRZ2k5fdS2Tlxbl7Ib3wrT2Et%2Bd3r6H9xmCwacoqn5E96%2BxVQRH04q5x%2BjfI516S8nm6QicKvMog%3D\"}]}\r\ncf-ray: 978b451e29fbb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":212,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 5, 8-bit/color RGBA, non-interlaced","md5":"f7a92a0718d40d20170f79627c32f1d0","sha1":"a26d069881b56b5dd07dda6dbaf91cc1e96b4693","sha256":"02aba89279d9e971de015903b99a5fca3a169d3c8df8cda143040f223460edca","sha512":"e46d414cb5f573442d1f6095b7bbd092132847b8964e751c70b76e354cd18bc90ac07967f373675cb8a4544da5e2c4e798c66e51ed1c32de3fae6dee4591ca0a","ssdeep":"","tlshash":"9cd023e793784c79977ddd37975d0002b0760593c00127150410e02011844cc9475d93","first_seen":"2024-08-20T10:54:36.159504Z","last_seen":"2026-02-09T03:43:19.479777Z","times_seen":200,"resource_available":false,"data":null}},"time_used":611,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":611,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/templates/graphicEx/images/brochure.png","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:49.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /templates/graphicEx/images/brochure.png HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html\r\nCookie: PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:50 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Wed, 03 Sep 2025 07:24:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e5FZWyEuyCw0e4Ef6g4h7Bfp2gdkJtaiZju22vA%2F2Nf7B5AEuxa9XmWQ0skqUu6zjSC6w1PNe0WSacd4eeubZUje9%2FN%2FjO%2BZccgQN5HftK9R9SI%3D\"}]}\r\ncf-ray: 978b451a79d9b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1860,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 25, 8-bit/color RGBA, non-interlaced","md5":"8d4a727c3ae3bfbe6550180718e8c766","sha1":"b1a5bb89b3cf0784add0bda5563a9396cfaad8f4","sha256":"c944e31a099ed7dafffd89f97b8921d5f88b71b8f81b5ae9b39500d38819106b","sha512":"7de4616adb2aa325fd912b4f4d5fe3bef65ffb9b97eb45b4569a601a7b64abc1315293dcf3fecead3535356af4f686fe074b1c126fcdad5eaebb81f61dd48aad","ssdeep":"","tlshash":"a53119ca2f1ed4d710d57aeab136c7c48aea82f1cf8a288129cfbbe94727557941450c","first_seen":"2024-08-20T08:54:10.706266Z","last_seen":"2025-11-25T21:30:53.335596Z","times_seen":196,"resource_available":false,"data":null}},"time_used":650,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":650,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/templates/graphicEx/images/Adobe-Lightroom-icon.png","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:49.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /templates/graphicEx/images/Adobe-Lightroom-icon.png HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html\r\nCookie: PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:50 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Wed, 03 Sep 2025 07:24:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zA0KZ9tDIdAuYs%2BneEZ8fXOgIMthqfA69dH3A5Yg7S5aIdficlnJIagd4raV82SrWCG7sPOch7AefMRDxiamyx67%2BrBAbBam2mL1CB6tz6JTHzw%3D\"}]}\r\ncf-ray: 978b451a79dab500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1566,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"c112d62887d786b1f9e00007695d604b","sha1":"1a8156aadfba2d5927f2baf31a072a17d2bb90e1","sha256":"27f323f3c4eae8a45303e063c42f6153e644943ea64ed2031d6e6d85a17bfc2b","sha512":"24013dcc5fdb0a98cf266da079d83125050e96f99a467c4fe165d7afbd118a170a141c506ae14557ee4d5bf40f31c710ce37c18290bb24a0179e57c7d841481d","ssdeep":"","tlshash":"fd31bac0671e9d76a16f68d387f51c73ce4f3844d5608584c070b62965be95ec0fc44a","first_seen":"2024-08-20T08:54:10.692546Z","last_seen":"2025-11-25T21:30:53.346129Z","times_seen":198,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"origunix.com/sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8","fqdn":"origunix.com","domain":"origunix.com","tld":"com"},"ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:49.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"origunix.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 00:53:46 GMT","end":"Fri, 17 Oct 2025 00:53:45 GMT"},"fingerprint":{"sha1":"19:BA:64:D8:30:D6:B9:3C:BF:AC:E3:49:9C:66:B5:6D:F8:FE:2A:D4","sha256":"86:07:FE:D2:D6:90:33:40:BC:4D:3B:43:3D:8F:31:1A:49:74:46:25:8F:B8:1A:4B:37:B7:A4:8D:56:7C:7A:14"}}},"request":{"raw":"GET /sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8 HTTP/1.1\r\nHost: origunix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Tue, 02 Sep 2025 07:24:49 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nCache-Control: no-store, max-age=0\r\nAccept-Ch: Sec-CH-UA-Platform,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform-Version\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nLocation: https://msdoj.com/sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64136,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T11:49:30.368697Z","times_seen":13330398,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":22,"connect":31,"send":0,"wait":33,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/templates/graphicEx/images/dl-un.png","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:50.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /templates/graphicEx/images/dl-un.png HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/templates/graphicEx/style/styles.css\r\nCookie: view=1; PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:50 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Wed, 03 Sep 2025 07:24:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k2VKBqjh0A5d8E7I56v%2BeWjlH67e6PhYb9UoxQl1wqmBGQbjPXM86irM8XQS5DJ9aDiOxsJGg7lJBggddZgMatLVpUg0k2nLPFMJTCO1Q6UlYN8%3D\"}]}\r\ncf-ray: 978b451e29feb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1016,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced","md5":"73e56afd501f84415f6820d223feaf18","sha1":"b6a25c6b9d13204116fb40362a4b923cc10c223b","sha256":"57c8f796720ca0ab4837d5d6bdf074780d7fbb16db5062dd9b96cfbdd00080b7","sha512":"6641c8c8154a4843edef61974830fa292d43e404c1f853972b61bd839f221560a44abdbbd4cc39fe61fabdc1a521f1c193b05857ee606a5b3d2bb3a8913b0ec7","ssdeep":"","tlshash":"8511216af5905c40c688d45228e6a463ed3719c0dae0e665f8cfcc261e712f549396df","first_seen":"2025-08-12T22:32:55.531347Z","last_seen":"2025-11-25T21:30:53.351154Z","times_seen":163,"resource_available":false,"data":null}},"time_used":717,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":717,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/user.php","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:50.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"POST /user.php HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 39\r\nOrigin: https://graphicex.dirproxy.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html\r\nCookie: PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m0m8elNecm7NrO8t1hifcex3pBHAyAOoNCp1xXtLlNQ1Vw1Ybk53dq1rH6RxUcEHtiujkmP7HKq3%2FMnwUdeg2AFvSRq%2BeTsLWxV2i8CbVKWiLuU%3D\"}]}\r\ncf-ray: 978b451e6a04b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T11:49:30.368697Z","times_seen":13330398,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/app/apx19.js","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:49.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /app/apx19.js HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html\r\nCookie: PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 13 Aug 2025 22:04:56 GMT\r\netag: W/\"689d0c08-23df\"\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sE7v4DOIQsrupOQc538ZWFyfSRUiTsc3DMshiXA8EV%2B2q1Oo9wH5%2B%2Fg9n7zMkKbkeyTEGA%2BtpYGdxcIhqKSHuO0Zq3IObPT8HYACUO3F9XGBXPs%3D\"}]}\r\ncf-ray: 978b451a79ddb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9183,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9183), with no line terminators","md5":"2344c3f05f624d595f6fb920e4d74ded","sha1":"eb4d1404ac2d5eecd307f4588aeeab5c8ef463f1","sha256":"3a28fe59e4a2af96d8edeeb12d7040c574cf71fa88fccb5cf49e9c0a1d4e4c7a","sha512":"b1660b062c77332a119e159c5c69d3f75d375915a33f141503232f424c4fdd990998a883c271efb94e8eb909f7837d235354ecae15b58fc23ab9d1908170e831","ssdeep":"192:yfBLCNsvzXnQQuWYQVN6nYaRB5c5FM/MR6Adpf04u7w2Br:4gNYXnrYtBONxpf05r","tlshash":"62126cc87ac7f00b53ed8a53ae1a66b8117b946362a47907d3bcf6cd15e920bc179cc4","first_seen":"2023-03-07T12:40:02Z","last_seen":"2026-04-03T18:56:21.982955Z","times_seen":3505,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"equilibriumfestive.com/22/00/54/2200540f09f939738419313a1a090c32.js","fqdn":"equilibriumfestive.com","domain":"equilibriumfestive.com","tld":"com"},"ip":{"addr":"192.243.61.227","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"Dominica","country_code":"DM"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:49.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"equilibriumfestive.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 00:04:48 GMT","end":"Sun, 16 Nov 2025 00:04:47 GMT"},"fingerprint":{"sha1":"D2:AA:FC:FB:06:47:CF:F8:51:E2:C8:89:A1:E8:AE:CA:03:75:53:C1","sha256":"23:26:E2:CC:FF:88:B6:7F:0A:AB:71:23:B9:BB:ED:09:46:80:52:35:8A:AB:D1:F9:5B:C8:2A:3D:1F:F3:BD:8A"}}},"request":{"raw":"GET /22/00/54/2200540f09f939738419313a1a090c32.js HTTP/1.1\r\nHost: equilibriumfestive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Tue, 02 Sep 2025 07:24:50 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 38468\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nHost: equilibriumfestive.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: a9a4887ec63ed639aecdd5e618337ac8\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105881,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"06cb2d5883bc5108de27730fca9658ab","sha1":"201e083035c8401d136c85130afb3f2e2c33a0db","sha256":"10210aae837a0a35ae3f2c15c8fe9c1e46534302e8bf4b085edc1c3308d9580f","sha512":"4fd3c37c67a08c2504dc5b4d8b44a3c61a652b41552ee62baa61d9f31c1ddc216dba10e442f58d65889beb3a184c7ee9b564b64d5ae502d45dcfb41e6a33a541","ssdeep":"1536:dkI33KOEVaiUsbaeBvat/xp1P2PNrdMCC2cevmiwB/BDMCIuR5Y:SpVaiUs7ahxp521rcuZwH2uU","tlshash":"5aa3b8487f90fcbe02566033663f951bf1aa0e415958c988d11afdb42a3c31bfa3da75","first_seen":"2025-08-23T11:58:00.63972Z","last_seen":"2025-09-02T13:35:19.424962Z","times_seen":36,"resource_available":true,"data":null}},"time_used":841,"timings":{"blocked":304,"dns":59,"connect":95,"send":0,"wait":96,"receive":95,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-02","alert":"Sinkholed","trigger":"equilibriumfestive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/templates/graphicEx/images/article.png","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:50.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /templates/graphicEx/images/article.png HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/templates/graphicEx/style/styles.css\r\nCookie: view=1; PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:50 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Wed, 03 Sep 2025 07:24:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rSX5fU0C2O91Dk%2Buu%2F%2ByemZ6e%2FLnBU%2Fu1snEVAT53N5cIcEQhfjVQfFXIVRnYpFxJ2W9zE2FovgAHYukkAweFVNDjo974WYYlGZKzfEll1YupYM%3D\"}]}\r\ncf-ray: 978b451e29fdb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":194,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 2, 8-bit/color RGBA, non-interlaced","md5":"0d6b22dd46eec38a3dc341adb15602b2","sha1":"d13a5c4c47b187f0bbb3e0beeb2b72494e2695a6","sha256":"29aa7c9c2583e0cee63c1742b70df530a8b7b27efbe2d2a09bf76f6c8dbf7aef","sha512":"b9c04998dc1d6d8cdaee6ae0e30a2fb9a7fb8c920b66b1291d4022369ec8f7f3d3f86b8aa701fc7bc572370d035c0783e8fe3a7575b67327ce547a7682ca7909","ssdeep":"","tlshash":"5bc022e7aaa84c75dbbad93243292020f026068190011b181800e0202a8a4ccd8a9622","first_seen":"2023-07-03T21:45:52Z","last_seen":"2026-01-27T12:49:20.432866Z","times_seen":199,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/templates/graphicEx/dleimages/rating.png","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:50.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /templates/graphicEx/dleimages/rating.png HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/templates/graphicEx/style/engine.css\r\nCookie: PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:50 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Wed, 03 Sep 2025 07:24:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hVvc1wP1h9N8uCGc6pot8gfVQhKsHFp0J8FWGvi9fhKxNs4gTa0PGYAk5vKjGUBw1m2SnVueBdIg1e0xnskQnjWkesCuLQRd5jzToHWNy3JRe0k%3D\"}]}\r\ncf-ray: 978b451e3a00b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3981,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 17 x 51, 8-bit/color RGBA, non-interlaced","md5":"ffcbe0c3105107bf050e2a39f5d03c2a","sha1":"a739b7d8ca6cd4e2861582fef86eba30b535bc70","sha256":"ee7c2af28ff51f7e5d3a2681336ea0bf06cae982555a64c258733bacec364fe0","sha512":"68d46a46b48c20dcd554b2ff99203f9139496fda4cddbbc15565e61baf8c3d969902465d1a9fb9363fbcd2d4a6b5ea3d97a64f418f35396f95c77a8408b20ace","ssdeep":"","tlshash":"cf816d5b9520105eb3cd7c910a8d1505a729629c8167393065c2a6ee20b5d1bbf6b465","first_seen":"2025-08-12T22:32:55.506879Z","last_seen":"2025-11-25T21:30:53.331315Z","times_seen":161,"resource_available":false,"data":null}},"time_used":652,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":652,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"matomo.hellohi.me/matomo.js","fqdn":"matomo.hellohi.me","domain":"hellohi.me","tld":"me"},"ip":{"addr":"104.21.16.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:50.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hellohi.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Jul 2025 02:04:18 GMT","end":"Sun, 12 Oct 2025 03:02:50 GMT"},"fingerprint":{"sha1":"9A:C0:65:8A:86:9A:E1:8C:41:52:B8:1D:E0:FC:8A:9A:76:99:63:F7","sha256":"E6:B8:81:92:B0:EF:2C:86:66:C2:7A:19:C3:BA:8C:D2:C6:AC:2C:94:DB:3B:80:EF:AB:CB:05:C3:F0:9B:FC:42"}}},"request":{"raw":"GET /matomo.js HTTP/1.1\r\nHost: matomo.hellohi.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 02 Sep 2025 07:24:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2FlturX9N0CDbpu11UHMWHrvgOTiU3WIrU39GIAWbkBKkuw9LuMcAkpogGs8mE2LcIPpOwpvOzNnhV6%2FriEaWowgo2vvQAf2LUcoFH6Vgw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 978b451ed9425690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T11:49:30.368697Z","times_seen":13330398,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":65,"dns":42,"connect":1,"send":0,"wait":133,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/app/apx14.js","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:49.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /app/apx14.js HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html\r\nCookie: PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 13 Aug 2025 22:04:56 GMT\r\netag: W/\"689d0c08-1def\"\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3eFxIUPn5OQOUkXPY9bBr73G2xYxOYXz7Go0NigdFNJG29cMGYumA5eRwiSUd4T1Qv5Kycy%2FLsTWqximED48aEY9OVeGHjtOWt6j9CB%2Bb8qSZs0%3D\"}]}\r\ncf-ray: 978b451a79e0b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7663,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7663), with no line terminators","md5":"dfb1f327618e201778f2de85cfbcd173","sha1":"fceb89a2221463e5bc5a71feff1247683ab08cc5","sha256":"dc03bc8b63938916a73dd976e186d05559ddc61da2725e1063b7936fa9f0fc33","sha512":"045078f42281ee89b820f40a68d9d04931683f596c8e3ced0a1b10781d2b57b37d6c006dd8d576ba717ae9093da9fa3ba26b40fcd04b76289024aa9e08154e81","ssdeep":"192:aHvolQ/u7VCKYVYmodXskiQUfZNk5Xs590AoLkK0Nqk:aQK7zVWdXsiq5BShG","tlshash":"c8f18c887ad6f00b179d5913ae5f2abd107b54a2a2e47507c3a8f6cd14ed10bc17adc8","first_seen":"2023-03-07T12:40:02Z","last_seen":"2026-02-07T15:24:54.140606Z","times_seen":1824,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/templates/graphicEx/images/menubar.png","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:50.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /templates/graphicEx/images/menubar.png HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/templates/graphicEx/style/styles.css\r\nCookie: view=1; PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:50 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Wed, 03 Sep 2025 07:24:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2bzYSy4yRLAH2iCS49SGiNgZ8Ov%2BJmfBh%2B0kSOQapkcTpZuNN3XN%2BWvL%2FKeKvkOeEXTi9ZxEERnwWhFSPhN1mWKEjOhHFdzTUALHjrQv9pCE%2B%2FQ%3D\"}]}\r\ncf-ray: 978b451e09f6b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":206,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 10 x 12, 8-bit/color RGBA, non-interlaced","md5":"dfa4641ee9f4a471bfd2de04dffe6bd9","sha1":"b6bf210092bcc3dd22390a4e9f48b3b9696e6154","sha256":"4a37fb7d482869cd29bdd4a8d165879ce80f8c2bdba561c51050868cbfaea75e","sha512":"7b102e83c501c228143e720d3bfcfb96051043a1d6eebb0826b424c036a269f552946671ca372c094d123cde7058619bc5d9f3614406e45c5324a8a70c2ac83f","ssdeep":"","tlshash":"b7d022dfb3904838e279c82643962000f42a0aa9c00066082486e81232cd8e8616a77a","first_seen":"2023-07-03T21:45:52Z","last_seen":"2026-02-09T03:43:19.463023Z","times_seen":205,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/templates/graphicEx/images/menu_dropdown_level1.png","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:50.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /templates/graphicEx/images/menu_dropdown_level1.png HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/templates/graphicEx/style/styles.css\r\nCookie: view=1; PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:50 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Wed, 03 Sep 2025 07:24:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vCOSIVs6evry%2FQdsVHmxlQZow3C%2FzIkAdV%2BOsAUv8VKruNEC%2B1UWorEh4NlOUNJ62fgq05t6zF80YR%2ByvjPA9Ibd6k%2BfMFv3PSe9iwB9Q6%2BgurU%3D\"}]}\r\ncf-ray: 978b451e09f8b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":212,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 5, 8-bit/color RGBA, non-interlaced","md5":"903f18e8c05d02bdea726b27d84872a0","sha1":"c649222f0d54c91e0f9dc988ec5c68e460014c65","sha256":"a0bd903231bd18fb9403221b8d654b7f619cc1569a2beac88d31839abeca76aa","sha512":"04d668fd2f9d18cfa91fa2ad0a820b80dbab05d19c122d809a9832c39066a1318920703835b9e619138e45d7ca89e1f641eecb5cbc224914114ee580ed1d5c76","ssdeep":"","tlshash":"4cd022dbe7788cb8abbdea2a82172002f06b06968041171a0900f02211888dca17a7a3","first_seen":"2023-07-03T21:45:52Z","last_seen":"2026-02-09T03:43:19.516044Z","times_seen":202,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/templates/graphicEx/images/dl-pf.png","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:50.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /templates/graphicEx/images/dl-pf.png HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/templates/graphicEx/style/styles.css\r\nCookie: view=1; PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:51 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Wed, 03 Sep 2025 07:24:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2Fy%2BVkzmzv%2FwJVDGQnqRyeL%2FAr1L3VI8ET5%2BE%2Bdq0u4cKuYEi9qrSi9YxAKtf9wOeDZAES76cyvvozOzvFvGFeZLjvrmhtk9MOi8LLGVVahfziI%3D\"}]}\r\ncf-ray: 978b451e39ffb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3487,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"246608f53870ab176f30963aab1adaf7","sha1":"c221f31bd0b952d6b225a45dc53b7de6aa087dc2","sha256":"9a23dc75ae7850f843330d6c1ea9cfec523dba91617df274eb4bfe27d08a9806","sha512":"1453890988b96d29a7b68b0f11ebf4086241d452468ad4595c6c9b03d7aa0fc0048a27ce86b8e033d20cea3bb24ebbff3db0f444ff686899daf8344627403e38","ssdeep":"","tlshash":"66718fefe970e49f7dc974110ead4602e358237c5567313494d621ce04d6d0fbb5a074","first_seen":"2025-08-12T22:32:55.505577Z","last_seen":"2025-11-25T21:30:53.325626Z","times_seen":158,"resource_available":false,"data":null}},"time_used":758,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":758,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/templates/graphicEx/images/logo1.png","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:50.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /templates/graphicEx/images/logo1.png HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/templates/graphicEx/style/styles.css\r\nCookie: view=1; PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:50 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Wed, 03 Sep 2025 07:24:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rRI7zMTDsuYYnB7zXPGZnbVTK%2FL2E%2BIKhUtf4piMrsf%2B3LKqh%2B01BTbukGfkXdAD3cJBS4CdKnDpEMyZk5IjDENDqvklAli9rpw4EO1sKoM58cc%3D\"}]}\r\ncf-ray: 978b451df9f5b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14642,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 198 x 47, 8-bit/color RGBA, non-interlaced","md5":"cfb220ca8dbc4e7540e8e704fd42876c","sha1":"4f10a8cbea14ed85003057f139882a29fe0d01d1","sha256":"5b78d47c044247b44ec4f3e9e4284228ca5851599344943d4b7b0b0c8fbd4ebb","sha512":"39a640a864f3e9327096b960e7a4c6ba90761fa78806bf058ab49ae4bd852298be8955ecf52ca6c40f94ca5c853a7563ccb0c1213248a0b77cbbad41ac84fba6","ssdeep":"384:VJXE058rRGK8ZSEloios5PaHbr9q05jISO6QEg5OT/DAjd25q:H35qRGiZsts3ouENAEEq","tlshash":"2162d0eb98b26c2ca4d9f4451cae0dc2d254c56ea608334f9a212ced3144f2757abdd6","first_seen":"2024-08-20T08:54:10.676644Z","last_seen":"2025-11-25T21:30:53.354006Z","times_seen":195,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/templates/graphicEx/images/mod_box.png","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:50.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /templates/graphicEx/images/mod_box.png HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/templates/graphicEx/style/styles.css\r\nCookie: view=1; PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:50 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Wed, 03 Sep 2025 07:24:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RhnbrcLb8POzQ9qR%2FPV3LuI%2BL2Nal%2F7LkJcuKI%2FRRq8LFtS825vHUnTRbZ3F9tufN1ewufPYO%2BnEctOvAXT4o0VHyXKHpJxwp1zAHSy0synFhKw%3D\"}]}\r\ncf-ray: 978b451e19f9b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":206,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 10 x 12, 8-bit/color RGBA, non-interlaced","md5":"dfa4641ee9f4a471bfd2de04dffe6bd9","sha1":"b6bf210092bcc3dd22390a4e9f48b3b9696e6154","sha256":"4a37fb7d482869cd29bdd4a8d165879ce80f8c2bdba561c51050868cbfaea75e","sha512":"7b102e83c501c228143e720d3bfcfb96051043a1d6eebb0826b424c036a269f552946671ca372c094d123cde7058619bc5d9f3614406e45c5324a8a70c2ac83f","ssdeep":"","tlshash":"b7d022dfb3904838e279c82643962000f42a0aa9c00066082486e81232cd8e8616a77a","first_seen":"2023-07-03T21:45:52Z","last_seen":"2026-02-09T03:43:19.463023Z","times_seen":205,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-02T07:24:49.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /indesign/119627-minim-powerpoint-template.html HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Sep 2025 07:24:49 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oyn3AR7t3FQ%2B8zPKpMRrPdp5O4mJVbH4QEYU1PSrdlnepOOW9wQLtsu97080cpK5JFb79QRIbmLNDlXFwIryhZKGiyjFlBCRvrcgeigYLj9S4J0%3D\"}]}\r\nset-cookie: view=1; Max-Age=86400; Expires=Wed, 03 Sep 2025 07:24:49 GMT\nPHPSESSID=prnlumk3cp9id79qsojqoskplr; Path=/\r\ncf-ray: 978b4517ba2cb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"DataLife Engine","description":"","website":"https://dle-news.ru","common_platform_enumeration":"cpe:2.3:a:dleviet:datalife_engine:*:*:*:*:*:*:*:*","icon":"DataLife Engine.svg","categories":["CMS"]}],"data":{"size":48542,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (14247), with CRLF, LF line terminators","md5":"ad3cb8351d2523ed994afd975516328d","sha1":"896a526a2d0cf8077ea8ee60307fda472440be73","sha256":"98e8d358e97cf59c1f7a6e5c913f50d03a56e9b3be3a26593b362326afe43fee","sha512":"5e016802ca6667531d6cd1b2f4734ad4cf21224d2e24ad0cc205e2b590f051fbc746dc0fc6030726f7f07deeeb34a561f1a557f6507b7d556c8c4b8ba11c72ec","ssdeep":"768:EpQ+eeIy03wXP9BPjx/+4q7U6PP4ViKo8jII7qq/JQnpBuEoU:EzJIb3wXP9dtViKo80OqMQnpBuEoU","tlshash":"2d2396e3e9810523a32b64d97d3ebf1fb0e279c5ee0a1c2db27502d0d746daa5f18152","first_seen":"2025-09-02T07:25:16.646898Z","last_seen":"2025-09-02T07:25:16.646898Z","times_seen":1,"resource_available":false,"data":null}},"time_used":631,"timings":{"blocked":200,"dns":178,"connect":1,"send":0,"wait":231,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/templates/graphicEx/images/indesign.png","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:49.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /templates/graphicEx/images/indesign.png HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html\r\nCookie: PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:49 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Wed, 03 Sep 2025 07:24:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VbQOGswFfGN7BFaH0fonUGoXe31ng%2FCPFSDDkGu1PeN54X%2FCB5fCFaj5hZ%2BIhd6qN4w0%2BUWiNfgsaYYIxDB0jkQfEYA8iW7R8BDEZtD1s671VVE%3D\"}]}\r\ncf-ray: 978b451a69d6b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2381,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced","md5":"15d0276f394b697b4bc266d403f3a420","sha1":"ea7560a7ea3e15ad114627507a3bc6fdffc83d7c","sha256":"8950c8d8fc053664f663d534fc9556074060ca792c5dff94c7dbe348af4d581a","sha512":"68abf77ecf37a82750af722011b9cdbafc678d50e3195cfbc1214ea7ca3a518277dbdd5d871c4a6e6a8d73756ab7f8b94ee2aa4defe10380a8ad446d74a44731","ssdeep":"","tlshash":"3041d54abc814a01a798918730dc1272d4970a85b5b4dceaf44ed16a58727bac0ae7cf","first_seen":"2024-08-20T08:54:10.697336Z","last_seen":"2025-11-25T21:30:53.343116Z","times_seen":199,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/uploads/posts/2018-03/1519852274_TAcqSDn.jpg","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:49.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /uploads/posts/2018-03/1519852274_TAcqSDn.jpg HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html\r\nCookie: PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:50 GMT\r\ncontent-type: image/jpeg\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Wed, 03 Sep 2025 07:24:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KZOKyOMb53KatLpd6BxmiTJA%2BN7NTbkCAp3iz6xisvYbjivr9KvhJcopx5cGHDFXVTuYIV%2FQBGZ%2BzOpyCDOTcV85Jx%2BFtEfjg90Gz9bjjpKfHtM%3D\"}]}\r\ncf-ray: 978b451a79dcb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165155,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85\", baseline, precision 8, 500x2355, components 3","md5":"8632d09be56d6f0874a2d0d265eed4fc","sha1":"312ed090ac474f23d26adb029ff610a8391102cd","sha256":"2c86face887e6a01c2bfe1c2926b625ba5d4cd6eb568d4eb2b5c502e6eb3375b","sha512":"fe0e430dd5ffee36bf0a1be338aacf2c3a6b3a591cdcf6b91959b373b82e4c67d3a46a1055c8ad2113dba691262d397d69a1c06f0f7ddaa0006f03ed60416feb","ssdeep":"3072:txXOMM2/DspnbjoQrcy2f0mMBWpSAyCaw8VKgubfldtL+Sy00XYqH3wNdGyFMN4G:t4W/DwjRcPFowtP+FXYqvyFHhU","tlshash":"ebf302474d4086938c5d13a4e91a0f8efaadab0c1a562fcf1961ad4ffff05698dcd118","first_seen":"2025-09-02T07:25:16.650952Z","last_seen":"2025-09-02T07:25:16.650952Z","times_seen":1,"resource_available":false,"data":null}},"time_used":947,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":598,"receive":349,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/hy.js?q22q2q2","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:49.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /hy.js?q22q2q2 HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html\r\nCookie: PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 13 Aug 2025 22:04:57 GMT\r\netag: W/\"689d0c09-db43\"\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FLzzBp7dqIh%2F%2Bp%2BAJgGPxRcng5Dr%2B%2B7OGD240UlYKs%2B68XMW8Y66olixsMMcheytU1%2BoMZf%2FCJEchkfougLThvnV%2BBtrLzVIHDvKMR4fNMLBtg4%3D\"}]}\r\ncf-ray: 978b451a79deb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56131,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (56131), with no line terminators","md5":"667d77da844b6d5ad62b2f26e77b4b12","sha1":"01ae61192a38af73a93c67468fb8271d7bbfa4f6","sha256":"f240ce7fa62cd81d92f29081815f2cd2376ea6867887d17d5625009ebdf355b1","sha512":"397db4a7e265ee50bc3f41dcd8dbd9707a7e5b4c8286d284aa7ec098723f197845b1527c620f05683dc7de9ad93f5ad3cda3c5e2371a8af8b75d328b2b817650","ssdeep":"768:NEytvasZSSTV4dNQkBd9AuNe6wDC4V4JB4JrfeGkFhJT:iytvTZn+b5SuN2DC4vJ7eGkFhp","tlshash":"6d43428c7cc260642556f2ba006f39da362571218c5a9cf3a415d3a3ee719cf8d93fda","first_seen":"2023-03-07T12:40:02Z","last_seen":"2026-02-07T15:24:54.077105Z","times_seen":1813,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vmuid.com/script.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8","fqdn":"vmuid.com","domain":"vmuid.com","tld":"com"},"ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:49.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"vmuid.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Jul 2025 01:38:16 GMT","end":"Fri, 17 Oct 2025 01:38:15 GMT"},"fingerprint":{"sha1":"B9:61:53:79:E1:11:9F:49:D4:F0:7A:18:26:5A:A4:47:64:FA:A8:3A","sha256":"27:10:60:8D:0D:93:6E:DB:B5:37:F2:A2:F3:9D:D9:7C:5E:DA:B5:A4:8C:92:FA:BE:08:1A:7E:D9:11:8C:6D:8E"}}},"request":{"raw":"GET /script.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8 HTTP/1.1\r\nHost: vmuid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 02 Sep 2025 07:24:49 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 10178\r\nConnection: keep-alive\r\nCache-Control: no-store, max-age=0\r\nAccept-Ch: Sec-CH-UA-Platform,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform-Version\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10178,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10178), with no line terminators","md5":"dedd352338543b137f608adc8d0d4aa8","sha1":"100edb4e8fef9b6da043d51135077e68d2a61b22","sha256":"b338a91ba1d2ab7c3a7a0dd659426f5ffa4cd699be38e2bed5075c4d3e773a48","sha512":"e2fab4d95d5baa013a7c248945156524478341282dcffc462fb2de318f55ba29dcafba0db3abcfb6399c6164f6f630f06d48a7323b73f8ea05d5978cd60a4c5c","ssdeep":"192:ATn+ip4qxJ/gzuvu3fo8idwqnOqgStYc1qRP44+PHlCXXZE7904AxF:YbRJYz3oe+3tYGGx+NGXZCAn","tlshash":"2b22b5c9b2d2f06443d77161942f2007f23b2869b54dc498eb66e8d3bcb045ea227f79","first_seen":"2024-01-26T05:18:07Z","last_seen":"2025-12-29T12:17:25.567723Z","times_seen":3656,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":22,"connect":31,"send":0,"wait":33,"receive":1,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msdoj.com/sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8","fqdn":"msdoj.com","domain":"msdoj.com","tld":"com"},"ip":{"addr":"178.162.215.162","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:49.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"msdoj.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 00:32:12 GMT","end":"Fri, 28 Nov 2025 00:32:11 GMT"},"fingerprint":{"sha1":"A8:56:C4:4B:26:AD:D5:72:31:67:E8:75:28:D7:6C:F5:D6:A1:E2:B5","sha256":"65:DA:95:54:55:5B:C8:18:65:43:99:33:52:5B:EF:99:EF:5E:0F:AC:FB:6E:F7:6A:27:0B:3B:6A:69:3C:78:C7"}}},"request":{"raw":"GET /sdk.js?sid=4dd7d833-3142-4a3f-a135-6fb1263ef9b8 HTTP/1.1\r\nHost: msdoj.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://graphicex.dirproxy.me/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 02 Sep 2025 07:24:50 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 64136\r\nConnection: keep-alive\r\nCache-Control: no-store, max-age=0\r\nAccept-Ch: Sec-CH-UA-Platform,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform-Version\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Credentials: true\r\nX-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64136,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64136), with no line terminators","md5":"005a458aa24b13268fb80f0b155be672","sha1":"4ade8cf90bd9e450edb3309ef163900eb2f171d7","sha256":"8470dc9289973b4f2db510d0eb3a97cf6172ac816dbeded06c41899d645609b7","sha512":"800ddd3744e64699ad09263967fd7293baf98a9635e21a7db46ed5eb5396370e2698f15261ff43ce9ba49866183f18ca89c4ac3cf045370139042e5c0327a8a3","ssdeep":"768:hCflSCRC850RCX+4D+R8WyX+86wA6C8CflJu4sTJ+zaXeXgtA9zk4sTJ+HXJpZ6w:qvV50gPowAzJfTqgF","tlshash":"8c53d698b5d2f1a102c370b8543f6106b2366929248dc098f7b5ded5ad78d6ea633f3c","first_seen":"2025-09-02T07:25:16.578656Z","last_seen":"2025-09-02T07:25:16.655383Z","times_seen":2,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":99,"dns":1,"connect":31,"send":0,"wait":63,"receive":33,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"graphicex.dirproxy.me/templates/graphicEx/images/searchbox_magnifier.png","fqdn":"graphicex.dirproxy.me","domain":"dirproxy.me","tld":"me"},"ip":{"addr":"104.21.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://graphicex.dirproxy.me/indesign/119627-minim-powerpoint-template.html","date":"2025-09-02T07:24:50.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dirproxy.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Jul 2025 23:33:05 GMT","end":"Thu, 16 Oct 2025 00:31:39 GMT"},"fingerprint":{"sha1":"E0:26:AF:9D:6E:6D:86:10:DF:47:08:9D:A1:55:4D:3F:A4:7B:6F:8C","sha256":"DA:26:8E:56:EE:48:B2:D9:59:30:07:43:A4:58:5F:F7:9C:BD:FC:6F:43:81:0A:63:85:F9:B7:35:8B:39:49:D0"}}},"request":{"raw":"GET /templates/graphicEx/images/searchbox_magnifier.png HTTP/1.1\r\nHost: graphicex.dirproxy.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://graphicex.dirproxy.me/templates/graphicEx/style/styles.css\r\nCookie: view=1; PHPSESSID=prnlumk3cp9id79qsojqoskplr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 02 Sep 2025 07:24:50 GMT\r\ncontent-type: image/png\r\nvary: accept-encoding\r\nset-cookie: view=1; Max-Age=86400; Expires=Wed, 03 Sep 2025 07:24:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n8FGOyT6liijOze2udA6eHhauH39lq5I2D8KuNU%2FRcw2kp8W6gMyDeaJ2%2FLvhIJdhHf5JYT1RJZ1gPESzNcq4qW7iMLmjQj5aa9ErUSe377bZTM%3D\"}]}\r\ncf-ray: 978b451e29fcb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":822,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 26, 8-bit/color RGBA, non-interlaced","md5":"36b2686761875f1f88c2b77ffaec6e5b","sha1":"69d35f634be3a2190765bfaefeeb8961732ac14d","sha256":"a895d171910e3b2d31ca36ec545d72231c920292e0ae3365748741a444d83f93","sha512":"3f0c0636d1f4abce297c916de794af4aa12171b40ba6276097ad964b9618ce5be49843b3224793baebc5b7e9716f6ba39871f319d4c5eafebb84ff3a647fdefe","ssdeep":"","tlshash":"710175f53fbc8f98f467e4238667d08cd234b45dc12273192915b091498e8d4f6561ee","first_seen":"2023-07-03T21:45:52Z","last_seen":"2026-02-09T03:43:19.461415Z","times_seen":200,"resource_available":false,"data":null}},"time_used":565,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":565,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}