{"report_id":"407da6d8-fc6e-486d-9889-64c4d1216bde","version":6,"status":"done","tags":[],"date":"2025-10-26T10:43:00Z","url":{"schema":"http","addr":"upfiles.com/O44B","fqdn":"upfiles.com","domain":"upfiles.com","tld":"com"},"ip":{"addr":"104.26.4.165","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"upfion.com/O44B","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"title":"oct26_4cp.zip"},"submit":{"url":{"schema":"http","addr":"upfiles.com/O44B","fqdn":"upfiles.com","domain":"upfiles.com","tld":"com"},"ip":{"addr":"104.26.4.165","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-30T10:43:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"amt3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"orbsdiacle.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"gpp.netpub.media","ip":{"addr":"172.66.167.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-06-11","domain_rank":645272,"first_seen":"2024-12-11T17:07:09Z","last_seen":"2025-10-22T15:47:15.772695Z","alert_count":0,"request_count":2,"received_data":1737,"sent_data":881,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-10-19T22:15:22.988011Z","alert_count":0,"request_count":1,"received_data":826474,"sent_data":484,"comment":"","tags":null,"fingerprints":null},{"fqdn":"my.rtmark.net","ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2025-10-20T01:00:57.748276Z","alert_count":0,"request_count":1,"received_data":833,"sent_data":427,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"st.mastinstungmoreal.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-21","domain_rank":6290671,"first_seen":"2023-05-30T05:22:23Z","last_seen":"2025-10-18T20:32:44.849924Z","alert_count":0,"request_count":14,"received_data":9259,"sent_data":6447,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-19T22:12:35.4735Z","alert_count":0,"request_count":1,"received_data":33134,"sent_data":504,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"orbsdiacle.com","ip":{"addr":"23.109.253.164","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-04-21","domain_rank":461887,"first_seen":"2024-07-16T10:43:03Z","last_seen":"2025-10-18T20:32:45.138598Z","alert_count":1,"request_count":1,"received_data":1116,"sent_data":409,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bvtpk.com","ip":{"addr":"104.21.5.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-03-16","domain_rank":37068,"first_seen":"2025-05-21T11:34:02.786268Z","last_seen":"2025-10-21T23:36:17.858471Z","alert_count":0,"request_count":1,"received_data":111173,"sent_data":403,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"upfiles.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-06-05","domain_rank":228583,"first_seen":"2015-10-29T09:28:55Z","last_seen":"2025-10-24T22:07:21.050292Z","alert_count":0,"request_count":1,"received_data":28710,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-19T22:12:19.186805Z","alert_count":0,"request_count":3,"received_data":1062761,"sent_data":1311,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.recaptcha.net","ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-01-06","domain_rank":7582,"first_seen":"2012-07-11T14:32:37Z","last_seen":"2025-10-20T00:04:12.078091Z","alert_count":0,"request_count":1,"received_data":1788,"sent_data":464,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fstatic.netpub.media","ip":{"addr":"172.66.167.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-06-11","domain_rank":573390,"first_seen":"2022-01-24T12:18:10Z","last_seen":"2025-10-22T15:47:15.186096Z","alert_count":0,"request_count":1,"received_data":965,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"upfion.com","ip":{"addr":"104.21.68.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-09","domain_rank":82494,"first_seen":"2025-02-26T19:27:49.150609Z","last_seen":"2025-10-24T22:07:21.160496Z","alert_count":0,"request_count":12,"received_data":1820213,"sent_data":13911,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP:8.2.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-19T22:12:30.612025Z","alert_count":0,"request_count":7,"received_data":292233,"sent_data":3832,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pagead2.googlesyndication.com","ip":{"addr":"142.250.74.98","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2003-01-21","domain_rank":610,"first_seen":"2012-05-21T07:15:40Z","last_seen":"2025-10-19T22:39:41.928557Z","alert_count":0,"request_count":2,"received_data":1581,"sent_data":874,"comment":"","tags":null,"fingerprints":null},{"fqdn":"amt3.com","ip":{"addr":"139.45.195.9","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2004-03-18","domain_rank":8122,"first_seen":"2025-04-23T17:00:21.322227Z","last_seen":"2025-10-22T22:09:50.533592Z","alert_count":1,"request_count":1,"received_data":825,"sent_data":584,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"upfion.com/O44B","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"104.21.68.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce3c6c91583912d465bfb227ebe3195b","sha1":"d311ab64071f1d4e574e70e1f977a5519ebf32bc","sha256":"dfd654ee36c9dcabb9e5f23054f77fff5968d4aa29dd66bf296c9286fb18b552","sha512":"11aef7e6166e2054e3cb5ad62bb7054b0413494e8c0e2ffe73488007fbb2d9bf0ea11b8deb018f40999afc88cada52fb53220adc2f7dab0c68e1af87b7709ca9","ssdeep":"","tlshash":"3cc092ca0081200621a231b16f43b308346310f708086900790c8a203f6831f9e3bbc4","size":137,"data":"","first_seen":"2024-06-14T21:34:22Z","last_seen":"2026-02-15T18:20:10.638739Z","times_seen":1162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/js/frontend.js?id=a9ead52fa97a2708e6e9","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"104.21.68.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9ead52fa97a2708e6e909b3777bd7fc","sha1":"b03c394ee849507472f56ab74b7535f6732334f7","sha256":"b57bb1cc8f2421dfce98acb639dc6177ef3588289d0a175b1f7eac9d704e6b9f","sha512":"9bb3b132a1412494d26244062b08a1649f07144065100359f00753507816144eb409755d304bd9bc49e6fa7a80e90d58b6a7cf147b12bb13341c6ebbc807729b","ssdeep":"24576:QaQbgvThYzoRcckPLNKdL4BgbOe5Je+VMCs7wFlkJHbJW0OX:bQbg7hYzoRccuLNKdL4BEOe5Je+MOFln","tlshash":"ff65954077c0b85913979f7ab31fb1eaf45a0caf3c88484be105fca065a9617fae5931","size":1427021,"data":"","first_seen":"2024-11-30T23:21:10.544949Z","last_seen":"2025-12-06T07:16:32.096441Z","times_seen":243,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/O44B","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"104.21.68.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f34283ed2e23adcd4891e8e25510d229","sha1":"219f5d41d7b157ccdc6948d340fdbfea4eaa3cc8","sha256":"84461264e35f5c4b820a12a174a60da6bf2bfd3b0feed015b8e30f1980fdca8e","sha512":"c7922891ff4a5dbcfa9bb33b4fa47ffaabf6f284582b001959460f2dd3b8f41675756b267c5d20a64eaf2f1b24a8b2cb1410c5bbb4def000c327c3dba6886c5c","ssdeep":"","tlshash":"4fc080b564e59531545500da307bdbf57c74311875527080c8dd7c5c9964fd71851c65","size":179,"data":"","first_seen":"2025-08-28T02:11:02.232538Z","last_seen":"2026-02-10T19:12:40.646937Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/-PgDGgfmUF0ySmnjMTJjzqak/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"126e162b606d5b82daf63f92a9a23c19","sha1":"22771edfc483675d16eecb446f1580992cae94a3","sha256":"c829356f4b331095018382d7d5399a157d56e91c260a4ffa2681fb9934c8d0ec","sha512":"d2cc8041652df60bc8cfb3f32819030d3d8af8292f05a287b0e87a13fe6c3d1e2212140cebc5262877d21e6a232fb99a9f528a4b254820a3ff8371936aa791eb","ssdeep":"12288:97bxxKQ2lDEGEnmAJud4pypzfKCp0qh2eChI7AKXD8PpRQUkO0Tq67:9bxxh2lDEGEmrapOznnAKXD8PpRQ7vF","tlshash":"d0055be979417d65e322b4f22077a24ce72d9965d84e081eb4d4d8f02eb481e3077ebb","size":825565,"data":"","first_seen":"2025-10-21T01:58:59.278332Z","last_seen":"2026-05-27T23:34:19.341839Z","times_seen":18194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/O44B","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"104.21.68.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"50a0d6afa9ad3868ef310483a2add8fa","sha1":"ae372ce5054f2c50b95aa0e1ec6f7d40002efd60","sha256":"ad2a8daf63fe201b025130e431582846aaffe73f9c02c500f6b95dcfaa5024ed","sha512":"0e9264809439b4ed59fcf21995f6fb74316c384aea50e9d1dec719ab0c0abc86676e12a1ca8c6850829774be1c25e62762ca748968c1f9e9c9af91d4f715dbb6","ssdeep":"","tlshash":"d0d02bef095108340ba370696f2fb24834b7505f1407a6017e4c4a000f5430ec21a7cd","size":283,"data":"","first_seen":"2025-08-12T21:51:14.858929Z","last_seen":"2026-02-11T20:26:43.620408Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/js/ads.js","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"104.21.68.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfda8d31536e90428f6d37f17590d92d","sha1":"c161162410c27db721479da020406e9e56a8b851","sha256":"d92d2a6719b8462f29f2c9dc8f7c84be379feb798fdcc85ddade83fbb8fb2a45","sha512":"97739f1e2dfcf12521374f3efae56d7e24b6e8010b4bda3046e44088d2b690603c40a2c2a0431034f426d9337b6181969f3aa74f2c5d8ce093e1e9856f7cf2ce","ssdeep":"","tlshash":"1a31cb582ea0aab8334303d6772f64d8f532dd5628b28d0cd021ee95fc08a34d5abe31","size":1499,"data":"","first_seen":"2024-11-30T23:21:10.233947Z","last_seen":"2026-03-04T04:55:38.593842Z","times_seen":263,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orbsdiacle.com/1clkn/34742","fqdn":"orbsdiacle.com","domain":"orbsdiacle.com","tld":"com"},"ip":{"addr":"23.109.253.164","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"9082dc37e5e8046929da411544ad071a","sha1":"41e0e3963ed94e59e8a2f115994c382712411537","sha256":"b7848d86edc8dc3b5bc6a5c666069f9a31e000cee51575d3b6083951607e1550","sha512":"8c7a47aba28936b7fb4083892dfc8643afe90452d6cc789f5f8562ebeb253000ba0dc23f35af988b9288afa32d701fd8c3e95f9b0966f3789dc269f393f6b039","ssdeep":"","tlshash":"714000000000000000000000f00000000000000000000c00c000000000000000000000","size":6,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-05-29T13:13:38.635831Z","times_seen":16186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/O44B","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"104.21.68.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"988e1886ce1f3a274575674e522e0141","sha1":"9c78c66005197a564ea33800eefab76fd669981e","sha256":"c5aaab4e6b1ecd2d19a1b68a3dc4d5a7c4a2b6e3c3d6f6f8ac429faebd0d5842","sha512":"4772d93282b09b8557f7eb3dab76a1b5f6f7742e5b728a1b3ff3bb8696ed426d377630a5840a4651a259e6938e944400f3ff9ff3061d8af22e34eb0ca105db53","ssdeep":"","tlshash":"85d0a7bb2c30a3353d5a51caa475faeebc70107e5cab9026d4decc9e241cf90496de01","size":241,"data":"","first_seen":"2025-03-05T16:05:38.685752Z","last_seen":"2026-02-11T20:26:43.622635Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/O44B","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"104.21.68.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"988e1886ce1f3a274575674e522e0141","sha1":"9c78c66005197a564ea33800eefab76fd669981e","sha256":"c5aaab4e6b1ecd2d19a1b68a3dc4d5a7c4a2b6e3c3d6f6f8ac429faebd0d5842","sha512":"4772d93282b09b8557f7eb3dab76a1b5f6f7742e5b728a1b3ff3bb8696ed426d377630a5840a4651a259e6938e944400f3ff9ff3061d8af22e34eb0ca105db53","ssdeep":"","tlshash":"85d0a7bb2c30a3353d5a51caa475faeebc70107e5cab9026d4decc9e241cf90496de01","size":241,"data":"","first_seen":"2025-03-05T16:05:38.685752Z","last_seen":"2026-02-11T20:26:43.622635Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fstatic.netpub.media/extra/cmp/cmp-gdpr.js","fqdn":"fstatic.netpub.media","domain":"netpub.media","tld":"media"},"ip":{"addr":"172.66.167.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aaee79c1ad6d5d6ce8c18aa000285386","sha1":"3c20aa1526d0d2a123a665e563b3b7427b3b33cb","sha256":"078ca4194bef5fc3c8e4c9e79f0f65254c1bf602d7c8ad4d589a60052a618074","sha512":"9415b9f072a43326e66ba9d437e389efa95260e8ae7c7cd062716c82c2d28de1527d4e1a1144aa8ce395536da1391373007c8c7ac768126b8d29c26fb2f3a39c","ssdeep":"","tlshash":"c301492d9d90e5394136236f5b76d2c8fe70102bb412a50bb49dd9082f30ed90ad4dd1","size":739,"data":"","first_seen":"2024-12-11T18:21:45.151305Z","last_seen":"2026-05-29T13:13:38.686938Z","times_seen":1929,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/O44B","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"104.21.68.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"988e1886ce1f3a274575674e522e0141","sha1":"9c78c66005197a564ea33800eefab76fd669981e","sha256":"c5aaab4e6b1ecd2d19a1b68a3dc4d5a7c4a2b6e3c3d6f6f8ac429faebd0d5842","sha512":"4772d93282b09b8557f7eb3dab76a1b5f6f7742e5b728a1b3ff3bb8696ed426d377630a5840a4651a259e6938e944400f3ff9ff3061d8af22e34eb0ca105db53","ssdeep":"","tlshash":"85d0a7bb2c30a3353d5a51caa475faeebc70107e5cab9026d4decc9e241cf90496de01","size":241,"data":"","first_seen":"2025-03-05T16:05:38.685752Z","last_seen":"2026-02-11T20:26:43.622635Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-29T17:57:18.230368Z","times_seen":905988,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/O44B","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"104.21.68.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"988e1886ce1f3a274575674e522e0141","sha1":"9c78c66005197a564ea33800eefab76fd669981e","sha256":"c5aaab4e6b1ecd2d19a1b68a3dc4d5a7c4a2b6e3c3d6f6f8ac429faebd0d5842","sha512":"4772d93282b09b8557f7eb3dab76a1b5f6f7742e5b728a1b3ff3bb8696ed426d377630a5840a4651a259e6938e944400f3ff9ff3061d8af22e34eb0ca105db53","ssdeep":"","tlshash":"85d0a7bb2c30a3353d5a51caa475faeebc70107e5cab9026d4decc9e241cf90496de01","size":241,"data":"","first_seen":"2025-03-05T16:05:38.685752Z","last_seen":"2026-02-11T20:26:43.622635Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-X2GS5JDQMX","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e494b48e4e6aed4d2196a0d47213f28a","sha1":"9f52866ee917b5241dd48c855300060f3eced9af","sha256":"b50540b66217615771721863f472219050ed43de8fc0d814e5afc46f7ddaa9c0","sha512":"f08edce7a77a4d378f37be33e004bb72d97b6f46b241e5414a558b2fb56abcff310ed8ea31802adb652ea3fc1effcbedc8604eb8353f27874d43c94a775760f3","ssdeep":"6144:UPyJBX168429Z8nP57wr/s0s/+Kxxc20hYlqVsKlhDjOC:JJBlg29Z8nP58DG/mYl2H","tlshash":"077418cd73d670669392e478503f118ba57b29a2f84cc895f186cce42e74a9a4277f3c","size":369465,"data":"","first_seen":"2025-10-26T10:43:05.857389Z","last_seen":"2025-10-26T10:43:05.857389Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api.js?onload=onloadRecaptchaCallback\u0026render=explicit","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d06ab22cb1a2b15e1f659ee73e0e712","sha1":"4220ff692e4c939da3ba3ebfc1ac49a90c4cbf1a","sha256":"288c979b5ee8766122a83ce7d3ba5d31b167f24a6c8b4196fe7733ca905fe47e","sha512":"3240708776637d821d3c4dcf60308e03403073eb7a39b2112c2c6a3074ae33e1e6db6e1ffe2a47936da018f18ae7d1757dae385466d81b7b955ef11dff27e3c7","ssdeep":"","tlshash":"4711f0721a14e0380a321ed1e2ffdab1e491742df11c85d8a556dac82e79ccbce14449","size":1088,"data":"","first_seen":"2025-10-22T21:56:40.839612Z","last_seen":"2025-10-31T12:48:59.681629Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/O44B","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"104.21.68.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"988e1886ce1f3a274575674e522e0141","sha1":"9c78c66005197a564ea33800eefab76fd669981e","sha256":"c5aaab4e6b1ecd2d19a1b68a3dc4d5a7c4a2b6e3c3d6f6f8ac429faebd0d5842","sha512":"4772d93282b09b8557f7eb3dab76a1b5f6f7742e5b728a1b3ff3bb8696ed426d377630a5840a4651a259e6938e944400f3ff9ff3061d8af22e34eb0ca105db53","ssdeep":"","tlshash":"85d0a7bb2c30a3353d5a51caa475faeebc70107e5cab9026d4decc9e241cf90496de01","size":241,"data":"","first_seen":"2025-03-05T16:05:38.685752Z","last_seen":"2026-02-11T20:26:43.622635Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/O44B","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"104.21.68.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"988e1886ce1f3a274575674e522e0141","sha1":"9c78c66005197a564ea33800eefab76fd669981e","sha256":"c5aaab4e6b1ecd2d19a1b68a3dc4d5a7c4a2b6e3c3d6f6f8ac429faebd0d5842","sha512":"4772d93282b09b8557f7eb3dab76a1b5f6f7742e5b728a1b3ff3bb8696ed426d377630a5840a4651a259e6938e944400f3ff9ff3061d8af22e34eb0ca105db53","ssdeep":"","tlshash":"85d0a7bb2c30a3353d5a51caa475faeebc70107e5cab9026d4decc9e241cf90496de01","size":241,"data":"","first_seen":"2025-03-05T16:05:38.685752Z","last_seen":"2026-02-11T20:26:43.622635Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/O44B","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"104.21.68.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"988e1886ce1f3a274575674e522e0141","sha1":"9c78c66005197a564ea33800eefab76fd669981e","sha256":"c5aaab4e6b1ecd2d19a1b68a3dc4d5a7c4a2b6e3c3d6f6f8ac429faebd0d5842","sha512":"4772d93282b09b8557f7eb3dab76a1b5f6f7742e5b728a1b3ff3bb8696ed426d377630a5840a4651a259e6938e944400f3ff9ff3061d8af22e34eb0ca105db53","ssdeep":"","tlshash":"85d0a7bb2c30a3353d5a51caa475faeebc70107e5cab9026d4decc9e241cf90496de01","size":241,"data":"","first_seen":"2025-03-05T16:05:38.685752Z","last_seen":"2026-02-11T20:26:43.622635Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gpp.netpub.media/17614753614810.19337029997623234/run.js?v=17614753614810.19337029997623234","fqdn":"gpp.netpub.media","domain":"netpub.media","tld":"media"},"ip":{"addr":"172.66.167.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"54f643b0fa8a7d71cb117679a6fbb2ce","sha1":"573d440c0f9fa4cf53e85cf86a86eba173933a1c","sha256":"851d2ece063bcac9a5addec55308a32557f978d2daf3950395fc3dc41e9e9336","sha512":"35a57a6a05d467bc1326d4171220562c440e2834f6a01878246bf951659100efcc40f8f63609ee594251f20f494f4d8f9230bf476dc3897c0334494e7e7b1424","ssdeep":"","tlshash":"e6d05e5ca72a29942c3272b55baf2614a13b242310828a043b0c49c00fbb956c189eec","size":251,"data":"","first_seen":"2024-02-21T20:01:38Z","last_seen":"2026-05-28T19:37:14.600552Z","times_seen":2531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bvtpk.com/tag.min.js","fqdn":"bvtpk.com","domain":"bvtpk.com","tld":"com"},"ip":{"addr":"104.21.5.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"10d8bad8c093af07d850629927873cdf","sha1":"d335311ccd25f25515ea85e51118f24ca62736be","sha256":"50adcdb0e1851d533fb15181263b136d8f7f6bb1efe8ed046cbb6cc0c26a00b6","sha512":"56a2ab6c79a5a92ee9e2b66938f5d83cb5b33d1a8ed39047d37d067e237aa824574aa8cb0f90c37ae97df6d9194d25b04043c8b95e55f943e5acbf5242ab7ca5","ssdeep":"1536:IMukxpFON+nJivD2eJXWBTNbaZeCm68L3b7Az0SAF9Q4+DIVVIBUCn:3uCFOqJQDBBWx6eCm68W0SI9z34UCn","tlshash":"a0b33bda2266241612bf8034445bdd0db5aecd8104cdcdb8e0e6b8662d78b16d3fbfd9","size":109979,"data":"","first_seen":"2025-10-25T23:06:37.146858Z","last_seen":"2025-10-26T18:07:23.892619Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-197252557-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6769c219a5890db8d6b4f99189389959","sha1":"447ba32e7ae46438e6b809c7bfefc7fa5e629b01","sha256":"726fc6f55cdfe89c6e1736d60d864cfcbcc774bb33075be12b6c45727092b9f6","sha512":"d39a0c4ec0c7892959ebc1143e0213e91c30dac186380a809480b23e144fb6aec7702aee431045942574f5de9d9c9d33da5bf54b5af706fedcadf8dbd21c9361","ssdeep":"6144:NyJBX084O9Z8nP57Mr/s0bixxc20XYls1fOM21:0JB2O9Z8nP5YDPYlW7e","tlshash":"9264f7cd73d6742683a3a478503f018ba17b69d2f84cc895f186d8d42e70aaa4277f7d","size":314238,"data":"","first_seen":"2025-10-26T10:43:05.846472Z","last_seen":"2025-10-26T10:43:05.846472Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/sandbox%20eval%20code","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-29T17:57:18.252968Z","times_seen":907654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-75C4L64NEB\u0026cx=c\u0026gtm=4e5am0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7266c88035e91beeeab32335d2315eb0","sha1":"b84e2d096b48aa08f1e858cc19319cf1007e9bf2","sha256":"601657b0648b3825ce4853e8825d706468f9d976640340a3ca7e3ab63265855b","sha512":"156f1dc22b41232b99fa81b761d9e99634bce8fc75b965155459ab01292cd3eb9e624046d491db7ee52dd9ffe3dd1f367e54a2e11e8a74a8fcad0c28d65ec6ac","ssdeep":"6144:RJyJBX178429Z8nP57wr/s0s/+Kxxc20hYlqVsKlhDj6x:yJBl929Z8nP58DG/mYl2m","tlshash":"d38418cd73d670669396e478503f118ba57b29a2f44cc895f18acce42e74a9a0277f3c","size":377220,"data":"","first_seen":"2025-10-26T10:43:05.850511Z","last_seen":"2025-10-26T10:43:05.850511Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/O44B","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"104.21.68.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d0a0cea78d150653900104d12d19fd58","sha1":"fc7c4a4e506dc1f6d604a2fe0b3daae65aee39f2","sha256":"f6fbe86d4870ea4c8b151990c95b100ca01c713cdfbc17894b154013bc84011f","sha512":"beb133185be5db95f914e95d3187df5ae652324ac435f18613d946da6d8fc5f3a29277e58e0ded74a955e78dc7b7cff6d5f26aebad1d23f46b099e12e240f530","ssdeep":"","tlshash":"0a112137659788b6bfd09084460079c1ce760233ef49264aa7e885884bef9f95107c5f","size":1011,"data":"","first_seen":"2025-10-26T10:43:05.870328Z","last_seen":"2025-10-26T10:43:05.870328Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/O44B","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"104.21.68.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f91d7c0b21b5fb7e2315eb075b7919b","sha1":"0238127f6ba64eb33a76fcaf4816cf59f913ad7b","sha256":"c5cad620a326c31474dbb15667204511db0845970467bf17d6e57348fb0f67cf","sha512":"e9ebddeabf571fdc174a284bae51b6ee0e6e53ab5d5b3b5e5ff52cd57a73ce7c4099ffee9691155a03185ca20674b59910aecc5adf795ddd3e23bbc8008b6833","ssdeep":"","tlshash":"18d08c8c268b2c7040f73a454b7f6200b006611360d18e323e0ea3849f70e2bd714908","size":205,"data":"","first_seen":"2024-08-31T03:54:09Z","last_seen":"2026-02-11T20:26:43.632227Z","times_seen":236,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/O44B","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"104.21.68.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a1e0d623f9e510e759498d67c8281999","sha1":"65e9e9287fd8060ebb5b624463ff977040e3d154","sha256":"c66a236b63a0191f0cc1cb5a3c1b675c0fb7bf7d5e56b8c5ed34d70b10059aa7","sha512":"0df45eef69cc2b494630ac663481553a335db913f9afd1061320767eca3464f93691071fe2fae91800c8bd19ff52b4a7cffcab7636192c58950d598a770a3e63","ssdeep":"","tlshash":"95c02bc8360a0c71c6fb27008b7ffa00bc43321494d05d324c0933048e60e03d754800","size":155,"data":"","first_seen":"2023-03-08T15:28:47Z","last_seen":"2026-02-13T14:00:01.941423Z","times_seen":1352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"st.mastinstungmoreal.com/static/9cb58b5eb2422c8f734769e7cf0146cf.min.js?1761475361336","fqdn":"st.mastinstungmoreal.com","domain":"mastinstungmoreal.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastinstungmoreal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 00:26:52 GMT","end":"Thu, 22 Jan 2026 01:26:46 GMT"},"fingerprint":{"sha1":"7A:CB:6E:D9:FE:7B:46:16:AE:45:0B:1B:E5:3B:71:45:4E:5C:0B:63","sha256":"0F:99:7A:8F:5B:F9:0C:0E:D5:7D:80:94:47:60:B8:8B:80:7D:F5:9E:3D:09:FA:28:C2:6E:0D:AF:C9:2B:BF:53"}}},"request":{"raw":"GET /static/9cb58b5eb2422c8f734769e7cf0146cf.min.js?1761475361336 HTTP/1.1\r\nHost: st.mastinstungmoreal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 26 Oct 2025 10:42:41 GMT\r\ncontent-length: 0\r\nlocation: https://st.mastinstungmoreal.com/r/9cb58b5eb2422c8f734769e7cf0146cf/service.js\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZuKm1QmMzWKHEbdeSEXzvTK4F37%2BjIDi5LS0VverTftLIQjEil4HeiHaT02tajeuRaohMtAcLSLi3zjU8NWn3SGnJFYC%2BkRyJPbSRzDTscPwtcP8K12uNQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 994959315e2f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-29T17:58:32.740449Z","times_seen":15879964,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":97,"dns":33,"connect":2,"send":0,"wait":5,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfiles.com/O44B","fqdn":"upfiles.com","domain":"upfiles.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-26T10:42:36.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upfiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:31:23 GMT","end":"Wed, 07 Jan 2026 15:29:54 GMT"},"fingerprint":{"sha1":"7D:87:B0:47:FA:CF:74:AD:E7:2D:F1:6D:1B:00:52:52:F6:F4:D6:07","sha256":"D8:46:93:97:57:38:28:F1:A3:06:F6:78:41:87:40:EF:17:11:68:B1:63:F0:20:C0:DE:96:9E:FE:7C:F7:E4:78"}}},"request":{"raw":"GET /O44B HTTP/1.1\r\nHost: upfiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 26 Oct 2025 10:42:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://upfion.com/O44B?token=eyJpdiI6Ilc2QkZlaUcyVk5NMDVvaXRmMnc0SHc9PSIsInZhbHVlIjoidEUxZTN5dGNKMlVxQzFRNENUeE4xUT09IiwibWFjIjoiODM4NGU1NWMyYzJkY2UyYmQ4NmM3ZmIwOGJhNTcwYWRlNWQxMGE1ZDEwYzI0YzBiNjI3NTljYzE4ZDNmMTE2YSIsInRhZyI6IiJ9\r\nserver: cloudflare\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ht%2BGrI79J%2BmxAC8zPFCKEHsFM4ciN3Bcs2kg2k7%2Ff6OdqVioOoXR6MHSkqoipv5Wgo2W5C%2BlN%2Bi2GtiL4I3HHWaaRfDsHxfMKAp6\"}]}\r\nset-cookie: XSRF-TOKEN=eyJpdiI6ImxMSUFjakdZN2tWcGtuTFE1RXZHcUE9PSIsInZhbHVlIjoiT1ZOMk5ycXFsMW1DWFpiY2dia3d1UXlPNThzQ0I5Tm0rbk95VUNrVFh3Nk1wZVM4M3d6UFJLbzB6QU0yUmdTMnpwa0xRb3JoUnF3TjdiOEU2eGx2Y25FMVJqd1kvdXVTVisyWTRnUy9kZFdTVWpsV0xHSkoyaDUxdGE0TUhFaEgiLCJtYWMiOiJkOThiOWY2Nzk0ZDBiMmUxZjNkMzAyZWI2ZmNhYjNmYTc3NjExOGFiMGM5N2RkMDAwNDUyYjZiMjIyNzQ5YjJiIiwidGFnIjoiIn0%3D; SameSite=Lax; Path=/; Max-Age=604800; Expires=Sun, 02 Nov 2025 10:42:37 GMT\nupfiles_session=eyJpdiI6IitRL2ZvYi81VXd4dm1PSVhmQm1XWlE9PSIsInZhbHVlIjoiM1dTMTBBMzd0TWdzZmFkdFZGTkgwYlNib2ZaWGVYeWNHbmxidWxkQTBBMEJVS2I4Y1VDV05PV2FnVkZGSGtFcFRML3RqZUE0dEpIb1FuRFFaTUt0aHd5SUFRSXhTYktmbXF5bTA4SW04VE5ydTRtZzduNWFVZUp2Y29zaDVzRUEiLCJtYWMiOiIxNjE3MmY3YmQ4YmJlODkzMWMxYzc5MDRlODNlNDAzOGZiNWZlNjU5OWE1ZjVkY2M5ZGQxM2QwYjhjZmI1ZTQyIiwidGFnIjoiIn0%3D; HttpOnly; SameSite=Lax; Path=/; Max-Age=604800; Expires=Sun, 02 Nov 2025 10:42:37 GMT\r\ncf-ray: 99495913697b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26850,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-29T17:58:32.740449Z","times_seen":15879964,"resource_available":true,"data":null}},"time_used":1180,"timings":{"blocked":47,"dns":23,"connect":1,"send":0,"wait":1086,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/img/menu.svg","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"104.21.68.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upfion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:34:05 GMT","end":"Wed, 14 Jan 2026 08:28:51 GMT"},"fingerprint":{"sha1":"20:D1:A7:C4:F3:E3:EA:A5:C0:AD:A5:DB:86:16:0F:2F:96:0A:CA:AD","sha256":"BF:8A:98:BE:A8:6E:7C:FA:E5:50:79:76:3A:CA:AA:02:DF:02:A0:B2:39:42:EC:DA:55:69:D7:FD:B6:B7:71:52"}}},"request":{"raw":"GET /img/menu.svg HTTP/1.1\r\nHost: upfion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/O44B\r\nCookie: XSRF-TOKEN=eyJpdiI6IkYrSjdqc3YrNjZPKzFtYW4ySTZOTVE9PSIsInZhbHVlIjoibk5GdjdhNG1mTk82Y2lZUktCc2hGYUp6SGhRbzNUT1hQTXMyNGx2enpDdlpTZEtzSmlCQ1FQdXJuYVJSdUZ1b3RwTTAzOWVsMi9oaFp3UkFZaSs1VVljNkc1WGI4Ym9aUnQzZTJQUWJIOW8ybVNrUTc1b3dVWHNSbkpRUkY3S1giLCJtYWMiOiJkOWIyYjIzOWFjYmZiYzEwMWZjM2YxYzI3YTkzOGQ0MjQ4ODUyMmU5NWQ0MDMxNTFhMzUwZDUyZThlNWVmYjIwIiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6IklWZU1MbDFHNDVVTThFMEhFM1gvWWc9PSIsInZhbHVlIjoibVh4V1BqZ0dIL1VUUzVpVC9qbGI1VzVON0x3M2V5K3oxNlFIckwwOGJxVDZBbkQ1WXZtRWUzUTJ6bDBZdHZQbVlnclhwTE5mak1jbXJQcXlMZW5sWndMdzNabUc0ZncrcTlBdXRJbHdScDNnTTNLeTc1WWxISEpXaDJ6OERwSHciLCJtYWMiOiJlNWI5MTI3ZjYzYzY0ZmQ1OWIzNzdmYzFlNjI5YjUwMmU5NWFhZDdiNDdmN2I1NjE1M2UwNTFmZjIzYTc0YWRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 10:42:40 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Sat, 28 Sep 2024 07:01:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nage: 7030\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\netag: W/\"66f7a9b2-72e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TfXv7TRbSv1qC1fLJ%2BNYiGO2ds9%2BYYzkgN%2B8eOeM%2B3ub1ezbDWV5YZiT8bItoslo88qMQJMNmfcyvPxjQTq2mLUHwe4pUyD23jU%3D\"}]}\r\ncf-ray: 9949592e2b8a49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1838,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e194fab3eea9f00d5a3814c4df00ac8c","sha1":"4a9760c8ec110364d025527e26730e78ae0b3ac0","sha256":"3d3e6705b468cecdd78fb9a1ee6688d60e1d2c1caa0db7baa88db460315dccea","sha512":"a36c7795597d5b13ca7d3592de5234133a1e56d35d6ea66da9212448a26d7ffc91c604d5a8d64c3abfb3109b2ab62ecdd46f9fcbe1f783caba95991bd044950a","ssdeep":"","tlshash":"5231c3fc904ecc1ad13ceb206ef5be2584a7266361dc06dcf2ec18167f00ba52d15aac","first_seen":"2023-05-07T20:47:11Z","last_seen":"2026-05-29T13:13:38.628639Z","times_seen":759,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-197252557-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:12 GMT","end":"Wed, 24 Dec 2025 14:32:11 GMT"},"fingerprint":{"sha1":"C1:75:0D:E5:E8:4D:AC:7F:C9:7A:40:D5:6C:2B:22:CE:ED:8F:6D:BB","sha256":"63:AB:E3:89:62:5A:B4:D8:9D:D3:5C:77:AE:75:C5:DE:49:CE:BA:43:6B:22:49:EF:48:59:47:A7:0E:75:FF:C2"}}},"request":{"raw":"GET /gtag/js?id=UA-197252557-1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 26 Oct 2025 10:42:41 GMT\r\nexpires: Sun, 26 Oct 2025 10:42:41 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 26 Oct 2025 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 109665\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":314238,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"6769c219a5890db8d6b4f99189389959","sha1":"447ba32e7ae46438e6b809c7bfefc7fa5e629b01","sha256":"726fc6f55cdfe89c6e1736d60d864cfcbcc774bb33075be12b6c45727092b9f6","sha512":"d39a0c4ec0c7892959ebc1143e0213e91c30dac186380a809480b23e144fb6aec7702aee431045942574f5de9d9c9d33da5bf54b5af706fedcadf8dbd21c9361","ssdeep":"6144:NyJBX084O9Z8nP57Mr/s0bixxc20XYls1fOM21:0JB2O9Z8nP5YDPYlW7e","tlshash":"9264f7cd73d6742683a3a478503f018ba17b69d2f84cc895f186d8d42e70aaa4277f7d","first_seen":"2025-10-26T10:43:05.846472Z","last_seen":"2025-10-26T10:43:05.846472Z","times_seen":1,"resource_available":true,"data":null}},"time_used":520,"timings":{"blocked":213,"dns":0,"connect":29,"send":0,"wait":37,"receive":40,"ssl":197},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gpp.netpub.media/init.js","fqdn":"gpp.netpub.media","domain":"netpub.media","tld":"media"},"ip":{"addr":"172.66.167.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netpub.media","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Oct 2025 00:02:00 GMT","end":"Tue, 20 Jan 2026 01:01:52 GMT"},"fingerprint":{"sha1":"BB:CD:8F:0D:0C:30:CD:75:A8:2E:1F:C6:A0:5C:59:72:AE:04:85:BA","sha256":"0E:B4:16:D9:9C:78:79:4C:DC:15:C0:19:B7:2F:74:94:25:78:44:40:37:EC:DD:50:25:E8:63:4E:95:A6:65:71"}}},"request":{"raw":"GET /init.js HTTP/1.1\r\nHost: gpp.netpub.media\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://upfion.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 10:42:41 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 08 Dec 2024 00:36:50 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9949592ee972dfec-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":739,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"aaee79c1ad6d5d6ce8c18aa000285386","sha1":"3c20aa1526d0d2a123a665e563b3b7427b3b33cb","sha256":"078ca4194bef5fc3c8e4c9e79f0f65254c1bf602d7c8ad4d589a60052a618074","sha512":"9415b9f072a43326e66ba9d437e389efa95260e8ae7c7cd062716c82c2d28de1527d4e1a1144aa8ce395536da1391373007c8c7ac768126b8d29c26fb2f3a39c","ssdeep":"","tlshash":"c301492d9d90e5394136236f5b76d2c8fe70102bb412a50bb49dd9082f30ed90ad4dd1","first_seen":"2024-12-11T18:21:45.151305Z","last_seen":"2026-05-29T13:13:38.686938Z","times_seen":1929,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.mastinstungmoreal.com/static/9cb58b5eb2422c8f734769e7cf0146cf.min.js?1761475361335","fqdn":"st.mastinstungmoreal.com","domain":"mastinstungmoreal.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastinstungmoreal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 00:26:52 GMT","end":"Thu, 22 Jan 2026 01:26:46 GMT"},"fingerprint":{"sha1":"7A:CB:6E:D9:FE:7B:46:16:AE:45:0B:1B:E5:3B:71:45:4E:5C:0B:63","sha256":"0F:99:7A:8F:5B:F9:0C:0E:D5:7D:80:94:47:60:B8:8B:80:7D:F5:9E:3D:09:FA:28:C2:6E:0D:AF:C9:2B:BF:53"}}},"request":{"raw":"GET /static/9cb58b5eb2422c8f734769e7cf0146cf.min.js?1761475361335 HTTP/1.1\r\nHost: st.mastinstungmoreal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 26 Oct 2025 10:42:41 GMT\r\ncontent-length: 0\r\nlocation: https://st.mastinstungmoreal.com/r/9cb58b5eb2422c8f734769e7cf0146cf/service.js\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jFuyhl7IroknQ0WEu7b5RoODfnJQPCoVlEA0wKP70S6MFNsBz83BmWikgEnzwx37UFQOU%2BSnlUhIfr2LGvT%2BsRNYIgVAUVnaheqSstI8C4cK250kAyUBkg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 994959315e178deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-29T17:58:32.740449Z","times_seen":15879964,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":93,"dns":32,"connect":2,"send":0,"wait":5,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.mastinstungmoreal.com/static/9cb58b5eb2422c8f734769e7cf0146cf.min.js?1761475361337","fqdn":"st.mastinstungmoreal.com","domain":"mastinstungmoreal.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastinstungmoreal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 00:26:52 GMT","end":"Thu, 22 Jan 2026 01:26:46 GMT"},"fingerprint":{"sha1":"7A:CB:6E:D9:FE:7B:46:16:AE:45:0B:1B:E5:3B:71:45:4E:5C:0B:63","sha256":"0F:99:7A:8F:5B:F9:0C:0E:D5:7D:80:94:47:60:B8:8B:80:7D:F5:9E:3D:09:FA:28:C2:6E:0D:AF:C9:2B:BF:53"}}},"request":{"raw":"GET /static/9cb58b5eb2422c8f734769e7cf0146cf.min.js?1761475361337 HTTP/1.1\r\nHost: st.mastinstungmoreal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 26 Oct 2025 10:42:41 GMT\r\ncontent-length: 0\r\nlocation: https://st.mastinstungmoreal.com/r/9cb58b5eb2422c8f734769e7cf0146cf/service.js\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u5RBqWVBqyh9pWrlmrj1P%2Bsh09%2BWerGVNUaIlH7otQ%2B62KQIDutzWFYDMaMYEi4WuysM2JvljFtntpmu9qQq2Hq%2FtLsoXrBMLHTz2%2BbXcS6UWUxS%2Bz%2Fj0g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 994959314e088deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-29T17:58:32.740449Z","times_seen":15879964,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":30,"connect":2,"send":0,"wait":4,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.mastinstungmoreal.com/static/9cb58b5eb2422c8f734769e7cf0146cf.min.js?1761475361339","fqdn":"st.mastinstungmoreal.com","domain":"mastinstungmoreal.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastinstungmoreal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 00:26:52 GMT","end":"Thu, 22 Jan 2026 01:26:46 GMT"},"fingerprint":{"sha1":"7A:CB:6E:D9:FE:7B:46:16:AE:45:0B:1B:E5:3B:71:45:4E:5C:0B:63","sha256":"0F:99:7A:8F:5B:F9:0C:0E:D5:7D:80:94:47:60:B8:8B:80:7D:F5:9E:3D:09:FA:28:C2:6E:0D:AF:C9:2B:BF:53"}}},"request":{"raw":"GET /static/9cb58b5eb2422c8f734769e7cf0146cf.min.js?1761475361339 HTTP/1.1\r\nHost: st.mastinstungmoreal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 26 Oct 2025 10:42:41 GMT\r\ncontent-length: 0\r\nlocation: https://st.mastinstungmoreal.com/r/9cb58b5eb2422c8f734769e7cf0146cf/service.js\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sKssPvA07Q2A%2FnsJ%2FfulVAIgksBqJQnUAHuyGd9MBf5dmU97x1iWU3k%2B75eV4h86kH8RlHZaSrPJtPgGRWd9JIO6miTsqU9Y5m7syDOjkfRJU1j1Lntluw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 994959315e0d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-29T17:58:32.740449Z","times_seen":15879964,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.mastinstungmoreal.com/r/9cb58b5eb2422c8f734769e7cf0146cf/service.js","fqdn":"st.mastinstungmoreal.com","domain":"mastinstungmoreal.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastinstungmoreal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 00:26:52 GMT","end":"Thu, 22 Jan 2026 01:26:46 GMT"},"fingerprint":{"sha1":"7A:CB:6E:D9:FE:7B:46:16:AE:45:0B:1B:E5:3B:71:45:4E:5C:0B:63","sha256":"0F:99:7A:8F:5B:F9:0C:0E:D5:7D:80:94:47:60:B8:8B:80:7D:F5:9E:3D:09:FA:28:C2:6E:0D:AF:C9:2B:BF:53"}}},"request":{"raw":"GET /r/9cb58b5eb2422c8f734769e7cf0146cf/service.js HTTP/1.1\r\nHost: st.mastinstungmoreal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://upfion.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 26 Oct 2025 10:42:41 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 11 Apr 2022 19:57:13 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7FFHpGnGVAWwB2H7g%2FPv0OWUR59gq99MLGi%2Bmj2qHeetTquveKEDRPnTC%2BGvfR5ILtQlDXYf4ZEfGwHiSaYu5lzi1ZmVv02C7%2F2P%2F6IUEpzlSxHpwX3GyA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99495932df69c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-29T17:58:32.740449Z","times_seen":15879964,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/img/plane.svg","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"104.21.68.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upfion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:34:05 GMT","end":"Wed, 14 Jan 2026 08:28:51 GMT"},"fingerprint":{"sha1":"20:D1:A7:C4:F3:E3:EA:A5:C0:AD:A5:DB:86:16:0F:2F:96:0A:CA:AD","sha256":"BF:8A:98:BE:A8:6E:7C:FA:E5:50:79:76:3A:CA:AA:02:DF:02:A0:B2:39:42:EC:DA:55:69:D7:FD:B6:B7:71:52"}}},"request":{"raw":"GET /img/plane.svg HTTP/1.1\r\nHost: upfion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/O44B\r\nCookie: XSRF-TOKEN=eyJpdiI6IkYrSjdqc3YrNjZPKzFtYW4ySTZOTVE9PSIsInZhbHVlIjoibk5GdjdhNG1mTk82Y2lZUktCc2hGYUp6SGhRbzNUT1hQTXMyNGx2enpDdlpTZEtzSmlCQ1FQdXJuYVJSdUZ1b3RwTTAzOWVsMi9oaFp3UkFZaSs1VVljNkc1WGI4Ym9aUnQzZTJQUWJIOW8ybVNrUTc1b3dVWHNSbkpRUkY3S1giLCJtYWMiOiJkOWIyYjIzOWFjYmZiYzEwMWZjM2YxYzI3YTkzOGQ0MjQ4ODUyMmU5NWQ0MDMxNTFhMzUwZDUyZThlNWVmYjIwIiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6IklWZU1MbDFHNDVVTThFMEhFM1gvWWc9PSIsInZhbHVlIjoibVh4V1BqZ0dIL1VUUzVpVC9qbGI1VzVON0x3M2V5K3oxNlFIckwwOGJxVDZBbkQ1WXZtRWUzUTJ6bDBZdHZQbVlnclhwTE5mak1jbXJQcXlMZW5sWndMdzNabUc0ZncrcTlBdXRJbHdScDNnTTNLeTc1WWxISEpXaDJ6OERwSHciLCJtYWMiOiJlNWI5MTI3ZjYzYzY0ZmQ1OWIzNzdmYzFlNjI5YjUwMmU5NWFhZDdiNDdmN2I1NjE1M2UwNTFmZjIzYTc0YWRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 10:42:40 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Sat, 28 Sep 2024 07:01:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nage: 4101\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\netag: W/\"66f7a9b2-2ac\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eyjU9p4wVRiqc7biiVtRDyyq3BrYv%2FqHpfYKpiGnQV91PtC5wDa1fVTFGxVFQRal5s9vFE1HZ0OHn1uRp9pMmywIUgzmQJE3y%2F4%3D\"}]}\r\ncf-ray: 9949592e3b8c49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":684,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4f25968fc51a5e49dc1ea503d5d60e38","sha1":"4221937e757eb15329dbc318092c9058044c5f73","sha256":"d454583aa343d4c8aa4e42c0876b20e60c20c0b89284e4ef0c662d0426c18254","sha512":"78b392f17a56d3fca46875ac6ee6ce0374381edd94b0f15afdcfab8754586d627bce98f5b68aa5b33e4f329f5454cb737f119573affc8c74f8e0a7a52f07ce09","ssdeep":"","tlshash":"d701fef0b368d1d451c46b649f67b932866b38f70b8dd05581c2a940f02c6cb8d409e4","first_seen":"2023-05-07T16:40:31Z","last_seen":"2026-05-29T13:13:38.663328Z","times_seen":712,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:01 GMT","end":"Wed, 24 Dec 2025 14:34:00 GMT"},"fingerprint":{"sha1":"69:C0:F6:2B:DD:5C:EF:2D:13:DF:E4:02:A5:5A:AE:D0:E8:1D:F6:8A","sha256":"04:A4:17:F9:A5:5F:92:F9:2B:AE:63:97:B2:97:F5:38:94:37:06:AB:1B:75:6E:41:16:74:D5:07:D2:08:E3:6C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://upfion.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 21 Oct 2025 23:36:12 GMT\r\nexpires: Wed, 21 Oct 2026 23:36:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 385589\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-05-29T18:00:11.687349Z","times_seen":196612,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":145,"dns":4,"connect":21,"send":0,"wait":22,"receive":3,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:01 GMT","end":"Wed, 24 Dec 2025 14:34:00 GMT"},"fingerprint":{"sha1":"69:C0:F6:2B:DD:5C:EF:2D:13:DF:E4:02:A5:5A:AE:D0:E8:1D:F6:8A","sha256":"04:A4:17:F9:A5:5F:92:F9:2B:AE:63:97:B2:97:F5:38:94:37:06:AB:1B:75:6E:41:16:74:D5:07:D2:08:E3:6C"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://upfion.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20408\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Oct 2025 12:57:40 GMT\r\nexpires: Fri, 23 Oct 2026 12:57:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 251101\r\nlast-modified: Mon, 08 Sep 2025 18:08:08 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20408,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20408, version 1.0","md5":"e8730678d4610fa908d3cba1ef0b4ddf","sha1":"1efcbee909ce74bf04878d74867f12a1e41ae7a4","sha256":"e921785496ed2d98c2257c88a6f838afa6acbee05cb8467048501bfe2a301461","sha512":"d7c3f81ad11ac5b3e6f454fbbb9be0940b3e8da93cde0b80f9a91a8259966be466b4d6a0fd5527fcc6c8f218aad8ffd0124bb29dfa08f6ca658ce49fe9e37e6c","ssdeep":"384:D+h1xN53scre+kLtT5+wpcR98ffVvdSMyNaHAUvLFNPBtn2aotFn9mTCAKDi055c:Ss/XRT5+wpM98ffxd6uZZRXnemWDj5WL","tlshash":"fa92d1cdfc0e5797a8e14ee93c0a7a4dd76f438af366a94b25e66122e67a55c040320c","first_seen":"2025-01-09T02:30:28.977279Z","last_seen":"2026-05-29T18:11:25.227963Z","times_seen":58333,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":103,"dns":3,"connect":22,"send":0,"wait":19,"receive":1,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:01 GMT","end":"Wed, 24 Dec 2025 14:34:00 GMT"},"fingerprint":{"sha1":"69:C0:F6:2B:DD:5C:EF:2D:13:DF:E4:02:A5:5A:AE:D0:E8:1D:F6:8A","sha256":"04:A4:17:F9:A5:5F:92:F9:2B:AE:63:97:B2:97:F5:38:94:37:06:AB:1B:75:6E:41:16:74:D5:07:D2:08:E3:6C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://upfion.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 21 Oct 2025 23:36:12 GMT\r\nexpires: Wed, 21 Oct 2026 23:36:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 385589\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-05-29T18:00:11.687349Z","times_seen":196612,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":81,"dns":0,"connect":0,"send":0,"wait":18,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gpp.netpub.media/17614753614810.19337029997623234/run.js?v=17614753614810.19337029997623234","fqdn":"gpp.netpub.media","domain":"netpub.media","tld":"media"},"ip":{"addr":"172.66.167.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netpub.media","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Oct 2025 00:02:00 GMT","end":"Tue, 20 Jan 2026 01:01:52 GMT"},"fingerprint":{"sha1":"BB:CD:8F:0D:0C:30:CD:75:A8:2E:1F:C6:A0:5C:59:72:AE:04:85:BA","sha256":"0E:B4:16:D9:9C:78:79:4C:DC:15:C0:19:B7:2F:74:94:25:78:44:40:37:EC:DD:50:25:E8:63:4E:95:A6:65:71"}}},"request":{"raw":"GET /17614753614810.19337029997623234/run.js?v=17614753614810.19337029997623234 HTTP/1.1\r\nHost: gpp.netpub.media\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 10:42:41 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 21 Feb 2024 16:05:00 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 994959316839dfec-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":251,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"54f643b0fa8a7d71cb117679a6fbb2ce","sha1":"573d440c0f9fa4cf53e85cf86a86eba173933a1c","sha256":"851d2ece063bcac9a5addec55308a32557f978d2daf3950395fc3dc41e9e9336","sha512":"35a57a6a05d467bc1326d4171220562c440e2834f6a01878246bf951659100efcc40f8f63609ee594251f20f494f4d8f9230bf476dc3897c0334494e7e7b1424","ssdeep":"","tlshash":"e6d05e5ca72a29942c3272b55baf2614a13b242310828a043b0c49c00fbb956c189eec","first_seen":"2024-02-21T20:01:38Z","last_seen":"2026-05-28T19:37:14.600552Z","times_seen":2531,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.mastinstungmoreal.com/r/9cb58b5eb2422c8f734769e7cf0146cf/service.js","fqdn":"st.mastinstungmoreal.com","domain":"mastinstungmoreal.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastinstungmoreal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 00:26:52 GMT","end":"Thu, 22 Jan 2026 01:26:46 GMT"},"fingerprint":{"sha1":"7A:CB:6E:D9:FE:7B:46:16:AE:45:0B:1B:E5:3B:71:45:4E:5C:0B:63","sha256":"0F:99:7A:8F:5B:F9:0C:0E:D5:7D:80:94:47:60:B8:8B:80:7D:F5:9E:3D:09:FA:28:C2:6E:0D:AF:C9:2B:BF:53"}}},"request":{"raw":"GET /r/9cb58b5eb2422c8f734769e7cf0146cf/service.js HTTP/1.1\r\nHost: st.mastinstungmoreal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://upfion.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 26 Oct 2025 10:42:41 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 11 Apr 2022 19:57:13 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jtX0ALVcneS0xxEDqGHQQJ3kWP0LQKUaeesSnTKX3V9bepV%2BAT8j7Ka8JKPqWZneXnTgS8n9U4IOqSR4W2E3KGYqSedOs24TSDHdlPY6lltQbAKXVJnbjA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99495932ef98c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-29T17:58:32.740449Z","times_seen":15879964,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.mastinstungmoreal.com/r/9cb58b5eb2422c8f734769e7cf0146cf/service.js","fqdn":"st.mastinstungmoreal.com","domain":"mastinstungmoreal.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastinstungmoreal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 00:26:52 GMT","end":"Thu, 22 Jan 2026 01:26:46 GMT"},"fingerprint":{"sha1":"7A:CB:6E:D9:FE:7B:46:16:AE:45:0B:1B:E5:3B:71:45:4E:5C:0B:63","sha256":"0F:99:7A:8F:5B:F9:0C:0E:D5:7D:80:94:47:60:B8:8B:80:7D:F5:9E:3D:09:FA:28:C2:6E:0D:AF:C9:2B:BF:53"}}},"request":{"raw":"GET /r/9cb58b5eb2422c8f734769e7cf0146cf/service.js HTTP/1.1\r\nHost: st.mastinstungmoreal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://upfion.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 26 Oct 2025 10:42:41 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 11 Apr 2022 19:57:13 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ryfINPyi8G3CnTI3tQ7j2JS8CRDGMaDenjz04P8aR1mKmkDXmu3egIrYhKEjssb%2F3CP5QoLU8YJ8FNGJzzJtbAYx9lIGXBWne9c6PN1VHLzoDt1ijH9oxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99495932efcac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-29T17:58:32.740449Z","times_seen":15879964,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-75C4L64NEB\u0026cx=c\u0026gtm=4e5am0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:12 GMT","end":"Wed, 24 Dec 2025 14:32:11 GMT"},"fingerprint":{"sha1":"C1:75:0D:E5:E8:4D:AC:7F:C9:7A:40:D5:6C:2B:22:CE:ED:8F:6D:BB","sha256":"63:AB:E3:89:62:5A:B4:D8:9D:D3:5C:77:AE:75:C5:DE:49:CE:BA:43:6B:22:49:EF:48:59:47:A7:0E:75:FF:C2"}}},"request":{"raw":"GET /gtag/js?id=G-75C4L64NEB\u0026cx=c\u0026gtm=4e5am0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 26 Oct 2025 10:42:41 GMT\r\nexpires: Sun, 26 Oct 2025 10:42:41 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 130600\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":377220,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"7266c88035e91beeeab32335d2315eb0","sha1":"b84e2d096b48aa08f1e858cc19319cf1007e9bf2","sha256":"601657b0648b3825ce4853e8825d706468f9d976640340a3ca7e3ab63265855b","sha512":"156f1dc22b41232b99fa81b761d9e99634bce8fc75b965155459ab01292cd3eb9e624046d491db7ee52dd9ffe3dd1f367e54a2e11e8a74a8fcad0c28d65ec6ac","ssdeep":"6144:RJyJBX178429Z8nP57wr/s0s/+Kxxc20hYlqVsKlhDj6x:yJBl929Z8nP58DG/mYl2m","tlshash":"d38418cd73d670669396e478503f118ba57b29a2f44cc895f18acce42e74a9a0277f3c","first_seen":"2025-10-26T10:43:05.850511Z","last_seen":"2025-10-26T10:43:05.850511Z","times_seen":1,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/O44B?token=eyJpdiI6Ilc2QkZlaUcyVk5NMDVvaXRmMnc0SHc9PSIsInZhbHVlIjoidEUxZTN5dGNKMlVxQzFRNENUeE4xUT09IiwibWFjIjoiODM4NGU1NWMyYzJkY2UyYmQ4NmM3ZmIwOGJhNTcwYWRlNWQxMGE1ZDEwYzI0YzBiNjI3NTljYzE4ZDNmMTE2YSIsInRhZyI6IiJ9","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"104.21.68.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-26T10:42:37.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upfion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:34:05 GMT","end":"Wed, 14 Jan 2026 08:28:51 GMT"},"fingerprint":{"sha1":"20:D1:A7:C4:F3:E3:EA:A5:C0:AD:A5:DB:86:16:0F:2F:96:0A:CA:AD","sha256":"BF:8A:98:BE:A8:6E:7C:FA:E5:50:79:76:3A:CA:AA:02:DF:02:A0:B2:39:42:EC:DA:55:69:D7:FD:B6:B7:71:52"}}},"request":{"raw":"GET /O44B?token=eyJpdiI6Ilc2QkZlaUcyVk5NMDVvaXRmMnc0SHc9PSIsInZhbHVlIjoidEUxZTN5dGNKMlVxQzFRNENUeE4xUT09IiwibWFjIjoiODM4NGU1NWMyYzJkY2UyYmQ4NmM3ZmIwOGJhNTcwYWRlNWQxMGE1ZDEwYzI0YzBiNjI3NTljYzE4ZDNmMTE2YSIsInRhZyI6IiJ9 HTTP/1.1\r\nHost: upfion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 26 Oct 2025 10:42:39 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://upfion.com/O44B\r\nserver: cloudflare\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x4SAcCdXjGmH0cU1ZJPAa0qxPMPM9p9UdDydx%2BVDjBEjsu97%2FwOXqe1gAHYDkZEbgFpyufTtxvMiVKYyIO0dp1Ss6EYWzVjS\"}]}\r\nset-cookie: XSRF-TOKEN=eyJpdiI6ImNocTYwdEFRVFc0TVdZbmtxd2hoc0E9PSIsInZhbHVlIjoiZkxISURhdWFRTk05MWNrU2NpTy8xOUNNVWNIQytnQU9LRHBtaVYzK2N1S3FVWk1tdmcwdmFwdkpzMHk5Ym5zdVN5d1FFdmJNSkJoNzllbkR6V0kvT056T2NmOGNoREJHSE1mQkJYa3dRMWlQL0Jqb0piWS96UXlySkZKcFpBRkIiLCJtYWMiOiIzZmVjZmY3NmRiYjBlZWVhY2Y0ODMxZTQwMjFhZTBlZWM3NWNmNDZjYTNiY2YwY2I5OTM3YjVlZjNhYWVjMzhiIiwidGFnIjoiIn0%3D; SameSite=Lax; Path=/; Max-Age=604800; Expires=Sun, 02 Nov 2025 10:42:39 GMT\nupfiles_session=eyJpdiI6IlpXbzlLTWhUR0ZVTE1qSWVCbmtTNWc9PSIsInZhbHVlIjoiOHpDdUk2dzhjTFpwQWdvSitWbkxub2sxWjNUWk5rc2JMZzlYTDJCMjV1MnJUTjdYRkpWK0NxSmZMWkZBUEYzOG9iK0VXdTF2K1dSTjZPMGNqVWRNMlU2RitscjVKWEpvdkVtOTdSYkdyQmordXBlbUtlc0FUb3RtZit5Ui9PWUQiLCJtYWMiOiIyNTcyNjJjOWY2ZDgwMzNjZGYzMTJhODI1NTFhNDRhZWYwYWMzMjQyZjI4ZjMyNDNjNWQzNjRlNmM5NGYzYzg1IiwidGFnIjoiIn0%3D; HttpOnly; SameSite=Lax; Path=/; Max-Age=604800; Expires=Sun, 02 Nov 2025 10:42:39 GMT\r\ncf-ray: 9949591a79cab4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26850,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-29T17:58:32.740449Z","times_seen":15879964,"resource_available":true,"data":null}},"time_used":2096,"timings":{"blocked":40,"dns":20,"connect":1,"send":0,"wait":2016,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/img/logo.svg","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"104.21.68.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upfion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:34:05 GMT","end":"Wed, 14 Jan 2026 08:28:51 GMT"},"fingerprint":{"sha1":"20:D1:A7:C4:F3:E3:EA:A5:C0:AD:A5:DB:86:16:0F:2F:96:0A:CA:AD","sha256":"BF:8A:98:BE:A8:6E:7C:FA:E5:50:79:76:3A:CA:AA:02:DF:02:A0:B2:39:42:EC:DA:55:69:D7:FD:B6:B7:71:52"}}},"request":{"raw":"GET /img/logo.svg HTTP/1.1\r\nHost: upfion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/O44B\r\nCookie: XSRF-TOKEN=eyJpdiI6IkYrSjdqc3YrNjZPKzFtYW4ySTZOTVE9PSIsInZhbHVlIjoibk5GdjdhNG1mTk82Y2lZUktCc2hGYUp6SGhRbzNUT1hQTXMyNGx2enpDdlpTZEtzSmlCQ1FQdXJuYVJSdUZ1b3RwTTAzOWVsMi9oaFp3UkFZaSs1VVljNkc1WGI4Ym9aUnQzZTJQUWJIOW8ybVNrUTc1b3dVWHNSbkpRUkY3S1giLCJtYWMiOiJkOWIyYjIzOWFjYmZiYzEwMWZjM2YxYzI3YTkzOGQ0MjQ4ODUyMmU5NWQ0MDMxNTFhMzUwZDUyZThlNWVmYjIwIiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6IklWZU1MbDFHNDVVTThFMEhFM1gvWWc9PSIsInZhbHVlIjoibVh4V1BqZ0dIL1VUUzVpVC9qbGI1VzVON0x3M2V5K3oxNlFIckwwOGJxVDZBbkQ1WXZtRWUzUTJ6bDBZdHZQbVlnclhwTE5mak1jbXJQcXlMZW5sWndMdzNabUc0ZncrcTlBdXRJbHdScDNnTTNLeTc1WWxISEpXaDJ6OERwSHciLCJtYWMiOiJlNWI5MTI3ZjYzYzY0ZmQ1OWIzNzdmYzFlNjI5YjUwMmU5NWFhZDdiNDdmN2I1NjE1M2UwNTFmZjIzYTc0YWRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 10:42:41 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Sat, 28 Sep 2024 07:01:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nage: 3447\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\netag: W/\"66f7a9b2-56e8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9H8x02WbAJHNQDGPmErCfdPYBJhsN4Nb%2Fl%2BhJLdvUTPRTYCxC8ppgpe%2F0WTc0JtePYg2H%2BGdD4Aq3SYYVCMCdJKhxAXhk2dH9Jw%3D\"}]}\r\ncf-ray: 9949592e2b8949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22248,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1e28749acbd90e7e99a883c1890327cd","sha1":"638b4525d3f0ed776db136ca1025a8961f46c9e0","sha256":"d526da1f4d4af45cefd2a0d140abec2beddc3150d13c47d3de893eaa278a369d","sha512":"eb6e6778841d6d33b0c7349ffc2107e97c00452bd55e804b4459931a557b20430630772da3a8b523f7053b252dd9e07f40bf7c1d47ecf1d5be18e96031412825","ssdeep":"384:SKoVBb8Z3DmFUMHhIPUufhR4QYoStQ2RwXJp7K3sgnoETp:iQDmzIHhR47oKQ2/fp","tlshash":"efa295eda752dde50e8f47c119616ad13f5be87e5f2503f4c099c7f03822ab84c96a82","first_seen":"2023-05-03T01:43:27Z","last_seen":"2026-05-29T13:13:38.677963Z","times_seen":1484,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api.js?onload=onloadRecaptchaCallback\u0026render=explicit","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:42.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:46 GMT","end":"Wed, 24 Dec 2025 14:32:45 GMT"},"fingerprint":{"sha1":"33:AE:57:96:73:54:DB:AD:30:D3:52:17:10:F9:29:ED:00:D2:AA:9E","sha256":"66:9D:DF:E8:F0:EB:EF:E9:E2:07:FC:70:D9:15:80:D9:C8:B8:5E:9F:F7:D7:7D:63:FD:42:EA:11:F4:45:90:24"}}},"request":{"raw":"GET /recaptcha/api.js?onload=onloadRecaptchaCallback\u0026render=explicit HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sun, 26 Oct 2025 10:42:42 GMT\r\ndate: Sun, 26 Oct 2025 10:42:42 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1088,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1088), with no line terminators","md5":"7d06ab22cb1a2b15e1f659ee73e0e712","sha1":"4220ff692e4c939da3ba3ebfc1ac49a90c4cbf1a","sha256":"288c979b5ee8766122a83ce7d3ba5d31b167f24a6c8b4196fe7733ca905fe47e","sha512":"3240708776637d821d3c4dcf60308e03403073eb7a39b2112c2c6a3074ae33e1e6db6e1ffe2a47936da018f18ae7d1757dae385466d81b7b955ef11dff27e3c7","ssdeep":"","tlshash":"4711f0721a14e0380a321ed1e2ffdab1e491742df11c85d8a556dac82e79ccbce14449","first_seen":"2025-10-22T21:56:40.839612Z","last_seen":"2025-10-31T12:48:59.681629Z","times_seen":41,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":100,"dns":60,"connect":21,"send":0,"wait":33,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagead2.googlesyndication.com/pagead/js/adsbygoogle.js","fqdn":"pagead2.googlesyndication.com","domain":"googlesyndication.com","tld":"com"},"ip":{"addr":"142.250.74.98","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:42.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.doubleclick.net","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:03 GMT","end":"Wed, 24 Dec 2025 14:32:02 GMT"},"fingerprint":{"sha1":"6A:77:0B:77:FC:60:43:EF:BA:0A:E5:86:27:68:EC:A6:69:66:28:8C","sha256":"2D:B7:4C:F8:EA:71:9D:96:59:8F:1D:23:88:E5:31:81:55:2F:93:8E:0D:20:48:9F:B5:FF:42:28:F7:D3:4E:F3"}}},"request":{"raw":"HEAD /pagead/js/adsbygoogle.js HTTP/1.1\r\nHost: pagead2.googlesyndication.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://upfion.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nlink: \u003chttps://googleads.g.doubleclick.net\u003e; rel=\"preconnect\"; crossorigin\r\nvary: Accept-Encoding\r\ndate: Sun, 26 Oct 2025 10:42:42 GMT\r\nexpires: Sun, 26 Oct 2025 10:42:42 GMT\r\ncache-control: private, max-age=3600, stale-while-revalidate=3600\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: 18252596534551167635\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 54320\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-29T17:58:32.740449Z","times_seen":15879964,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":87,"dns":0,"connect":8,"send":0,"wait":28,"receive":1,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amt3.com/5/9776947/?oo=1\u0026js_build=iclick-v1.1602.0\u0026userId=08026e0fe68340cce88e5add2860b942\u0026dmn=bvtpk.com\u0026tt=2\u0026ix=0","fqdn":"amt3.com","domain":"amt3.com","tld":"com"},"ip":{"addr":"139.45.195.9","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:42.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"amt3.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Sep 2025 05:18:13 GMT","end":"Sun, 28 Dec 2025 05:18:12 GMT"},"fingerprint":{"sha1":"07:CE:BC:65:68:14:E9:3D:A9:36:B2:F9:9B:EA:24:70:92:ED:15:21","sha256":"7E:B5:03:72:AF:6E:A6:99:87:96:AD:4D:D5:AA:4C:88:B3:63:32:D8:27:9F:0C:82:05:6A:40:FC:4F:1F:87:51"}}},"request":{"raw":"POST /5/9776947/?oo=1\u0026js_build=iclick-v1.1602.0\u0026userId=08026e0fe68340cce88e5add2860b942\u0026dmn=bvtpk.com\u0026tt=2\u0026ix=0 HTTP/1.1\r\nHost: amt3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2567\r\nOrigin: https://upfion.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 10:42:42 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://upfion.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-29T17:58:32.740449Z","times_seen":15879964,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":99,"dns":13,"connect":26,"send":0,"wait":29,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-25","alert":"Sinkholed","trigger":"amt3.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pagead2.googlesyndication.com/pagead/js/adsbygoogle.js","fqdn":"pagead2.googlesyndication.com","domain":"googlesyndication.com","tld":"com"},"ip":{"addr":"142.250.74.98","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:43.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.doubleclick.net","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:03 GMT","end":"Wed, 24 Dec 2025 14:32:02 GMT"},"fingerprint":{"sha1":"6A:77:0B:77:FC:60:43:EF:BA:0A:E5:86:27:68:EC:A6:69:66:28:8C","sha256":"2D:B7:4C:F8:EA:71:9D:96:59:8F:1D:23:88:E5:31:81:55:2F:93:8E:0D:20:48:9F:B5:FF:42:28:F7:D3:4E:F3"}}},"request":{"raw":"HEAD /pagead/js/adsbygoogle.js HTTP/1.1\r\nHost: pagead2.googlesyndication.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://upfion.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nlink: \u003chttps://googleads.g.doubleclick.net\u003e; rel=\"preconnect\"; crossorigin\r\nvary: Accept-Encoding\r\ndate: Sun, 26 Oct 2025 10:42:43 GMT\r\nexpires: Sun, 26 Oct 2025 10:42:43 GMT\r\ncache-control: private, max-age=3600, stale-while-revalidate=3600\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: 8718873705496937708\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 54298\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-29T17:58:32.740449Z","times_seen":15879964,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.mastinstungmoreal.com/static/9cb58b5eb2422c8f734769e7cf0146cf.min.js?1761475361333","fqdn":"st.mastinstungmoreal.com","domain":"mastinstungmoreal.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastinstungmoreal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 00:26:52 GMT","end":"Thu, 22 Jan 2026 01:26:46 GMT"},"fingerprint":{"sha1":"7A:CB:6E:D9:FE:7B:46:16:AE:45:0B:1B:E5:3B:71:45:4E:5C:0B:63","sha256":"0F:99:7A:8F:5B:F9:0C:0E:D5:7D:80:94:47:60:B8:8B:80:7D:F5:9E:3D:09:FA:28:C2:6E:0D:AF:C9:2B:BF:53"}}},"request":{"raw":"GET /static/9cb58b5eb2422c8f734769e7cf0146cf.min.js?1761475361333 HTTP/1.1\r\nHost: st.mastinstungmoreal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 26 Oct 2025 10:42:41 GMT\r\ncontent-length: 0\r\nlocation: https://st.mastinstungmoreal.com/r/9cb58b5eb2422c8f734769e7cf0146cf/service.js\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vXNcFeCviOZQxHmE9eZdOc%2FJRngLDmd7VQvnH0N1fwtLrm8W8BsdKrpRHZGAleOIK9126KXedeaASCTj2Xxtjur9J%2BPh88Bh69Kd4ALwxQ4PnH%2FVhJlRvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 994959315e2b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-29T17:58:32.740449Z","times_seen":15879964,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":100,"dns":35,"connect":1,"send":0,"wait":5,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.mastinstungmoreal.com/static/9cb58b5eb2422c8f734769e7cf0146cf.min.js?1761475361337","fqdn":"st.mastinstungmoreal.com","domain":"mastinstungmoreal.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastinstungmoreal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 00:26:52 GMT","end":"Thu, 22 Jan 2026 01:26:46 GMT"},"fingerprint":{"sha1":"7A:CB:6E:D9:FE:7B:46:16:AE:45:0B:1B:E5:3B:71:45:4E:5C:0B:63","sha256":"0F:99:7A:8F:5B:F9:0C:0E:D5:7D:80:94:47:60:B8:8B:80:7D:F5:9E:3D:09:FA:28:C2:6E:0D:AF:C9:2B:BF:53"}}},"request":{"raw":"GET /static/9cb58b5eb2422c8f734769e7cf0146cf.min.js?1761475361337 HTTP/1.1\r\nHost: st.mastinstungmoreal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 26 Oct 2025 10:42:41 GMT\r\ncontent-length: 0\r\nlocation: https://st.mastinstungmoreal.com/r/9cb58b5eb2422c8f734769e7cf0146cf/service.js\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FrPlFbg%2BpuyxYd6%2FkKIOzo8YIg4kzN3L%2FaLalpnCnuvxUqw5ImDfMZ3xn6HDA%2B%2FNFua4NSBs5RvsOx%2Fdrnddz0syYoZrpSyM5jFXUWlaBVNyBFJ7kBkTeg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 994959317e7a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-29T17:58:32.740449Z","times_seen":15879964,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":113,"dns":34,"connect":3,"send":0,"wait":12,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:01 GMT","end":"Wed, 24 Dec 2025 14:34:00 GMT"},"fingerprint":{"sha1":"69:C0:F6:2B:DD:5C:EF:2D:13:DF:E4:02:A5:5A:AE:D0:E8:1D:F6:8A","sha256":"04:A4:17:F9:A5:5F:92:F9:2B:AE:63:97:B2:97:F5:38:94:37:06:AB:1B:75:6E:41:16:74:D5:07:D2:08:E3:6C"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://upfion.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Oct 2025 17:26:19 GMT\r\nexpires: Fri, 23 Oct 2026 17:26:19 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nage: 234982\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-29T17:58:21.664377Z","times_seen":855226,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":248,"dns":9,"connect":8,"send":0,"wait":10,"receive":2,"ssl":216},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.mastinstungmoreal.com/r/9cb58b5eb2422c8f734769e7cf0146cf/service.js","fqdn":"st.mastinstungmoreal.com","domain":"mastinstungmoreal.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastinstungmoreal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 00:26:52 GMT","end":"Thu, 22 Jan 2026 01:26:46 GMT"},"fingerprint":{"sha1":"7A:CB:6E:D9:FE:7B:46:16:AE:45:0B:1B:E5:3B:71:45:4E:5C:0B:63","sha256":"0F:99:7A:8F:5B:F9:0C:0E:D5:7D:80:94:47:60:B8:8B:80:7D:F5:9E:3D:09:FA:28:C2:6E:0D:AF:C9:2B:BF:53"}}},"request":{"raw":"GET /r/9cb58b5eb2422c8f734769e7cf0146cf/service.js HTTP/1.1\r\nHost: st.mastinstungmoreal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://upfion.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 26 Oct 2025 10:42:41 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 11 Apr 2022 19:57:13 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LM4QiNoYOYf6pU2zHZorr1OzRnqQHoYukeWknwAEWyG4S4oShYliS6CGpCVU%2BbyHeo8DdWTUcjw%2BNd5lAY%2F0Y7kLkU7RxrxhwbF8ewKnFXj%2BHl9tN3VcCA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99495932efa3c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-29T17:58:32.740449Z","times_seen":15879964,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.mastinstungmoreal.com/r/9cb58b5eb2422c8f734769e7cf0146cf/service.js","fqdn":"st.mastinstungmoreal.com","domain":"mastinstungmoreal.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastinstungmoreal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 00:26:52 GMT","end":"Thu, 22 Jan 2026 01:26:46 GMT"},"fingerprint":{"sha1":"7A:CB:6E:D9:FE:7B:46:16:AE:45:0B:1B:E5:3B:71:45:4E:5C:0B:63","sha256":"0F:99:7A:8F:5B:F9:0C:0E:D5:7D:80:94:47:60:B8:8B:80:7D:F5:9E:3D:09:FA:28:C2:6E:0D:AF:C9:2B:BF:53"}}},"request":{"raw":"GET /r/9cb58b5eb2422c8f734769e7cf0146cf/service.js HTTP/1.1\r\nHost: st.mastinstungmoreal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://upfion.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 26 Oct 2025 10:42:41 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 11 Apr 2022 19:57:13 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=STBj5kURHTM6ghibK%2B%2FwCXEJW9eVo4C7E9dBXcDvablnGiz23PXXzOO62BorEyYfeiMTHiiF8KCIHxgRXcrhaP3bCA7LcVJKNV7cmM1g7rBz0DSsnHNyDA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99495932ffd0c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-29T17:58:32.740449Z","times_seen":15879964,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/-PgDGgfmUF0ySmnjMTJjzqak/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:42.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:07 GMT","end":"Wed, 24 Dec 2025 14:34:06 GMT"},"fingerprint":{"sha1":"CE:D7:82:8C:04:B0:E5:F9:3B:52:AC:E2:75:72:A1:31:F8:D2:42:D4","sha256":"B8:54:E9:B3:89:59:D3:D4:18:71:52:99:FF:BB:D7:4C:BF:09:4A:EE:50:59:19:40:A0:6E:17:ED:80:73:3B:22"}}},"request":{"raw":"GET /recaptcha/releases/-PgDGgfmUF0ySmnjMTJjzqak/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://upfion.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 351872\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 20 Oct 2025 17:53:58 GMT\r\nexpires: Tue, 20 Oct 2026 17:53:58 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 20 Oct 2025 03:59:59 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 492524\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":825565,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (564)","md5":"126e162b606d5b82daf63f92a9a23c19","sha1":"22771edfc483675d16eecb446f1580992cae94a3","sha256":"c829356f4b331095018382d7d5399a157d56e91c260a4ffa2681fb9934c8d0ec","sha512":"d2cc8041652df60bc8cfb3f32819030d3d8af8292f05a287b0e87a13fe6c3d1e2212140cebc5262877d21e6a232fb99a9f528a4b254820a3ff8371936aa791eb","ssdeep":"12288:97bxxKQ2lDEGEnmAJud4pypzfKCp0qh2eChI7AKXD8PpRQUkO0Tq67:9bxxh2lDEGEmrapOznnAKXD8PpRQ7vF","tlshash":"d0055be979417d65e322b4f22077a24ce72d9965d84e081eb4d4d8f02eb481e3077ebb","first_seen":"2025-10-21T01:58:59.278332Z","last_seen":"2026-05-27T23:34:19.341839Z","times_seen":18194,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":96,"dns":1,"connect":15,"send":0,"wait":16,"receive":68,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/img/faqs-image.svg","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"104.21.68.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upfion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:34:05 GMT","end":"Wed, 14 Jan 2026 08:28:51 GMT"},"fingerprint":{"sha1":"20:D1:A7:C4:F3:E3:EA:A5:C0:AD:A5:DB:86:16:0F:2F:96:0A:CA:AD","sha256":"BF:8A:98:BE:A8:6E:7C:FA:E5:50:79:76:3A:CA:AA:02:DF:02:A0:B2:39:42:EC:DA:55:69:D7:FD:B6:B7:71:52"}}},"request":{"raw":"GET /img/faqs-image.svg HTTP/1.1\r\nHost: upfion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/O44B\r\nCookie: XSRF-TOKEN=eyJpdiI6IkYrSjdqc3YrNjZPKzFtYW4ySTZOTVE9PSIsInZhbHVlIjoibk5GdjdhNG1mTk82Y2lZUktCc2hGYUp6SGhRbzNUT1hQTXMyNGx2enpDdlpTZEtzSmlCQ1FQdXJuYVJSdUZ1b3RwTTAzOWVsMi9oaFp3UkFZaSs1VVljNkc1WGI4Ym9aUnQzZTJQUWJIOW8ybVNrUTc1b3dVWHNSbkpRUkY3S1giLCJtYWMiOiJkOWIyYjIzOWFjYmZiYzEwMWZjM2YxYzI3YTkzOGQ0MjQ4ODUyMmU5NWQ0MDMxNTFhMzUwZDUyZThlNWVmYjIwIiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6IklWZU1MbDFHNDVVTThFMEhFM1gvWWc9PSIsInZhbHVlIjoibVh4V1BqZ0dIL1VUUzVpVC9qbGI1VzVON0x3M2V5K3oxNlFIckwwOGJxVDZBbkQ1WXZtRWUzUTJ6bDBZdHZQbVlnclhwTE5mak1jbXJQcXlMZW5sWndMdzNabUc0ZncrcTlBdXRJbHdScDNnTTNLeTc1WWxISEpXaDJ6OERwSHciLCJtYWMiOiJlNWI5MTI3ZjYzYzY0ZmQ1OWIzNzdmYzFlNjI5YjUwMmU5NWFhZDdiNDdmN2I1NjE1M2UwNTFmZjIzYTc0YWRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 10:42:40 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Sat, 28 Sep 2024 07:01:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nage: 7030\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\netag: W/\"66f7a9b2-95fb\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EsA7KEGYdWipDqrP%2BO80MsQMYQx1YpB5SETg7%2FhmT1h5swCree1LTEVTFa6zHcVWFUoFMW0kSD%2FRS2SfzRU9Cw3DyEMALTcmLuo%3D\"}]}\r\ncf-ray: 9949592e3b8b49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38395,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a60b7216905928c625ae9592044476cd","sha1":"e70c5be728c7bd1198100337487aafe126834ca3","sha256":"9a717285429d468fadc4d25179fc6feb49e6335f3af1675fb6be1cb50e7e8322","sha512":"7ad55a995e2eb24a0a01c4e23eb289b58278ef50c288e8fbed537621e7d50937479a0a6a9243fedf266c22368745326998bab4dfc8bf4f11ab37a16440e41a30","ssdeep":"768:xCytqG2ELo5kwY1slCtWbtjsDEUse3FxB5ggzVL+SYbobbo51+M:x3t6V0ltUsDVTFxf6+M","tlshash":"e40362dc3bb01ceca9d88bdbff0271bc282355b389558608c5295b7c148592dad7bed2","first_seen":"2023-05-03T01:43:27Z","last_seen":"2026-05-29T13:13:38.656344Z","times_seen":1333,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026family=Roboto:wght@400;500;700;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:12 GMT","end":"Wed, 24 Dec 2025 14:34:11 GMT"},"fingerprint":{"sha1":"A8:1F:72:36:24:F2:F6:E0:7B:67:5F:39:3B:77:D6:8D:FC:AA:91:DF","sha256":"C0:8F:C7:95:96:3C:18:D4:60:5F:92:EC:FE:5D:AB:58:62:6D:05:D5:A1:3F:B1:EC:B0:88:5F:E3:9E:21:52:BF"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026family=Roboto:wght@400;500;700;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 26 Oct 2025 10:42:41 GMT\r\ndate: Sun, 26 Oct 2025 10:42:41 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32448,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"15173303b8b080c78c8257c34b0980eb","sha1":"a5e46baaac82ae28094821987185fcbfce784870","sha256":"d68715ed279536f09cddc571282f7453129572c5d9b3be369f9c12af05d8d2aa","sha512":"a9a49afcdefd2d64ae9ab313238393870760b965947bf9b53316d3cfa65ae167a993e82880d55a2b4bdf77894219aec9285c2cd5d7e99e617b4304e32b907a30","ssdeep":"768:0JKBLfhQE8YtCR6UfaQ7zfTYHw+fQQVNJBe9m4fGQvXrR:bia0p","tlshash":"afe22d91041b9400ab834cd223cebf39fe8e51557085d0b9abfd5f9bacdbc66426836d","first_seen":"2025-09-11T04:18:38.193737Z","last_seen":"2025-11-18T23:16:02.190004Z","times_seen":60,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":178,"dns":3,"connect":28,"send":0,"wait":47,"receive":0,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:01 GMT","end":"Wed, 24 Dec 2025 14:34:00 GMT"},"fingerprint":{"sha1":"69:C0:F6:2B:DD:5C:EF:2D:13:DF:E4:02:A5:5A:AE:D0:E8:1D:F6:8A","sha256":"04:A4:17:F9:A5:5F:92:F9:2B:AE:63:97:B2:97:F5:38:94:37:06:AB:1B:75:6E:41:16:74:D5:07:D2:08:E3:6C"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://upfion.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Oct 2025 17:26:19 GMT\r\nexpires: Fri, 23 Oct 2026 17:26:19 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nage: 234982\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-29T17:58:21.664377Z","times_seen":855226,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":103,"dns":9,"connect":8,"send":0,"wait":10,"receive":8,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:01 GMT","end":"Wed, 24 Dec 2025 14:34:00 GMT"},"fingerprint":{"sha1":"69:C0:F6:2B:DD:5C:EF:2D:13:DF:E4:02:A5:5A:AE:D0:E8:1D:F6:8A","sha256":"04:A4:17:F9:A5:5F:92:F9:2B:AE:63:97:B2:97:F5:38:94:37:06:AB:1B:75:6E:41:16:74:D5:07:D2:08:E3:6C"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://upfion.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Oct 2025 17:26:19 GMT\r\nexpires: Fri, 23 Oct 2026 17:26:19 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nage: 234982\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-29T17:58:21.664377Z","times_seen":855226,"resource_available":false,"data":null}},"time_used":475,"timings":{"blocked":228,"dns":10,"connect":21,"send":0,"wait":8,"receive":3,"ssl":184},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/favicon.ico","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"104.21.68.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:42.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upfion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:34:05 GMT","end":"Wed, 14 Jan 2026 08:28:51 GMT"},"fingerprint":{"sha1":"20:D1:A7:C4:F3:E3:EA:A5:C0:AD:A5:DB:86:16:0F:2F:96:0A:CA:AD","sha256":"BF:8A:98:BE:A8:6E:7C:FA:E5:50:79:76:3A:CA:AA:02:DF:02:A0:B2:39:42:EC:DA:55:69:D7:FD:B6:B7:71:52"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: upfion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/O44B\r\nCookie: XSRF-TOKEN=eyJpdiI6IkYrSjdqc3YrNjZPKzFtYW4ySTZOTVE9PSIsInZhbHVlIjoibk5GdjdhNG1mTk82Y2lZUktCc2hGYUp6SGhRbzNUT1hQTXMyNGx2enpDdlpTZEtzSmlCQ1FQdXJuYVJSdUZ1b3RwTTAzOWVsMi9oaFp3UkFZaSs1VVljNkc1WGI4Ym9aUnQzZTJQUWJIOW8ybVNrUTc1b3dVWHNSbkpRUkY3S1giLCJtYWMiOiJkOWIyYjIzOWFjYmZiYzEwMWZjM2YxYzI3YTkzOGQ0MjQ4ODUyMmU5NWQ0MDMxNTFhMzUwZDUyZThlNWVmYjIwIiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6IklWZU1MbDFHNDVVTThFMEhFM1gvWWc9PSIsInZhbHVlIjoibVh4V1BqZ0dIL1VUUzVpVC9qbGI1VzVON0x3M2V5K3oxNlFIckwwOGJxVDZBbkQ1WXZtRWUzUTJ6bDBZdHZQbVlnclhwTE5mak1jbXJQcXlMZW5sWndMdzNabUc0ZncrcTlBdXRJbHdScDNnTTNLeTc1WWxISEpXaDJ6OERwSHciLCJtYWMiOiJlNWI5MTI3ZjYzYzY0ZmQ1OWIzNzdmYzFlNjI5YjUwMmU5NWFhZDdiNDdmN2I1NjE1M2UwNTFmZjIzYTc0YWRmIiwidGFnIjoiIn0%3D; ab=1; _ga_X2GS5JDQMX=GS2.1.s1761475361$o1$g0$t1761475361$j60$l0$h0; _ga=GA1.1.689819808.1761475362; _ga_75C4L64NEB=GS2.1.s1761475362$o1$g0$t1761475362$j60$l0$h0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 10:42:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\nx-powered-by: PHP/8.2.15\r\nlink: \u003chttps://upfion.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-redirect-by: WordPress\r\nlocation: https://upfion.com/wp-content/uploads/2025/02/cropped-Add-a-heading-28-32x32.png\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VOVmGyQo%2B4%2BLbvVPHxl3TMrGP1pi9O74U4%2BtV9zRDeQEr9Xm6AopfPAPbWbOUc%2B2teqF%2BOjaRG1tMgxvSm2qP4EEO6YQwn421sw%3D\"}]}\r\ncf-ray: 994959359d4d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP:8.2.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1793,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-29T17:58:32.740449Z","times_seen":15879964,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fstatic.netpub.media/extra/cmp/cmp-gdpr.js","fqdn":"fstatic.netpub.media","domain":"netpub.media","tld":"media"},"ip":{"addr":"172.66.167.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:40.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netpub.media","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Oct 2025 00:02:00 GMT","end":"Tue, 20 Jan 2026 01:01:52 GMT"},"fingerprint":{"sha1":"BB:CD:8F:0D:0C:30:CD:75:A8:2E:1F:C6:A0:5C:59:72:AE:04:85:BA","sha256":"0E:B4:16:D9:9C:78:79:4C:DC:15:C0:19:B7:2F:74:94:25:78:44:40:37:EC:DD:50:25:E8:63:4E:95:A6:65:71"}}},"request":{"raw":"GET /extra/cmp/cmp-gdpr.js HTTP/1.1\r\nHost: fstatic.netpub.media\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ndate: Sun, 26 Oct 2025 10:42:41 GMT\r\ncontent-length: 0\r\nlocation: https://gpp.netpub.media/init.js\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 9949592ea8b8dfec-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":739,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-29T17:58:32.740449Z","times_seen":15879964,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":66,"dns":38,"connect":1,"send":0,"wait":8,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orbsdiacle.com/1clkn/34742","fqdn":"orbsdiacle.com","domain":"orbsdiacle.com","tld":"com"},"ip":{"addr":"23.109.253.164","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orbsdiacle.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 01:52:47 GMT","end":"Fri, 02 Jan 2026 01:52:46 GMT"},"fingerprint":{"sha1":"06:C6:C0:08:5E:38:74:FA:8E:21:5E:EB:8F:CF:83:D5:B2:4E:7A:C3","sha256":"56:3B:E5:AF:9C:FF:D3:4E:AB:F9:9B:75:F5:13:92:DE:D3:30:76:32:47:9A:BA:99:BA:98:0D:E9:C9:3A:82:15"}}},"request":{"raw":"GET /1clkn/34742 HTTP/1.1\r\nHost: orbsdiacle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 26 Oct 2025 10:42:41 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\nset-cookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; expires=Mon, 27-Oct-2025 10:42:41 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJwViD0LglAYRu99ESGS4gGHRpdW0VLBJSTndGhoaBILEcRXrtrH1F9pb4r%2BVWtTWzacA%2BcIIcicgsoGRujaoWN7C9v1PcgClKSgvIaesDpnV0gFcpYgVWOcthVbMfd1N%2Fwc2r8hS0zWVXmxtlz1Xcl1CxoYxawaVll3hGx0Cer47%2FZgCsiTPgNVmRFtPu9Xcf8OwUY0vz33u9UD1LTQHD8IfrcSKq4%3D; expires=Mon, 27-Oct-2025 10:42:41 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"9082dc37e5e8046929da411544ad071a","sha1":"41e0e3963ed94e59e8a2f115994c382712411537","sha256":"b7848d86edc8dc3b5bc6a5c666069f9a31e000cee51575d3b6083951607e1550","sha512":"8c7a47aba28936b7fb4083892dfc8643afe90452d6cc789f5f8562ebeb253000ba0dc23f35af988b9288afa32d701fd8c3e95f9b0966f3789dc269f393f6b039","ssdeep":"","tlshash":"714000000000000000000000f00000000000000000000c00c000000000000000000000","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-05-29T13:13:38.635831Z","times_seen":16186,"resource_available":true,"data":null}},"time_used":413,"timings":{"blocked":190,"dns":159,"connect":17,"send":0,"wait":22,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"orbsdiacle.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-X2GS5JDQMX","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:32:12 GMT","end":"Wed, 24 Dec 2025 14:32:11 GMT"},"fingerprint":{"sha1":"C1:75:0D:E5:E8:4D:AC:7F:C9:7A:40:D5:6C:2B:22:CE:ED:8F:6D:BB","sha256":"63:AB:E3:89:62:5A:B4:D8:9D:D3:5C:77:AE:75:C5:DE:49:CE:BA:43:6B:22:49:EF:48:59:47:A7:0E:75:FF:C2"}}},"request":{"raw":"GET /gtag/js?id=G-X2GS5JDQMX HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 26 Oct 2025 10:42:41 GMT\r\nexpires: Sun, 26 Oct 2025 10:42:41 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 128462\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":369465,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"e494b48e4e6aed4d2196a0d47213f28a","sha1":"9f52866ee917b5241dd48c855300060f3eced9af","sha256":"b50540b66217615771721863f472219050ed43de8fc0d814e5afc46f7ddaa9c0","sha512":"f08edce7a77a4d378f37be33e004bb72d97b6f46b241e5414a558b2fb56abcff310ed8ea31802adb652ea3fc1effcbedc8604eb8353f27874d43c94a775760f3","ssdeep":"6144:UPyJBX168429Z8nP57wr/s0s/+Kxxc20hYlqVsKlhDjOC:JJBlg29Z8nP58DG/mYl2H","tlshash":"077418cd73d670669392e478503f118ba57b29a2f84cc895f186cce42e74a9a4277f3c","first_seen":"2025-10-26T10:43:05.857389Z","last_seen":"2025-10-26T10:43:05.857389Z","times_seen":1,"resource_available":true,"data":null}},"time_used":368,"timings":{"blocked":129,"dns":0,"connect":15,"send":0,"wait":47,"receive":48,"ssl":126},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.mastinstungmoreal.com/static/9cb58b5eb2422c8f734769e7cf0146cf.min.js?1761475361334","fqdn":"st.mastinstungmoreal.com","domain":"mastinstungmoreal.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastinstungmoreal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 00:26:52 GMT","end":"Thu, 22 Jan 2026 01:26:46 GMT"},"fingerprint":{"sha1":"7A:CB:6E:D9:FE:7B:46:16:AE:45:0B:1B:E5:3B:71:45:4E:5C:0B:63","sha256":"0F:99:7A:8F:5B:F9:0C:0E:D5:7D:80:94:47:60:B8:8B:80:7D:F5:9E:3D:09:FA:28:C2:6E:0D:AF:C9:2B:BF:53"}}},"request":{"raw":"GET /static/9cb58b5eb2422c8f734769e7cf0146cf.min.js?1761475361334 HTTP/1.1\r\nHost: st.mastinstungmoreal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 26 Oct 2025 10:42:41 GMT\r\ncontent-length: 0\r\nlocation: https://st.mastinstungmoreal.com/r/9cb58b5eb2422c8f734769e7cf0146cf/service.js\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AO0XOMR36H24i%2BkLp4RJ5%2B3QEZ5sXVo8FU9KlutwrNO1XFT9EyU2w%2FZIBydX4XpmsrlVG%2BxrRewQVN1uzzcWpJY8dSqz2S9jJjkAxX4qlmmleIJKEtsb%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 994959315e198deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-29T17:58:32.740449Z","times_seen":15879964,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":94,"dns":31,"connect":2,"send":0,"wait":5,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.mastinstungmoreal.com/r/9cb58b5eb2422c8f734769e7cf0146cf/service.js","fqdn":"st.mastinstungmoreal.com","domain":"mastinstungmoreal.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastinstungmoreal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 00:26:52 GMT","end":"Thu, 22 Jan 2026 01:26:46 GMT"},"fingerprint":{"sha1":"7A:CB:6E:D9:FE:7B:46:16:AE:45:0B:1B:E5:3B:71:45:4E:5C:0B:63","sha256":"0F:99:7A:8F:5B:F9:0C:0E:D5:7D:80:94:47:60:B8:8B:80:7D:F5:9E:3D:09:FA:28:C2:6E:0D:AF:C9:2B:BF:53"}}},"request":{"raw":"GET /r/9cb58b5eb2422c8f734769e7cf0146cf/service.js HTTP/1.1\r\nHost: st.mastinstungmoreal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://upfion.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 26 Oct 2025 10:42:41 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 11 Apr 2022 19:57:13 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OsXzsdOidSBTtqPQGNP9EW0SDJAb1sQcPans9Tjtc9IeOo6FCi5dUjYx4A3drBrqnwoUAyJwijkzKOYFrSey1Cx7npxvxJ8Tql8bG3rq%2FaxOpEhwAnRRcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99495932efb2c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-29T17:58:32.740449Z","times_seen":15879964,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/O44B","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"104.21.68.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-26T10:42:39.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upfion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:34:05 GMT","end":"Wed, 14 Jan 2026 08:28:51 GMT"},"fingerprint":{"sha1":"20:D1:A7:C4:F3:E3:EA:A5:C0:AD:A5:DB:86:16:0F:2F:96:0A:CA:AD","sha256":"BF:8A:98:BE:A8:6E:7C:FA:E5:50:79:76:3A:CA:AA:02:DF:02:A0:B2:39:42:EC:DA:55:69:D7:FD:B6:B7:71:52"}}},"request":{"raw":"GET /O44B HTTP/1.1\r\nHost: upfion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImNocTYwdEFRVFc0TVdZbmtxd2hoc0E9PSIsInZhbHVlIjoiZkxISURhdWFRTk05MWNrU2NpTy8xOUNNVWNIQytnQU9LRHBtaVYzK2N1S3FVWk1tdmcwdmFwdkpzMHk5Ym5zdVN5d1FFdmJNSkJoNzllbkR6V0kvT056T2NmOGNoREJHSE1mQkJYa3dRMWlQL0Jqb0piWS96UXlySkZKcFpBRkIiLCJtYWMiOiIzZmVjZmY3NmRiYjBlZWVhY2Y0ODMxZTQwMjFhZTBlZWM3NWNmNDZjYTNiY2YwY2I5OTM3YjVlZjNhYWVjMzhiIiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6IlpXbzlLTWhUR0ZVTE1qSWVCbmtTNWc9PSIsInZhbHVlIjoiOHpDdUk2dzhjTFpwQWdvSitWbkxub2sxWjNUWk5rc2JMZzlYTDJCMjV1MnJUTjdYRkpWK0NxSmZMWkZBUEYzOG9iK0VXdTF2K1dSTjZPMGNqVWRNMlU2RitscjVKWEpvdkVtOTdSYkdyQmordXBlbUtlc0FUb3RtZit5Ui9PWUQiLCJtYWMiOiIyNTcyNjJjOWY2ZDgwMzNjZGYzMTJhODI1NTFhNDRhZWYwYWMzMjQyZjI4ZjMyNDNjNWQzNjRlNmM5NGYzYzg1IiwidGFnIjoiIn0%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 10:42:40 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4UJqD%2BUS018M6DRN7uNfJ5vop0TmFl54A6b6VV%2F5GKWg6qxQHWn82vCydS5xbdgSiA8eJEvO%2FlgVQpbt1fjsbOLC9XKABWca\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkYrSjdqc3YrNjZPKzFtYW4ySTZOTVE9PSIsInZhbHVlIjoibk5GdjdhNG1mTk82Y2lZUktCc2hGYUp6SGhRbzNUT1hQTXMyNGx2enpDdlpTZEtzSmlCQ1FQdXJuYVJSdUZ1b3RwTTAzOWVsMi9oaFp3UkFZaSs1VVljNkc1WGI4Ym9aUnQzZTJQUWJIOW8ybVNrUTc1b3dVWHNSbkpRUkY3S1giLCJtYWMiOiJkOWIyYjIzOWFjYmZiYzEwMWZjM2YxYzI3YTkzOGQ0MjQ4ODUyMmU5NWQ0MDMxNTFhMzUwZDUyZThlNWVmYjIwIiwidGFnIjoiIn0%3D; SameSite=Lax; Path=/; Max-Age=604800; Expires=Sun, 02 Nov 2025 10:42:40 GMT\nupfiles_session=eyJpdiI6IklWZU1MbDFHNDVVTThFMEhFM1gvWWc9PSIsInZhbHVlIjoibVh4V1BqZ0dIL1VUUzVpVC9qbGI1VzVON0x3M2V5K3oxNlFIckwwOGJxVDZBbkQ1WXZtRWUzUTJ6bDBZdHZQbVlnclhwTE5mak1jbXJQcXlMZW5sWndMdzNabUc0ZncrcTlBdXRJbHdScDNnTTNLeTc1WWxISEpXaDJ6OERwSHciLCJtYWMiOiJlNWI5MTI3ZjYzYzY0ZmQ1OWIzNzdmYzFlNjI5YjUwMmU5NWFhZDdiNDdmN2I1NjE1M2UwNTFmZjIzYTc0YWRmIiwidGFnIjoiIn0%3D; HttpOnly; SameSite=Lax; Path=/; Max-Age=604800; Expires=Sun, 02 Nov 2025 10:42:40 GMT\r\ncf-ray: 994959271856b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":26850,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (975), with CRLF, LF line terminators","md5":"2c070d1a3ad9b70a84f3ebd556f2eb09","sha1":"935bc93ba64633b31e89f6e5410900bbe9adf7d5","sha256":"bb8eaead300077bc8d5cee567bcc2db6b3e91b9a9e6723fff1557d8fff259a5a","sha512":"f9e7c3154b8d418ce0f9eb4ca4bd1ba7ec592accb974b9e2203a31aada28b82261e6bda85038a9815c82d6a3c64179441988629f3e365e075f10665fc7554376","ssdeep":"768:4TCyAK4YB8Vp4UJgjFnaaOwZnLWVrfI1nd/u9T27goppg7Bksz28htsk+Ow2:zyAK4YB8lrygWow2","tlshash":"17c2092b3de4213a978301c4bb60f71fee269113c64a4445b0ed4a8a3f53ed75d6b4ae","first_seen":"2025-10-26T10:43:05.858672Z","last_seen":"2025-10-26T10:43:05.858672Z","times_seen":1,"resource_available":false,"data":null}},"time_used":918,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":918,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/js/ads.js","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"104.21.68.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upfion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:34:05 GMT","end":"Wed, 14 Jan 2026 08:28:51 GMT"},"fingerprint":{"sha1":"20:D1:A7:C4:F3:E3:EA:A5:C0:AD:A5:DB:86:16:0F:2F:96:0A:CA:AD","sha256":"BF:8A:98:BE:A8:6E:7C:FA:E5:50:79:76:3A:CA:AA:02:DF:02:A0:B2:39:42:EC:DA:55:69:D7:FD:B6:B7:71:52"}}},"request":{"raw":"GET /js/ads.js HTTP/1.1\r\nHost: upfion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/O44B\r\nCookie: XSRF-TOKEN=eyJpdiI6IkYrSjdqc3YrNjZPKzFtYW4ySTZOTVE9PSIsInZhbHVlIjoibk5GdjdhNG1mTk82Y2lZUktCc2hGYUp6SGhRbzNUT1hQTXMyNGx2enpDdlpTZEtzSmlCQ1FQdXJuYVJSdUZ1b3RwTTAzOWVsMi9oaFp3UkFZaSs1VVljNkc1WGI4Ym9aUnQzZTJQUWJIOW8ybVNrUTc1b3dVWHNSbkpRUkY3S1giLCJtYWMiOiJkOWIyYjIzOWFjYmZiYzEwMWZjM2YxYzI3YTkzOGQ0MjQ4ODUyMmU5NWQ0MDMxNTFhMzUwZDUyZThlNWVmYjIwIiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6IklWZU1MbDFHNDVVTThFMEhFM1gvWWc9PSIsInZhbHVlIjoibVh4V1BqZ0dIL1VUUzVpVC9qbGI1VzVON0x3M2V5K3oxNlFIckwwOGJxVDZBbkQ1WXZtRWUzUTJ6bDBZdHZQbVlnclhwTE5mak1jbXJQcXlMZW5sWndMdzNabUc0ZncrcTlBdXRJbHdScDNnTTNLeTc1WWxISEpXaDJ6OERwSHciLCJtYWMiOiJlNWI5MTI3ZjYzYzY0ZmQ1OWIzNzdmYzFlNjI5YjUwMmU5NWFhZDdiNDdmN2I1NjE1M2UwNTFmZjIzYTc0YWRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 10:42:41 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OEKsb2ik7kP7xuq8dOn7FbgBgagUT7640ZlrGzDK3%2FuH4BAh%2BkwFK1TNbJAgphU5Otfo6%2BmsAPVJSd6sA16GFvyNx%2BXvsWfHcuo%3D\"}]}\r\nlast-modified: Thu, 28 Nov 2024 12:18:07 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nage: 7029\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\netag: W/\"67485f7f-5db\"\r\ncf-ray: 9949592e3b8d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1499,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1499), with no line terminators","md5":"cfda8d31536e90428f6d37f17590d92d","sha1":"c161162410c27db721479da020406e9e56a8b851","sha256":"d92d2a6719b8462f29f2c9dc8f7c84be379feb798fdcc85ddade83fbb8fb2a45","sha512":"97739f1e2dfcf12521374f3efae56d7e24b6e8010b4bda3046e44088d2b690603c40a2c2a0431034f426d9337b6181969f3aa74f2c5d8ce093e1e9856f7cf2ce","ssdeep":"","tlshash":"1a31cb582ea0aab8334303d6772f64d8f532dd5628b28d0cd021ee95fc08a34d5abe31","first_seen":"2024-11-30T23:21:10.233947Z","last_seen":"2026-03-04T04:55:38.593842Z","times_seen":263,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bvtpk.com/tag.min.js","fqdn":"bvtpk.com","domain":"bvtpk.com","tld":"com"},"ip":{"addr":"104.21.5.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bvtpk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 16:15:33 GMT","end":"Mon, 08 Dec 2025 17:13:51 GMT"},"fingerprint":{"sha1":"57:53:1B:12:8D:B5:A7:B6:96:E2:B4:FE:90:A1:D8:FA:24:94:9A:B9","sha256":"4E:2A:10:4F:06:F6:4E:34:B3:5A:E6:9B:A2:C7:FC:B2:A4:7D:55:44:3D:06:2B:38:35:A7:52:1D:F2:4E:80:5E"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: bvtpk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 10:42:41 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-trace-id: a50e37993b6e5f9f91e58bf619717225\r\ncache-control: public, max-age=600, s-maxage=1800\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 834\r\ncf-cache-status: HIT\r\nlast-modified: Sun, 26 Oct 2025 10:28:46 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fAk%2FN2PvOgCIsrNWaEuFfQvLiDUpXBgAMPRAm1d8Y197oN0kLR0F9P5yPGCUuLvgt2OMDx%2BDpVhlxN%2BpkG3kLxUe6dZvLJ8aUQ%3D%3D\"}]}\r\ncf-ray: 99495930eaa723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109979,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"10d8bad8c093af07d850629927873cdf","sha1":"d335311ccd25f25515ea85e51118f24ca62736be","sha256":"50adcdb0e1851d533fb15181263b136d8f7f6bb1efe8ed046cbb6cc0c26a00b6","sha512":"56a2ab6c79a5a92ee9e2b66938f5d83cb5b33d1a8ed39047d37d067e237aa824574aa8cb0f90c37ae97df6d9194d25b04043c8b95e55f943e5acbf5242ab7ca5","ssdeep":"1536:IMukxpFON+nJivD2eJXWBTNbaZeCm68L3b7Az0SAF9Q4+DIVVIBUCn:3uCFOqJQDBBWx6eCm68W0SI9z34UCn","tlshash":"a0b33bda2266241612bf8034445bdd0db5aecd8104cdcdb8e0e6b8662d78b16d3fbfd9","first_seen":"2025-10-25T23:06:37.146858Z","last_seen":"2025-10-26T18:07:23.892619Z","times_seen":37,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":29,"dns":20,"connect":1,"send":0,"wait":18,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/images/arrow-down.png?c98e5283a69cb508d054d30256af43c6","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"104.21.68.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upfion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:34:05 GMT","end":"Wed, 14 Jan 2026 08:28:51 GMT"},"fingerprint":{"sha1":"20:D1:A7:C4:F3:E3:EA:A5:C0:AD:A5:DB:86:16:0F:2F:96:0A:CA:AD","sha256":"BF:8A:98:BE:A8:6E:7C:FA:E5:50:79:76:3A:CA:AA:02:DF:02:A0:B2:39:42:EC:DA:55:69:D7:FD:B6:B7:71:52"}}},"request":{"raw":"GET /images/arrow-down.png?c98e5283a69cb508d054d30256af43c6 HTTP/1.1\r\nHost: upfion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/css/frontend.css?id=d2ff22fb187252e60fbb\r\nCookie: XSRF-TOKEN=eyJpdiI6IkYrSjdqc3YrNjZPKzFtYW4ySTZOTVE9PSIsInZhbHVlIjoibk5GdjdhNG1mTk82Y2lZUktCc2hGYUp6SGhRbzNUT1hQTXMyNGx2enpDdlpTZEtzSmlCQ1FQdXJuYVJSdUZ1b3RwTTAzOWVsMi9oaFp3UkFZaSs1VVljNkc1WGI4Ym9aUnQzZTJQUWJIOW8ybVNrUTc1b3dVWHNSbkpRUkY3S1giLCJtYWMiOiJkOWIyYjIzOWFjYmZiYzEwMWZjM2YxYzI3YTkzOGQ0MjQ4ODUyMmU5NWQ0MDMxNTFhMzUwZDUyZThlNWVmYjIwIiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6IklWZU1MbDFHNDVVTThFMEhFM1gvWWc9PSIsInZhbHVlIjoibVh4V1BqZ0dIL1VUUzVpVC9qbGI1VzVON0x3M2V5K3oxNlFIckwwOGJxVDZBbkQ1WXZtRWUzUTJ6bDBZdHZQbVlnclhwTE5mak1jbXJQcXlMZW5sWndMdzNabUc0ZncrcTlBdXRJbHdScDNnTTNLeTc1WWxISEpXaDJ6OERwSHciLCJtYWMiOiJlNWI5MTI3ZjYzYzY0ZmQ1OWIzNzdmYzFlNjI5YjUwMmU5NWFhZDdiNDdmN2I1NjE1M2UwNTFmZjIzYTc0YWRmIiwidGFnIjoiIn0%3D; ab=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 10:42:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 208\r\nlast-modified: Sat, 28 Sep 2024 07:01:06 GMT\r\netag: \"66f7a9b2-d0\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nage: 4100\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ywvb7%2BnqxhPo2B9cFLapddV97Zwr2TUQZ9Ed9acvJ3Kyf8LnvCRPePHRVHe1zOY2A56gHoEEt3GdC18%2B2Xbe76jIKfwblaH3mU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 994959311c2d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":208,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 6 x 12, 8-bit/color RGBA, non-interlaced","md5":"31f073499665afb237f3294219d2d7c6","sha1":"c1ada0510e31f661dab66203c15a3d6c8f5468d0","sha256":"59b7ad6d6f457b624e25d22959edc7c83af2ac52edba32fd6648c97af0d1780c","sha512":"3204c81e9b3a996189afdd5011824b6bf7de8c9ee32d0f9893c2c42e15d01cb2b9957ae747739d5f25f1d5e6464228127495907229d53bd3c3dacf0fdc376efd","ssdeep":"","tlshash":"56d023cf1f5e4cbde54d547655379070746b5b6a4445c5066550745511164ec13c7340","first_seen":"2023-05-03T01:43:27Z","last_seen":"2026-02-11T20:26:43.617438Z","times_seen":1328,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:01 GMT","end":"Wed, 24 Dec 2025 14:34:00 GMT"},"fingerprint":{"sha1":"69:C0:F6:2B:DD:5C:EF:2D:13:DF:E4:02:A5:5A:AE:D0:E8:1D:F6:8A","sha256":"04:A4:17:F9:A5:5F:92:F9:2B:AE:63:97:B2:97:F5:38:94:37:06:AB:1B:75:6E:41:16:74:D5:07:D2:08:E3:6C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://upfion.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 21 Oct 2025 23:36:12 GMT\r\nexpires: Wed, 21 Oct 2026 23:36:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 385589\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-05-29T18:00:11.687349Z","times_seen":196612,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":233,"dns":0,"connect":25,"send":0,"wait":8,"receive":3,"ssl":197},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 13:14:02 GMT","end":"Wed, 26 Nov 2025 14:13:48 GMT"},"fingerprint":{"sha1":"7A:B2:21:7F:72:E3:39:3E:95:5D:FB:ED:BB:1C:7E:88:C4:7A:B1:B3","sha256":"FB:1D:6D:AF:DA:57:8D:9A:8B:B2:CC:FF:A2:55:C8:F3:71:3D:49:77:06:FC:4D:6F:16:91:61:6F:89:1C:A3:CB"}}},"request":{"raw":"GET /gid.js HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://upfion.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 10:42:41 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://upfion.com\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=08026e0fe68340cce88e5add2860b942; expires=Mon, 26 Oct 2026 10:42:41 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 994959321a7db4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d585821a3e1ab45fa43560123857ae37","sha1":"9d8f9af742512a2ab7fc65b6a74a6d6c0fa83fd1","sha256":"e3db219ba8a98d278c39226f8791559076296c0647bb4447b7294f16d23cf0bb","sha512":"9046a6729d3412aea9855d387cc7d5f2129a0350f78cc986d663d29bcf13d76fdecae8d390d40124dd42815076541ee82300f577f5b8f770f5dd5e465468ded6","ssdeep":"","tlshash":"31a02200000808a300a02e282803c3c2c0032202280002888aeec0e0028280c0200b28","first_seen":"2025-10-26T10:43:05.861782Z","last_seen":"2025-10-26T10:43:05.861782Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":26,"dns":1,"connect":1,"send":0,"wait":35,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.mastinstungmoreal.com/r/9cb58b5eb2422c8f734769e7cf0146cf/service.js","fqdn":"st.mastinstungmoreal.com","domain":"mastinstungmoreal.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastinstungmoreal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Oct 2025 00:26:52 GMT","end":"Thu, 22 Jan 2026 01:26:46 GMT"},"fingerprint":{"sha1":"7A:CB:6E:D9:FE:7B:46:16:AE:45:0B:1B:E5:3B:71:45:4E:5C:0B:63","sha256":"0F:99:7A:8F:5B:F9:0C:0E:D5:7D:80:94:47:60:B8:8B:80:7D:F5:9E:3D:09:FA:28:C2:6E:0D:AF:C9:2B:BF:53"}}},"request":{"raw":"GET /r/9cb58b5eb2422c8f734769e7cf0146cf/service.js HTTP/1.1\r\nHost: st.mastinstungmoreal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://upfion.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 26 Oct 2025 10:42:41 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 11 Apr 2022 19:57:13 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RF%2FOWUMezmNHTQY%2BOEN1cp5gxMIDuKTcRMjoZ5DcCGGO2NmkA3o7DuYSINxLkxLzHJnY4Pnnf9rgPB%2FKLw%2BDWdtZByTUzJ2xJ9cGw5KKFP%2FS6CWOvILQgA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 99495932ef86c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-29T17:58:32.740449Z","times_seen":15879964,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/wp-content/uploads/2025/02/cropped-Add-a-heading-28-32x32.png","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"104.21.68.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:42.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upfion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:34:05 GMT","end":"Wed, 14 Jan 2026 08:28:51 GMT"},"fingerprint":{"sha1":"20:D1:A7:C4:F3:E3:EA:A5:C0:AD:A5:DB:86:16:0F:2F:96:0A:CA:AD","sha256":"BF:8A:98:BE:A8:6E:7C:FA:E5:50:79:76:3A:CA:AA:02:DF:02:A0:B2:39:42:EC:DA:55:69:D7:FD:B6:B7:71:52"}}},"request":{"raw":"GET /wp-content/uploads/2025/02/cropped-Add-a-heading-28-32x32.png HTTP/1.1\r\nHost: upfion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://upfion.com/O44B\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkYrSjdqc3YrNjZPKzFtYW4ySTZOTVE9PSIsInZhbHVlIjoibk5GdjdhNG1mTk82Y2lZUktCc2hGYUp6SGhRbzNUT1hQTXMyNGx2enpDdlpTZEtzSmlCQ1FQdXJuYVJSdUZ1b3RwTTAzOWVsMi9oaFp3UkFZaSs1VVljNkc1WGI4Ym9aUnQzZTJQUWJIOW8ybVNrUTc1b3dVWHNSbkpRUkY3S1giLCJtYWMiOiJkOWIyYjIzOWFjYmZiYzEwMWZjM2YxYzI3YTkzOGQ0MjQ4ODUyMmU5NWQ0MDMxNTFhMzUwZDUyZThlNWVmYjIwIiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6IklWZU1MbDFHNDVVTThFMEhFM1gvWWc9PSIsInZhbHVlIjoibVh4V1BqZ0dIL1VUUzVpVC9qbGI1VzVON0x3M2V5K3oxNlFIckwwOGJxVDZBbkQ1WXZtRWUzUTJ6bDBZdHZQbVlnclhwTE5mak1jbXJQcXlMZW5sWndMdzNabUc0ZncrcTlBdXRJbHdScDNnTTNLeTc1WWxISEpXaDJ6OERwSHciLCJtYWMiOiJlNWI5MTI3ZjYzYzY0ZmQ1OWIzNzdmYzFlNjI5YjUwMmU5NWFhZDdiNDdmN2I1NjE1M2UwNTFmZjIzYTc0YWRmIiwidGFnIjoiIn0%3D; ab=2; _ga_X2GS5JDQMX=GS2.1.s1761475361$o1$g0$t1761475361$j60$l0$h0; _ga=GA1.1.689819808.1761475362; _ga_75C4L64NEB=GS2.1.s1761475362$o1$g0$t1761475362$j60$l0$h0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 10:42:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 1793\r\nlast-modified: Sun, 23 Feb 2025 18:56:19 GMT\r\netag: \"701-62ed3c775e9cc\"\r\naccept-ranges: bytes\r\nage: 6755\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pt%2Fc7COsYk9laxFHsqzwyNJlNsFmM9FNtrMTnibFoSp%2BU0wJkstfRmyBUlgRm9qSFwEqI23xqGMcGPVdMEuLZJelpTo4oFd0wis%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 994959392db249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1793,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"15bb3649bd37d8bc93f009e8d9bb7cb5","sha1":"08c30dcea1a2d845e36ae2a413d4d4db00d506e3","sha256":"f813406101c46d6450d337ee018b2d780a978ca041fd3e782952bcb817a750b7","sha512":"aa35ec2c7b00826affa3089c75f0b17a6f89d1ba3fe333079f7ae349adb9cd083602899bbbd98e138b12688674d454c775712e9521d7a5aeeefb1c8613e773ae","ssdeep":"","tlshash":"d1310982966831e92a66c5d21ce86b817f025c608c4ab41efbeb70dee20c98c41b2563","first_seen":"2025-02-26T19:27:53.194758Z","last_seen":"2026-04-11T09:04:52.30262Z","times_seen":107,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/css/frontend.css?id=d2ff22fb187252e60fbb","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"104.21.68.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:40.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upfion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:34:05 GMT","end":"Wed, 14 Jan 2026 08:28:51 GMT"},"fingerprint":{"sha1":"20:D1:A7:C4:F3:E3:EA:A5:C0:AD:A5:DB:86:16:0F:2F:96:0A:CA:AD","sha256":"BF:8A:98:BE:A8:6E:7C:FA:E5:50:79:76:3A:CA:AA:02:DF:02:A0:B2:39:42:EC:DA:55:69:D7:FD:B6:B7:71:52"}}},"request":{"raw":"GET /css/frontend.css?id=d2ff22fb187252e60fbb HTTP/1.1\r\nHost: upfion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/O44B\r\nCookie: XSRF-TOKEN=eyJpdiI6IkYrSjdqc3YrNjZPKzFtYW4ySTZOTVE9PSIsInZhbHVlIjoibk5GdjdhNG1mTk82Y2lZUktCc2hGYUp6SGhRbzNUT1hQTXMyNGx2enpDdlpTZEtzSmlCQ1FQdXJuYVJSdUZ1b3RwTTAzOWVsMi9oaFp3UkFZaSs1VVljNkc1WGI4Ym9aUnQzZTJQUWJIOW8ybVNrUTc1b3dVWHNSbkpRUkY3S1giLCJtYWMiOiJkOWIyYjIzOWFjYmZiYzEwMWZjM2YxYzI3YTkzOGQ0MjQ4ODUyMmU5NWQ0MDMxNTFhMzUwZDUyZThlNWVmYjIwIiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6IklWZU1MbDFHNDVVTThFMEhFM1gvWWc9PSIsInZhbHVlIjoibVh4V1BqZ0dIL1VUUzVpVC9qbGI1VzVON0x3M2V5K3oxNlFIckwwOGJxVDZBbkQ1WXZtRWUzUTJ6bDBZdHZQbVlnclhwTE5mak1jbXJQcXlMZW5sWndMdzNabUc0ZncrcTlBdXRJbHdScDNnTTNLeTc1WWxISEpXaDJ6OERwSHciLCJtYWMiOiJlNWI5MTI3ZjYzYzY0ZmQ1OWIzNzdmYzFlNjI5YjUwMmU5NWFhZDdiNDdmN2I1NjE1M2UwNTFmZjIzYTc0YWRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 10:42:40 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gIZg5DsBMTlSuCHcyyO3HDtnR2bWwwhtcNssHEV9s4CIOfVjVDkV4TZl1DLW7czQJaoCTaAXpEIw9%2FyhUvMnaPkQmSoIoEt0kWM%3D\"}]}\r\nlast-modified: Sun, 29 Sep 2024 07:44:34 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nage: 705\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\netag: W/\"66f90562-3f92a\"\r\ncf-ray: 9949592e2b8849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":260394,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59910)","md5":"d2ff22fb187252e60fbb52e57a64d23a","sha1":"2272fb2bcae1f21a225a487975a976f631cc34e6","sha256":"f72739ecbc1c32fa446c33a271c8eb262503e62e2f38d230ab29518a88871643","sha512":"616f4be209693c1922715032ef406bfc5d63775a770c7ae543778c46c5f158abf914eb55d0e124112b05c5b16be4b734d2b3e958a8aa5e2626ac3da03484020f","ssdeep":"6144:hPx0yFTO0PY5pje60I4P1YAFcf61WyTqvAt:NOyFTSM1qZAt","tlshash":"ba4484e6f14420d9b777c50bab81bbbc157af619d2424e6af00b2f6c8ac13d60592f5c","first_seen":"2024-07-24T00:00:42Z","last_seen":"2025-12-06T07:16:32.073849Z","times_seen":250,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/js/frontend.js?id=a9ead52fa97a2708e6e9","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"104.21.68.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/O44B","date":"2025-10-26T10:42:41.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upfion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 07:34:05 GMT","end":"Wed, 14 Jan 2026 08:28:51 GMT"},"fingerprint":{"sha1":"20:D1:A7:C4:F3:E3:EA:A5:C0:AD:A5:DB:86:16:0F:2F:96:0A:CA:AD","sha256":"BF:8A:98:BE:A8:6E:7C:FA:E5:50:79:76:3A:CA:AA:02:DF:02:A0:B2:39:42:EC:DA:55:69:D7:FD:B6:B7:71:52"}}},"request":{"raw":"GET /js/frontend.js?id=a9ead52fa97a2708e6e9 HTTP/1.1\r\nHost: upfion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/O44B\r\nCookie: XSRF-TOKEN=eyJpdiI6IkYrSjdqc3YrNjZPKzFtYW4ySTZOTVE9PSIsInZhbHVlIjoibk5GdjdhNG1mTk82Y2lZUktCc2hGYUp6SGhRbzNUT1hQTXMyNGx2enpDdlpTZEtzSmlCQ1FQdXJuYVJSdUZ1b3RwTTAzOWVsMi9oaFp3UkFZaSs1VVljNkc1WGI4Ym9aUnQzZTJQUWJIOW8ybVNrUTc1b3dVWHNSbkpRUkY3S1giLCJtYWMiOiJkOWIyYjIzOWFjYmZiYzEwMWZjM2YxYzI3YTkzOGQ0MjQ4ODUyMmU5NWQ0MDMxNTFhMzUwZDUyZThlNWVmYjIwIiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6IklWZU1MbDFHNDVVTThFMEhFM1gvWWc9PSIsInZhbHVlIjoibVh4V1BqZ0dIL1VUUzVpVC9qbGI1VzVON0x3M2V5K3oxNlFIckwwOGJxVDZBbkQ1WXZtRWUzUTJ6bDBZdHZQbVlnclhwTE5mak1jbXJQcXlMZW5sWndMdzNabUc0ZncrcTlBdXRJbHdScDNnTTNLeTc1WWxISEpXaDJ6OERwSHciLCJtYWMiOiJlNWI5MTI3ZjYzYzY0ZmQ1OWIzNzdmYzFlNjI5YjUwMmU5NWFhZDdiNDdmN2I1NjE1M2UwNTFmZjIzYTc0YWRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 26 Oct 2025 10:42:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rrpGlc6IA50DyYzNmJyAd8IGaTtVitw7hOUoOiy%2BHQzYGndQy9ptDrDKT36MYZtz0yJ1DX9csBRjdfW8BLiZXpytgzQyZaXpXFs%3D\"}]}\r\nlast-modified: Thu, 28 Nov 2024 12:18:07 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nage: 4101\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\netag: W/\"67485f7f-15c64d\"\r\ncf-ray: 9949592e3b8e49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427021,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"366594a9252c866bea715b80eb561c7c","sha1":"b8c527cc2dcdfae98e3e55e99acd8c02e3f542f8","sha256":"a50258785ef4e58993ddd68cfe82e46594fea95abe6135281f1936c3cd0bf949","sha512":"eaf7e502525ce7ec0e18600b60804980c4848e5d47b83bfdd9c94e49b92f55a0703089c4f46459463b16a9c95137c70110532f72966e5cc782549cf8a2653ed1","ssdeep":"24576:QaQbgvThYzoRcckPLNKdL4BgbOe5Je+VMCs7wFlkJD:bQbg7hYzoRccuLNKdL4BEOe5Je+MOFlK","tlshash":"0525934077c0a858138b9f79731fb5e6f85a0caf3c88484fe115fca065a9627fae5931","first_seen":"2025-07-27T23:41:32.88728Z","last_seen":"2025-12-06T07:16:32.076069Z","times_seen":120,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}