{"report_id":"63f777a1-8ad2-4d79-9ef7-2c425a74baa2","version":6,"status":"done","tags":[],"date":"2025-11-29T13:28:03Z","url":{"schema":"http","addr":"a.pleasurefindyou.info/","fqdn":"a.pleasurefindyou.info","domain":"pleasurefindyou.info","tld":"info"},"ip":{"addr":"185.150.189.124","port":0,"asn":23470,"as":"RELIABLESITE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","fqdn":"api.bytelift.icu","domain":"bytelift.icu","tld":"icu"},"title":"Secure File Download","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"a.pleasurefindyou.info/","fqdn":"a.pleasurefindyou.info","domain":"pleasurefindyou.info","tld":"info"},"ip":{"addr":"185.150.189.124","port":0,"asn":23470,"as":"RELIABLESITE","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-03T13:28:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-11-29T13:27:42Z","timestamp":1764422862,"ip_dst":{"addr":"172.67.187.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.33","port":33772,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2025-11-29T13:27:42.575833+0000\",\"flow_id\":311294746865438,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.33\",\"src_port\":33772,\"dest_ip\":\"172.67.187.158\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"bytelift.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3444,\"start\":\"2025-11-29T13:27:42.569118+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-29","alert":"Sinkholed","trigger":"approximum.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-29","alert":"Sinkholed","trigger":"a.pleasurefindyou.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-29","alert":"Sinkholed","trigger":"eastrk-dn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"code.jquery.com","ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-11-23T22:21:16.594946Z","alert_count":0,"request_count":1,"received_data":70858,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"ipv6.whatismyip.akamai.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"1998-08-17","domain_rank":1637401,"first_seen":"2025-05-08T04:27:43.267728Z","last_seen":"2025-11-28T16:37:38.785741Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":446,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ipv6.ipecho.net","ip":{"addr":"34.160.111.145","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2009-03-01","domain_rank":1849833,"first_seen":"2025-05-08T04:27:43.259847Z","last_seen":"2025-11-28T16:39:33.504589Z","alert_count":0,"request_count":1,"received_data":253,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"api.bytelift.icu","ip":{"addr":"172.67.187.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-11","domain_rank":0,"first_seen":"2025-11-27T04:17:03.439605Z","last_seen":"2025-11-27T04:17:03.439605Z","alert_count":0,"request_count":9,"received_data":81369,"sent_data":19810,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}]},{"fqdn":"eastrk-dn.com","ip":{"addr":"3.251.30.117","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2021-11-26","domain_rank":550657,"first_seen":"2022-01-03T07:14:19Z","last_seen":"2025-11-26T07:03:34.975395Z","alert_count":1,"request_count":1,"received_data":10171,"sent_data":525,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ipv6.ident.me","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2012-12-30","domain_rank":1684575,"first_seen":"2025-05-08T04:27:43.272259Z","last_seen":"2025-11-28T16:37:38.641456Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":433,"comment":"","tags":null,"fingerprints":null},{"fqdn":"track.alinkif.com","ip":{"addr":"172.67.145.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-20","domain_rank":2037155,"first_seen":"2025-03-18T18:11:52.628332Z","last_seen":"2025-11-22T16:55:38.959833Z","alert_count":0,"request_count":1,"received_data":8699,"sent_data":577,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"q1.quotes.com","ip":{"addr":"5.79.68.236","port":80,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"1997-05-20","domain_rank":3978262,"first_seen":"2022-09-19T03:10:30Z","last_seen":"2025-11-23T06:49:11.641514Z","alert_count":0,"request_count":1,"received_data":7972,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"approximum.com","ip":{"addr":"104.21.82.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-05","domain_rank":4351759,"first_seen":"2025-06-06T22:12:27.073701Z","last_seen":"2025-11-27T06:48:15.077261Z","alert_count":3,"request_count":3,"received_data":10224,"sent_data":1851,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bytelift.icu","ip":{"addr":"172.67.187.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-11","domain_rank":0,"first_seen":"2025-11-27T05:40:20.043519Z","last_seen":"2025-11-27T05:40:20.043519Z","alert_count":0,"request_count":1,"received_data":1890,"sent_data":598,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"a.pleasurefindyou.info","ip":{"addr":"185.150.189.124","port":443,"asn":23470,"as":"RELIABLESITE","country":"United States","country_code":"US"},"domain_registered":"2024-05-28","domain_rank":0,"first_seen":"2025-11-29T13:28:04.3786Z","last_seen":"2025-11-29T13:28:04.3786Z","alert_count":1,"request_count":1,"received_data":8133,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-11-23T22:17:41.224107Z","alert_count":0,"request_count":1,"received_data":1469180,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ipv6.icanhazip.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2009-07-31","domain_rank":290974,"first_seen":"2016-03-02T06:55:22Z","last_seen":"2025-11-28T16:37:38.523266Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":438,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-11-23T22:13:43.05661Z","alert_count":0,"request_count":1,"received_data":13321,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ipv4.icanhazip.com","ip":{"addr":"104.16.184.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-07-31","domain_rank":65266,"first_seen":"2013-10-09T05:58:12Z","last_seen":"2025-11-27T04:01:18.7397Z","alert_count":0,"request_count":1,"received_data":596,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"ipv6.tnedi.me","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-02-17","domain_rank":1690771,"first_seen":"2025-05-08T04:27:43.262458Z","last_seen":"2025-11-28T16:37:38.615187Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":433,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-23T22:13:29.69009Z","alert_count":0,"request_count":4,"received_data":197468,"sent_data":2224,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2025-11-23T23:10:52.00958Z","alert_count":0,"request_count":2,"received_data":815965,"sent_data":824,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"api.bytelift.icu/assets/f.js","fqdn":"api.bytelift.icu","domain":"bytelift.icu","tld":"icu"},"ip":{"addr":"172.67.187.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f6925152a6e85fc4ffe8a6b2ab33d7a","sha1":"144c119b3c7e67bfa7edd026d054ddc1fab213e1","sha256":"f8880f8dc34550ad63ba2bcaf775ff01c2e8c0de3050fd6dfc6ceab531459020","sha512":"76d18a224bed18e4e38be7672e000fcb7683a28093181fab1eb2cac327f2e0fdb791fb14bb4c19817209e206afd941d5b87e4e3892a6d2fa4e6a47caf714f07e","ssdeep":"384:2xcDKdRZKJEaMRMBp5iKQID95wH3KqwzrWmKj5+pCqNFaiE8E0QIQfJWbkhGYKo+:xDRBp5Kjnc9NwlJWbhSqfrfT","tlshash":"b00306d8b2c3b06e227368b5447f6006b23a7d50346d8842c563e5957ca9e6e913bfbc","size":38307,"data":"","first_seen":"2025-06-04T03:31:56.73259Z","last_seen":"2026-06-07T06:10:21.11168Z","times_seen":687,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","fqdn":"api.bytelift.icu","domain":"bytelift.icu","tld":"icu"},"ip":{"addr":"172.67.187.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"544486acea0b222cfd9d84260d21b256","sha1":"93734820e3e0f6458fff2a7cd95ae767868d4881","sha256":"48347309a736deb86a5a67cb363cd20631c7b7a0e08f51662fcbfcc8a7251bd4","sha512":"e1f83616f689e9009a223087a6119d6614bf4bbdfb8fd4d119354fdb9effd512e8e3e2a5dd32dfdeba833d6c6e824eb32804739feb1146d6262267fb43298fb8","ssdeep":"","tlshash":"03700080000c00a82208802b0a220000c80228200230a82028800002200208a00022e0","size":19,"data":"","first_seen":"2025-11-29T13:28:08.887963Z","last_seen":"2025-11-29T13:28:08.887963Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","fqdn":"api.bytelift.icu","domain":"bytelift.icu","tld":"icu"},"ip":{"addr":"172.67.187.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a813fff6f379eff746738832774b5286","sha1":"311cb13db75d636a0761d6cf4aa444c72b59d32a","sha256":"30959859a842a6f2097d13110c4b5d2f38db969fd696a5d583d39bf0e74958ae","sha512":"6a255a16fb54cbe24074345a4042ae1a5c65828d55a0470f3e627b2632e2939e9ee86ddf2571fff0b95b6d4405e42a47adffee7ab762929cbdd29a68b6fae3d5","ssdeep":"192:8Dr1MHVu/I3EzmfdnV0SNQRU8UfUNUUG5f8uRZWZPaAXBFNyfa+XPhNyjcCJoMN+:ueHVuQ3EzmFnV/N58uqN7fsZG3XaDjiO","tlshash":"3132131c56d24069839164e45a5b630e75f5338f74088c0e7ebc6190afed8ffc5a6bca","size":11625,"data":"","first_seen":"2025-11-29T13:28:08.890079Z","last_seen":"2025-11-29T13:28:08.890079Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","fqdn":"api.bytelift.icu","domain":"bytelift.icu","tld":"icu"},"ip":{"addr":"172.67.187.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"79477248873678ae6a63794991f4ed6b","sha1":"f05a3d6f7095098b69e0d610313255f888fac0f9","sha256":"ec7150616c0b181a6b6d8c04d26b466c8971becf03efc1f513c9875ffcf3d754","sha512":"8b2a6878d48004579cc9f1e22ac1adc03449dbce308f3a0a14fd8fa2594c3a33ea39640be018599a033ba5e8ca2d4ba3126290a8fe4ba6db124d01bb92fe1bf4","ssdeep":"","tlshash":"45b0120170ff2a829142c47807e201cb10ea4056840550dc823f13e50050eb3e8d804d","size":103,"data":"","first_seen":"2025-11-29T13:28:08.89243Z","last_seen":"2025-11-29T13:28:08.89243Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","fqdn":"api.bytelift.icu","domain":"bytelift.icu","tld":"icu"},"ip":{"addr":"172.67.187.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"be89871e23dcb01fff061de97ab4b2ed","sha1":"2e67aa814b4eb330f905d870b2c11505732b612c","sha256":"6cf0915f344f08cb33914c2c4977b128908d459fc6327c23c4a00a3fd091409d","sha512":"50a23deff4fa6ec4d73d74bdb636645ac09875919c593bc70b5f02a464cc52c2c0aa1f18af20ec22b14027386b84a5e75ada4f7ebe882d86d9a0f06de10bb88f","ssdeep":"384:XC0LMpCb4WKrv7S80GPzWtqP0KTEX/fDNX7J:XC0Nb477S80kzWtQJEX/fDNX7J","tlshash":"e062e92b8cab3fd94f28920732cd49d3441d4bc10aa31dcd717af2cd9a5b99223ca4d8","size":15515,"data":"","first_seen":"2025-11-29T13:28:08.894503Z","last_seen":"2025-11-29T13:28:08.894503Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"approximum.com/popular-text-message-trends-you-should-know-about-today/?utm_source=692af4cd4e746a0001320b18\u0026utm_term=\u0026utm_content=3052_32606_9151127\u0026utm_medium=link","fqdn":"approximum.com","domain":"approximum.com","tld":"com"},"ip":{"addr":"104.21.82.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9e57825bbb47f188f00306ecda51efbe","sha1":"188201fb10b84998abbb0045676d3cbb6c8a3c22","sha256":"2e70682f2fe39703a6ce715f60d0e277cf5a6f315b6f47ce24f54ca0959e1118","sha512":"711ff7743293387f95d0c5173215d61a44fd5749f8c8c575b6cadff85cd8fc6d9ad0315ce0de3695e143318ebb0bb01c37060bef50bcd9636115830096488718","ssdeep":"192:HLmecMun7bgMfmSJ+cdZo1aC8FK+M8Npz1lQ:rmecrn7bnfmSJ1iSYUNpPQ","tlshash":"3ff1f964bda0f8a642f50463237bb388f331715e213a085485990d9e7be3c53e259bf7","size":7672,"data":"","first_seen":"2025-11-29T13:28:08.896628Z","last_seen":"2025-11-29T13:28:08.896628Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-06-11T01:45:53.93345Z","times_seen":40099,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","fqdn":"api.bytelift.icu","domain":"bytelift.icu","tld":"icu"},"ip":{"addr":"172.67.187.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d158dac3c99de8689d6a2114f45121ff","sha1":"1805c12c5d4c63b880001a9cdb26d02e88127e57","sha256":"e400c0cdd6879d61a0e651460c2eb0b076a872cb30d1db580c0481d6e22ba274","sha512":"76dc4e79f82b1cabd81d93e4f0e42d8d9021c871653e819183d149d7034c93fee72bc71f94154fd1275474efd2ef1d774d05581de8270741a0494917c3f8dc96","ssdeep":"","tlshash":"db1190ed385144335f8b1c764653254876101e125441e89e7c1eda88cfe1f91ed199db","size":1021,"data":"","first_seen":"2025-11-29T13:28:08.898675Z","last_seen":"2025-11-29T13:28:08.898675Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","fqdn":"api.bytelift.icu","domain":"bytelift.icu","tld":"icu"},"ip":{"addr":"172.67.187.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"90f0ee793b1113be1f3bdce3f8fce647","sha1":"cd811e76de550005de82d147c3d79285ce15e899","sha256":"b724c3d61db4d066c8d4cc975e28ff0ffae7ec481ee46a630101f5c0ecd3b6ab","sha512":"9b0bc14b1ddbd3e4491121c2ab7d53f73153da047f2cbdffc0da27db9d2e2379df856781d4dbdc9265746333d9c28b9c461ed41a40c90f658d2c0d7d8094cdce","ssdeep":"","tlshash":"7331087eaa5a253e35c719d617874f70372c20235226d4e43d1c8540cf93a80a96fbde","size":1710,"data":"","first_seen":"2025-11-29T13:28:08.900824Z","last_seen":"2025-11-29T13:28:08.900824Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bytelift.icu/service-worker.js","fqdn":"api.bytelift.icu","domain":"bytelift.icu","tld":"icu"},"ip":{"addr":"172.67.187.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"132fb59b33edb658898213d05c72678a","sha1":"17d1d388c5516223fdd16c5309da1c409fe8ca19","sha256":"1369abfbcf45490e89b693bad8c9f415e88d130d0e1ba6e6abb912fee5556866","sha512":"828dc25d530e0eba18f43bef286111880e061147dafe37fd7336439a8840010c30536f406850e03f6656d49672b90088dcbec3c56f17224acbc42fb5a3183787","ssdeep":"192:k2KTbnKuCCeBD3c+CCwTNsz3dBfHyD51+5jHyDF:+3JQQ","tlshash":"d9e12c8da0e6b1232673b7798f0fa104b433451b615edd00bf8f07946f9467992f768a","size":7204,"data":"","first_seen":"2025-06-15T11:14:58.137155Z","last_seen":"2026-03-02T21:42:45.554451Z","times_seen":280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","fqdn":"api.bytelift.icu","domain":"bytelift.icu","tld":"icu"},"ip":{"addr":"172.67.187.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"07e5b7b9b13f78f0d9a9bd04401e92a1","sha1":"7524fc4fd399a4862d44793ad60b060872ac45df","sha256":"48cfed5494250d142496546f290f6c555b7b08de96d5e60823d3cf472d36051d","sha512":"78f36b56aa86182a62bb2073680acdd063d4aa140922d4d927f195294fe4c904dce279e78aee448db0ccb5882d2a6a39b53be6bb2354a2f0eb851602095cc596","ssdeep":"","tlshash":"b121dd928f8a3d0e93648d0825cd7ce8842d7b482947514e4e29b5c6838d37564ec5ef","size":1379,"data":"","first_seen":"2025-11-29T13:28:08.902643Z","last_seen":"2025-11-29T13:28:08.902643Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","fqdn":"api.bytelift.icu","domain":"bytelift.icu","tld":"icu"},"ip":{"addr":"172.67.187.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7efd26e0c4676df98167a91d0b5a9780","sha1":"ad5c125d1b684c37009d1da7642d6c13f3e79911","sha256":"fa14dd5b6eb10559d85b00a76c4d5d1622ba0a6a510435b36e38be4fa14750cb","sha512":"284055b0b448f6424b390007ba47d4d944fd3c968ab3f100b21a46f49a3855a83c9adc3f62a675a7cc7a99e7c07bdb56dad942eb37914dd849eff68529251a8c","ssdeep":"","tlshash":"47a00267404501e333183646c9813e616fe18351cd65b344b2ad7959b4a895b90bdcf0","size":65,"data":"","first_seen":"2025-11-29T13:28:08.905075Z","last_seen":"2025-11-29T13:28:08.905075Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/js/all.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78cdcbfac5817d1dca139718d1b9a8f5","sha1":"980040af664fde2bf783e718b2bd1b499e4f8622","sha256":"26fc9c78bb9ae90716d5682a72d6695d805eb77ec3361aa9a454383446a2e5ff","sha512":"7c3f432396d9c10c4e8bb3216169e734f96f5dda7fd8f8f75d24d1ac5b391506b89a2cf218b9c970deadbaf512e8b6e680dd6eb7e5c648004abe33741fa028a3","ssdeep":"6144:qTrRrD1LXomacLs8FkHGFugDUBoimIkksxGjxMHiRiVx4ORBD56uG0kMdEMuVIrG:45sRHgimIkkEOdwVx3D5OdMdvCUVgF8o","tlshash":"f365742cd35993bc9e96c7b5ca2134706d8e95ed71e09328a27cc5b072670dcd2dacca","size":1468161,"data":"","first_seen":"2023-05-10T13:16:35Z","last_seen":"2026-06-10T08:17:34.849058Z","times_seen":703,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","fqdn":"api.bytelift.icu","domain":"bytelift.icu","tld":"icu"},"ip":{"addr":"172.67.187.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f29a574be5f557d5a6ad9f8a5a29c7fd","sha1":"2ae11cffb84eb35758570681b39415c7eaf28f07","sha256":"d5de7280a5c8138627778d273f0acaddc1966f45dbfec5fedd1a4781a47d2771","sha512":"7d6028db076a0b06945521c2675585ff131f18ec9d9b4da58319109b00055ebd1d15a9ff447a9f7e69535b5db9da5b1d570af5ba58b99df7859b9f1f7254ef82","ssdeep":"","tlshash":"e741e06b8c4a2f4983313502f6ce69f50e0e13882de7b6ec8e4a63ddcc8e22558d409d","size":2295,"data":"","first_seen":"2025-11-29T13:28:08.908006Z","last_seen":"2025-11-29T13:28:08.908006Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","fqdn":"api.bytelift.icu","domain":"bytelift.icu","tld":"icu"},"ip":{"addr":"172.67.187.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0314bf3d7a3d00d78c245a79e3f9ddba","sha1":"564d7cf90a161b233e100a1984da0146fdb93b38","sha256":"6c206ee12a3265fe153c0b6d48f98a79e7ce1b66e8887426706dcd6042e7ea44","sha512":"2a1327077b85890d009ef8d8987a1f919815fee16916c17e7abf28a0dd03c3e2ff3225417a777321db8c3b2adba4238c83807be1d804b90ca438295031238a6a","ssdeep":"","tlshash":"3990045110d33f501400745101414c3fd3445155003355f043007300c10555104f41c1","size":43,"data":"","first_seen":"2025-11-29T13:28:08.909588Z","last_seen":"2025-11-29T13:28:08.909588Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.slim.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"af73dd50819a5fc22dff8b0ed2229d6c","sha1":"8b1d5dbd114b9c92f4a20139e1aca3196d94814b","sha256":"9261efb3407e3a9096e4654750d8eff6b3a663422f48845c7fbcc65034c340cf","sha512":"b0dca576e87d7eaa5850ae4e61759c065786cdb6489d68fcc82240539eebd5da522bdb4fda085ffd245808c8fe2acb2516408eb774ef26b5f6015fc6737c0ea8","ssdeep":"1536:AFUREURoe6xGT031BsGBjrg2l49E92BxjBxu/HG60QVRyPy4IQ47GK7:f6nsGBjRwBBuHzmvIQ47GK7","tlshash":"3463e7df72ca702257bb20b9107f610bf2764899680d4410f159e8e9bc7c95a827bf7e","size":70264,"data":"","first_seen":"2023-09-17T13:27:56Z","last_seen":"2026-06-11T02:00:34.47786Z","times_seen":5219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"approximum.com/popular-text-message-trends-you-should-know-about-today/?utm_source=692af4cd4e746a0001320b18\u0026utm_term=\u0026utm_content=3052_32606_9151127\u0026utm_medium=link","fqdn":"approximum.com","domain":"approximum.com","tld":"com"},"ip":{"addr":"104.21.82.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-29T13:27:41.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"approximum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Oct 2025 20:31:35 GMT","end":"Tue, 27 Jan 2026 21:30:19 GMT"},"fingerprint":{"sha1":"CD:3A:3B:69:8A:09:13:F5:87:6E:5B:28:37:F2:97:94:80:49:B7:28","sha256":"64:53:B2:8B:D8:70:E0:99:5D:E6:1B:05:A4:BA:1C:3F:06:0D:C7:27:86:E9:5E:86:F1:0D:EF:A1:1B:D7:55:ED"}}},"request":{"raw":"GET /popular-text-message-trends-you-should-know-about-today/?utm_source=692af4cd4e746a0001320b18\u0026utm_term=\u0026utm_content=3052_32606_9151127\u0026utm_medium=link HTTP/1.1\r\nHost: approximum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 29 Nov 2025 13:27:41 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bYlNVbT5Vz9kTS1y7FLehMOr7trWuscUEDAqAS6u9jQxZlASYPYFvl%2BYpUREvTufUCLcW0yVfiRy4PVDYmG%2F0p0FDIvKRosNTFVbMOCa\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9a6271a50e4a35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7730,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6907)","md5":"f8472b24150728238905b1a0528d88fe","sha1":"374221f78f006e853a169de410041670705a1b92","sha256":"5bcd8b8242b640497541fab430042e66dde2c803e58c8169cbb9c9c448c9dbbc","sha512":"c5c4e4dacd389eeb6277ecafb04d70c1e18bcb593a4dd476f1e0e56ffb19b2d774c3d01421c16b4a1f3dfa77a511ee413d4d63048db8801dbb329a323e55b55f","ssdeep":"192:xLmecMun7bgMfmSJ+cdZo1aC8FK+M8Npz1lF:xmecrn7bnfmSJ1iSYUNpPF","tlshash":"eaf1f864bda0f8a642f50463237bb348f331715e213a085485990c9e7be3d63e259bf7","first_seen":"2025-11-29T13:28:08.86382Z","last_seen":"2025-11-29T13:28:08.86382Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":34,"dns":11,"connect":2,"send":0,"wait":62,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-29","alert":"Sinkholed","trigger":"approximum.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"approximum.com/favicon.ico","fqdn":"approximum.com","domain":"approximum.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://approximum.com/popular-text-message-trends-you-should-know-about-today/?utm_source=692af4cd4e746a0001320b18\u0026utm_term=\u0026utm_content=3052_32606_9151127\u0026utm_medium=link","date":"2025-11-29T13:27:42.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"approximum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Oct 2025 20:31:35 GMT","end":"Tue, 27 Jan 2026 21:30:19 GMT"},"fingerprint":{"sha1":"CD:3A:3B:69:8A:09:13:F5:87:6E:5B:28:37:F2:97:94:80:49:B7:28","sha256":"64:53:B2:8B:D8:70:E0:99:5D:E6:1B:05:A4:BA:1C:3F:06:0D:C7:27:86:E9:5E:86:F1:0D:EF:A1:1B:D7:55:ED"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: approximum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://approximum.com/popular-text-message-trends-you-should-know-about-today/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-11T01:58:50.778478Z","times_seen":16314134,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-29","alert":"Sinkholed","trigger":"approximum.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bytelift.icu/indexs1t2sc.php?flow_id=103\u0026external_id=AM70KmlsdAUAUIgCAE5PFwAMAAAAAAB-\u0026source=357484\u0026keyword=file\u0026flow_k=33b35698d4","fqdn":"bytelift.icu","domain":"bytelift.icu","tld":"icu"},"ip":{"addr":"172.67.187.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-29T13:27:42.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bytelift.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:57:59 GMT","end":"Fri, 09 Jan 2026 09:56:29 GMT"},"fingerprint":{"sha1":"45:98:6B:D3:3E:CD:16:DB:C2:AF:D1:66:66:BE:9C:C6:60:2C:76:79","sha256":"61:F9:88:42:8D:7A:8C:97:BC:8C:CB:85:09:97:AF:B1:35:31:44:69:9A:3E:49:B9:BB:72:A9:DA:79:05:C0:EE"}}},"request":{"raw":"GET /indexs1t2sc.php?flow_id=103\u0026external_id=AM70KmlsdAUAUIgCAE5PFwAMAAAAAAB-\u0026source=357484\u0026keyword=file\u0026flow_k=33b35698d4 HTTP/1.1\r\nHost: bytelift.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 29 Nov 2025 13:27:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6ho8MWb4xqoE2%2BoUOtjfboAiLM12ELsi4SjT1VYZn2BBkWbFKodF%2Bi6n0W7EjzKvn8aiP2IMJbCGjPVF5qFqUy7WJjrPCB16qso%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: SITE_TOTAL_ID=44a5df9f3f91109ffd1741c25ee5e974; HttpOnly; Path=/; Max-Age=259200000\r\ncf-ray: 9a6271ab2e9b5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"eda44fe6bdd06e85d3ac1b8eead6a0ed","sha1":"e63e60372135881c16c358a8222cecfe8ee9ea4b","sha256":"f2eb97d227d4b87b75c8695af1617ba439790057301be316add5e3eb7dc69066","sha512":"8b80ff50cec41fb620065a7bd09309a034710ba69d1e39228e7298a603be5889feabcb810cbdaf2c68e97847760a5cbb5b9eda6da82ec618c5a986cdb5422a5e","ssdeep":"","tlshash":"d021a3783082a044f703d4bb93a6224cd41ed017530dc514726eb9a8df8e789c5f3a4e","first_seen":"2025-11-29T13:28:08.869076Z","last_seen":"2025-11-29T13:28:08.869076Z","times_seen":1,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":70,"dns":55,"connect":1,"send":0,"wait":255,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bytelift.icu/favicon.ico","fqdn":"api.bytelift.icu","domain":"bytelift.icu","tld":"icu"},"ip":{"addr":"172.67.187.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","date":"2025-11-29T13:27:43.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bytelift.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:57:59 GMT","end":"Fri, 09 Jan 2026 09:56:29 GMT"},"fingerprint":{"sha1":"45:98:6B:D3:3E:CD:16:DB:C2:AF:D1:66:66:BE:9C:C6:60:2C:76:79","sha256":"61:F9:88:42:8D:7A:8C:97:BC:8C:CB:85:09:97:AF:B1:35:31:44:69:9A:3E:49:B9:BB:72:A9:DA:79:05:C0:EE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: api.bytelift.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508\r\nCookie: SITE_TOTAL_ID=5596473bbd67c925f45e55e3b8545191\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 29 Nov 2025 13:27:43 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mm2W3wMt43vHbbmNhsoiYyjvhzCjCLO%2FqtppZS1Tp%2BPuZgS6TxVj5DQwJN6lr2%2BNEQvfZ7Oki3EbhmtWd0N%2BVivDAAJIhBF3AtFYEd9w\"}]}\r\npriority: u=6,i=?0\r\nage: 69\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9a6271b3eeb956a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":548,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"370e16c3b7dba286cff055f93b9a94d8","sha1":"65f3537c3c798f7da146c55aef536f7b5d0cb943","sha256":"d465172175d35d493fb1633e237700022bd849fa123164790b168b8318acb090","sha512":"75cd6a0ac7d6081d35140abbea018d1a2608dd936e2e21f61bf69e063f6fa16dd31c62392f5703d7a7c828ee3d4ecc838e73bff029a98ced8986acb5c8364966","ssdeep":"","tlshash":"02f0909f5f12287f2e238571f4c35169cf680a57fb9925e28748011f7aca04549f1fad","first_seen":"2023-03-08T16:42:13Z","last_seen":"2026-06-10T23:46:31.095731Z","times_seen":18645,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","date":"2025-11-29T13:27:43.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://api.bytelift.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 25 Nov 2025 23:36:19 GMT\r\nexpires: Wed, 25 Nov 2026 23:36:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 309084\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-11T01:58:33.142149Z","times_seen":207999,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":123,"dns":1,"connect":9,"send":0,"wait":8,"receive":3,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipv6.ident.me/","fqdn":"ipv6.ident.me","domain":"ident.me","tld":"me"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","date":"2025-11-29T13:27:44.759Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ipv6.ident.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://api.bytelift.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.bytelift.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-11T01:58:50.778478Z","times_seen":16314134,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.pleasurefindyou.info/","fqdn":"a.pleasurefindyou.info","domain":"pleasurefindyou.info","tld":"info"},"ip":{"addr":"185.150.189.124","port":443,"asn":23470,"as":"RELIABLESITE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-29T13:27:40.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pleasurefindyou.info","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Oct 2025 05:28:24 GMT","end":"Mon, 26 Jan 2026 05:28:23 GMT"},"fingerprint":{"sha1":"5A:3D:CA:57:5F:3A:D9:EA:0B:71:02:4D:DD:D4:00:30:89:6D:C8:F0","sha256":"00:F0:08:B0:FD:EE:FC:BA:16:93:14:E0:9D:2F:1F:F2:08:9F:A0:FD:AA:AB:DC:EC:F2:F9:0F:F7:5A:6F:4B:2D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: a.pleasurefindyou.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncache-control: max-age=0, private, must-revalidate\r\ncontent-length: 11\r\ndate: Sat, 29 Nov 2025 13:27:40 GMT\r\nlocation: http://q1.quotes.com/2e0aa55e-cd27-11f0-9cc4-ace69ede96c3\r\nserver: Cowboy\r\nset-cookie: sid=2e040d62-cd27-11f0-9c25-49960b585ff0; path=/; domain=.pleasurefindyou.info; expires=Thu, 17 Dec 2093 16:41:47 GMT; max-age=2147483647; secure; HttpOnly\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}],"data":{"size":7730,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-11T01:58:50.778478Z","times_seen":16314134,"resource_available":true,"data":null}},"time_used":964,"timings":{"blocked":351,"dns":147,"connect":98,"send":0,"wait":262,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-29","alert":"Sinkholed","trigger":"a.pleasurefindyou.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eastrk-dn.com/?a=32606\u0026c=398736\u0026co=29225\u0026mt=24\u0026s1=9151127","fqdn":"eastrk-dn.com","domain":"eastrk-dn.com","tld":"com"},"ip":{"addr":"3.251.30.117","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-29T13:27:41.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eastrk-dt.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 01 Aug 2025 00:00:00 GMT","end":"Sat, 29 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D8:F8:CD:D1:48:57:DA:2D:E2:DC:5E:07:AD:46:F4:B4:67:17:29:BD","sha256":"99:EA:4A:6A:27:9A:54:15:E4:F1:BE:CC:87:58:C7:0D:50:34:60:6C:0F:08:E3:1F:B5:C6:D5:EA:9B:9C:44:98"}}},"request":{"raw":"GET /?a=32606\u0026c=398736\u0026co=29225\u0026mt=24\u0026s1=9151127 HTTP/1.1\r\nHost: eastrk-dn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 29 Nov 2025 13:27:41 GMT\r\ncontent-type: text/html;charset=ISO-8859-1\r\nlocation: https://track.alinkif.com/click?pid=3052\u0026offer_id=22915\u0026sub1=13d9dc95067a4627b7186e952a6f9b29281d5\u0026sub2=32606_9151127\r\nserver: nginx\r\nset-cookie: gdm_suid_v2_1_001=HPfHs3OFxkaNOwO68jCjbQ==; Domain=.eastrk-dn.com; Expires=Fri, 27-Feb-2026 13:27:41 GMT; Path=/; Secure; SameSite=None\ngdm_sid_v2_3_001=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; Domain=.eastrk-dn.com; Expires=Fri, 27-Feb-2026 13:27:41 GMT; Path=/; Secure; SameSite=None\ngdm_click_adv_freq_v2_1_001=JyEJHXLGl87jbMc39LBmWFi8B51CbXb90sAFKDgUdeboDZUkYcVqSfE4OE2sFGZe; Domain=.eastrk-dn.com; Expires=Fri, 27-Feb-2026 13:27:41 GMT; Path=/; Secure; SameSite=None\ngdm_uid_v2_1_001=JiQSs7iiUrnQHQFDUlEWTKvO6NyOx1Kt/fiBBVPZYTTDK0n73wMpHHnFVxgxrPcz; Domain=.eastrk-dn.com; Expires=Fri, 27-Feb-2026 13:27:41 GMT; Path=/; Secure; SameSite=None\ngdm_click_freq_v2_1_001=mu51BQmyx1YOAg4Lmc0em9NnO8J6/oDwNeluyLrlwm1opOdoRQK5uBc9e2PjFQr7; Domain=.eastrk-dn.com; Expires=Fri, 27-Feb-2026 13:27:41 GMT; Path=/; Secure; SameSite=None\r\ncontent-language: en-US\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With,X-Auth,Pasha-Jlob\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7730,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-11T01:58:50.778478Z","times_seen":16314134,"resource_available":true,"data":null}},"time_used":643,"timings":{"blocked":302,"dns":35,"connect":35,"send":0,"wait":40,"receive":0,"ssl":229},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-29","alert":"Sinkholed","trigger":"eastrk-dn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"track.alinkif.com/click?pid=3052\u0026offer_id=22915\u0026sub1=13d9dc95067a4627b7186e952a6f9b29281d5\u0026sub2=32606_9151127","fqdn":"track.alinkif.com","domain":"alinkif.com","tld":"com"},"ip":{"addr":"172.67.145.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-29T13:27:41.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alinkif.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 09:34:34 GMT","end":"Fri, 09 Jan 2026 10:33:19 GMT"},"fingerprint":{"sha1":"A5:52:AB:88:A9:F7:79:41:46:91:8B:92:34:F4:7A:68:E8:FB:FA:E2","sha256":"9E:95:91:CE:74:34:4B:3C:6D:81:C7:B1:D3:5F:2C:C5:AD:13:33:43:3B:24:09:5D:AB:24:F9:AE:30:67:4B:38"}}},"request":{"raw":"GET /click?pid=3052\u0026offer_id=22915\u0026sub1=13d9dc95067a4627b7186e952a6f9b29281d5\u0026sub2=32606_9151127 HTTP/1.1\r\nHost: track.alinkif.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 29 Nov 2025 13:27:41 GMT\r\ncontent-length: 0\r\nlocation: https://approximum.com/popular-text-message-trends-you-should-know-about-today/?utm_source=692af4cd4e746a0001320b18\u0026utm_term=\u0026utm_content=3052_32606_9151127\u0026utm_medium=link\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-adjust-use-original-forwarded-for: 1\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gz1MapmZbsy8oFcHDdlrxNUpq%2BVofhP0MYuzyjuRtPKcqk0iUdtdFKbxNQKwDNr87o1wdRyGauJmCGgAu7GG3wWAaPtwYlvF2AN%2F6w5IGw%3D%3D\"}]}\r\nset-cookie: afclick=692af4cd4e746a0001320b18; SameSite=None; Secure; Expires=Sun, 29 Nov 2026 13:27:41 GMT\nafoffers={\"22915\":[1764422861,1]}; SameSite=None; Secure; Expires=Sun, 29 Nov 2026 13:27:41 GMT\r\ncf-ray: 9a6271a44ffcb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7730,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-11T01:58:50.778478Z","times_seen":16314134,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":27,"dns":6,"connect":1,"send":0,"wait":78,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"approximum.com/popular-text-message-trends-you-should-know-about-today/?utm_term=\u0026utm_content=3052_32606_9151127\u0026utm_medium=link\u0026utm_source=BfH2d050004000000001008066419","fqdn":"approximum.com","domain":"approximum.com","tld":"com"},"ip":{"addr":"104.21.82.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-29T13:27:42.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"approximum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Oct 2025 20:31:35 GMT","end":"Tue, 27 Jan 2026 21:30:19 GMT"},"fingerprint":{"sha1":"CD:3A:3B:69:8A:09:13:F5:87:6E:5B:28:37:F2:97:94:80:49:B7:28","sha256":"64:53:B2:8B:D8:70:E0:99:5D:E6:1B:05:A4:BA:1C:3F:06:0D:C7:27:86:E9:5E:86:F1:0D:EF:A1:1B:D7:55:ED"}}},"request":{"raw":"GET /popular-text-message-trends-you-should-know-about-today/?utm_term=\u0026utm_content=3052_32606_9151127\u0026utm_medium=link\u0026utm_source=BfH2d050004000000001008066419 HTTP/1.1\r\nHost: approximum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://approximum.com/popular-text-message-trends-you-should-know-about-today/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Sat, 29 Nov 2025 13:27:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreferrer-policy: no-referrer\r\nlocation: https://bytelift.icu/indexs1t2sc.php?flow_id=103\u0026external_id=AM70KmlsdAUAUIgCAE5PFwAMAAAAAAB-\u0026source=357484\u0026keyword=file\u0026flow_k=33b35698d4\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FLj22lsv2STQdYxkhPRRn5Qqc4gQB1z0Sy9EhfSUY3MVHp8FToR76zOd7oZJtCn%2B1TFhp6aMduxj9RVJeE8q6CBIPtiD%2BWYBmdC0gw%3D%3D\"}]}\r\ncf-ray: 9a6271aa0e4f56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-11T01:58:50.778478Z","times_seen":16314134,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-29","alert":"Sinkholed","trigger":"approximum.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/js/all.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","date":"2025-11-29T13:27:43.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/js/all.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://api.bytelift.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 29 Nov 2025 13:27:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 401721\r\ncf-ray: 9a6271af5e860731-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"6421d693-62139\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 683318\r\nexpires: Thu, 19 Nov 2026 13:27:43 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4RIBbVG2hQpReVJHvDhcbYd2%2FiYQAfE5SNP6EGRgsSXXCcNR7aWfUGoGmV9hx7sXxN56l6JX2yxuL9g7X8VO5seVxIBSzymJVFBS%2BgjKCq%2FDcwmCE3u9VCEXgAc95lGGYVuBDv4X\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1468161,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65317)","md5":"171d45e8e0e3b3042cba75349d61fb95","sha1":"d68550b67eb24a98af88828ffa9189164622762a","sha256":"4e84f7ca9e035015bdfa84af76165c1607e74961498c932449615b91cbab63b9","sha512":"e8ec47ec73a93ee4883c329d469d282c423d25c2444d5d1d637d40b851517c4b938e9b28c57082cf0c0d60d6d352c144e48564388e56863473a40c3829e1e791","ssdeep":"6144:qTrRrD1LXomacLs8FkHGFugDUBoimIkksxGjxMHiRiVx4ORBD56uG0N:45sRHgimIkkEOdwVx3D5Oi","tlshash":"19256338d35493bc9d96c7b5ca2124b4798f91ee71e0a328a27dc5b072620dcd2ddcda","first_seen":"2025-08-02T12:27:12.717622Z","last_seen":"2026-06-10T08:17:34.724415Z","times_seen":558,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":20,"dns":1,"connect":3,"send":0,"wait":10,"receive":16,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","date":"2025-11-29T13:27:43.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://api.bytelift.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 25 Nov 2025 23:36:19 GMT\r\nexpires: Wed, 25 Nov 2026 23:36:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 309084\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-11T01:58:33.142149Z","times_seen":207999,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":87,"dns":1,"connect":7,"send":0,"wait":17,"receive":6,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","date":"2025-11-29T13:27:43.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://api.bytelift.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 25 Nov 2025 23:36:19 GMT\r\nexpires: Wed, 25 Nov 2026 23:36:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 309084\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-11T01:58:33.142149Z","times_seen":207999,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":77,"dns":3,"connect":7,"send":0,"wait":9,"receive":10,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipv6.icanhazip.com/","fqdn":"ipv6.icanhazip.com","domain":"icanhazip.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","date":"2025-11-29T13:27:44.683Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ipv6.icanhazip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://api.bytelift.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.bytelift.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-11T01:58:50.778478Z","times_seen":16314134,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bytelift.icu/?jqsz=8881795c2f9ccf85fa17f67c6806a354_6759\u0026f=368537ade014b368cb7c0e54267d4c04\u0026t=54984116db1af075499edef73eddf508\u0026lt=1\u0026fp64=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","fqdn":"api.bytelift.icu","domain":"bytelift.icu","tld":"icu"},"ip":{"addr":"172.67.187.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","date":"2025-11-29T13:27:44.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bytelift.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:57:59 GMT","end":"Fri, 09 Jan 2026 09:56:29 GMT"},"fingerprint":{"sha1":"45:98:6B:D3:3E:CD:16:DB:C2:AF:D1:66:66:BE:9C:C6:60:2C:76:79","sha256":"61:F9:88:42:8D:7A:8C:97:BC:8C:CB:85:09:97:AF:B1:35:31:44:69:9A:3E:49:B9:BB:72:A9:DA:79:05:C0:EE"}}},"request":{"raw":"GET /?jqsz=8881795c2f9ccf85fa17f67c6806a354_6759\u0026f=368537ade014b368cb7c0e54267d4c04\u0026t=54984116db1af075499edef73eddf508\u0026lt=1\u0026fp64=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 HTTP/1.1\r\nHost: api.bytelift.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508\r\nCookie: SITE_TOTAL_ID=5596473bbd67c925f45e55e3b8545191\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 29 Nov 2025 13:27:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pT8cAYoEsSzLVMfQExTBXmUmewUronGvKxumxlrYlqjfCXx6OMLHvPYZ8ft6LkDz5XPMjQAjaOeB17T54N5ZH29YWH5JqyEpJTZcjxAk\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6271b7dece56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":524,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (524), with no line terminators","md5":"0ce181a8f256e3c76803e1f84ab5e4b9","sha1":"4d8398497c1cfbf65a849842b0284c7edf98f7ae","sha256":"a986824aa4e0238ffc29341de19460a560e47018eb94d3fb2a8afd14e9e920f5","sha512":"cb9b83d98186331298e65bbd4263f91770b0f6d5b15f8697b6b5578fa6148a3679e3d5fa64e0991f24f197c84ecdfeb4e748e4f7a296e00340d8c31387020fc3","ssdeep":"","tlshash":"7df024048368524f8c4433a4f588aeb916aa95f4a97e4ce468cc0afa318b136f75b419","first_seen":"2025-11-29T13:28:08.874486Z","last_seen":"2025-11-29T13:28:08.874486Z","times_seen":1,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bytelift.icu/sbm.php?i=91.90.42.154\u0026f=f19649becd04a7b1236c68996483e544\u0026t=54984116db1af075499edef73eddf508\u0026lt=1\u0026fp64=eyJ2aXNpdG9ySWQiOiJmMTk2NDliZWNkMDRhN2IxMjM2YzY4OTk2NDgzZTU0NCIsImNvbmZpZGVuY2UiOnsic2NvcmUiOjAuNiwiY29tbWVudCI6IjAuOTk2IGlmIHVwZ3JhZGUgdG8gUHJvOiBodHRwczovL2ZwanMuZGV2L3BybyJ9LCJjb21wb25lbnRzIjp7ImZvbnRzIjp7InZhbHVlIjpbIkJpdHN0cmVhbSBWZXJhIFNhbnMgTW9ubyIsIkNlbnR1cnkiXSwiZHVyYXRpb24iOjY5fSwiZG9tQmxvY2tlcnMiOnsiZHVyYXRpb24iOjExfSwiZm9udFByZWZlcmVuY2VzIjp7InZhbHVlIjp7ImRlZmF1bHQiOjE3My4xMTY2Njg3MDExNzE4OCwiYXBwbGUiOjE3My4xMTY2Njg3MDExNzE4OCwic2VyaWYiOjE3My4xMTY2Njg3MDExNzE4OCwic2FucyI6MTYyLjAxNjY2MjU5NzY1NjI1LCJtb25vIjoxMjIuNjgzMzM0MzUwNTg1OTQsIm1pbiI6MTAuODAwMDAzMDUxNzU3ODEyLCJzeXN0ZW0iOjE2Mi4wMTY2NjI1OTc2NTYyNX0sImR1cmF0aW9uIjoxMTN9LCJhdWRpbyI6eyJ2YWx1ZSI6MzUuNzM4MzM0MDIyNDYyMzcsImR1cmF0aW9uIjowfSwic2NyZWVuRnJhbWUiOnsidmFsdWUiOlswLDAsMCwwXSwiZHVyYXRpb24iOjB9LCJvc0NwdSI6eyJ2YWx1ZSI6IkxpbnV4IHg4Nl82NCIsImR1cmF0aW9uIjowfSwibGFuZ3VhZ2VzIjp7InZhbHVlIjpbWyJlbi1VUyJdLFsiZW4tVVMiLCJlbiJdXSwiZHVyYXRpb24iOjB9LCJjb2xvckRlcHRoIjp7InZhbHVlIjoyNCwiZHVyYXRpb24iOjB9LCJkZXZpY2VNZW1vcnkiOnsiZHVyYXRpb24iOjB9LCJzY3JlZW5SZXNvbHV0aW9uIjp7InZhbHVlIjpbMTI4MCwxMDI0XSwiZHVyYXRpb24iOjB9LCJoYXJkd2FyZUNvbmN1cnJlbmN5Ijp7InZhbHVlIjo0OCwiZHVyYXRpb24iOjB9LCJ0aW1lem9uZSI6eyJ2YWx1ZSI6IlVUQyIsImR1cmF0aW9uIjowfSwic2Vzc2lvblN0b3JhZ2UiOnsidmFsdWUiOnRydWUsImR1cmF0aW9uIjowfSwibG9jYWxTdG9yYWdlIjp7InZhbHVlIjp0cnVlLCJkdXJhdGlvbiI6MH0sImluZGV4ZWREQiI6eyJ2YWx1ZSI6dHJ1ZSwiZHVyYXRpb24iOjB9LCJvcGVuRGF0YWJhc2UiOnsidmFsdWUiOmZhbHNlLCJkdXJhdGlvbiI6MH0sImNwdUNsYXNzIjp7ImR1cmF0aW9uIjowfSwicGxhdGZvcm0iOnsidmFsdWUiOiJXaW4zMiIsImR1cmF0aW9uIjowfSwicGx1Z2lucyI6eyJ2YWx1ZSI6W3sibmFtZSI6IlBERiBWaWV3ZXIiLCJkZXNjcmlwdGlvbiI6IlBvcnRhYmxlIERvY3VtZW50IEZvcm1hdCIsIm1pbWVUeXBlcyI6W3sidHlwZSI6ImFwcGxpY2F0aW9uL3BkZiIsInN1ZmZpeGVzIjoicGRmIn0seyJ0eXBlIjoidGV4dC9wZGYiLCJzdWZmaXhlcyI6InBkZiJ9XX0seyJuYW1lIjoiQ2hyb21lIFBERiBWaWV3ZXIiLCJkZXNjcmlwdGlvbiI6IlBvcnRhYmxlIERvY3VtZW50IEZvcm1hdCIsIm1pbWVUeXBlcyI6W3sidHlwZSI6ImFwcGxpY2F0aW9uL3BkZiIsInN1ZmZpeGVzIjoicGRmIn0seyJ0eXBlIjoidGV4dC9wZGYiLCJzdWZmaXhlcyI6InBkZiJ9XX0seyJuYW1lIjoiQ2hyb21pdW0gUERGIFZpZXdlciIsImRlc2NyaXB0aW9uIjoiUG9ydGFibGUgRG9jdW1lbnQgRm9ybWF0IiwibWltZVR5cGVzIjpbeyJ0eXBlIjoiYXBwbGljYXRpb24vcGRmIiwic3VmZml4ZXMiOiJwZGYifSx7InR5cGUiOiJ0ZXh0L3BkZiIsInN1ZmZpeGVzIjoicGRmIn1dfSx7Im5hbWUiOiJNaWNyb3NvZnQgRWRnZSBQREYgVmlld2VyIiwiZGVzY3JpcHRpb24iOiJQb3J0YWJsZSBEb2N1bWVudCBGb3JtYXQiLCJtaW1lVHlwZXMiOlt7InR5cGUiOiJhcHBsaWNhdGlvbi9wZGYiLCJzdWZmaXhlcyI6InBkZiJ9LHsidHlwZSI6InRleHQvcGRmIiwic3VmZml4ZXMiOiJwZGYifV19LHsibmFtZSI6IldlYktpdCBidWlsdC1pbiBQREYiLCJkZXNjcmlwdGlvbiI6IlBvcnRhYmxlIERvY3VtZW50IEZvcm1hdCIsIm1pbWVUeXBlcyI6W3sidHlwZSI6ImFwcGxpY2F0aW9uL3BkZiIsInN1ZmZpeGVzIjoicGRmIn0seyJ0eXBlIjoidGV4dC9wZGYiLCJzdWZmaXhlcyI6InBkZiJ9XX1dLCJkdXJhdGlvbiI6MX0sInRvdWNoU3VwcG9ydCI6eyJ2YWx1ZSI6eyJtYXhUb3VjaFBvaW50cyI6MCwidG91Y2hFdmVudCI6ZmFsc2UsInRvdWNoU3RhcnQiOmZhbHNlfSwiZHVyYXRpb24iOjB9LCJ2ZW5kb3IiOnsidmFsdWUiOiIiLCJkdXJhdGlvbiI6MH0sInZlbmRvckZsYXZvcnMiOnsidmFsdWUiOltdLCJkdXJhdGlvbiI6MH0sImNvb2tpZXNFbmFibGVkIjp7InZhbHVlIjp0cnVlLCJkdXJhdGlvbiI6MH0sImNvbG9yR2FtdXQiOnsidmFsdWUiOiJzcmdiIiwiZHVyYXRpb24iOjB9LCJpbnZlcnRlZENvbG9ycyI6eyJkdXJhdGlvbiI6MH0sImZvcmNlZENvbG9ycyI6eyJ2YWx1ZSI6ZmFsc2UsImR1cmF0aW9uIjowfSwibW9ub2Nocm9tZSI6eyJ2YWx1ZSI6MCwiZHVyYXRpb24iOjB9LCJjb250cmFzdCI6eyJ2YWx1ZSI6MCwiZHVyYXRpb24iOjB9LCJyZWR1Y2VkTW90aW9uIjp7InZhbHVlIjpmYWxzZSwiZHVyYXRpb24iOjB9LCJyZWR1Y2VkVHJhbnNwYXJlbmN5Ijp7ImR1cmF0aW9uIjowfSwiaGRyIjp7InZhbHVlIjpmYWxzZSwiZHVyYXRpb24iOjB9LCJtYXRoIjp7InZhbHVlIjp7ImFjb3MiOjEuNDQ3MzU4ODY1ODI3ODUyMiwiYWNvc2giOjcwOS44ODkzNTU4MjI3MjYsImFjb3NoUGYiOjM1NS4yOTEyNTE1MDE2NDMsImFzaW4iOjAuMTIzNDM3NDYwOTY3MDQ0MzUsImFzaW5oIjowLjg4MTM3MzU4NzAxOTU0MywiYXNpbmhQZiI6MC44ODEzNzM1ODcwMTk1NDI5LCJhdGFuaCI6MC41NDkzMDYxNDQzMzQwNTQ4LCJhdGFuaFBmIjowLjU0OTMwNjE0NDMzNDA1NDgsImF0YW4iOjAuNDYzNjQ3NjA5MDAwODA2MSwic2luIjowLjgxNzg4MTkxMjExNTkwODUsInNpbmgiOjEuMTc1MjAxMTkzNjQzODAxNCwic2luaFBmIjoyLjUzNDM0MjEwNzg3MzMyNCwiY29zIjotMC44MzkwNzE1MjkwMDk1Mzc3LCJjb3NoIjoxLjU0MzA4MDYzNDgxNTI0MzcsImNvc2hQZiI6MS41NDMwODA2MzQ4MTUyNDM3LCJ0YW4iOi0xLjQyMTQ0ODgyMzg3NDcyNDUsInRhbmgiOjAuNzYxNTk0MTU1OTU1NzY0OSwidGFuaFBmIjowLjc2MTU5NDE1NTk1NTc2NDksImV4cCI6Mi43MTgyODE4Mjg0NTkwNDUsImV4cG0xIjoxLjcxODI4MTgyODQ1OTA0NSwiZXhwbTFQZiI6MS43MTgyODE4Mjg0NTkwNDUsImxvZzFwIjoyLjM5Nzg5NTI3Mjc5ODM3MDcsImxvZzFwUGYiOjIuMzk3ODk1MjcyNzk4MzcwNywicG93UEkiOjEuOTI3NTgxNDE2MDU2MDIwNmUtNTB9LCJkdXJhdGlvbiI6MH0sInBkZlZpZXdlckVuYWJsZWQiOnsidmFsdWUiOnRydWUsImR1cmF0aW9uIjowfSwiYXJjaGl0ZWN0dXJlIjp7InZhbHVlIjoyNTUsImR1cmF0aW9uIjowfSwiYXBwbGVQYXkiOnsidmFsdWUiOi0xLCJkdXJhdGlvbiI6MH0sInByaXZhdGVDbGlja01lYXN1cmVtZW50Ijp7ImR1cmF0aW9uIjowfSwiYXVkaW9CYXNlTGF0ZW5jeSI6eyJ2YWx1ZSI6LTIsImR1cmF0aW9uIjowfSwiZGF0ZVRpbWVMb2NhbGUiOnsidmFsdWUiOiJlbi1VUyIsImR1cmF0aW9uIjoxfSwid2ViR2xCYXNpY3MiOnsidmFsdWUiOnsidmVyc2lvbiI6IldlYkdMIDEuMCIsInZlbmRvciI6Ik1vemlsbGEiLCJ2ZW5kb3JVbm1hc2tlZCI6IiIsInJlbmRlcmVyIjoibGx2bXBpcGUiLCJyZW5kZXJlclVubWFza2VkIjoiIiwic2hhZGluZ0xhbmd1YWdlVmVyc2lvbiI6IldlYkdMIEdMU0wgRVMgMS4wIn0sImR1cmF0aW9uIjoyMn19LCJ2ZXJzaW9uIjoiNC42LjEifQ==","fqdn":"api.bytelift.icu","domain":"bytelift.icu","tld":"icu"},"ip":{"addr":"172.67.187.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","date":"2025-11-29T13:27:45.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bytelift.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:57:59 GMT","end":"Fri, 09 Jan 2026 09:56:29 GMT"},"fingerprint":{"sha1":"45:98:6B:D3:3E:CD:16:DB:C2:AF:D1:66:66:BE:9C:C6:60:2C:76:79","sha256":"61:F9:88:42:8D:7A:8C:97:BC:8C:CB:85:09:97:AF:B1:35:31:44:69:9A:3E:49:B9:BB:72:A9:DA:79:05:C0:EE"}}},"request":{"raw":"GET /sbm.php?i=91.90.42.154\u0026f=f19649becd04a7b1236c68996483e544\u0026t=54984116db1af075499edef73eddf508\u0026lt=1\u0026fp64=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 HTTP/1.1\r\nHost: api.bytelift.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SITE_TOTAL_ID=5596473bbd67c925f45e55e3b8545191\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 29 Nov 2025 13:27:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EdcS11GQkWF2MV0JNg0%2Bt4zKTCVmFbqBnOgfjz%2BCUeW4tFQJ9JeLwu8FPLbCHG7mp2RNzMnwPgHMe8Jxu%2FugK0E%2Bux2xJ13OCkzURFor\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6271bc0ef056a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"19960639f5765258d55d28419119f56e","sha1":"97f4cd2124787950c253b1f7dd34400c2a6a4e18","sha256":"a4465b1082733aaf8db7350a18227553a3382aec8f33ad846fca6c3340939330","sha512":"f0c3bc2b0e4d6e5f72526a0377f924e7d5a5f0449695f0d5c127a9242e3a6742c4a2220785bc744b5c724b4db8633eba919ed4ecb7cc45ea0508e03cb917eb37","ssdeep":"","tlshash":"a630000030000000c0000000c000000000000000000000000000000300300000000000","first_seen":"2025-11-10T21:52:21.620406Z","last_seen":"2026-06-06T16:45:16.406605Z","times_seen":391,"resource_available":false,"data":null}},"time_used":712,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":712,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","date":"2025-11-29T13:27:43.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 07:09:58 GMT","end":"Sat, 21 Feb 2026 08:09:55 GMT"},"fingerprint":{"sha1":"B5:C9:29:A1:B9:60:7F:A7:9E:9E:63:3E:DF:4E:05:34:4B:27:D3:86","sha256":"2D:FA:43:BC:F1:83:E4:D9:E0:ED:1A:D1:C5:0E:F5:E0:77:29:F1:F1:23:2F:E3:30:7B:72:49:1E:82:5C:DB:C1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.bytelift.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 29 Nov 2025 13:27:43 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::89qk7-1764421826482-9324ade3e3c1\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 181\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QMneQR5VyZbaKnKWNMjzY3au7Zi7N4YzXcv4Z2StkjRdvAeGlPLcOSHXH1wECxq%2FX3RCdF4iVeSSkgvXKLHnWFHtHGDiHyzdgfYsxK7dS7H6gg%3D%3D\"}]}\r\ncf-ray: 9a6271af59ea2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-11T01:58:50.778478Z","times_seen":16314134,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":23,"dns":1,"connect":1,"send":0,"wait":3,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","date":"2025-11-29T13:27:43.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://api.bytelift.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 25 Nov 2025 23:36:19 GMT\r\nexpires: Wed, 25 Nov 2026 23:36:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 309084\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-11T01:58:33.142149Z","times_seen":207999,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":111,"dns":1,"connect":20,"send":0,"wait":8,"receive":5,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bytelift.icu/sbm.php?i=91.90.42.154\u0026t=54984116db1af075499edef73eddf508\u0026lt=1","fqdn":"api.bytelift.icu","domain":"bytelift.icu","tld":"icu"},"ip":{"addr":"172.67.187.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","date":"2025-11-29T13:27:44.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bytelift.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:57:59 GMT","end":"Fri, 09 Jan 2026 09:56:29 GMT"},"fingerprint":{"sha1":"45:98:6B:D3:3E:CD:16:DB:C2:AF:D1:66:66:BE:9C:C6:60:2C:76:79","sha256":"61:F9:88:42:8D:7A:8C:97:BC:8C:CB:85:09:97:AF:B1:35:31:44:69:9A:3E:49:B9:BB:72:A9:DA:79:05:C0:EE"}}},"request":{"raw":"GET /sbm.php?i=91.90.42.154\u0026t=54984116db1af075499edef73eddf508\u0026lt=1 HTTP/1.1\r\nHost: api.bytelift.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SITE_TOTAL_ID=5596473bbd67c925f45e55e3b8545191\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 29 Nov 2025 13:27:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Okct7yoBMLqn%2FqmNF35J9nULffD5%2Ba2MN3r9thki4NtS8eOx6tvCioTNkbNn508B3l71QW7DD3CkygEjd29nlNk5nD6c82isGvjr9J3c\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6271b8ced156a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"19960639f5765258d55d28419119f56e","sha1":"97f4cd2124787950c253b1f7dd34400c2a6a4e18","sha256":"a4465b1082733aaf8db7350a18227553a3382aec8f33ad846fca6c3340939330","sha512":"f0c3bc2b0e4d6e5f72526a0377f924e7d5a5f0449695f0d5c127a9242e3a6742c4a2220785bc744b5c724b4db8633eba919ed4ecb7cc45ea0508e03cb917eb37","ssdeep":"","tlshash":"a630000030000000c0000000c000000000000000000000000000000300300000000000","first_seen":"2025-11-10T21:52:21.620406Z","last_seen":"2026-06-06T16:45:16.406605Z","times_seen":391,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","date":"2025-11-29T13:27:43.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.bytelift.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 29 Nov 2025 13:27:43 GMT\r\ndate: Sat, 29 Nov 2025 13:27:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12635,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f04de8ad1ef740d940ec0f534a8f6474","sha1":"3b31756e84c8887867417c7d6cc64501c9d9193c","sha256":"2f1ac0c31bc3ede8317cf72e9d28051ec727c9a0014aa69cff495abd6256bb4e","sha512":"69afede137c125294044274e463f30c02594f379ec879285e0b3ee41097f503dfb8272487759870f547e4dc4cf8828a2c1efaa806deb2f3124b7f6d67c638783","ssdeep":"192:wNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:8KYXuM0p2+4","tlshash":"28427892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:44:19.218006Z","last_seen":"2026-06-11T01:16:25.624112Z","times_seen":24217,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":169,"dns":7,"connect":7,"send":0,"wait":16,"receive":0,"ssl":153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bytelift.icu/service-worker.js","fqdn":"api.bytelift.icu","domain":"bytelift.icu","tld":"icu"},"ip":{"addr":"172.67.187.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","date":"2025-11-29T13:27:43.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bytelift.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:57:59 GMT","end":"Fri, 09 Jan 2026 09:56:29 GMT"},"fingerprint":{"sha1":"45:98:6B:D3:3E:CD:16:DB:C2:AF:D1:66:66:BE:9C:C6:60:2C:76:79","sha256":"61:F9:88:42:8D:7A:8C:97:BC:8C:CB:85:09:97:AF:B1:35:31:44:69:9A:3E:49:B9:BB:72:A9:DA:79:05:C0:EE"}}},"request":{"raw":"GET /service-worker.js HTTP/1.1\r\nHost: api.bytelift.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508\r\nCookie: SITE_TOTAL_ID=5596473bbd67c925f45e55e3b8545191\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 29 Nov 2025 13:27:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 Aug 2025 07:55:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"68b15ceb-1c24\"\r\nexpires: Sat, 29 Nov 2025 15:09:46 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 37077\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fsbdv46E07wHs%2BfnfeHmLL6ysjCcRXb%2FHrzlR5avCeLulchksNKQ1duPNmU58soDROsd4PV2MmwLdomDwkL0ypx%2BAOqAinaeLI4GVi4z\"}]}\r\ncf-ray: 9a6271af3ea156a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7204,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"132fb59b33edb658898213d05c72678a","sha1":"17d1d388c5516223fdd16c5309da1c409fe8ca19","sha256":"1369abfbcf45490e89b693bad8c9f415e88d130d0e1ba6e6abb912fee5556866","sha512":"828dc25d530e0eba18f43bef286111880e061147dafe37fd7336439a8840010c30536f406850e03f6656d49672b90088dcbec3c56f17224acbc42fb5a3183787","ssdeep":"192:k2KTbnKuCCeBD3c+CCwTNsz3dBfHyD51+5jHyDF:+3JQQ","tlshash":"d9e12c8da0e6b1232673b7798f0fa104b433451b615edd00bf8f07946f9467992f768a","first_seen":"2025-06-15T11:14:58.137155Z","last_seen":"2026-03-02T21:42:45.554451Z","times_seen":280,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipv4.icanhazip.com/","fqdn":"ipv4.icanhazip.com","domain":"icanhazip.com","tld":"com"},"ip":{"addr":"104.16.184.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","date":"2025-11-29T13:27:44.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icanhazip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Oct 2025 23:02:07 GMT","end":"Sat, 17 Jan 2026 00:02:04 GMT"},"fingerprint":{"sha1":"8A:83:AC:92:50:95:37:40:39:D3:47:D8:29:B4:31:03:2D:7A:51:1C","sha256":"B5:08:3E:2A:75:CF:C3:A6:CF:60:E3:E3:54:2D:B1:56:BF:86:7B:90:65:49:E7:C5:C1:F7:B5:56:34:8F:10:C3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ipv4.icanhazip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://api.bytelift.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.bytelift.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 29 Nov 2025 13:27:44 GMT\r\ncontent-type: text/plain\r\ncontent-length: 13\r\ncf-ray: 9a6271b85dec712a-OSL\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nset-cookie: __cf_bm=YRMrEXD4.FoHD84SZbhnKliw96k_PT0sjHbN7trIoUM-1764422864-1.0.1.1-dgM5R1z_8T5jV9rioPHMvUKQpv3NuMLIiTqz5aVf2ILv0TU3IhBaoqJqQK808HWSLM.qtVavMiv2Nu9j315Udn04C6FkeEiXO16Z1IXpoaw; path=/; expires=Sat, 29-Nov-25 13:57:44 GMT; domain=.icanhazip.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":13,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text","md5":"d0f727049a6c39e00df33badfc529120","sha1":"bcbe610cd9d4baf88e53c32375c624b8920fb570","sha256":"4b3f1dd9b6a31b14247dec82b502a00a71d83ebb9f007bfccf7bd490e1604821","sha512":"9760d662b6b3eb1d7611cb94350ec8e578d2b8d1de263603cd098f7095e9a2d5f3673170a36f08fb91ea8f4022840b0727c965114e201864e449b149a38ac5c4","ssdeep":"","tlshash":"ba600003300300030c00c00cc303030303c00003c30f0000ccc00f000c003300330000","first_seen":"2023-04-08T10:21:22Z","last_seen":"2026-06-07T05:13:47.561123Z","times_seen":4180,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":20,"dns":5,"connect":1,"send":0,"wait":9,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipv6.tnedi.me/","fqdn":"ipv6.tnedi.me","domain":"tnedi.me","tld":"me"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","date":"2025-11-29T13:27:44.793Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ipv6.tnedi.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://api.bytelift.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.bytelift.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-11T01:58:50.778478Z","times_seen":16314134,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bytelift.icu/sbm.php?i=91.90.42.154\u0026f=f19649becd04a7b1236c68996483e544\u0026t=54984116db1af075499edef73eddf508\u0026lt=1\u0026fp64=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","fqdn":"api.bytelift.icu","domain":"bytelift.icu","tld":"icu"},"ip":{"addr":"172.67.187.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","date":"2025-11-29T13:27:44.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bytelift.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:57:59 GMT","end":"Fri, 09 Jan 2026 09:56:29 GMT"},"fingerprint":{"sha1":"45:98:6B:D3:3E:CD:16:DB:C2:AF:D1:66:66:BE:9C:C6:60:2C:76:79","sha256":"61:F9:88:42:8D:7A:8C:97:BC:8C:CB:85:09:97:AF:B1:35:31:44:69:9A:3E:49:B9:BB:72:A9:DA:79:05:C0:EE"}}},"request":{"raw":"GET /sbm.php?i=91.90.42.154\u0026f=f19649becd04a7b1236c68996483e544\u0026t=54984116db1af075499edef73eddf508\u0026lt=1\u0026fp64=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 HTTP/1.1\r\nHost: api.bytelift.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SITE_TOTAL_ID=5596473bbd67c925f45e55e3b8545191\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 29 Nov 2025 13:27:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Thuca3S3P%2Bm8YZIXcT9UpHNMRd2VsGc%2FF8qXYrKMrv%2BYRHZQQoxVNWXdBRzvfKfO5IbGsoKoEscBo7hl23%2BDPgOBw4%2BCuWY4CVyoZYWz\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6271b9beea56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"19960639f5765258d55d28419119f56e","sha1":"97f4cd2124787950c253b1f7dd34400c2a6a4e18","sha256":"a4465b1082733aaf8db7350a18227553a3382aec8f33ad846fca6c3340939330","sha512":"f0c3bc2b0e4d6e5f72526a0377f924e7d5a5f0449695f0d5c127a9242e3a6742c4a2220785bc744b5c724b4db8633eba919ed4ecb7cc45ea0508e03cb917eb37","ssdeep":"","tlshash":"a630000030000000c0000000c000000000000000000000000000000300300000000000","first_seen":"2025-11-10T21:52:21.620406Z","last_seen":"2026-06-06T16:45:16.406605Z","times_seen":391,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":418,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","fqdn":"api.bytelift.icu","domain":"bytelift.icu","tld":"icu"},"ip":{"addr":"172.67.187.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-29T13:27:43.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bytelift.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:57:59 GMT","end":"Fri, 09 Jan 2026 09:56:29 GMT"},"fingerprint":{"sha1":"45:98:6B:D3:3E:CD:16:DB:C2:AF:D1:66:66:BE:9C:C6:60:2C:76:79","sha256":"61:F9:88:42:8D:7A:8C:97:BC:8C:CB:85:09:97:AF:B1:35:31:44:69:9A:3E:49:B9:BB:72:A9:DA:79:05:C0:EE"}}},"request":{"raw":"GET /?qr=cp\u0026zqs=54984116db1af075499edef73eddf508 HTTP/1.1\r\nHost: api.bytelift.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bytelift.icu/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 29 Nov 2025 13:27:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SW%2FjlX5apSTWznxzEMJRapUpzaK2sRvrlFfT1j7wwZAz1qrM6AewhrWiVGYL6Gy%2B%2FNdSK6M2z2q9AF50ZlVqGsGJuPDR19wfImvmau52\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\ncache-control: no-store\r\nset-cookie: SITE_TOTAL_ID=5596473bbd67c925f45e55e3b8545191; HttpOnly; Path=/; Max-Age=259200000\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6271ae0e9456a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}],"data":{"size":29070,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15536)","md5":"2afc634d7053fc599b5d2ad67640e7ee","sha1":"904a96695ea1fa58af32cdcaa035ed395aad5152","sha256":"262f951c86dfc8926a98151b81ddfc7510bbc0808711181bf5766999e8e12ec1","sha512":"3b4b5d24bbb612dc7136759c188a5539cad1224fb0def80cb75f8cf512bba714a964705f4c1626a47e4474640ba10cdc97e924e24782a1c7dc83a5eb6551573d","ssdeep":"768:ar9XC0Nb477S80kzWtQJEX/fDNX7gPu8Cv1h94z0ep:HN7S805//fDNX7g61e0ep","tlshash":"40d22a664cf73fde47569206b2cc5ad7484c9bc6ca5309cc716de2c99f8bc528aca0d8","first_seen":"2025-11-29T13:28:08.881585Z","last_seen":"2025-11-29T13:28:08.881585Z","times_seen":1,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":147,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.slim.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","date":"2025-11-29T13:27:43.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.7.1.slim.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://api.bytelift.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.bytelift.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-11278\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 29 Nov 2025 13:27:43 GMT\r\nage: 2185379\r\nx-served-by: cache-lga21942-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 17175, 15372\r\nx-timer: S1764422863.352446,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 24036\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":70264,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65241)","md5":"af73dd50819a5fc22dff8b0ed2229d6c","sha1":"8b1d5dbd114b9c92f4a20139e1aca3196d94814b","sha256":"9261efb3407e3a9096e4654750d8eff6b3a663422f48845c7fbcc65034c340cf","sha512":"b0dca576e87d7eaa5850ae4e61759c065786cdb6489d68fcc82240539eebd5da522bdb4fda085ffd245808c8fe2acb2516408eb774ef26b5f6015fc6737c0ea8","ssdeep":"1536:AFUREURoe6xGT031BsGBjrg2l49E92BxjBxu/HG60QVRyPy4IQ47GK7:f6nsGBjRwBBuHzmvIQ47GK7","tlshash":"3463e7df72ca702257bb20b9107f610bf2764899680d4410f159e8e9bc7c95a827bf7e","first_seen":"2023-09-17T13:27:56Z","last_seen":"2026-06-11T02:00:34.47786Z","times_seen":5219,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":91,"dns":10,"connect":39,"send":0,"wait":27,"receive":9,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipv6.whatismyip.akamai.com/","fqdn":"ipv6.whatismyip.akamai.com","domain":"akamai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","date":"2025-11-29T13:27:44.823Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ipv6.whatismyip.akamai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://api.bytelift.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.bytelift.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-11T01:58:50.778478Z","times_seen":16314134,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipv6.ipecho.net/plain","fqdn":"ipv6.ipecho.net","domain":"ipecho.net","tld":"net"},"ip":{"addr":"34.160.111.145","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","date":"2025-11-29T13:27:44.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ifconfig.me","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Nov 2025 15:33:03 GMT","end":"Sun, 15 Feb 2026 15:33:02 GMT"},"fingerprint":{"sha1":"A7:E5:96:C8:F2:C3:0E:0D:A0:F3:C2:58:40:BD:EC:9E:7E:B4:70:20","sha256":"09:A5:64:0D:F1:CA:A5:DA:72:0D:83:98:C1:C1:CD:A1:F4:38:F7:28:5C:BE:BC:5B:0B:7F:13:CE:E2:C4:77:AB"}}},"request":{"raw":"GET /plain HTTP/1.1\r\nHost: ipv6.ipecho.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://api.bytelift.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.bytelift.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 12\r\naccess-control-allow-origin: *\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Sat, 29 Nov 2025 13:27:45 GMT\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":79,"dns":18,"connect":26,"send":0,"wait":151,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"q1.quotes.com/2e0aa55e-cd27-11f0-9cc4-ace69ede96c3","fqdn":"q1.quotes.com","domain":"quotes.com","tld":"com"},"ip":{"addr":"5.79.68.236","port":80,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-29T13:27:41.011Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /2e0aa55e-cd27-11f0-9cc4-ace69ede96c3 HTTP/1.1\r\nHost: q1.quotes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\ncache-control: max-age=0, private, must-revalidate\r\nconnection: close\r\ncontent-length: 11\r\ndate: Sat, 29 Nov 2025 13:27:40 GMT\r\nlocation: https://eastrk-dn.com/?a=32606\u0026c=398736\u0026co=29225\u0026mt=24\u0026s1=9151127\r\nserver: nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7730,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-11T01:58:50.778478Z","times_seen":16314134,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":38,"dns":14,"connect":24,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","date":"2025-11-29T13:27:43.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 07:09:58 GMT","end":"Sat, 21 Feb 2026 08:09:55 GMT"},"fingerprint":{"sha1":"B5:C9:29:A1:B9:60:7F:A7:9E:9E:63:3E:DF:4E:05:34:4B:27:D3:86","sha256":"2D:FA:43:BC:F1:83:E4:D9:E0:ED:1A:D1:C5:0E:F5:E0:77:29:F1:F1:23:2F:E3:30:7B:72:49:1E:82:5C:DB:C1"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://api.bytelift.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 29 Nov 2025 13:27:43 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::zrxjn-1763519216515-428a84849afa\r\nlast-modified: Wed, 19 Nov 2025 02:26:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 645107\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QcvN1mVHWt2k8CJdhKf1wRVKBDxF9kK4oEt2%2Bx86xzSN%2BVbQpbGwlZpa%2B2kLsJWldyUz0k%2FzvXl3ARluU0BJmjAp9cxFdIjAHcBeBhR27%2Fpepg%3D%3D\"}]}\r\ncf-ray: 9a6271af8a5d2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-06-11T01:45:53.93345Z","times_seen":40099,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bytelift.icu/assets/f.js","fqdn":"api.bytelift.icu","domain":"bytelift.icu","tld":"icu"},"ip":{"addr":"172.67.187.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","date":"2025-11-29T13:27:43.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bytelift.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:57:59 GMT","end":"Fri, 09 Jan 2026 09:56:29 GMT"},"fingerprint":{"sha1":"45:98:6B:D3:3E:CD:16:DB:C2:AF:D1:66:66:BE:9C:C6:60:2C:76:79","sha256":"61:F9:88:42:8D:7A:8C:97:BC:8C:CB:85:09:97:AF:B1:35:31:44:69:9A:3E:49:B9:BB:72:A9:DA:79:05:C0:EE"}}},"request":{"raw":"GET /assets/f.js HTTP/1.1\r\nHost: api.bytelift.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508\r\nCookie: SITE_TOTAL_ID=5596473bbd67c925f45e55e3b8545191\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 29 Nov 2025 13:27:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 Aug 2025 07:55:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"68b15ceb-95a3\"\r\nexpires: Sat, 29 Nov 2025 17:43:38 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 27844\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YzaYT%2BMbyclbz1F8aMNnUSrQbNkSiI7Zs1XrsPRddn2l%2FBtb8cLvgne4KQKm%2F75rfltBnoQ8VlYDvMosH%2FFSGJ2%2BHDWE7EES4EFwbrfb\"}]}\r\ncf-ray: 9a6271b2feb856a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38307,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38299)","md5":"8f6925152a6e85fc4ffe8a6b2ab33d7a","sha1":"144c119b3c7e67bfa7edd026d054ddc1fab213e1","sha256":"f8880f8dc34550ad63ba2bcaf775ff01c2e8c0de3050fd6dfc6ceab531459020","sha512":"76d18a224bed18e4e38be7672e000fcb7683a28093181fab1eb2cac327f2e0fdb791fb14bb4c19817209e206afd941d5b87e4e3892a6d2fa4e6a47caf714f07e","ssdeep":"384:2xcDKdRZKJEaMRMBp5iKQID95wH3KqwzrWmKj5+pCqNFaiE8E0QIQfJWbkhGYKo+:xDRBp5Kjnc9NwlJWbhSqfrfT","tlshash":"b00306d8b2c3b06e227368b5447f6006b23a7d50346d8842c563e5957ca9e6e913bfbc","first_seen":"2025-06-04T03:31:56.73259Z","last_seen":"2026-06-07T06:10:21.11168Z","times_seen":687,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bytelift.icu/sbm.php?i=91.90.42.154\u0026t=54984116db1af075499edef73eddf508\u0026lt=1","fqdn":"api.bytelift.icu","domain":"bytelift.icu","tld":"icu"},"ip":{"addr":"172.67.187.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508","date":"2025-11-29T13:27:45.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bytelift.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 08:57:59 GMT","end":"Fri, 09 Jan 2026 09:56:29 GMT"},"fingerprint":{"sha1":"45:98:6B:D3:3E:CD:16:DB:C2:AF:D1:66:66:BE:9C:C6:60:2C:76:79","sha256":"61:F9:88:42:8D:7A:8C:97:BC:8C:CB:85:09:97:AF:B1:35:31:44:69:9A:3E:49:B9:BB:72:A9:DA:79:05:C0:EE"}}},"request":{"raw":"GET /sbm.php?i=91.90.42.154\u0026t=54984116db1af075499edef73eddf508\u0026lt=1 HTTP/1.1\r\nHost: api.bytelift.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://api.bytelift.icu/?qr=cp\u0026zqs=54984116db1af075499edef73eddf508\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SITE_TOTAL_ID=5596473bbd67c925f45e55e3b8545191\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 29 Nov 2025 13:27:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Z74IGf2iGZk8xfwTD0iJj%2B8Q8zwoVWU%2BKzwA%2BVINzOL0igCfBAI%2BBk4rneJcOh82E6CfyWhcrMQlo0VbN0gONWfO81I0oTFIa4h23Zy\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a6271bb4eee56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"19960639f5765258d55d28419119f56e","sha1":"97f4cd2124787950c253b1f7dd34400c2a6a4e18","sha256":"a4465b1082733aaf8db7350a18227553a3382aec8f33ad846fca6c3340939330","sha512":"f0c3bc2b0e4d6e5f72526a0377f924e7d5a5f0449695f0d5c127a9242e3a6742c4a2220785bc744b5c724b4db8633eba919ed4ecb7cc45ea0508e03cb917eb37","ssdeep":"","tlshash":"a630000030000000c0000000c000000000000000000000000000000300300000000000","first_seen":"2025-11-10T21:52:21.620406Z","last_seen":"2026-06-06T16:45:16.406605Z","times_seen":391,"resource_available":false,"data":null}},"time_used":502,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":502,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}