{"report_id":"8260d636-a8c6-44ef-81fc-e2e6d391474c","version":6,"status":"done","tags":[],"date":"2026-01-01T20:09:06Z","url":{"schema":"http","addr":"www.up-4ever.net/b99nfkkhbe29","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"104.21.24.34","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.up-4ever.net/b99nfkkhbe29","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"title":"Download File com_turner_pocketmorties_2.40.2_mod_signed.apk","dom":{"size":344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (344), with no line terminators","md5":"51867aae0b798205a2337bdb77e221c1","sha1":"87e32c3ab94a3a7ffeca46794da95a6a595b8575","sha256":"26a0dfc829e054b85351b41505575c2382fe46ac08a01081bf904993aace8249","sha512":"6e386904b1deb5ad2152afdc09b1476d92e5fae58c1cd334b927fe56ea903f2b3dd88819eef0ee6baf298f30926f3e36803663bdad0a815557d008182166f606","ssdeep":"","tlshash":"bde020e96c66c93464a4038620f5e39d16306194fa15d64441e8dc2a5f20fd74c5294c","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.up-4ever.net/b99nfkkhbe29","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"104.21.24.34","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-05T20:09:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"e7cod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"ln.unruthwhiz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"ln.unruthwhiz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"thtaivujjcl.com","ip":{"addr":"139.45.197.163","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":1235,"sent_data":971,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.up-4ever.net","ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-08-22","domain_rank":131271,"first_seen":"2019-05-16T13:28:27Z","last_seen":"2025-12-20T21:02:57.935284Z","alert_count":0,"request_count":25,"received_data":834159,"sent_data":14732,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]},{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-28T22:14:05.525046Z","alert_count":0,"request_count":3,"received_data":26200,"sent_data":1616,"comment":"","tags":null,"fingerprints":null},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2025-12-28T22:53:28.510747Z","alert_count":0,"request_count":3,"received_data":313884,"sent_data":1444,"comment":"","tags":null,"fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2025-12-28T22:19:36.894477Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":784,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-28T22:17:36.419718Z","alert_count":0,"request_count":1,"received_data":460350,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"e7cod.com","ip":{"addr":"139.45.197.233","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2021-09-07","domain_rank":0,"first_seen":"2025-12-09T19:09:56.779126Z","last_seen":"2025-12-24T21:57:44.441323Z","alert_count":3,"request_count":3,"received_data":120588,"sent_data":2310,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ln.unruthwhiz.com","ip":{"addr":"172.241.53.101","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-13","domain_rank":0,"first_seen":"2025-10-13T22:45:17.624336Z","last_seen":"2025-12-28T05:36:39.994608Z","alert_count":2,"request_count":1,"received_data":1416,"sent_data":426,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2025-12-28T22:22:58.360429Z","alert_count":0,"request_count":1,"received_data":850,"sent_data":1041,"comment":"","tags":null,"fingerprints":null},{"fqdn":"my.rtmark.net","ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2025-12-29T14:32:54.672001Z","alert_count":0,"request_count":1,"received_data":839,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-28T22:17:10.032556Z","alert_count":0,"request_count":1,"received_data":22345,"sent_data":574,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.up-4ever.net/js/paging.js?r=37","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"65acc03e89e31b30c305636f9e472caa","sha1":"dc6fcc5aa2f4203fa683eddb31ba86fbdef16191","sha256":"50f473b7cf9135f5703b2b1ef99dc5968df531b75c09790f77438f2f45288b95","sha512":"72e7013de7a0fb8797f8ed8b1c40723a9c9070e0ccc9aa3c7a2c95c35f97f396a39732cd42cf48b095ca3ca0f107c6708886bf5b16bfbea53b0021da3163e2ec","ssdeep":"96:aTp2f6zbd5045GqtfxTEq0EQUEPEDOfEeEdUXE+gELREUJbeZh4xc5:UI6zbd50eGqtpTEDExEPED2EeEsEDEFc","tlshash":"bb91dc1d28f390117263333b668faa457e25b0078485de58ff8c8a895f49d3476a3fad","size":4619,"data":"","first_seen":"2024-12-13T22:31:29.673303Z","last_seen":"2026-04-05T04:18:26.02386Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/assets/js/popperjs.js","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"11ac784d818ffcb28043696d67eb9ed3","sha1":"0f5fa11562b7d8355c31e868dee06ad544c6479e","sha256":"ef9d782294421522458e434c973a266b8be6544e0919a51810933db18aba3987","sha512":"637a91e34043bd31369888410db5c7986e4f1dff1c157319ef008cfbc17d0c92a1feb55555312ab2b02d7018a509eabab5dece1120971906b087474c6a5caa62","ssdeep":"384:PZjckOxmemwN3igs6HdfGmLmnNV5LrpfV1Nn1K4kwTiO6rg3MI/9NUmJ/aZu:uxmemg3igs69TYf/pd1Nn1uwXSg3MI/N","tlshash":"3092d7dc3a94f0e5167b52bac03f011fb2379524218ee510a255d6c92c74ebba23bd7e","size":20121,"data":"","first_seen":"2023-11-23T08:24:53Z","last_seen":"2026-04-19T07:45:43.101288Z","times_seen":353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/assets/js/sweetalert.min.js","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78d6d0d77b38c6bddfb8fecd71cad940","sha1":"f73319c9ab6b8a0e0733a0d9a538620b4ca23562","sha256":"92514bfb5aa460c0365f8eaf2ce2d31f0e089fc1ced03aba0f40ec9aaa3e1556","sha512":"6920d930c711d4a28027bea4ed6ce3728c222b0463761b9c24cdf7e201b4d99c640161e9c6f563b087ec1adc105de230755fa750c90d0087a131a15df73b4de9","ssdeep":"384:/BLa4qL1li0jldLUuuAzdNU/CfFqLyX9ye1hAbj/i5Yy/kyyeu8pgUqaF2XSSHEj:ZLahUadNU/CNqWX9ye1hWz8+B3c2Bkj","tlshash":"ad031a96758470a643e398f191ef020ef2359523b84798d5b361e8e88ff4e8d50a7f1b","size":40792,"data":"","first_seen":"2024-12-13T22:31:29.632096Z","last_seen":"2026-04-05T04:18:25.992538Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/assets/js/ult.js?r=7","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"658c6b1e94658a650aae15d10ca899e6","sha1":"ff27b3f42d13905f2e299acb02665c8cd80cde8a","sha256":"829bc82f925809803bebad16819ff1dd73e59a2685c2c5a9e7c000ce61d142a3","sha512":"682e6e372ccd727bcd093699389a3b88c7a504dc0d1604ffae81f0a65da51308a34b0cf4fe912d02bb2da1e28b390fd4fb06438dedc650b4d471a59a5a62b239","ssdeep":"","tlshash":"3ff0cd80336606b344df98aa505267cf7130408f01c9b68efc184a491fbbed0e6aab75","size":587,"data":"","first_seen":"2024-12-13T22:31:29.669002Z","last_seen":"2026-04-05T04:18:26.018651Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/assets/js/main.js?ver=2","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c53f2b213417b4ae0ea88b566a5aaad4","sha1":"03dbd35d8a41b24ba36fb451a5c40f71490112c8","sha256":"b072d472f70fc2b63d0d03added6b617d5699597e0d9b3f444f62a1e2f4313f6","sha512":"fcb5cfbf9e4308eafb81057d51c559759c783963cff17cb2da8f6c8625f0ec03a2f85bca89a62e927abac8d8686d048514ecdda2c3224613cfdc9e2cb5676221","ssdeep":"","tlshash":"a501d65431a1117712db28af13eb46a4763d48c3e00586393daecf0d5f90b69d5a1bec","size":671,"data":"","first_seen":"2024-12-13T22:31:29.683719Z","last_seen":"2026-04-05T04:18:26.017231Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/b99nfkkhbe29","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"97c75b04b1370dd076624a7d00176a62","sha1":"02222a360313268fd507eee61510c7b2a8f00c5c","sha256":"d09d4c484b822781589417a12c7c59121bf664bf1617bcd831814d7d377dcedb","sha512":"2cb250c903abc3192fece12064fcc1a6c028439272d72c8775a98c483a35009bc7a01df9c0425d127adea2e695bda8f5d1437a944ac348320a08b6554ca3cd5d","ssdeep":"","tlshash":"6bc08c8e270e8cb140ba2380cf3fb10ab009e20058921c320c45234ea230c1f5318d20","size":162,"data":"","first_seen":"2024-12-13T22:31:29.667907Z","last_seen":"2026-04-05T04:18:26.024999Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/b99nfkkhbe29","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a2781f9bb6302c2f96df0d1e96ef524","sha1":"796bb90146495848c0c479533c367edadb94f1a9","sha256":"1b60af0ce49d65e8b1006457c16883d60e53a0054bb157c57c3b03a82ee9964d","sha512":"7c1a1cfea1989a16c9dadbf97f8a1366ca416aea7ba2ef4f96c263e3cf02dc17f7bbb0fb3b61d4336c222fede676f3d177cbd48e76efc46230c1b61e92042f6a","ssdeep":"","tlshash":"cf900273f0c18c7e4031b14421793508b943011d8290502076450870973708ba5044c4","size":57,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-04-19T11:58:37.666833Z","times_seen":27823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/b99nfkkhbe29","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a2781f9bb6302c2f96df0d1e96ef524","sha1":"796bb90146495848c0c479533c367edadb94f1a9","sha256":"1b60af0ce49d65e8b1006457c16883d60e53a0054bb157c57c3b03a82ee9964d","sha512":"7c1a1cfea1989a16c9dadbf97f8a1366ca416aea7ba2ef4f96c263e3cf02dc17f7bbb0fb3b61d4336c222fede676f3d177cbd48e76efc46230c1b61e92042f6a","ssdeep":"","tlshash":"cf900273f0c18c7e4031b14421793508b943011d8290502076450870973708ba5044c4","size":57,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-04-19T11:58:37.666833Z","times_seen":27823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/assets/js/cookie.js?r=6","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a26fb8b9110da7839525523473cd043c","sha1":"e6b058ae41e6fe719200e31f3d61f7021d471170","sha256":"08a50bf385399292e4d8fbacd274026df950eb6062f77ed2ce5153de396a5d8b","sha512":"08e7405c5853a38823cbdd4b44556974fb50550b05d0526eea68c511f95b5d62f9638038977411c3b13a5d18a3daddc5a88209a6552111ba908537447332b529","ssdeep":"","tlshash":"355132c972aaf484c3a652a4113f604bf03e6d4da00db298bfd5e8e57c740868973f79","size":2552,"data":"","first_seen":"2024-12-13T22:31:29.628343Z","last_seen":"2026-04-05T04:18:26.010924Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/b99nfkkhbe29","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a2781f9bb6302c2f96df0d1e96ef524","sha1":"796bb90146495848c0c479533c367edadb94f1a9","sha256":"1b60af0ce49d65e8b1006457c16883d60e53a0054bb157c57c3b03a82ee9964d","sha512":"7c1a1cfea1989a16c9dadbf97f8a1366ca416aea7ba2ef4f96c263e3cf02dc17f7bbb0fb3b61d4336c222fede676f3d177cbd48e76efc46230c1b61e92042f6a","ssdeep":"","tlshash":"cf900273f0c18c7e4031b14421793508b943011d8290502076450870973708ba5044c4","size":57,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-04-19T11:58:37.666833Z","times_seen":27823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/assets/js/alphinejs.min.js","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6341ca60a3790b37fb046e6cded71afe","sha1":"d5f1b32f86fa5b172cae593691a22e1584fa691f","sha256":"5bdc5d6356b4364d902406552c8195a89e878861bcf75183165ef80d2a295ae2","sha512":"909db649d012391222c7c5c8aca76a1d4e3e9c130e839a805a2813a1132c8521aeb7e367e9ac6ee9c7de70d6b2e6988fa3fbfd419608dfc648190c36b6509a61","ssdeep":"768:mOHA8aj7P8+PK5zfcEjVUAjKTdnL5hkP2F5Dij67yAthHs/TPTfl/pp187MnPNJV:VmJTqVUSKTjyPcyEM5ZT","tlshash":"1c13fae973dab17283ef11b660ff4646f3391894580e5428f618d8da382949d41f3fba","size":43976,"data":"","first_seen":"2024-03-12T01:47:23Z","last_seen":"2026-04-18T19:54:04.593048Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/b99nfkkhbe29","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c1bead691f26162f5a2eff12cbceb4f3","sha1":"1c7ea32ae17e749dc50dad23069cb77ee707acf7","sha256":"6e43bba4b91d185193682171d07d59666c6bde81bc1432d521fc9cfd7b493451","sha512":"22d7a548c0f8604c56128804b9a21952c3605ced4582ee8c5315a4a6dc4378dd16cb937a073c43fe8ee22fbf8bc1cf67a4cad6fc2f4f1b05f7afc6cbbc7f12e7","ssdeep":"384:+v0a/K7iYFRdYtib0Qen9tO69aI8tAUeNDaUGRQ2t4PpBahqoo+KXnS7YhfGMOIf:+K72iwQ80GaIoQPzahq/AMOY","tlshash":"e1c2d4a7321eb91a8719626110ef2e85a2cc48c4718f1f78e724e53678d753485ebef8","size":27954,"data":"","first_seen":"2025-07-25T07:05:25.317686Z","last_seen":"2026-04-05T04:18:26.029947Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/b99nfkkhbe29","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"18d8c6e6f9896013688fee4c97973651","sha1":"f88b7017919c0f51ba6ef054c6c006a74c51427c","sha256":"63fc2b4b5cfe14425d5994449309e4c656d53b2596ef1237d6232569af80d0b2","sha512":"f5be85ed26a8ad16e6e8ae80307ac0686f1d4ba9188ec8bf29e84e6a8fe70dfb48b82c103d4953384f5e53e0c310b580a6ac56c881377c5846ecef3e1ddc7cc1","ssdeep":"","tlshash":"05e0860820a1363140ff6192d99f9e4434114157614a9c493a9cdfaf3fa0abfca7a9cc","size":340,"data":"","first_seen":"2024-12-13T22:31:29.671076Z","last_seen":"2026-04-05T04:18:26.032645Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-BH3KCF6H24","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"19b694f7eec92fbe2bf0bc833aa1e8cd","sha1":"6cd6cf3bec617b86c1d6fd14ca59fc93476223e9","sha256":"c5875eead80ca6e202910f024b81767c584c744b1628bb0e43cda9efae6c42b9","sha512":"d4295d604868cd3be6c6620e1b277fb1338c1fa3fb1b515649a902f109d0cd0f681a9c01991926f4c2e83f3cff5eae449a53dd4299de8d3e0258c735dc65e606","ssdeep":"6144:RFIe7ma2bulKYX61u99Yye5HDmHYmyBFzvnsBmeWllEKPad4XEPD5t:0C8bu7q1mcrnsFWawEX","tlshash":"e4a4088e73c674269396f478503f01cba9bb29e2a45cc89ab1c9ccf02d7459a4167f7c","size":459746,"data":"","first_seen":"2026-01-01T20:09:15.838754Z","last_seen":"2026-01-01T20:09:15.838754Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"900467002704b285aa6a7b87ec9a43b9","sha1":"eab117560915c4bfd0594ed1bf5663dd79525abd","sha256":"8b4e76cfac343938221a94e9c4962d9697fb8a321b028208fd928e8f3c366e44","sha512":"62724226bc2e4c1856ae04c32f6730b97a5ad2bb8994a14f336a4f4821353458eff1fa5858995ff69f3973c5d2368ff4ec554fd06ff273af2aee68099ae1caf5","ssdeep":"192:kXSrIwDPF2WIDmImPFBGJhoRfi4ZbsHMCYxG0GuFlGHlQzuX:sSrIwDP6DmImPFUJVMCYxEnX","tlshash":"e222d7937c8c6db0d19160d81a9735c672c78f527042ad4e97207bf46d3339aeb4aea8","size":10368,"data":"","first_seen":"2026-01-01T20:06:17.279642Z","last_seen":"2026-01-01T20:45:23.518447Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/assets/js/popper.min.js","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"31032b08bd8e72220462d3f54f8bd69a","sha1":"871d6ef1070bd363ea390e0c8c384e47dce7f389","sha256":"c212f4b505a86352aed62b24a8f16f999f821ecbe6456c7f3c8a04bc87968782","sha512":"4cf8763b1960d73a7e933de7140d02e6f542ea5786ffa9a6d73f7e980f35308e5e69456a6ac3cb3bc0ae93880c1788147cfe5eb51ef7ae053ff0f34cb127aca1","ssdeep":"384:PZjckOxmemwN3igs6HdfGmLmnNV5LrpfV1Nn1K4kwTiO6rg3MI/9NUmJ/aZg:uxmemg3igs69TYf/pd1Nn1uwXSg3MI/9","tlshash":"f392d7dc3a94f0e5167b52bac03f011fb2379524218ee510a255d6c92c74ebba23bd7e","size":20122,"data":"","first_seen":"2023-05-30T11:24:05Z","last_seen":"2026-04-19T11:03:13.734791Z","times_seen":9302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ln.unruthwhiz.com/r3ItFp8h3pVNL/vGVkM","fqdn":"ln.unruthwhiz.com","domain":"unruthwhiz.com","tld":"com"},"ip":{"addr":"172.241.53.101","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","size":5,"data":"","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-04-19T10:26:36.147597Z","times_seen":15630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/b99nfkkhbe29","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c47ecd4f1c101dd0be62d21c2355e3cb","sha1":"24a213fc96a5aeed23a4b03fb1fd2417f6694e94","sha256":"ece999ee5223b25fce285465709081ef8fa68b75ec3decd49cdf10f594888cc4","sha512":"d9711a1f25cb5fb0e31080919adf859fb97ae6de970b4b356065908b1666934996b7f7dbac93cccf2c17a4ce39ceddea8c8db807648d2622715ec44f6eb0378d","ssdeep":"","tlshash":"a7c01297fe4c153144ee365b167282cc7038c1299e0321885c282c6045f4de6196a8a4","size":186,"data":"","first_seen":"2024-12-13T22:31:29.674786Z","last_seen":"2026-04-05T04:18:26.033628Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/b99nfkkhbe29","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c538657a947a1e2c7ac66329f58eec22","sha1":"ddc94e497653875cbf844021814e13b19a0de68a","sha256":"7a075bf4d1d58b69ce0b005cb9be7b675626b150eb1a7b5124fc3ad9cde564c7","sha512":"5a3aae5b9e99867395d21275477165a01813e42882757684e3915e9ea117f65c6e0a154adcf757690d115ed3b17d30ca6194950bf96503cd59b41ae08c5bfabd","ssdeep":"","tlshash":"34018912d76e686a811e10bfca7423e4547c007fbca181fbbc0ec990d4889971200cd5","size":761,"data":"","first_seen":"2024-12-13T22:31:29.676416Z","last_seen":"2026-04-05T04:18:26.034492Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/b99nfkkhbe29","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d10fa82d0fb2148348ee203960bc5b08","sha1":"efe2c827f99caa7205bdd338db750bbb49af32f4","sha256":"f18395b7f9ffc4081f60caddedab3845a5cfc7220c7a7f276a090e128ea6a09b","sha512":"965b02410ca994543001d83976b005bfd0be42053457f98f8524d7fe412bf59bc0e9c4c4ccb21390c0ceeaec77e4f36529c861a55d5982cd257df78226c4d081","ssdeep":"","tlshash":"0811c0793a1a5634c5c5418b317ee7a93e326065be06a084c2accc295d2ce8714efdbe","size":902,"data":"","first_seen":"2026-01-01T20:09:15.852152Z","last_seen":"2026-01-01T20:09:15.852152Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e7cod.com/5/9620262","fqdn":"e7cod.com","domain":"e7cod.com","tld":"com"},"ip":{"addr":"139.45.197.233","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"4123214dcfddf4ed69bd75845fa1393d","sha1":"8d1555a7fb462bc2cc1c4e01cc201e1e663fdd86","sha256":"d76ce4c089d15e51d264c283803eca7b92d624ec32be7f337952cd55366b811f","sha512":"6bd5fb64a646acd9b14c3cffca3a60a855adae38b7cb068f4c54c9e86fed1df6c0ae30d1b418dd90d04c3acbae35ee3030ce337d68eb8f5bbc5a1270b8c008f1","ssdeep":"3072:0Xki1TG8YlAVPzIqwL76WJHpYx85/MVzUfu:tWTGvllqw5JJdQzl","tlshash":"e8b3191673a27bd21a6a60d42d67d60573fd8cc0448f8867e3d8787972d081cd3abbd9","size":117724,"data":"","first_seen":"2026-01-01T20:09:15.841268Z","last_seen":"2026-01-01T20:09:15.841268Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/assets/js/bootstrap/bootstrap.min.js","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a08792f518b51f0f1422b5c96df9eb8a","sha1":"3f094f010bfb0c022a51b62778d4361d1cad3fd6","sha256":"5c36e28c9a7bd864b673e223db7e1934923227536ffbdf871f58b6f09b9ac8c9","sha512":"6ba72d23ac35920dc9e1d4a39271e3dda58b11b8e2b405c08cb0d1531a36c326260c545ccf6449b90af93372adf0efd3b544a9f27dab032697632d6c8e82a6ad","ssdeep":"768:ts1v6byWwhC8Y/klELLhigGAl/4TVOhcZ5Il6/2Vm7MTwFxmnMq55wPpHOg9yPpC:ty2hL6q373y/iGp","tlshash":"de43a45a3258b87309de44a6c032470bf7255d94b547816cb9bdacee1b3dc8272b2f78","size":60089,"data":"","first_seen":"2023-03-07T12:03:09Z","last_seen":"2026-04-19T10:27:46.584618Z","times_seen":5301,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"729b4df7b5461309ecf812ae1839baca","sha1":"3cc42ed8dc6d38c6d134c5dd6ec68e39f7da8cc1","sha256":"a63461b82612893b40c3ed542615472b8449105b21ed7c45ba495e581674acd5","sha512":"2edcd82b2f149f62c525922b765b51c0c54ddbec2ac92d77558b16f870705915be581fd88b2412f51e411fe6235b7e7d898c949b537cfb2f01c97cd91fe2c26f","ssdeep":"","tlshash":"17d02399387689349199034b20b5d39936703194fb25614081eccc1f6f35fd319b155c","size":217,"data":"","first_seen":"2026-01-01T20:09:15.853018Z","last_seen":"2026-01-01T20:09:15.853018Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/b99nfkkhbe29","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f71c59ea1936497a20e129c7f49890e4","sha1":"26f7fe65d73db9a2c0e759ed8581be05f09ed2aa","sha256":"bef6abb0623df1bb2ebfabdac7630cef201280324c66e813e6543a14e42a09ed","sha512":"e3f5421ce4b757f00347a7c8a5cee3a0990a220b1eb58c64104550343719d0e50130cf9b64b5f5f0657965f756628d5ff4dfedb6a39eaf91e6e64794fb42bf79","ssdeep":"","tlshash":"80f08c9c22fa233e13730c317dbe014ae11800b6731c8108bdac426e9faa8d50570abf","size":465,"data":"","first_seen":"2024-12-13T22:31:29.682374Z","last_seen":"2026-04-05T04:18:26.037368Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"thtaivujjcl.com/","fqdn":"thtaivujjcl.com","domain":"thtaivujjcl.com","tld":"com"},"ip":{"addr":"139.45.197.163","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:44.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thtaivujjcl.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 10:55:11 GMT","end":"Tue, 31 Mar 2026 10:55:10 GMT"},"fingerprint":{"sha1":"B3:E9:0D:D1:BF:AD:E6:2E:52:57:7C:6B:80:A2:56:DD:AA:C0:2E:4D","sha256":"7D:6B:BE:E4:06:E6:53:3C:68:1C:B3:64:09:80:67:7C:D2:FB:27:42:E8:00:2C:3B:2D:5D:6D:55:07:AD:32:EE"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: thtaivujjcl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/html\r\nOrigin: https://www.up-4ever.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.up-4ever.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 01 Jan 2026 20:08:44 GMT\r\ncontent-type: text/html\r\nx-t7r56a8c12e41-86i92d2: 00000000000000000000000000000000\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-origin: https://www.up-4ever.net\r\naccess-control-expose-headers: Link, X-Application-Token, X-Application-Key, X-Tag, X-Auth-Token, X-DirectionPartner-Id, X-ZoneType-Id, X-Hostname\r\naccess-control-allow-credentials: true\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\ntiming-allow-origin: *\r\nx-application-key: ik7beWg1hM3bsjw6fd8tu\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/assets/img/logo-light.png?ver=1","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:43.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"up-4ever.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:42:49 GMT","end":"Mon, 02 Mar 2026 07:40:08 GMT"},"fingerprint":{"sha1":"5D:0C:68:8C:13:32:D0:C6:34:09:49:CD:B5:A7:39:BF:3F:39:32:24","sha256":"0D:88:63:0B:F9:FE:73:A7:AE:23:52:F3:81:9D:72:27:1A:5C:14:42:91:FC:00:19:3E:31:CE:43:BF:21:B4:E2"}}},"request":{"raw":"GET /assets/img/logo-light.png?ver=1 HTTP/1.1\r\nHost: www.up-4ever.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.up-4ever.net/b99nfkkhbe29\r\nCookie: affiliate=npj6%2FbmCqCt7%2FgY7FmNkO%2BQiMJMZ80msZ7dHZag82Ignw70sy7I61rFkaIdD7yZDxuEA5aZmgVlHsk1Qj6PQ270vtBmeknxZXNNMFWs%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 01 Jan 2026 20:08:43 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 28 Jun 2024 18:31:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12726\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cwiO1uI5oIuUH7%2FQuKaqARrFx64yoHOaJAR1C92kombUlA3CwKRCpJiAKdLmI%2FXUbK8olB04VzBK3HZhyyKKSSZB1W8%2BhXCp3rFPtlsG\"}]}\r\ncontent-type: image/png\r\ncf-polished: ok\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-bgj: csam-hash,h2pri\r\nage: 3675\r\ncache-control: max-age=14400\r\ncf-ray: 9b74a67a4ef60b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12726,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 136, 8-bit/color RGBA, non-interlaced","md5":"e7ae8b3716ca8c6f6963437ddcbdb160","sha1":"9b8891fb61cc1432d50112adc2fea14772114d37","sha256":"3084fdd15ab2da46282b43f471793aaf1ddf3eddfcc5f5004bd9b050b4fd6939","sha512":"a71685bd348400350e2bc9cc554c3ee8f85cefdc9ebe67c839977dd423c28920db9fb0508dc440b13b292878ab78e13c236042b7e61bba11d4aaf3fd1823fdc3","ssdeep":"384:a7MChVbcEP5chWGPDQ/yvOm+M/8vUm30kNMgy4/hBeOlx1:2hRca5chWGn3SjEeMgPegP","tlshash":"d442d0b4920828ecfdaf4cd2cbac80ee4215b055557324998df251c4f4a4b78de09eb3","first_seen":"2024-12-13T22:31:29.61481Z","last_seen":"2026-04-05T04:18:25.983552Z","times_seen":92,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/assets/img/breadcrumb/breadcrumb-3.png","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:43.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"up-4ever.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:42:49 GMT","end":"Mon, 02 Mar 2026 07:40:08 GMT"},"fingerprint":{"sha1":"5D:0C:68:8C:13:32:D0:C6:34:09:49:CD:B5:A7:39:BF:3F:39:32:24","sha256":"0D:88:63:0B:F9:FE:73:A7:AE:23:52:F3:81:9D:72:27:1A:5C:14:42:91:FC:00:19:3E:31:CE:43:BF:21:B4:E2"}}},"request":{"raw":"GET /assets/img/breadcrumb/breadcrumb-3.png HTTP/1.1\r\nHost: www.up-4ever.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.up-4ever.net/b99nfkkhbe29\r\nCookie: affiliate=npj6%2FbmCqCt7%2FgY7FmNkO%2BQiMJMZ80msZ7dHZag82Ignw70sy7I61rFkaIdD7yZDxuEA5aZmgVlHsk1Qj6PQ270vtBmeknxZXNNMFWs%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 01 Jan 2026 20:08:44 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nexpires: Wed, 31 Dec 2025 20:08:44 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Thu, 01 Jan 2026 20:08:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=arWsAsv%2BObznDGqhrqgZOnH0y4J2Azd2QmC6kKzZsA14RLzQT2S0V8sG3mQlJ47Ms0%2FY03UVOPyUapPDIDI2zXa6GOlWFEvpfChXyn9Q\"}]}\r\ncf-ray: 9b74a67a4efb0b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]},{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":39914,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (617)","md5":"ddd7dffab524d5b7245996389b368a93","sha1":"d6f8b6154e82955fe9c53e08ebf92031cc9b593f","sha256":"2413b5ee8aab99b20969cc7e92884a2cf3b4e19d761a4dbeae9d5a3f2077b489","sha512":"1e1fe3a48a0106dd0944377a3362931c50bc4db255bf31a71310cae0e6c82b9759a8ebd6b5c5f2484832805c369401702ff02e0e806bf0676de0bbd41cde67c6","ssdeep":"384:o05ODaKIQDeMVoeCFUli2YoBz0dliTLbgnhaCkmqPrPIFOP2Q3r/CYSE8ES1ud8z:oyKzJCBlAngnh1VwuQ3DCYano8diaqU","tlshash":"c303ea61c6bda86bc142d084d9a03e2b12aab437ead1c650737f575d3f82cd1198f6f8","first_seen":"2026-01-01T20:09:15.824844Z","last_seen":"2026-01-01T20:09:15.824844Z","times_seen":1,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:44.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.up-4ever.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 27 Dec 2025 07:02:38 GMT\r\nexpires: Sun, 27 Dec 2026 07:02:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 479166\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-04-19T12:28:18.251984Z","times_seen":215457,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":79,"dns":3,"connect":9,"send":0,"wait":9,"receive":2,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/b99nfkkhbe29","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-01T20:08:43.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"up-4ever.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:42:49 GMT","end":"Mon, 02 Mar 2026 07:40:08 GMT"},"fingerprint":{"sha1":"5D:0C:68:8C:13:32:D0:C6:34:09:49:CD:B5:A7:39:BF:3F:39:32:24","sha256":"0D:88:63:0B:F9:FE:73:A7:AE:23:52:F3:81:9D:72:27:1A:5C:14:42:91:FC:00:19:3E:31:CE:43:BF:21:B4:E2"}}},"request":{"raw":"GET /b99nfkkhbe29 HTTP/1.1\r\nHost: www.up-4ever.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 01 Jan 2026 20:08:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nstrict-transport-security: max-age=0;includeSubDomains;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nexpires: Wed, 31 Dec 2025 20:08:43 GMT\r\nset-cookie: affiliate=npj6%2FbmCqCt7%2FgY7FmNkO%2BQiMJMZ80msZ7dHZag82Ignw70sy7I61rFkaIdD7yZDxuEA5aZmgVlHsk1Qj6PQ270vtBmeknxZXNNMFWs%3D; domain=.up-4ever.net; path=/; expires=Thu, 15-Jan-2026 20:08:43 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FqiIVzUPwwSAC%2B8a7xPq6XFZlvhZb7%2FdHJea7%2F58bl1Je06Rtf9a%2Ba%2BKn2eBoZZ%2Bqtwl%2B3%2FNY5tqGxzhlLXcwzUYZZgyGxe8xAWWXwXS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b74a6776b50b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]}],"data":{"size":69487,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (28015), with CRLF, LF line terminators","md5":"19040c27b8b04f117cd581104ca9a712","sha1":"3a509273317872174eead7e04e884192ea0437df","sha256":"84f36e6a3c4c3920d0d5420f7d323d42c9971959d91400c51d5878546da6174f","sha512":"6ecdab06818e11fa2fb04360ede129f333e5b130a6d3c317dff5aaff5857735949326130143160d10555d0796c0f02e5e22251526365f93bca9cc4ce6074cdab","ssdeep":"768:y1uDwBSK72iwQ80GaIoQPzahq/AMOHDayx/x:GuD472CGI7MOH2yx/x","tlshash":"dd63e87530adb82a01539193a07d1b45aacec8b7d71f8510f3bc93762fc7d209897da8","first_seen":"2026-01-01T20:09:15.826617Z","last_seen":"2026-01-01T20:09:15.826617Z","times_seen":1,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":24,"dns":6,"connect":1,"send":0,"wait":234,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/assets/js/popperjs.js","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:43.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"up-4ever.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:42:49 GMT","end":"Mon, 02 Mar 2026 07:40:08 GMT"},"fingerprint":{"sha1":"5D:0C:68:8C:13:32:D0:C6:34:09:49:CD:B5:A7:39:BF:3F:39:32:24","sha256":"0D:88:63:0B:F9:FE:73:A7:AE:23:52:F3:81:9D:72:27:1A:5C:14:42:91:FC:00:19:3E:31:CE:43:BF:21:B4:E2"}}},"request":{"raw":"GET /assets/js/popperjs.js HTTP/1.1\r\nHost: www.up-4ever.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.up-4ever.net/b99nfkkhbe29\r\nCookie: affiliate=npj6%2FbmCqCt7%2FgY7FmNkO%2BQiMJMZ80msZ7dHZag82Ignw70sy7I61rFkaIdD7yZDxuEA5aZmgVlHsk1Qj6PQ270vtBmeknxZXNNMFWs%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 01 Jan 2026 20:08:43 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 24 Mar 2024 00:14:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\nage: 3675\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L8%2F%2BZ004AIUkeFVCQYvsuGz5QzFqkbxGYf5ymm%2BtvsrYIwbwbiobhukEY7IxXVI46h8XFwX13MEIggJ8YLjxtau9E3%2BJRf1pRHvoA4yY\"}]}\r\ncf-ray: 9b74a67a2ef00b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20121,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20033)","md5":"11ac784d818ffcb28043696d67eb9ed3","sha1":"0f5fa11562b7d8355c31e868dee06ad544c6479e","sha256":"ef9d782294421522458e434c973a266b8be6544e0919a51810933db18aba3987","sha512":"637a91e34043bd31369888410db5c7986e4f1dff1c157319ef008cfbc17d0c92a1feb55555312ab2b02d7018a509eabab5dece1120971906b087474c6a5caa62","ssdeep":"384:PZjckOxmemwN3igs6HdfGmLmnNV5LrpfV1Nn1K4kwTiO6rg3MI/9NUmJ/aZu:uxmemg3igs69TYf/pd1Nn1uwXSg3MI/N","tlshash":"3092d7dc3a94f0e5167b52bac03f011fb2379524218ee510a255d6c92c74ebba23bd7e","first_seen":"2023-11-23T08:24:53Z","last_seen":"2026-04-19T07:45:43.101288Z","times_seen":353,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:44.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.up-4ever.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 31 Dec 2025 21:59:25 GMT\r\nexpires: Thu, 31 Dec 2026 21:59:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 79759\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-04-19T12:28:47.941286Z","times_seen":307255,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":117,"dns":1,"connect":21,"send":0,"wait":10,"receive":1,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:44.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"up-4ever.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:42:49 GMT","end":"Mon, 02 Mar 2026 07:40:08 GMT"},"fingerprint":{"sha1":"5D:0C:68:8C:13:32:D0:C6:34:09:49:CD:B5:A7:39:BF:3F:39:32:24","sha256":"0D:88:63:0B:F9:FE:73:A7:AE:23:52:F3:81:9D:72:27:1A:5C:14:42:91:FC:00:19:3E:31:CE:43:BF:21:B4:E2"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: www.up-4ever.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: affiliate=npj6%2FbmCqCt7%2FgY7FmNkO%2BQiMJMZ80msZ7dHZag82Ignw70sy7I61rFkaIdD7yZDxuEA5aZmgVlHsk1Qj6PQ270vtBmeknxZXNNMFWs%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Thu, 01 Jan 2026 20:08:44 GMT\r\npriority: u=3,i=?0\r\ncf-ray: 9b74a67d5f0f0b65-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/d39f91d70ce1/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=a1x1sY%2F2cveklnxlgOTXRfyqqkhxoIUmqvOQ52dQRfJboqVXTX3bHqIW83wuPZXYgXdmL4FQgp2uqP0ybrbxC8cxfMs1ens0nVcmnXLDy956GCcKEu2I2UQIHNtNpxoCItF%2B\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1494\u0026min_rtt=498\u0026rtt_var=1143\u0026sent=260\u0026recv=47\u0026lost=0\u0026retrans=0\u0026sent_bytes=265549\u0026recv_bytes=9968\u0026delivery_rate=8901090\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35722\u0026ss_exit_bw=5696658\u0026ss_exit_reason=2\u0026cwnd=23268\u0026unsent_bytes=0\u0026cid=070be8cf5886ea40\u0026ts=754\u0026inflight_dur=153\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10368,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"thtaivujjcl.com/","fqdn":"thtaivujjcl.com","domain":"thtaivujjcl.com","tld":"com"},"ip":{"addr":"139.45.197.163","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:44.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"thtaivujjcl.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 31 Dec 2025 10:55:11 GMT","end":"Tue, 31 Mar 2026 10:55:10 GMT"},"fingerprint":{"sha1":"B3:E9:0D:D1:BF:AD:E6:2E:52:57:7C:6B:80:A2:56:DD:AA:C0:2E:4D","sha256":"7D:6B:BE:E4:06:E6:53:3C:68:1C:B3:64:09:80:67:7C:D2:FB:27:42:E8:00:2C:3B:2D:5D:6D:55:07:AD:32:EE"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: thtaivujjcl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: HEAD\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.up-4ever.net/\r\nOrigin: https://www.up-4ever.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 01 Jan 2026 20:08:44 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\naccess-control-allow-origin: https://www.up-4ever.net\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid\r\naccess-control-max-age: 86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":63,"dns":11,"connect":26,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@phosphor-icons/web@2.1.1/src/fill/style.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:43.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /@phosphor-icons/web@2.1.1/src/fill/style.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.up-4ever.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 01 Jan 2026 20:08:43 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\ncf-ray: 9b74a67a8efc569b-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 367569\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 01 Jan 2027 20:08:43 GMT\r\nlast-modified: Wed, 05 Nov 2025 00:34:45 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:VVmAaDpYLBkQqVRki0rjj1jXbnl/Ar/cLF6BeQHm1Pw=:\r\nfly-request-id: 01K98PZZCW08YQSR79HDVT8BS8-fra\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85821,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f0561d4b928f3521c1a3a66507052039","sha1":"afb44a713f4dc526e2bffda0535da7bfcfcb44a9","sha256":"555980683a582c1910a954648b4ae38f58d76e797f02bfdc2c5e817901e6d4fc","sha512":"7e1018b04408350683e5913ca90abe30976821b7be2f027af178b9635448d07f975c15965f400092f80c086324ebe51118ded29604a0b70b02fdc13cd0cb2218","ssdeep":"768:Tco1Z16hMNSpfiIxQ3c90yfeLIw89KePvx7N+jLTrWROx:Tco1ZkbRxP9d2cwWFvG","tlshash":"dc83efe8f7be1ad03341d1d0220a1632bb0d9324f986bc59c963798d71ea119d78e5fe","first_seen":"2024-04-04T21:10:48Z","last_seen":"2026-04-19T10:30:38.959576Z","times_seen":1159,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":33,"dns":0,"connect":5,"send":0,"wait":18,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/assets/js/sweetalert.min.js","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:43.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"up-4ever.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:42:49 GMT","end":"Mon, 02 Mar 2026 07:40:08 GMT"},"fingerprint":{"sha1":"5D:0C:68:8C:13:32:D0:C6:34:09:49:CD:B5:A7:39:BF:3F:39:32:24","sha256":"0D:88:63:0B:F9:FE:73:A7:AE:23:52:F3:81:9D:72:27:1A:5C:14:42:91:FC:00:19:3E:31:CE:43:BF:21:B4:E2"}}},"request":{"raw":"GET /assets/js/sweetalert.min.js HTTP/1.1\r\nHost: www.up-4ever.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.up-4ever.net/b99nfkkhbe29\r\nCookie: affiliate=npj6%2FbmCqCt7%2FgY7FmNkO%2BQiMJMZ80msZ7dHZag82Ignw70sy7I61rFkaIdD7yZDxuEA5aZmgVlHsk1Qj6PQ270vtBmeknxZXNNMFWs%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 01 Jan 2026 20:08:43 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 28 Aug 2024 14:51:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\nage: 3675\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cscr4PBj0kKIe%2BVViED%2FIw2mpjc5U4AVbujAwb3tRzP8IqoI%2F3JaT%2FTGAhEFA1ySwnfjGx9MuMjk7Ll6Y7b4Nv36NLG38FSHm69HMLdr\"}]}\r\ncf-ray: 9b74a67a2eee0b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40792,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (40792), with no line terminators","md5":"78d6d0d77b38c6bddfb8fecd71cad940","sha1":"f73319c9ab6b8a0e0733a0d9a538620b4ca23562","sha256":"92514bfb5aa460c0365f8eaf2ce2d31f0e089fc1ced03aba0f40ec9aaa3e1556","sha512":"6920d930c711d4a28027bea4ed6ce3728c222b0463761b9c24cdf7e201b4d99c640161e9c6f563b087ec1adc105de230755fa750c90d0087a131a15df73b4de9","ssdeep":"384:/BLa4qL1li0jldLUuuAzdNU/CfFqLyX9ye1hAbj/i5Yy/kyyeu8pgUqaF2XSSHEj:ZLahUadNU/CNqWX9ye1hWz8+B3c2Bkj","tlshash":"ad031a96758470a643e398f191ef020ef2359523b84798d5b361e8e88ff4e8d50a7f1b","first_seen":"2024-12-13T22:31:29.632096Z","last_seen":"2026-04-05T04:18:25.992538Z","times_seen":92,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/assets/js/popper.min.js","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:43.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"up-4ever.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:42:49 GMT","end":"Mon, 02 Mar 2026 07:40:08 GMT"},"fingerprint":{"sha1":"5D:0C:68:8C:13:32:D0:C6:34:09:49:CD:B5:A7:39:BF:3F:39:32:24","sha256":"0D:88:63:0B:F9:FE:73:A7:AE:23:52:F3:81:9D:72:27:1A:5C:14:42:91:FC:00:19:3E:31:CE:43:BF:21:B4:E2"}}},"request":{"raw":"GET /assets/js/popper.min.js HTTP/1.1\r\nHost: www.up-4ever.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.up-4ever.net/b99nfkkhbe29\r\nCookie: affiliate=npj6%2FbmCqCt7%2FgY7FmNkO%2BQiMJMZ80msZ7dHZag82Ignw70sy7I61rFkaIdD7yZDxuEA5aZmgVlHsk1Qj6PQ270vtBmeknxZXNNMFWs%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 01 Jan 2026 20:08:43 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 21 Jan 2024 01:17:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\nage: 3675\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qwx4%2FDphJd0yqghMCZadcYX164UuI3eWCH%2B77poFSikHTDmh4HvOTFlHz3kQAyeFZj%2Fm8KH69zQGs1IL7%2BWP3a0JIj1BEg7fZsV3LB4O\"}]}\r\ncf-ray: 9b74a67a2eed0b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20122,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20033)","md5":"31032b08bd8e72220462d3f54f8bd69a","sha1":"871d6ef1070bd363ea390e0c8c384e47dce7f389","sha256":"c212f4b505a86352aed62b24a8f16f999f821ecbe6456c7f3c8a04bc87968782","sha512":"4cf8763b1960d73a7e933de7140d02e6f542ea5786ffa9a6d73f7e980f35308e5e69456a6ac3cb3bc0ae93880c1788147cfe5eb51ef7ae053ff0f34cb127aca1","ssdeep":"384:PZjckOxmemwN3igs6HdfGmLmnNV5LrpfV1Nn1K4kwTiO6rg3MI/9NUmJ/aZg:uxmemg3igs69TYf/pd1Nn1uwXSg3MI/9","tlshash":"f392d7dc3a94f0e5167b52bac03f011fb2379524218ee510a255d6c92c74ebba23bd7e","first_seen":"2023-05-30T11:24:05Z","last_seen":"2026-04-19T11:03:13.734791Z","times_seen":9302,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/assets/js/ult.js?r=7","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:43.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"up-4ever.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:42:49 GMT","end":"Mon, 02 Mar 2026 07:40:08 GMT"},"fingerprint":{"sha1":"5D:0C:68:8C:13:32:D0:C6:34:09:49:CD:B5:A7:39:BF:3F:39:32:24","sha256":"0D:88:63:0B:F9:FE:73:A7:AE:23:52:F3:81:9D:72:27:1A:5C:14:42:91:FC:00:19:3E:31:CE:43:BF:21:B4:E2"}}},"request":{"raw":"GET /assets/js/ult.js?r=7 HTTP/1.1\r\nHost: www.up-4ever.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.up-4ever.net/b99nfkkhbe29\r\nCookie: affiliate=npj6%2FbmCqCt7%2FgY7FmNkO%2BQiMJMZ80msZ7dHZag82Ignw70sy7I61rFkaIdD7yZDxuEA5aZmgVlHsk1Qj6PQ270vtBmeknxZXNNMFWs%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 01 Jan 2026 20:08:43 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 20 Jul 2024 18:06:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\nage: 3674\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hqjXX0HnKxRW4TPH%2BAkbdmex7X0QUbHAvnplnqnUG07LuYY4ku7bfYTo7wRNC%2B3fF41u5RuJsUIx4d7xpp96q6bVKA2%2F7IVBaj%2FsCyLa\"}]}\r\ncf-ray: 9b74a67a5efd0b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":587,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"658c6b1e94658a650aae15d10ca899e6","sha1":"ff27b3f42d13905f2e299acb02665c8cd80cde8a","sha256":"829bc82f925809803bebad16819ff1dd73e59a2685c2c5a9e7c000ce61d142a3","sha512":"682e6e372ccd727bcd093699389a3b88c7a504dc0d1604ffae81f0a65da51308a34b0cf4fe912d02bb2da1e28b390fd4fb06438dedc650b4d471a59a5a62b239","ssdeep":"","tlshash":"3ff0cd80336606b344df98aa505267cf7130408f01c9b68efc184a491fbbed0e6aab75","first_seen":"2024-12-13T22:31:29.669002Z","last_seen":"2026-04-05T04:18:26.018651Z","times_seen":92,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/b99nfkkhbe29","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:44.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"up-4ever.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:42:49 GMT","end":"Mon, 02 Mar 2026 07:40:08 GMT"},"fingerprint":{"sha1":"5D:0C:68:8C:13:32:D0:C6:34:09:49:CD:B5:A7:39:BF:3F:39:32:24","sha256":"0D:88:63:0B:F9:FE:73:A7:AE:23:52:F3:81:9D:72:27:1A:5C:14:42:91:FC:00:19:3E:31:CE:43:BF:21:B4:E2"}}},"request":{"raw":"HEAD /b99nfkkhbe29 HTTP/1.1\r\nHost: www.up-4ever.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.up-4ever.net/b99nfkkhbe29\r\nCookie: affiliate=npj6%2FbmCqCt7%2FgY7FmNkO%2BQiMJMZ80msZ7dHZag82Ignw70sy7I61rFkaIdD7yZDxuEA5aZmgVlHsk1Qj6PQ270vtBmeknxZXNNMFWs%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 01 Jan 2026 20:08:44 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nexpires: Wed, 31 Dec 2025 20:08:44 GMT\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IeqDMbNZzST9FAZeo75GY5OubrWR3fru5CAiE%2BJJLs7Kocnf1azU3gWI34KxfAr8hmHl8E1UyvdduwMriZ7wbQvcChcK%2FacAIq881TA4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b74a67d1f0d0b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/js/paging.js?r=37","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:43.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"up-4ever.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:42:49 GMT","end":"Mon, 02 Mar 2026 07:40:08 GMT"},"fingerprint":{"sha1":"5D:0C:68:8C:13:32:D0:C6:34:09:49:CD:B5:A7:39:BF:3F:39:32:24","sha256":"0D:88:63:0B:F9:FE:73:A7:AE:23:52:F3:81:9D:72:27:1A:5C:14:42:91:FC:00:19:3E:31:CE:43:BF:21:B4:E2"}}},"request":{"raw":"GET /js/paging.js?r=37 HTTP/1.1\r\nHost: www.up-4ever.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.up-4ever.net/b99nfkkhbe29\r\nCookie: affiliate=npj6%2FbmCqCt7%2FgY7FmNkO%2BQiMJMZ80msZ7dHZag82Ignw70sy7I61rFkaIdD7yZDxuEA5aZmgVlHsk1Qj6PQ270vtBmeknxZXNNMFWs%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 01 Jan 2026 20:08:43 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 15 Nov 2024 19:13:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\nage: 3675\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=drh5mtS2tP0W3qNaNIMFnuCa6bUTg7ht2thNJTCCLDqU94f3UNSLSetp5lkY1uSsOy6tCZM9ybNIrrv6vLung5HixOfLCJNiyD8ydBt3\"}]}\r\ncf-ray: 9b74a67a4ef20b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4619,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"65acc03e89e31b30c305636f9e472caa","sha1":"dc6fcc5aa2f4203fa683eddb31ba86fbdef16191","sha256":"50f473b7cf9135f5703b2b1ef99dc5968df531b75c09790f77438f2f45288b95","sha512":"72e7013de7a0fb8797f8ed8b1c40723a9c9070e0ccc9aa3c7a2c95c35f97f396a39732cd42cf48b095ca3ca0f107c6708886bf5b16bfbea53b0021da3163e2ec","ssdeep":"96:aTp2f6zbd5045GqtfxTEq0EQUEPEDOfEeEdUXE+gELREUJbeZh4xc5:UI6zbd50eGqtpTEDExEPED2EeEsEDEFc","tlshash":"bb91dc1d28f390117263333b668faa457e25b0078485de58ff8c8a895f49d3476a3fad","first_seen":"2024-12-13T22:31:29.673303Z","last_seen":"2026-04-05T04:18:26.02386Z","times_seen":92,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@phosphor-icons/web@2.1.1/src/regular/Phosphor.woff2","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:44.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /@phosphor-icons/web@2.1.1/src/regular/Phosphor.woff2 HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.up-4ever.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://unpkg.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 01 Jan 2026 20:08:44 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 147380\r\nserver: cloudflare\r\ncf-ray: 9b74a67ca9015696-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3793256\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 01 Jan 2027 20:08:44 GMT\r\nlast-modified: Tue, 14 Oct 2025 23:54:49 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:wupF6gX/XH3xk2dwwQRyXypo9D/TQ/NfPaI6MLJ94yo=:\r\nfly-request-id: 01K7JJBR5N4A2A9B73NV1SRV7W-fra\r\npriority: u=4,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":147380,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 147380, version 1.0","md5":"527636c38907af87d10e6b15ac392648","sha1":"0d815f14037397ccbfd48fe5dfbef96ed6e66205","sha256":"c2ea45ea05ff5c7df1936770c104725f2a68f43fd343f35f3da23a30b27de32a","sha512":"e8e65252471cb9b85a3f03e128c3d504c7ea73a1123bc40b18dec46cd1b13da83a1313b1606b9a969cb9bb646bade289e5c8b5096a440505113e1652190d2511","ssdeep":"3072:AQbeiU5I7UJEmgfV57cK0jt6lvmT9QiyDsoEmmTHNAk5rsSbro:paF5DKXfVmKRxmKgmmTHNWS4","tlshash":"96e312840a514ca8d08167f795c42b1bdac69bb6f0b1e94d941f9eecd3bcf90f2d4a14","first_seen":"2024-07-01T20:12:46Z","last_seen":"2026-04-19T10:30:39.027364Z","times_seen":3502,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":15,"dns":3,"connect":0,"send":0,"wait":28,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/favicon.ico","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:44.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"up-4ever.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:42:49 GMT","end":"Mon, 02 Mar 2026 07:40:08 GMT"},"fingerprint":{"sha1":"5D:0C:68:8C:13:32:D0:C6:34:09:49:CD:B5:A7:39:BF:3F:39:32:24","sha256":"0D:88:63:0B:F9:FE:73:A7:AE:23:52:F3:81:9D:72:27:1A:5C:14:42:91:FC:00:19:3E:31:CE:43:BF:21:B4:E2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.up-4ever.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.up-4ever.net/b99nfkkhbe29\r\nCookie: affiliate=npj6%2FbmCqCt7%2FgY7FmNkO%2BQiMJMZ80msZ7dHZag82Ignw70sy7I61rFkaIdD7yZDxuEA5aZmgVlHsk1Qj6PQ270vtBmeknxZXNNMFWs%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 01 Jan 2026 20:08:44 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 07 Jul 2024 18:32:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: image/x-icon\r\nage: 3674\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yS6WK2Ak91a0D%2FCCWREiEGnryQudhX%2Bet5AU6d4QsCBi7EoeQIOArV7iub4VI5i08%2BMEKE7MC5d3zonD3Wq3Z%2FaLosVELS%2FbcTwnzJpU\"}]}\r\ncf-ray: 9b74a67def110b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4030,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 30x32, 32 bits/pixel","md5":"9e52093669f047bafb404675ebcf8ef0","sha1":"795cc2be719d598ec415401ec3bb4fa6196dd3b2","sha256":"3f8a0a01a9c5f93cd3568f55a16f7258077efe4798146b16cc74993e79c3774c","sha512":"a93a8dd3210998e118996a8f9147fc65f25f0ccf737dd714af2f6423bd66917bde36ae4251f209a298d1c3fe3778c199a9e266eeafc0bd79eb70f900a1c62f29","ssdeep":"","tlshash":"d18164a2098e2075d1e1592eafdd0339fd3a21ce49f50b80e1a1dd5d7e23f90a3897d1","first_seen":"2024-12-13T22:31:29.661455Z","last_seen":"2026-04-05T04:18:26.02319Z","times_seen":92,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/cdn-cgi/challenge-platform/h/g/jsd/oneshot/d39f91d70ce1/0.842109159370382:1767295389:HgRtMy1gc_WN63nRS9xieYqPhK8uw0W0rh-aR8yVhnA/9b74a6776b50b4f1","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:44.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"up-4ever.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:42:49 GMT","end":"Mon, 02 Mar 2026 07:40:08 GMT"},"fingerprint":{"sha1":"5D:0C:68:8C:13:32:D0:C6:34:09:49:CD:B5:A7:39:BF:3F:39:32:24","sha256":"0D:88:63:0B:F9:FE:73:A7:AE:23:52:F3:81:9D:72:27:1A:5C:14:42:91:FC:00:19:3E:31:CE:43:BF:21:B4:E2"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/d39f91d70ce1/0.842109159370382:1767295389:HgRtMy1gc_WN63nRS9xieYqPhK8uw0W0rh-aR8yVhnA/9b74a6776b50b4f1 HTTP/1.1\r\nHost: www.up-4ever.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12178\r\nOrigin: https://www.up-4ever.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.up-4ever.net/b99nfkkhbe29\r\nCookie: affiliate=npj6%2FbmCqCt7%2FgY7FmNkO%2BQiMJMZ80msZ7dHZag82Ignw70sy7I61rFkaIdD7yZDxuEA5aZmgVlHsk1Qj6PQ270vtBmeknxZXNNMFWs%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12178,"data":"xUvb9zitLCEViVViCiy7Pxeiw7xL7xbidiy0v7ubadEW7nweeQ8mPdENvkZ7Ebe4m7-tcbEy70--SG7Yq-DG7aGzb7EO7EliCoXEwdmrsLjN9CtmEIciQVfPYs7ie5kyXuEXz7sVNnZj7E0CrPYO$7PHi7AOqaLjQfXixvfvmuvzhV3zUVNJ72Yai9yjtBb7DlwZEpy+75W9ge9X7NWh79Xiea-C74AINNr7N5IRzA8vosg5cAqX7NAv7EX2UwQwOG4d7yzpOjgrfmb7OlwCXa377AYshE37OCm7qAHjsmTUOVAX7eAvXAwrE7rxbSkfbO7i3QizenlC77dYh9izmfi8AiVqi7EBobiTYOu77zUCiwXedYu7O0CSztdtXg+WIDWwOCYzLk+8MLN45XAEo8LL4tjaupHL7vFB0rQSh7vmr$9suyekLi4Cr+xsSv4Ye4gF6cvOR0s7Pauo7VF9xc-$95j0o-m7No+XbHoV0URIjMNV8qF81HjB0n2l6wCZwVbizdDG8YLZzxrI8v77nepbUGa55T3PXQnCAEXdnR0MU2MV3wzjoHRi9dtc8YXSJ2olt0p8BFFA-XZN-NuMNO4uIkGI76nbRYmT1tD-VNFWWl0elNx3RIDrxXsLo+02lp1-S7+eixFn7JfobBEhNTJMhEt5$RgJyv+jstluTQnz9RJEjl0eSWfs7lioW$0tSsEpD8sMfj5mOPa4ooeCVL$djXFP90X++Sr4HyxaxA$AD8HcyOWb5ShU0SfgRGWmuG2vim7Pt19aiaNajNuzP2x5rPqOmHLSkj1E7CXMitxsTGmxiEJJvo-aVlXELYYOpHjy3sLIC7FHC73IPdjUjLdE5E7Ip3E2aCXdHjlbN7aAuzLlvvQLlpbdwUduYzLlb3E7Ndsiaam0HqfifiUC7y9ataPBuQomP2FOGPao9hVCavX21YUsajfZneo-vaNt6bs70phXOHv9iB67ZQv0AuGaCOhhcFknILzw0k9Xtd3OUDhsLl5I$y1VmWIIld$i26ejE1Ide82ci0he7rGOhQiUNh7nuyFJIhA2wdWgGdX$eWcXWVymFdI1MnGBdUoH0CNu870AUN9NMdN7029p9kXOl2tIrCz67pNzhpp6h73+hfGXPlimhYud3jahtuf7Ud9NikQihSu6Pak3XssMiG2s3dAbSwGBbvWvtbd0CaFWC6vwoS6QZGtr1M68UluzE7tOyCZXsFaJ8I8aJGb$n70hopavolQzUbe4ulNfaGYruyviZuiBVm1eDVs+QXmXLduW4MujC7ar3HizzkThSuL2DkE7P4FbjCizPWC9sb0yaZOCpYCbyCGO7uFFHAWR-gECfPh3lzFmR7CypV5BDkiaFmX7ye9pnX2DIOj9NNaC7HMVCYaQVheymiFT-SaC72SPii4M47PwQOvf7SkvOuuipcwjEOPmSP2PmMrRgcwR+JQlTdaeeRX72iECpmABMGcrL33dDRAEtDUrl0DROYz4iBNuvbnBNJ7fGMWr7LBYbcX$nZDUE9ZHmsp1346PjCOAHeQ1$qR79$96k7vsGO6a7I6uumPGE7f7iJQjqZqWTBYEtLbaP4stLnyi1LmEWsJ77RiXEt2dF-z7mUfbO5AqCOnxbjXwRr3zaACW77+Abdb2F221xvehxiT4U2hkmxbEEEEH9NzMtIa45EL21H-lGSt018GhYm6kgb3LdMvCrf7FSePaWaVHdbUuh2$PJkvONub$vumqPS0XAbkEBA8O4kU8TW5w9dz8Cm-57o4AttU$FPxYLHFA5U10Q5nFXHC7U0hVstbyaScboaJeXBUazSabHLtaHXBvSDNIFj0wZ21OvOb2oHHbEGSHjbsYoPS2dtlphEaPd4GueHwvkYouz7N2776NgFHsPofb71drl7+NhPUIa4xCUsPjxaWedi877XegZLe0Ytba5VrBYosir7TCCF0ow97371AVBA9NEHjLPECaJOyADnvs3FwDphu7t5sX00V+ec7P5pyotVzCMCwzQe7PLeVLelivu1OgCmAsBnBAFm7lYaxv2Fko4memzHJHr$uYn17pwZfG+GLZM9Cvt+19XXz0Pa2nL8koPE153lm1uBi5oZ288JRwtSE7C+eV-L4ubUok+u9D0m++G7PYPg0Wrw3$Mg7eEF0B77nS4eDypBowQHVX7nir5Ji0WtOEGMw+-jcUToA-hwMD4cjqkII1vPOxDY2F4vteJAeYGwZ4VHYSEhCmOUweq2teI3Gr1w+IU1OTp0+WsbS7e+koVbD+i11Jrz2Fb2ND$MGXuSfm1QtuM$2TQtaxho7Mz-WmtVXadmD4oZQ2TBdiAdzyO0zk4axOBU2xOYCm0bOEPWnYBf7znFduiEtt0UHp50nCGCFJm$-1NCnOyNIFMmS9VI-SmtXMCWi5e-kD9DfGHoMY2te4uXu2Wmriz79UrmA3bOa9V+bISyderI4yVmE9t5CvV8Jc6tn+Hu8xO92az5$BMnuytVXnOYEB8R4ANb7gdlpetbLCZOmoh5-4YWc+sxo4zOwxmt4Bljip8Vw7LCNVf4z7fQbvT09EEwPvOOiZS5z7prZtsC7sX8rHsEDXMucu$MpVvJ5tIdIWHSxdXR4wUp$MBv7vhmJWtyH7Hzh3tfEMjraw-cW0sInLQZc3PHFLuNfmSh9zEtgmjlPCiYVfRDtx-AEbXWz7QocZ4wLJUzjitV-P4Zg8b8LRMXG8xotG6NvLaES$GD0aBJ5Tar9ldYggd6DPTcuSFGedLeT5kidAXImWOamSLoUJ4t9jA87FwGM3LCkjIEbO2tWcnCFDR35utG53YDgELX8dVv7EamGJa+TaU3VXFewmEWcF2Xfv9GCgODI815z9XIxfV4tQ06hIlwB7FlXpYw0yvyWHCtQrMurLVxjLBhpkYgxht4ugPykSNLOXP7WG2vpZbzEdxrVWQsf7$OJeDZ4YuOEzSVX0MviX8OvHkD+3OG-fqegV+Fw0tvyvzaZrdQm42v4qSwawV77xOiuidfbl6Z-ReAy4gBWbgG7gFrjTEw-zoIH+Fss51YzucUX-a7g3m$YQlw4-Fag5IF1tsEv+dPpWAxWJo1fb7r$YI+wadquB1eos0ZuBOLx1HnpdLSNGG$Zb-uMCh1dAxkDxMbzEj4+ePE2QN482YlJZ4ELN$93wvSFOFZdHqEovrGUz7pGc7J0BErYBBgytVXdoZWqsJY2j4W-4YgLJaQt6hYePELepHLOCwlN8Nj-P80Mrkc$b-tTNvkAviCcoL0jeehC1A563ak3MmsbtPBFY4-kUswtTEdqAeuY98aDD$CyZCWY7sLT6yDYax$IxnAcW0oMchvixmt8lGHrqVqCJEhHhf7TIIRunHJYhB-cYIMPBrRc7GQnqvX3WvyYtCNEIsa7Ex1lnS72R7abm0v1X5848mzfX1GfxgTvgwHgUeaOTFTh3ZgM+rC-inZNBbdvDI72vvje49JiSwBE72vMJW7Pd90k0wXFVZC4jWC8D7jGHDXeCrgG7UdriFim33C$eZ+UCog8bFgLZPuMuCxVxoLoH1gW3mC7EnvuV8giroDG0hr3uihoZqOWuDdzVsZ7xWbAbRjlrPhTamOXE6ThmPiN7Wtm+HTw0H3eDr0waI7003OPSReMSZuz79dXbcimmXTy4ojg0UDr7iiNd$vWL3+rxVxJEkEe4mEwjILdE4COauVsjgLwuDBsbVhlVSLqhYJJTHVGdamWjrOuevShBQv-dvjtsoJWe5mvTv36B8iarpC9TFdnTJt3+y+xvzBdSrDAJEOwdUmet4Z7TGBsTRtqEYgbjaE$BYEzLOZzi4EhmZCjBhsX5dTbjI5AV4zY01v0uF48iLiiz+HUz+CjCwXqLfEN+cLmiwOe3ZavCs0F3G5it9EqvDsMuIChryaf0AbBV35cZxSR4Pdk7MTWTXJqjSHN0OrPaXDsbeTYCrjzrXmN7hgF4JVbThH4mlD9z3+8bZiltCLCg170gNT1eO+ptBzwbjgmYJC7+oUka-ipj+edUBt7gXmp4igpxZuTihB$BUL3TJr$SwYcHWaXmWgpCr+tbH7czAjSiQ5eVlrG7qEQe$eig7jrTw4Euwir7t4Ag7jgDNvlhGdEzg0RHhmEzjHzTBZkoOgjH+ZfiLZbEd30J8SGh6YiYziF7YUAzkSXmL5f7s3$BNO8guiNOWaydwg3Ylht5OiQbu4$C-Cim0Z8iw7AuwH1O$BkD+sxejEWXz+3CvC+T87xT1vuVs0XoyYhHsm$7$jh3$SyaxsCrLimST7ih3iwaYbZg$YGi8zLTI7AC$b8UG4ojjBNORuIigxPzuhPoGoegm-u5QHH-4ovxyu8i1iVG9gy0uEkYDJFUzxQuXhTgMuEg$bXTwd74QoX7tUOinZwGD+pLsBejzYue3-RvvTOD8iaT2D8b0ahmDVX-DBvuGtpjsvWGU+aYdYtbqbVrXhp-X0kxxEBCd5+HlVtSWjHGNTFx6OPBfbugHDsiwG3o$-0Lh3i5-oHmNVS7JoGOQuL7fjh+obaLlLtxQ-HzCT7L$GF3WiBX2v25QGRjPjF9Xh85AdYBo-btFG+UIGvS4-5mzdS7YJsDTrY71e5mxCWa5LF5-4nherBGXFIjv9xzgBDxnZRD2Sg58urF176iSiSYBBlo4Z7S3rj78HFB7ThFaLWrue85OF4bFU3LkhsESdFUe-j0m7sml78dM9$TxDN7PTr9$VoBe51ir-0ooHEjMt1deBYjlUZUg4PrNo8FmoNE+ad30Z6CEzGgkh0-sHGEBBd-px7CUm9ekipvCTGhUSyuRbOuEiGTPCjDMDRTQ7eEyGhtAeT9Rr$HdVWJNtZZ-JNnMC9OqvQTc9SHtuIxjihjhaD9h3kjvYOOEiS5fEX3YUVhh+YEJBpCc99oEhmJtXLmQi871CO7HL0+eduVinWJsmOb0UVChh65hBtbI7H97tZG7JSdmbsZR0p4v-it0V$5Etj7VIzhxJLopUcutbvHarL7W5JJugJuIbNiNFahwntD7r2Vduy9bowu9TBYXnBHe9Z5QGjBwG7C0IaE8zavXuUo0IFZijP4lpJnh5OhkVNpDdSHzJzD8zOhu7kV7nM-5nm3D4izisSTSihls0sbqxhIVB1geo7hyzoH4mLbBD1FXObUoHzluF2Yqe2IjCH4PBk+7rmlQeCuqef7dhPVwJPSziEj14qFqtDIXzPlqEC-SpoaQuuB8TuG6o9IFUsDCDD4wFLFsDmnD5YtvjTgr7S7OGFp6z3j$jeC1is7sb4uAntuovxIcn53ExR+5moYGUsUTom9pxtb05l9FzHdW7e5BHEGgBpCuu7xbxz7iLo-gTb-uz-7s5RSR02UAuenyOlefdY-ZnYCP0VD1oIE8zuVkHyZQCV5tu0J7x-+YLHpetVlsoVodFCg1VXuvn17wCEbgtXGedV9EYM+3OiUCndInL14anb+WZrDcTgirDRlNHoI1vL4$EoaOhOYoTGjDU6S0G7jdIFuRrDSSvsVQldbAmqmWodYb0HmdEliXJIUMhSinZv5BxkjazTLMo$Ty4Epqbj5MoGJaoLF6oNVd3RYBVhJR19tex1VlTt0Snb-$BIRH4Zb8U$n5II2Wv4mU1zFvjXoOiGa$vfFs30Z+HQuVrlZ-Jcu4BJrMjsU55-Jl5wZyTyzCoG4AleEE7CDs2T4liZLwn1Vr-1ihpk0zr60xdHoChdSQ-HjvY7osZWuWbcbOxD4oj1RtdCOX4O7$2ZSnt$-X3oov3pCgDqnr7X0MrwHE57CLmhHvs+2E1m7bRleWTrPf70ZwdQHnLduEbhxTVqERPRbHmiD9l7YqasZw-Mzku6GmPVl+poajBtRIlbGJILp1p2lOBzRjuSiT7ZxY9WSbGuPhaFLGI3nqgPjWJR+0TN+W+VGGGmS69Xt0Z3UuVUtatEOzVgD7lRJEztG9Gzh3wT7EiS9gYWSCrwihYlFjHFmTnQGorOZIiYh3bAEs1H4D4YLhOQBYLtRr2j-tukxStB+NGC5w4ojWR-JBLNeSLnizU2GlLIi1L$bC+taZi3d6U$FJhQCMPmGqoLR-CxsWePwnCq77SQG6EwmY1QvkiTL6pQB2RhBcTFFL9PRzDCCg48gsuB26mZzu97gy4DzHgt2e29wO7nwsMuGCl37X1-ic9pF6wYBilBhDrhFA9-Jy181GdHNuV85tDlFUtvs$wlgEidPFiO1UZTYno5Y1FInWNl1vC8Al9RDGP5lQFBJaUvZ2wB+3Olj8rS7ugR0z1ICujWlLlgAulLCB9GRQV0n-DWbuVD04HZHs7uwaI1e0rOJIGlwCTyd8gE0XLSowptjILOhMbAbwLuPobyeRo+tEYHRhBzwwb7I-SM98RmGzzLRePoRwl5onGwbzCzhBoyCP+25iM2JaJxw6FXSIGF34tTB1-mGeF72jllWyEljn5Mlc0LguUGdART09hs752-iqlUEols7mu+SpxZYli2Tc9BSXmN+Gt8rNiDtyeFPNvPbynCxQb5lx1U3DPVWAuqHmRIoz1lAOpoMNiRiyGIqpH6bXuqedmmlk+c7OlmqtDMLvMRFpTginwC2VPAdtPnZiCN0yVUGeSY7Zb-7$nojNPt0tR1PgqTDkMOxWpUWDh3ldyo1GUuGPlsDil37U-GSxv$BU+ZOcvg5ugk16pf91iPBzqZLs34SceCoE0pH9RZNpw$Gz-iEc95T1JtqZWZCN+5ioTHDzi3awZ4bE2kL105YpoQzLCN0uPDHSfmUcGUGwXVxNbvgWeHMUFGTn2N7hnWL1q9qCf+UzIoHeMqzM49lf22M8zHGu0300wDP4BzLhf5PYxU1nYepCS+HZx8pdq89-T-4GO$buTrig1ywdu1DqDH4Cu--9VzhS9ZxbNrMuIA3JMGuY7NcFYoagYRhT-PjvccNmfquhFjtLSuNg12yHF4o9G80gneBrBI+VWuwF3v-Z7gT5fbIahvjeM$BkAMtpWhJzdEuy4XNG90RfuUHL1$liDmnxCZ9Q-QFOf$wcg6Jk+twHLcutUdbQHTvu9e23FY+w-Eik29daScv+hYA75+slnrDzE$Ml9-lmu6P7hc25xsi$tnqHqV5CunWp1d0Pdg0QA6gRBa9oM9L6A+aMbYWjklB7G+LFHL1AxfiFP0leDGAJ3wy8fWUoQYfGkR8maLx9NAb2OIRO7uFUmReDvekGjC1e8dbRnO7SEqxAY799PgjiXz1Bcjt5-QCaDXMtJxLhmZCjjWedCxhsAkm+r$a9oDydjNFwXHiPfFItAYI0bug8Gr4Zo47BYwt4SnU4mQiO7mrcegR2fLq+yfgxf$eFIZaTfTBxJAQI7qLi+yr4PZ2VrOP$bEWUIAb8g6G-q6ODJ-G2GwGB+PAoTwGSCzhhDzrNwvwxJXwbquBwwsU6HiHB+JFbQGrFLsY8zzpW6k6Rkmi0l6bBNffAjcyyHoF3Jp2afcZr0qLe6m+cYHLO5tbnFr$rgWlzlH-kCOkv0vcGBnfDMO71zuEznhBZlAeFLromuH$fbj+oz1ygw2$cswao1DUw4bNiV57y96i8blTQEcZ2FsMOSahi2Ff79Ed1iybLMSWP5stdXHAoCe2Myd5+z27jWXN9ncXwCLA0yaUxLeIOGzGSxBHS7bzuC5m4M7wI997BaRon1YT7jNXeUem2u9BmgbVI25i0zRb5ZY8NXDFPnqkz27gb6CkSbGXU4+Uj7NXvdE657EMa-7Zoym4VPaicmxloCLEfvCV1mswI034mYOLH24iiHwHoC5vPAvP4Simji32dOaolmnv67vuI9D02p7-drXLabbDyZ7u0hfoam2+Evh17vlev0vQ2MLPoivuaxYaxJizazTitjmZifZ2za5udub8xIxEieiNsXjgwvaa0yqpeELuXedoaXxuiU0LFrmIhp+i4oBU2us241aJPIP7u2ul7jxebxS5dLvCmvawP83l2piO7OmC7FC9FOE4NuYJ7$zyEFaphszJedn9CCc957s7V+Fkc1EFOvC$XFENzwV9ailtXJTrSm5VClaMEqv4XHcLHeGOrEwHjmRvQ1iC5kDouOeaH7sLP-WexbAXuWejEk2pilvvbFP8YueEgeCh60D1CaCW7asxH0vqmhavHaHbU3-AO19hAIr0TRvFvwY2zv121astyvW7bz9k5Sir8S1vIaofuPhzqhlyPUAO7OpvVAvU0aHaC7d3AtouXvNNv0xLu70UUC0va7Ge3mYvi3wXSr7RO9367JlnvghPQM3zozrtQNatyFedXM75CoftakvxUZCjMHvv-wF7eWPCdVj+HLw2gL5d5u0310dVuVzraDZtiMC7VMZuL247n3rMaHCLfsRPEf7hpaH7hCuzk59iUv6xFlFlEw5$m203Uo29EPy5yHNq2ZFHfq907Ob-yNmmVyVboaX7FdHCDCfYaNmVtWdzeI0x-OtXz1iduQHLismpbchvUPbONeuP5iRiGumbFL70it3FupmROipHyOSLWuGmwccb2FRu5-2l9QJFBPiRd43uXvghzWvqoz557ZFQtrnoOd+587Sd1tNLOTOghhG9a4V38ePE572hyUBVoo2AiNO6Hf0mhYRi9GO5xbFt3j5LO2aRCmw67PCtZ2db+LSJAHLih0vvs+r33tblb2XP85oxpvcnva7iF7Mt7vlyDOUeUuP7rs6yHX+gEie62F7a27pkXe8CfaYvCeOtvaEDiGnrX+zpFeC7LPcEzij77bmXCWx31FtTvCMCvddPYXr4addjYeOi5hui7-7oyA-FsFybvsP02HDtzvEUBUixvcb0oo7EW94DTaeolo4nGRbtjYkBVQr9LLdvBxlF9FDDzoWB2oiNk-8mXajaT9U756kZ2wfMGIL9gFGW-2FCsFBXE4bk3b4$ij70EohldrgPOBUOJ-1d$hYwlGe1CXF0LHLbvPL5a2dHXHRiF0fOVvOF7JYE777FN17VuWixboArkM+mLin3DlC39pobeGxs7fLOpnr3rbqvjUtb-v9dzVo6LxXsyfGQVBJ2AvdmF7qm423Qp-z2rDiEOMm3BsVvniWXASMO-1MOiIwQXdmaxxF9kJyrJ$C+VdCWErUW7Q0Wz3p3PEuY8sXX6xxuqTLA0X8NwYHYmaf98z0Iev3wLaOOPmuGUId$JF+xQp$557LJHHaoBO28dAvhh6Ua93NuPjomlCmbe-OO2+zsHYJMDC-Xd3fo9FS9YhAjiuiNHcrV1YAHL2jb1zFrEJb5FFeiibbWsvUNG7dbmRnzd3-7pGEJBswOESsLbNtmT9Vuejo4evQ2QLLrBebvXFHLHISWwE6mCy9bdXyJL3suZF3cbn7rmOpPmtsUmv7mCgOaiF5$mmXi0NCiFE8zn7+YCJ9mO8Lf7oHvFx1mSL0ieu2IbHFV3A2V5q7U89m2aMn9q4oXa8RWNzVp9z1ts4FZV1GOmLZwO35vUbZ4Mb2Vz2msU+HPoPrLSB9mObIH4UipESB95M7JA06IR9dzViRi+jlG9YL5M17Q79Rv-5Pfl9BmdZ6WmyNs76PuGnvhFErysFSBN387JtgziE7yErhLZdtH7PnFdE6GbwDtg1PWzSwg57h+d68tqvQdj+XZRt6FftoRBThdUPVu8oHiJZ6HWZ4+e83siosB-cVYV1ayZuZM+-g7TX0RrRx6ojjM4sb298PyCi1Xn7YVVpxvLhPkDnvijMOLhfnHP-RhYVMNgQeyZO3+ZUtMNHDE$3iH-dgjsmLfezENmNbPZv60Re$Mzidm8VBb77hGbJ40ZvLRAhkf$MlTOdTtJimfeb0QHnZUtuzvuYj-Nmr7UteWDv7$vUFOo6Lwm2QMnB83dJO8eWdvyMwyYnvsQ96oXa1uoOXZFXClaXhVr9GM4rfppFD7Z5R4r7YXdRapx-ZziU2PLMvEboon+GFeA1euozoh0mFSy$6OkQVzAXyXyOZyyV0RCuBziRhluLidiqvXXbZOYVrzFebHA1Sn3MjJ3Sly4u29XZwH7kLkHXDI5DdgCS2Eb8tDw7$ZUt5wFtEC7hFoOPz6GEPPtN6FaZSLMs04HmAk97BmLXk3agDbTGvOzSN4vaVVmrZPZAHOelano0V5XZmXaNDF91LW9UOpm7rN9vWPWiNUfV8C3P9rbdF8UxoTukPxdLAdsCtum3oJcM9Rv-dhjsx5kbbl8F$6SzXIV-LlA+-Fy6GLiwR2fwI46B4Coslb8XFV+2Bnt1GP-eXF8rNB+HQU0jXbsnFBBwGnrmVcnMnFPdaGHbwaBNND9zVSVXh2dEtbk3XZZtmZ2WwnuJ9MBoIaOEQfEM75L7so1GCXOJ7NCmb$GHikJXbA4DDlymPfaRyhL3ih4UtbO0SNjNi3wsL$YiNSi6M0L7B43SRi7c2i6UGda8xMahINM09vo97dBDLOpOziLDOVzBSjcnMEsdVLQlG2ibWuy-wDb+vyLMi-MVIOZ6aqoxXr6aJF0I$ke1C0IiiiGAB-JUoijPd5MLrDAtyZmdBXU8mv3LIMUksaUzXbf6GvCdoXrkaW334lxoD4VaTHwI6b4bFroyLtNu9Zr4I8+04MwMNnDuZI6$v0W1HRd-DxC8ZnIuSPHE$mfbpEfjbn2iFHkhl-d20n3I3ne4hV1NSha5DW-LNevxWk3zOM8Ic4dvW+DqOhi6-JZIlBbijc2Lp-FZoIWymmr-0DI47jt8bFUa9NynCZ7tugDMFx0ZGZD5Vkf7WhIEAsG+rtBymWn9A8IO7xtbgYwcpwOnWZdGrDDyICGYI6Jzo6SoHLzD2nWZsGwSkffPNYGGd5l8kSzsu2A9BZulhB7$FxNBnTDWG6$xvbfAViU0Azh+lQfv0Zn9ZYteDdGnQDqGbUbqv+0$v07c-Y+P156YJhcNm9QZoimaS$y+1s9L+hLsSYwg7Am9UxVLhS4ih$vnIBDhL$s0Inm0Z7M3RInidIcX+9m503IIydNI5MaFBDrLXkeXs-N0Fi+S2w3zihd0Azt+-LcEYt5dNgGBDMLrn5Xhq9j9gGbXT+d7raDVlsOB2HYpbC90zi4OE2h+mh8r0GlDOv2RnfvWUq8IgOyzHt0IcJD342+ezRj5egXPnIrx+zZykAe-AW93FvI19IH8SXtlRxho6TD3VLDdpjxbosEl3VLDX9AxhoTE3ZgLAmlt+joVXPiIxAe9mgMIAHt8e$N4FhgyoW93ugFNNIFB5l$elBrFL8IC+SVwrdCVtWSF0VJ1T+dDnebR9xroIJnt-OC+T9eBy1u-dNcy0mxzggNzZQmrioxl3B9IyzLigyNPFzg2w$44m7WDDpgBRoRV0xr2J+Flg97fn0+nebgpnByNrzwd7$P1Ir7AaodYkvWWRYQGOdjdfXce-kdw7HwJXiJwy+tZA1$h4tftEraHby+uuL7awOFLq7GBLlRGMkFW-5iJFNXi17vLfRAVg3LjndO4a7BVvH3owqXS4LqdfYCgzlhPYL95D6iqgaybDpkeR4S7VhBvrC2UOwmziv777kbeJCmoSwXk177OhPmGVUbeVOC7miivRHDTwl7h5qbaaoHE39tP0YFmHXj1dXEgB8LjRSafaeCieY-077Lid2bPb7UbUagX9dOZajEYH-mXA3XMD2hu5EDsLvkUxaF0bDY9awUSApNe++UiHXwXOm29h770$bNj77ahZS28RbCJDlreu97974LfpcVOb7z0G8ghFnheWwR-SO8+qDmeaizRVmd8bj2ph7Etd8+qA7u5J9iUTd8gNE7LX7yb-Sx8VAY6w3507LSo7Om7k79JO1sSHztdEr7N7aRh7lkVqQph$9ai6UUoeCxMndiHYx7cWMXPrwWreug7ZyzHLHfDW7IS7XF-txqrdLTR8by70G7f8M5ER-bodFbaeadL7Iy7haf7zy2WMJExiJhCJCzzcXkT5ahaFG26ejb6hHXjhLCyYIhzhmGZD3DN7lxFP5+hbsJJyS-Etm+mlUodEgmYntixiTdu6n-HzO7ewboSEaCMSXarq0RlSAA0LeS3WE27-mZXQ$NErP+U7LTiyg7$MImEX7sS6kG7LhEmLm7Pm7HDLEYFXX+3pvWyc7LL5ZW5Y-sBvJLCL0fFa5oeHmoJftL1b17N74iB7G7LCwj73jBhfb+1gF5C2j7BhtdkIVWzvGWiod77Cmp1CLha2RoABp3wutS43mMtYgeJ01ISauF7W77eWNuadUbYsit77L64uh77"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 01 Jan 2026 20:08:44 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\npriority: u=3,i=?0\r\ncf-ray: 9b74a67f7f1b0b65-OSL\r\ncf-chl-out-s: JA1Euoh8Y8AoRbusDnwVFg==$6a0ULz6CiE4ibSap07qZxA==\r\nset-cookie: cf_clearance=Q0..xF4tPmPruuDqctojD_2049BsW.ErEegaDAYNUCI-1767298124-1.2.1.1-EVBF4Mt8qMDfTGRzo9zkuy6Tn.tweJiDGJjUlFSwIFOIdpaNKDKJbCnSAqQrpNmT15QmHYuPVmjRh76F0C3jhkb3Jgp5H4ygH0DVP_yScibztqsvgfO_GZlzYX.wGuwA1vwAcpNS5GyYq4NohlKrJFd6eOv.VasmFZNfS2KrCAWE1T4Jn5nBQwAjut8AutRMekuY8kqtEBJpZHyuEjLlEvyA6GEgVKPeUHP2JeLJwHo; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=up-4ever.net; Expires=Fri, 01 Jan 2027 20:08:44 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=d6Wa30g%2BWJNI4QYHZhi0U%2BCG5GZy62OIAHG%2B91kI%2BUkdPO3cVIzIyVwfBK11KxO%2BO7el43ADayQv%2F13OaOfLu3OsSA8OcsJnJ2Xh4DEoGIQOShv6DDfqlCCu6E6MBe7a03EF\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1710\u0026min_rtt=498\u0026rtt_var=1399\u0026sent=282\u0026recv=64\u0026lost=0\u0026retrans=0\u0026sent_bytes=275862\u0026recv_bytes=24016\u0026delivery_rate=8901090\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35722\u0026ss_exit_bw=5696658\u0026ss_exit_reason=2\u0026cwnd=15720\u0026unsent_bytes=0\u0026cid=070be8cf5886ea40\u0026ts=1062\u0026inflight_dur=210\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/assets/js/cookie.js?r=6","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:43.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"up-4ever.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:42:49 GMT","end":"Mon, 02 Mar 2026 07:40:08 GMT"},"fingerprint":{"sha1":"5D:0C:68:8C:13:32:D0:C6:34:09:49:CD:B5:A7:39:BF:3F:39:32:24","sha256":"0D:88:63:0B:F9:FE:73:A7:AE:23:52:F3:81:9D:72:27:1A:5C:14:42:91:FC:00:19:3E:31:CE:43:BF:21:B4:E2"}}},"request":{"raw":"GET /assets/js/cookie.js?r=6 HTTP/1.1\r\nHost: www.up-4ever.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.up-4ever.net/b99nfkkhbe29\r\nCookie: affiliate=npj6%2FbmCqCt7%2FgY7FmNkO%2BQiMJMZ80msZ7dHZag82Ignw70sy7I61rFkaIdD7yZDxuEA5aZmgVlHsk1Qj6PQ270vtBmeknxZXNNMFWs%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 01 Jan 2026 20:08:43 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Jul 2024 13:17:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\nage: 3675\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u8K9UOKygKDMG%2Bc4GuWtDeLaO9yiVcCWxlUQumHE4jiVJ7CN5KcCYb1eMNC9sh4O6dUNi%2Fce5lIv2nPsdvopi7lVM0UsXrrFpW5NtmEi\"}]}\r\ncf-ray: 9b74a67a1ee90b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2552,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2552), with no line terminators","md5":"a26fb8b9110da7839525523473cd043c","sha1":"e6b058ae41e6fe719200e31f3d61f7021d471170","sha256":"08a50bf385399292e4d8fbacd274026df950eb6062f77ed2ce5153de396a5d8b","sha512":"08e7405c5853a38823cbdd4b44556974fb50550b05d0526eea68c511f95b5d62f9638038977411c3b13a5d18a3daddc5a88209a6552111ba908537447332b529","ssdeep":"","tlshash":"355132c972aaf484c3a652a4113f604bf03e6d4da00db298bfd5e8e57c740868973f79","first_seen":"2024-12-13T22:31:29.628343Z","last_seen":"2026-04-05T04:18:26.010924Z","times_seen":91,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/assets/img/logo.png?ver=1","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:43.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"up-4ever.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:42:49 GMT","end":"Mon, 02 Mar 2026 07:40:08 GMT"},"fingerprint":{"sha1":"5D:0C:68:8C:13:32:D0:C6:34:09:49:CD:B5:A7:39:BF:3F:39:32:24","sha256":"0D:88:63:0B:F9:FE:73:A7:AE:23:52:F3:81:9D:72:27:1A:5C:14:42:91:FC:00:19:3E:31:CE:43:BF:21:B4:E2"}}},"request":{"raw":"GET /assets/img/logo.png?ver=1 HTTP/1.1\r\nHost: www.up-4ever.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.up-4ever.net/b99nfkkhbe29\r\nCookie: affiliate=npj6%2FbmCqCt7%2FgY7FmNkO%2BQiMJMZ80msZ7dHZag82Ignw70sy7I61rFkaIdD7yZDxuEA5aZmgVlHsk1Qj6PQ270vtBmeknxZXNNMFWs%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 01 Jan 2026 20:08:43 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 28 Jun 2024 18:30:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12959\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NpHu1SOhGwAOtOayrZs6KUrsLzckzXxikuEosSR%2B5xT5Ob2%2FmHww6gN1Oa3lHKpfrvYz3IVFrKnU%2FaJBDyQSOVOOuuaPsLXOVKivw2B3\"}]}\r\ncontent-type: image/png\r\ncf-polished: ok\r\ncf-bgj: csam-hash,h2pri\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 3675\r\ncache-control: max-age=14400\r\ncf-ray: 9b74a67a4ef30b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12959,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 136, 8-bit/color RGBA, non-interlaced","md5":"2e2b2b602db3e8c45c229059d97b9d5a","sha1":"330eb065fce7f3bc623214c7cdd08a48f2f74977","sha256":"28d5c69fdfd41678b64812bcb4f0f536aa5231ffc05d55cbf1d3f54838ab78b6","sha512":"3eef70f6f5e4cf950c6d4425d8f5910acbc9d7a6178ea20178a137be8a0f080bf69630304088d1f4a3f983d26a7b22af91885e37cad03336063bbd05868d4529","ssdeep":"384:uqFzJ6XwYxgBhz/11bU6R4PZUbVqzLblfr:uqFzJ6QvzjJROURiLblD","tlshash":"d942c09956651c26c18fa39c9b142d8aeec9184f284dc27b48af811f4af3c63aa57d07","first_seen":"2024-12-13T22:31:29.613417Z","last_seen":"2026-04-05T04:18:25.991042Z","times_seen":92,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/assets/img/lang/french.png","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:43.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"up-4ever.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:42:49 GMT","end":"Mon, 02 Mar 2026 07:40:08 GMT"},"fingerprint":{"sha1":"5D:0C:68:8C:13:32:D0:C6:34:09:49:CD:B5:A7:39:BF:3F:39:32:24","sha256":"0D:88:63:0B:F9:FE:73:A7:AE:23:52:F3:81:9D:72:27:1A:5C:14:42:91:FC:00:19:3E:31:CE:43:BF:21:B4:E2"}}},"request":{"raw":"GET /assets/img/lang/french.png HTTP/1.1\r\nHost: www.up-4ever.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.up-4ever.net/b99nfkkhbe29\r\nCookie: affiliate=npj6%2FbmCqCt7%2FgY7FmNkO%2BQiMJMZ80msZ7dHZag82Ignw70sy7I61rFkaIdD7yZDxuEA5aZmgVlHsk1Qj6PQ270vtBmeknxZXNNMFWs%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 01 Jan 2026 20:08:43 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 24 May 2024 14:58:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1833\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hT9tEiZWJtUhE9txpFUgo2As9VtMgQYoais6OlWJEmNFRNTLSOWwJXHcyEnLo8Ep81FwHRSNR4fEiak4dVsmFW2s6Pom%2BvGvc9lOUNu1\"}]}\r\ncontent-type: image/png\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\ncf-polished: ok\r\ncf-bgj: h2pri,csam-hash\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 3674\r\ncache-control: max-age=14400\r\ncf-ray: 9b74a67a4ef80b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1833,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"fc0f814574dd8e5fd9516f344187a987","sha1":"197b6e84db5868f10ae04fdff59a299c2e21d4fa","sha256":"2bc9014576a056a6096c5c80d0dc4e5a8928b3e1264fd679daf04105b23e15e7","sha512":"6e6d55e1fa699c081a6201f5d65f50806d34429f54100156a1f73744150c9c7f9571efb535db0d3e45856f7ff91a37dcb78eeeb741f1fd053a772973128ce7f9","ssdeep":"","tlshash":"b231f9ae7756b984a20123cc1d424d73a502d28ddf92954ce3b6b7176c5434147a1fa0","first_seen":"2023-11-17T08:23:00Z","last_seen":"2026-04-11T02:21:52.049906Z","times_seen":166,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/assets/css/pages/page.min.css","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:43.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"up-4ever.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:42:49 GMT","end":"Mon, 02 Mar 2026 07:40:08 GMT"},"fingerprint":{"sha1":"5D:0C:68:8C:13:32:D0:C6:34:09:49:CD:B5:A7:39:BF:3F:39:32:24","sha256":"0D:88:63:0B:F9:FE:73:A7:AE:23:52:F3:81:9D:72:27:1A:5C:14:42:91:FC:00:19:3E:31:CE:43:BF:21:B4:E2"}}},"request":{"raw":"GET /assets/css/pages/page.min.css HTTP/1.1\r\nHost: www.up-4ever.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.up-4ever.net/b99nfkkhbe29\r\nCookie: affiliate=npj6%2FbmCqCt7%2FgY7FmNkO%2BQiMJMZ80msZ7dHZag82Ignw70sy7I61rFkaIdD7yZDxuEA5aZmgVlHsk1Qj6PQ270vtBmeknxZXNNMFWs%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 01 Jan 2026 20:08:43 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Jul 2024 23:13:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\nage: 3674\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e9wf4HlxwhDaQ4aSf4s1SGuiEXHEv6l1KQ41kEwlBRc1yeOFTSEhxRfRndyFqOyS6itsOaXiEoIupRNum3iz69KeRExyqd%2FDjls9d1hh\"}]}\r\ncf-ray: 9b74a67a4ef90b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":953,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (953), with no line terminators","md5":"3fff94143374684794407ab5087f4bba","sha1":"8135609d60c0427b0909c3fc0af00b26bf07cdb6","sha256":"f63205b395e04f855506c4ebad150dca18e83435ab74de290d074418e4e39067","sha512":"79a0e100db279f67e39b723c1554274c0fe365c4825893217657174666339d800c9ebc229efa21128a637fa06756b75ff157b730477120f72ee1b602d8124459","ssdeep":"","tlshash":"1511e69021487474b03f5819ee90be6c1314be119f0e87b34f03ee29a29d19fe5f0a0c","first_seen":"2024-12-22T04:15:43.074994Z","last_seen":"2026-04-05T04:18:25.986838Z","times_seen":68,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/assets/img/page-bg-shape.png","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:44.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"up-4ever.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:42:49 GMT","end":"Mon, 02 Mar 2026 07:40:08 GMT"},"fingerprint":{"sha1":"5D:0C:68:8C:13:32:D0:C6:34:09:49:CD:B5:A7:39:BF:3F:39:32:24","sha256":"0D:88:63:0B:F9:FE:73:A7:AE:23:52:F3:81:9D:72:27:1A:5C:14:42:91:FC:00:19:3E:31:CE:43:BF:21:B4:E2"}}},"request":{"raw":"GET /assets/img/page-bg-shape.png HTTP/1.1\r\nHost: www.up-4ever.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.up-4ever.net/assets/css/pages/page.min.css\r\nCookie: affiliate=npj6%2FbmCqCt7%2FgY7FmNkO%2BQiMJMZ80msZ7dHZag82Ignw70sy7I61rFkaIdD7yZDxuEA5aZmgVlHsk1Qj6PQ270vtBmeknxZXNNMFWs%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 01 Jan 2026 20:08:44 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 09 Feb 2024 21:01:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 39550\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fiFprlF8wWsL4gHiO2fBkQIpGOc39DcvDam%2FNtQJ5LQMMZrnmvzvR5%2BEwyrpIO8hIlmZTlKHaCj9qKUm%2F8rT3fu49gfmWwoS7zRDG5at\"}]}\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i=?0\r\ncf-bgj: csam-hash,h2pri\r\ncf-cache-status: HIT\r\ncf-polished: ok\r\nage: 3674\r\ncache-control: max-age=14400\r\ncf-ray: 9b74a67c6f0c0b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39550,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 950 x 575, 8-bit colormap, non-interlaced","md5":"6bb3710e158338c24419e70c7d7b051c","sha1":"2a021601da40a868883d35f74ae1c9ec9dd66d47","sha256":"1effac0e5f105704a25a9755e6775dadba2929960009c0beaa748c711f705283","sha512":"521af6ee37a4ed3a6b64da855287c7aaefdfd924b90ffccc1fcf6ace0cf0434f94a5dfee39c943edcd553ddb3fd640af630d2b51ae82fc002e9de363c28c0401","ssdeep":"768:Gx27x9qiKETuR2qax42D8KZP7z/aPkSKiY1Tw6qGTztw:GA7x9Vp6R2hhD7zSPYsnGXO","tlshash":"6f03e13a06a0c8d2298aed5cf1cdb2cf3e379b5581f4501170ea7625a7a79c682c65ca","first_seen":"2024-12-13T22:31:29.662815Z","last_seen":"2026-04-05T04:18:26.024433Z","times_seen":86,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-BH3KCF6H24\u0026cid=1512544443.1767298125\u0026gtm=45je5ca1v9132047618za200zd9132047618\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527907~104528501~104684208~104684211~105391252~115583767~115616986~115938465~115938469~116184927~116184929~116251938~116251940~116682876\u0026z=978842463","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:44.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:59:22 GMT","end":"Wed, 25 Feb 2026 15:59:21 GMT"},"fingerprint":{"sha1":"E3:8A:B3:9D:E4:8B:53:E7:04:0F:DC:F1:FF:B6:DA:2F:A5:13:E7:D1","sha256":"3D:CC:25:A1:DF:57:5C:E5:5E:62:8C:3E:4C:9E:BF:21:67:03:6E:09:DE:4F:C1:38:17:4D:91:E4:81:A1:1D:6E"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-BH3KCF6H24\u0026cid=1512544443.1767298125\u0026gtm=45je5ca1v9132047618za200zd9132047618\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527907~104528501~104684208~104684211~105391252~115583767~115616986~115938465~115938469~116184927~116184929~116251938~116251940~116682876\u0026z=978842463 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.up-4ever.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Thu, 01 Jan 2026 20:08:44 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-19T12:24:58.789122Z","times_seen":807052,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":68,"dns":0,"connect":20,"send":0,"wait":33,"receive":1,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/assets/css/style.min.css?ver=5","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:43.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"up-4ever.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:42:49 GMT","end":"Mon, 02 Mar 2026 07:40:08 GMT"},"fingerprint":{"sha1":"5D:0C:68:8C:13:32:D0:C6:34:09:49:CD:B5:A7:39:BF:3F:39:32:24","sha256":"0D:88:63:0B:F9:FE:73:A7:AE:23:52:F3:81:9D:72:27:1A:5C:14:42:91:FC:00:19:3E:31:CE:43:BF:21:B4:E2"}}},"request":{"raw":"GET /assets/css/style.min.css?ver=5 HTTP/1.1\r\nHost: www.up-4ever.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.up-4ever.net/b99nfkkhbe29\r\nCookie: affiliate=npj6%2FbmCqCt7%2FgY7FmNkO%2BQiMJMZ80msZ7dHZag82Ignw70sy7I61rFkaIdD7yZDxuEA5aZmgVlHsk1Qj6PQ270vtBmeknxZXNNMFWs%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 01 Jan 2026 20:08:43 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 30 Aug 2024 23:00:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\nage: 3675\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vCzpQV8dymsSaiZfcAKonp%2BJsHJSozPVd0EYvnZjNbinynBXscXkFeBqiYiEmmQW3aP7D0jeuDj3cwsZ7IdZNM7LsiftkfTsLxlyagvi\"}]}\r\ncf-ray: 9b74a67a4ef40b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":361906,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65359)","md5":"205704c6db16bc54a2e48066d49f78ad","sha1":"c47bde8b273a40a8b4e76ad100a1ba4f4aa195e6","sha256":"d5dba06a9cb5c15f63dba66cb26b64c14cd88da5f2fe6e60448439147f0fc13e","sha512":"af14d3d51b0bf87cec184e246e061167326856a0d25c79b376ed7836f0f00ff003f0ee1c6e62fd44f70f75a9ee15485e32f36bbbd6b0b893311d30605616a622","ssdeep":"3072:nnd9TfBgfck0+81rYESQmICmrk9EKi1/Qgzf:nnd9TfB7kr8rYESQmvmrk9EKi1/Qgzf","tlshash":"5b7440daf9c030795d97825d9990fffdbe3ea446cb114ea6f007672493882e319629cc","first_seen":"2024-12-30T21:58:35.771528Z","last_seen":"2026-04-05T04:18:25.993398Z","times_seen":73,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-BH3KCF6H24","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:43.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:40 GMT","end":"Wed, 25 Feb 2026 15:49:39 GMT"},"fingerprint":{"sha1":"A1:49:37:FE:E0:3E:26:88:A3:64:37:DC:04:D7:8D:D1:D3:F3:91:75","sha256":"BB:61:22:1A:6C:67:5D:C0:C8:A6:73:93:B9:53:82:98:95:54:B5:52:8B:33:FC:08:58:01:D2:3B:FF:E6:35:12"}}},"request":{"raw":"GET /gtag/js?id=G-BH3KCF6H24 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.up-4ever.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 01 Jan 2026 20:08:44 GMT\r\nexpires: Thu, 01 Jan 2026 20:08:44 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 151035\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":459746,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"19b694f7eec92fbe2bf0bc833aa1e8cd","sha1":"6cd6cf3bec617b86c1d6fd14ca59fc93476223e9","sha256":"c5875eead80ca6e202910f024b81767c584c744b1628bb0e43cda9efae6c42b9","sha512":"d4295d604868cd3be6c6620e1b277fb1338c1fa3fb1b515649a902f109d0cd0f681a9c01991926f4c2e83f3cff5eae449a53dd4299de8d3e0258c735dc65e606","ssdeep":"6144:RFIe7ma2bulKYX61u99Yye5HDmHYmyBFzvnsBmeWllEKPad4XEPD5t:0C8bu7q1mcrnsFWawEX","tlshash":"e4a4088e73c674269396f478503f01cba9bb29e2a45cc89ab1c9ccf02d7459a4167f7c","first_seen":"2026-01-01T20:09:15.838754Z","last_seen":"2026-01-01T20:09:15.838754Z","times_seen":1,"resource_available":true,"data":null}},"time_used":493,"timings":{"blocked":180,"dns":9,"connect":19,"send":0,"wait":51,"receive":65,"ssl":161},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/assets/img/lang/arabic.png","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:43.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"up-4ever.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:42:49 GMT","end":"Mon, 02 Mar 2026 07:40:08 GMT"},"fingerprint":{"sha1":"5D:0C:68:8C:13:32:D0:C6:34:09:49:CD:B5:A7:39:BF:3F:39:32:24","sha256":"0D:88:63:0B:F9:FE:73:A7:AE:23:52:F3:81:9D:72:27:1A:5C:14:42:91:FC:00:19:3E:31:CE:43:BF:21:B4:E2"}}},"request":{"raw":"GET /assets/img/lang/arabic.png HTTP/1.1\r\nHost: www.up-4ever.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.up-4ever.net/b99nfkkhbe29\r\nCookie: affiliate=npj6%2FbmCqCt7%2FgY7FmNkO%2BQiMJMZ80msZ7dHZag82Ignw70sy7I61rFkaIdD7yZDxuEA5aZmgVlHsk1Qj6PQ270vtBmeknxZXNNMFWs%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 01 Jan 2026 20:08:43 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 24 May 2024 14:58:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8958\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cAMdZtpC1kd2b%2Bfdkse3wnfErxKZg79TCheNyzJDRWzHpK7zvjw%2BjS6Wf4mMv7aKMWIKnPLE9diNfPJjOYLIY7gphFZyj3%2F5rZu1F2vc\"}]}\r\ncontent-type: image/png\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-polished: ok\r\ncf-bgj: csam-hash,h2pri\r\nage: 3674\r\ncache-control: max-age=14400\r\ncf-ray: 9b74a67a4ef70b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8958,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"798aae2c9802b02e55a09f8f631ae930","sha1":"6aa450cddf6b8b97a9828c34f43c9348182b18da","sha256":"3922bee04c4ba3b2e364c96e0a4afde30e21b5f9b41789302aad3a32e8f27dbb","sha512":"635adf6ab8df20730deee0beb14b66c8a370d4fc22b0877a7fd9f062f00fc150209f2a7a08a7e90fee94bbc44ce7e9ca71b048653520972d86b6694a222be2b2","ssdeep":"192:Tws0hcHTD66sa6VKd6PoWOvITEOPMhhrVFnc1GCz:TwsWOlsa6e6QWUT9hhHnchz","tlshash":"0002af60d19d1d863f8b76e21416b49dc29ba3628d8ddaa5228c57fd9c8404218ce3e8","first_seen":"2024-12-13T22:31:29.617615Z","last_seen":"2026-04-05T04:18:25.996328Z","times_seen":92,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/assets/img/pages/premium.png","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:43.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"up-4ever.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:42:49 GMT","end":"Mon, 02 Mar 2026 07:40:08 GMT"},"fingerprint":{"sha1":"5D:0C:68:8C:13:32:D0:C6:34:09:49:CD:B5:A7:39:BF:3F:39:32:24","sha256":"0D:88:63:0B:F9:FE:73:A7:AE:23:52:F3:81:9D:72:27:1A:5C:14:42:91:FC:00:19:3E:31:CE:43:BF:21:B4:E2"}}},"request":{"raw":"GET /assets/img/pages/premium.png HTTP/1.1\r\nHost: www.up-4ever.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.up-4ever.net/b99nfkkhbe29\r\nCookie: affiliate=npj6%2FbmCqCt7%2FgY7FmNkO%2BQiMJMZ80msZ7dHZag82Ignw70sy7I61rFkaIdD7yZDxuEA5aZmgVlHsk1Qj6PQ270vtBmeknxZXNNMFWs%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 01 Jan 2026 20:08:43 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 31 Jul 2024 17:26:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30864\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=czU%2FDz9OgDRZT5s%2BBPrj%2ByXIngOF6NKU7np3Q7VLHiGlAwMIhaTV7d8kO%2FqCqU9ukAH1io7IG3hg3NnnANRQzHOYB500mPxwbaGctdR0\"}]}\r\ncontent-type: image/png\r\ncf-polished: ok\r\ncf-bgj: csam-hash,h2pri\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 3670\r\ncache-control: max-age=14400\r\ncf-ray: 9b74a67a4efa0b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30864,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 170 x 169, 8-bit/color RGBA, non-interlaced","md5":"62c0a8a9d0a311b2eb601faeba67ed95","sha1":"b9d7d861734ae0ae95c1969ddae6965fc5a96543","sha256":"01802283ec9722f9c1ba4cdb5fa7b2b628729050f6eaec3318d50bb858ace98c","sha512":"a318c0a31736b2e0284159d571b746326ee1e8eefe938d533c8ea1db02ec39d305d79faf3e78e831ca7ab3554eaedc70993a0e9598aeb7625bedf0e31212dcd8","ssdeep":"768:08f0jC8u2Ajr6SUSgQ+O3wd6hJ5YfC335UF2YURV:d4KjmzQ+OC6hJ5Yq3pbYsV","tlshash":"6ed202ab93243d5192e83e46e0ecdd3ebd85e90c14d4d7f7a63bc4a170e9464a72cc44","first_seen":"2024-12-22T04:15:43.057749Z","last_seen":"2026-04-05T04:18:25.987934Z","times_seen":75,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e7cod.com/5/9620262","fqdn":"e7cod.com","domain":"e7cod.com","tld":"com"},"ip":{"addr":"139.45.197.233","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:45.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e7cod.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:11:13 GMT","end":"Mon, 09 Mar 2026 06:11:12 GMT"},"fingerprint":{"sha1":"E1:3E:8E:13:F8:CC:FC:0E:0E:77:77:99:F6:A9:A9:84:D8:7F:C1:C2","sha256":"92:21:C3:31:91:DB:58:BC:FB:3F:B5:6A:7B:02:EF:B3:44:1C:76:01:56:DF:A3:00:0E:B5:98:72:97:00:8C:7A"}}},"request":{"raw":"GET /5/9620262 HTTP/1.1\r\nHost: e7cod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.up-4ever.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 01 Jan 2026 20:08:45 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: 4415308a68a910097ed8b8de626efa23\r\nlink: \u003chttps://my.rtmark.net\u003e; rel=\"preconnect dns-prefetch\"\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\nset-cookie: OAID=0082b152fafe42c6e25761d325fd4144; expires=Fri, 01 Jan 2027 20:08:45 GMT; path=/; secure; SameSite=None\noaidts=1767298125; expires=Fri, 01 Jan 2027 20:08:45 GMT; path=/; secure; SameSite=None\nsyncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":117724,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4123214dcfddf4ed69bd75845fa1393d","sha1":"8d1555a7fb462bc2cc1c4e01cc201e1e663fdd86","sha256":"d76ce4c089d15e51d264c283803eca7b92d624ec32be7f337952cd55366b811f","sha512":"6bd5fb64a646acd9b14c3cffca3a60a855adae38b7cb068f4c54c9e86fed1df6c0ae30d1b418dd90d04c3acbae35ee3030ce337d68eb8f5bbc5a1270b8c008f1","ssdeep":"3072:0Xki1TG8YlAVPzIqwL76WJHpYx85/MVzUfu:tWTGvllqw5JJdQzl","tlshash":"e8b3191673a27bd21a6a60d42d67d60573fd8cc0448f8867e3d8787972d081cd3abbd9","first_seen":"2026-01-01T20:09:15.841268Z","last_seen":"2026-01-01T20:09:15.841268Z","times_seen":1,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":89,"dns":26,"connect":26,"send":0,"wait":51,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"e7cod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e7cod.com/wrr?z=9620262\u0026p_rid=b6785deb-f10a-4ada-9445-c6feeaede638\u0026rb=DwrLV5XHFlw_ZLbFpQbhopk4XBt6LbLIPdDPKxH1V39k-egWTAi193xxONP5vWFCadoDg8ukLoJSuZBBu0kwWQQXs45FsLLZn5BpzvoDi5v9fOqIgZukIH7rhvzSuwG4wLsf4IuluMLLQMz533f-MbLOzyaKdwfV4lvspAemSLbclLAljyem39ae6Gsz76zuz40AOkbJjt2dApBgYD1_E8ziLlNXWjaC8iNy9eQSGBnibl1IHsphPjsKwMNgt6j7NzHo7uUnZVeD2wwdMtHXpkDEExGQDKvRQ69yyNV75eAFs7qT\u0026dmn=e7cod.com\u0026userId=0082b152fafe42c6e25761d325fd4144","fqdn":"e7cod.com","domain":"e7cod.com","tld":"com"},"ip":{"addr":"139.45.197.233","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:46.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e7cod.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:11:13 GMT","end":"Mon, 09 Mar 2026 06:11:12 GMT"},"fingerprint":{"sha1":"E1:3E:8E:13:F8:CC:FC:0E:0E:77:77:99:F6:A9:A9:84:D8:7F:C1:C2","sha256":"92:21:C3:31:91:DB:58:BC:FB:3F:B5:6A:7B:02:EF:B3:44:1C:76:01:56:DF:A3:00:0E:B5:98:72:97:00:8C:7A"}}},"request":{"raw":"OPTIONS /wrr?z=9620262\u0026p_rid=b6785deb-f10a-4ada-9445-c6feeaede638\u0026rb=DwrLV5XHFlw_ZLbFpQbhopk4XBt6LbLIPdDPKxH1V39k-egWTAi193xxONP5vWFCadoDg8ukLoJSuZBBu0kwWQQXs45FsLLZn5BpzvoDi5v9fOqIgZukIH7rhvzSuwG4wLsf4IuluMLLQMz533f-MbLOzyaKdwfV4lvspAemSLbclLAljyem39ae6Gsz76zuz40AOkbJjt2dApBgYD1_E8ziLlNXWjaC8iNy9eQSGBnibl1IHsphPjsKwMNgt6j7NzHo7uUnZVeD2wwdMtHXpkDEExGQDKvRQ69yyNV75eAFs7qT\u0026dmn=e7cod.com\u0026userId=0082b152fafe42c6e25761d325fd4144 HTTP/1.1\r\nHost: e7cod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://www.up-4ever.net/\r\nOrigin: https://www.up-4ever.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Thu, 01 Jan 2026 20:08:46 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://www.up-4ever.net\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":64,"dns":1,"connect":27,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"e7cod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"e7cod.com/wrr?z=9620262\u0026p_rid=b6785deb-f10a-4ada-9445-c6feeaede638\u0026rb=DwrLV5XHFlw_ZLbFpQbhopk4XBt6LbLIPdDPKxH1V39k-egWTAi193xxONP5vWFCadoDg8ukLoJSuZBBu0kwWQQXs45FsLLZn5BpzvoDi5v9fOqIgZukIH7rhvzSuwG4wLsf4IuluMLLQMz533f-MbLOzyaKdwfV4lvspAemSLbclLAljyem39ae6Gsz76zuz40AOkbJjt2dApBgYD1_E8ziLlNXWjaC8iNy9eQSGBnibl1IHsphPjsKwMNgt6j7NzHo7uUnZVeD2wwdMtHXpkDEExGQDKvRQ69yyNV75eAFs7qT\u0026dmn=e7cod.com\u0026userId=0082b152fafe42c6e25761d325fd4144","fqdn":"e7cod.com","domain":"e7cod.com","tld":"com"},"ip":{"addr":"139.45.197.233","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:46.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e7cod.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 06:11:13 GMT","end":"Mon, 09 Mar 2026 06:11:12 GMT"},"fingerprint":{"sha1":"E1:3E:8E:13:F8:CC:FC:0E:0E:77:77:99:F6:A9:A9:84:D8:7F:C1:C2","sha256":"92:21:C3:31:91:DB:58:BC:FB:3F:B5:6A:7B:02:EF:B3:44:1C:76:01:56:DF:A3:00:0E:B5:98:72:97:00:8C:7A"}}},"request":{"raw":"POST /wrr?z=9620262\u0026p_rid=b6785deb-f10a-4ada-9445-c6feeaede638\u0026rb=DwrLV5XHFlw_ZLbFpQbhopk4XBt6LbLIPdDPKxH1V39k-egWTAi193xxONP5vWFCadoDg8ukLoJSuZBBu0kwWQQXs45FsLLZn5BpzvoDi5v9fOqIgZukIH7rhvzSuwG4wLsf4IuluMLLQMz533f-MbLOzyaKdwfV4lvspAemSLbclLAljyem39ae6Gsz76zuz40AOkbJjt2dApBgYD1_E8ziLlNXWjaC8iNy9eQSGBnibl1IHsphPjsKwMNgt6j7NzHo7uUnZVeD2wwdMtHXpkDEExGQDKvRQ69yyNV75eAFs7qT\u0026dmn=e7cod.com\u0026userId=0082b152fafe42c6e25761d325fd4144 HTTP/1.1\r\nHost: e7cod.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.up-4ever.net/\r\ncontent-type: application/json\r\nContent-Length: 3413\r\nOrigin: https://www.up-4ever.net\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=0082b152fafe42c6e25761d325fd4144; oaidts=1767298125\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3413,"data":"{\"sync\":\"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\",\"async\":\"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\",\"quality_options\":{\"hil\":1,\"jsp\":1,\"ng\":false,\"ix\":false,\"pt\":false,\"np\":false,\"nw\":true,\"nb\":true,\"sw\":1280,\"sh\":1024,\"pl\":\"https://www.up-4ever.net/b99nfkkhbe29\",\"wy\":0,\"wx\":0,\"ww\":1280,\"wh\":1024,\"cw\":1280,\"wiw\":1280,\"wih\":1024,\"wfc\":2,\"sah\":1024,\"navlng\":\"en-US\",\"drf\":\"\",\"wgl\":\"llvmpipe\",\"tb\":false,\"btz\":\"UTC\",\"bto\":0,\"pnt\":0,\"pnrc\":0,\"bml\":0,\"bmi\":false,\"vsbl\":true},\"client_hints\":{}}"}},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Thu, 01 Jan 2026 20:08:46 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://www.up-4ever.net\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"e7cod.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/assets/js/bootstrap/bootstrap.min.js","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:43.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"up-4ever.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:42:49 GMT","end":"Mon, 02 Mar 2026 07:40:08 GMT"},"fingerprint":{"sha1":"5D:0C:68:8C:13:32:D0:C6:34:09:49:CD:B5:A7:39:BF:3F:39:32:24","sha256":"0D:88:63:0B:F9:FE:73:A7:AE:23:52:F3:81:9D:72:27:1A:5C:14:42:91:FC:00:19:3E:31:CE:43:BF:21:B4:E2"}}},"request":{"raw":"GET /assets/js/bootstrap/bootstrap.min.js HTTP/1.1\r\nHost: www.up-4ever.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.up-4ever.net/b99nfkkhbe29\r\nCookie: affiliate=npj6%2FbmCqCt7%2FgY7FmNkO%2BQiMJMZ80msZ7dHZag82Ignw70sy7I61rFkaIdD7yZDxuEA5aZmgVlHsk1Qj6PQ270vtBmeknxZXNNMFWs%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 01 Jan 2026 20:08:43 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 20 Jan 2024 20:36:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\nage: 3675\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C3uZK%2FjVwh8wZWMeKtThVuyI8eaPTePgdchL9mlDn3u%2BJc0ilYTNk6LIK6UqqcVrbe0McaHOj9t1yiodsrQiBcsQzmmWpIl%2FVq2aMf2L\"}]}\r\ncf-ray: 9b74a67a2eec0b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60089,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (59810)","md5":"a08792f518b51f0f1422b5c96df9eb8a","sha1":"3f094f010bfb0c022a51b62778d4361d1cad3fd6","sha256":"5c36e28c9a7bd864b673e223db7e1934923227536ffbdf871f58b6f09b9ac8c9","sha512":"6ba72d23ac35920dc9e1d4a39271e3dda58b11b8e2b405c08cb0d1531a36c326260c545ccf6449b90af93372adf0efd3b544a9f27dab032697632d6c8e82a6ad","ssdeep":"768:ts1v6byWwhC8Y/klELLhigGAl/4TVOhcZ5Il6/2Vm7MTwFxmnMq55wPpHOg9yPpC:ty2hL6q373y/iGp","tlshash":"de43a45a3258b87309de44a6c032470bf7255d94b547816cb9bdacee1b3dc8272b2f78","first_seen":"2023-03-07T12:03:09Z","last_seen":"2026-04-19T10:27:46.584618Z","times_seen":5301,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ln.unruthwhiz.com/r3ItFp8h3pVNL/vGVkM","fqdn":"ln.unruthwhiz.com","domain":"unruthwhiz.com","tld":"com"},"ip":{"addr":"172.241.53.101","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:43.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ln.unruthwhiz.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Nov 2025 17:24:58 GMT","end":"Fri, 20 Feb 2026 17:24:57 GMT"},"fingerprint":{"sha1":"7F:01:E2:6A:DA:0C:0F:EF:8C:E5:B4:42:64:8C:C0:21:97:4B:F5:88","sha256":"78:3B:50:5D:26:B4:45:9E:2F:A2:37:6E:9A:3C:74:3E:D1:CF:05:30:67:56:84:06:FF:87:8F:B7:AD:64:3E:4E"}}},"request":{"raw":"GET /r3ItFp8h3pVNL/vGVkM HTTP/1.1\r\nHost: ln.unruthwhiz.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.up-4ever.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 01 Jan 2026 20:08:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.up-4ever.net\r\naccess-control-allow-headers: content-type, gyfr29qt4j80vdr0zhsj, x-forwarded-for, x-requested-with, cache-control, pragma, expires\r\naccess-control-max-age: 600\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nset-cookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; expires=Fri, 02-Jan-2026 20:08:44 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJxjYGBgEuEXZMosEOSxNNSzNNAzMdIzNDURZEwXZPLzF2RKzhNk88svKk%2BsFGQsEmQyMBZkKsoT5PYvzslXcM4vzSsBiicLsoD4goyZgnxOOZkVCsH5OaUlmfl5xYJMQMzpnJiUk6rvEuwjyFjAxijIVJIPIotTRBgEGcvYJASZchJ5HHw%2Fv9qcvuAnkJPP46BavzE63G61IFNBsSCLgaGpIQCHOyne; expires=Fri, 02-Jan-2026 20:08:44 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"848667c49f5d3aef59cd65ed276cd7ae","sha1":"bd12c0ca2dfaa249586f1b9b8d48b02a1b9e3763","sha256":"cc5a5851251dd8052292557ba0231c51363ff1474f60b7a4af3be144cb1327c8","sha512":"4248ad0e684224ba8503b1e73517aae6ffe4431cd16b7633d2ccbf4b96f845e318dbee175d19cd4676ca37353f53add2231ed167ad6c4aa0d9fe185f7359238c","ssdeep":"","tlshash":"f23000000000000000cc00000000000000000000c000000000000000000000003c0000","first_seen":"2025-04-24T10:17:49.831301Z","last_seen":"2026-04-19T10:26:36.147597Z","times_seen":15630,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":148,"dns":143,"connect":17,"send":0,"wait":25,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"ln.unruthwhiz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-01","alert":"Sinkholed","trigger":"ln.unruthwhiz.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/assets/js/main.js?ver=2","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:43.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"up-4ever.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:42:49 GMT","end":"Mon, 02 Mar 2026 07:40:08 GMT"},"fingerprint":{"sha1":"5D:0C:68:8C:13:32:D0:C6:34:09:49:CD:B5:A7:39:BF:3F:39:32:24","sha256":"0D:88:63:0B:F9:FE:73:A7:AE:23:52:F3:81:9D:72:27:1A:5C:14:42:91:FC:00:19:3E:31:CE:43:BF:21:B4:E2"}}},"request":{"raw":"GET /assets/js/main.js?ver=2 HTTP/1.1\r\nHost: www.up-4ever.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.up-4ever.net/b99nfkkhbe29\r\nCookie: affiliate=npj6%2FbmCqCt7%2FgY7FmNkO%2BQiMJMZ80msZ7dHZag82Ignw70sy7I61rFkaIdD7yZDxuEA5aZmgVlHsk1Qj6PQ270vtBmeknxZXNNMFWs%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 01 Jan 2026 20:08:43 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Jul 2024 13:17:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\nage: 3674\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vdr7ZPAHjBmFWvZYW7e5fvEjEA4tGrOtSW7W0VYa1oA%2FbKBJYDxh9NOweNj%2BYqlh8IDc6eGMMvgf1jUekYlCc2cDYxfW69EHf8CKkq2H\"}]}\r\ncf-ray: 9b74a67a5efc0b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":671,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"c53f2b213417b4ae0ea88b566a5aaad4","sha1":"03dbd35d8a41b24ba36fb451a5c40f71490112c8","sha256":"b072d472f70fc2b63d0d03added6b617d5699597e0d9b3f444f62a1e2f4313f6","sha512":"fcb5cfbf9e4308eafb81057d51c559759c783963cff17cb2da8f6c8625f0ec03a2f85bca89a62e927abac8d8686d048514ecdda2c3224613cfdc9e2cb5676221","ssdeep":"","tlshash":"a501d65431a1117712db28af13eb46a4763d48c3e00586393daecf0d5f90b69d5a1bec","first_seen":"2024-12-13T22:31:29.683719Z","last_seen":"2026-04-05T04:18:26.017231Z","times_seen":92,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-BH3KCF6H24\u0026gtm=45je5ca1v9132047618za200zd9132047618\u0026_p=1767298124150\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1512544443.1767298125\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=103116026~103200004~104527907~104528501~104684208~104684211~105391252~115583767~115616986~115938465~115938469~116184927~116184929~116251938~116251940~116682876\u0026sid=1767298124\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fwww.up-4ever.net%2Fb99nfkkhbe29\u0026dt=Download%20File%20com_turner_pocketmorties_2.40.2_mod_signed.apk\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=1408","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:44.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-BH3KCF6H24\u0026gtm=45je5ca1v9132047618za200zd9132047618\u0026_p=1767298124150\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1512544443.1767298125\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=103116026~103200004~104527907~104528501~104684208~104684211~105391252~115583767~115616986~115938465~115938469~116184927~116184929~116251938~116251940~116682876\u0026sid=1767298124\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fwww.up-4ever.net%2Fb99nfkkhbe29\u0026dt=Download%20File%20com_turner_pocketmorties_2.40.2_mod_signed.apk\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=1408 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.up-4ever.net/\r\nOrigin: https://www.up-4ever.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://www.up-4ever.net\r\ndate: Thu, 01 Jan 2026 20:08:45 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:170:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:170:0\r\nreport-to: {\"group\":\"ascnsrsggc:170:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:170:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T12:23:02.643109Z","times_seen":13933290,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":168,"dns":0,"connect":27,"send":0,"wait":32,"receive":0,"ssl":141},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js?userId=0082b152fafe42c6e25761d325fd4144","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:45.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:37:04 GMT","end":"Tue, 24 Mar 2026 18:37:01 GMT"},"fingerprint":{"sha1":"05:4F:CA:93:1E:46:6C:B4:A4:49:3A:2A:0C:AD:DB:CA:8C:CF:BC:9C","sha256":"81:B0:0B:B9:30:D8:5D:FE:11:36:CE:28:36:04:4F:41:74:05:00:57:EE:04:F0:1D:44:B3:B4:6F:A6:4F:D8:FD"}}},"request":{"raw":"GET /gid.js?userId=0082b152fafe42c6e25761d325fd4144 HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.up-4ever.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.up-4ever.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 01 Jan 2026 20:08:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://www.up-4ever.net\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=0082b152fafe42c6e25761d325fd4144; expires=Fri, 01 Jan 2027 20:08:45 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9b74a683ad63b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fa3c2e4dfd77a632117eea638529608c","sha1":"b08d17d20dbaa28d19e308e0a557dab0eb9c46cc","sha256":"aec94ba6583ac496f3fba07d383d75d224561c13dd2a144943a4342e3e244f3c","sha512":"548368605b829bc3224be6c66cce2ae80bf585b435d9a634952316e06dc501499ede5f08fdf8f11daf2c8d7f361682741a6286177784c02f897db4e9a21049fc","ssdeep":"","tlshash":"c0a002555e14679a0049177559dbdb122156128168445e4442e8520166c714d5fc5280","first_seen":"2026-01-01T20:09:15.844121Z","last_seen":"2026-01-01T20:09:15.844121Z","times_seen":1,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":42,"dns":21,"connect":1,"send":0,"wait":37,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/assets/js/alphinejs.min.js","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:43.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"up-4ever.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:42:49 GMT","end":"Mon, 02 Mar 2026 07:40:08 GMT"},"fingerprint":{"sha1":"5D:0C:68:8C:13:32:D0:C6:34:09:49:CD:B5:A7:39:BF:3F:39:32:24","sha256":"0D:88:63:0B:F9:FE:73:A7:AE:23:52:F3:81:9D:72:27:1A:5C:14:42:91:FC:00:19:3E:31:CE:43:BF:21:B4:E2"}}},"request":{"raw":"GET /assets/js/alphinejs.min.js HTTP/1.1\r\nHost: www.up-4ever.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.up-4ever.net/b99nfkkhbe29\r\nCookie: affiliate=npj6%2FbmCqCt7%2FgY7FmNkO%2BQiMJMZ80msZ7dHZag82Ignw70sy7I61rFkaIdD7yZDxuEA5aZmgVlHsk1Qj6PQ270vtBmeknxZXNNMFWs%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 01 Jan 2026 20:08:43 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 18 Mar 2024 01:03:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\nage: 3675\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J2wEc%2F6iMAw%2BYu606pQ7p1NZIXKjQzcP%2F%2FGvtnEx%2BklCICxk7rb%2Bgus9yVWP357qU1GwdJ41efpNFek9on5XvUfIEFgUybljOF%2BYqfc1\"}]}\r\ncf-ray: 9b74a67a0ee80b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43976,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (37086)","md5":"6341ca60a3790b37fb046e6cded71afe","sha1":"d5f1b32f86fa5b172cae593691a22e1584fa691f","sha256":"5bdc5d6356b4364d902406552c8195a89e878861bcf75183165ef80d2a295ae2","sha512":"909db649d012391222c7c5c8aca76a1d4e3e9c130e839a805a2813a1132c8521aeb7e367e9ac6ee9c7de70d6b2e6988fa3fbfd419608dfc648190c36b6509a61","ssdeep":"768:mOHA8aj7P8+PK5zfcEjVUAjKTdnL5hkP2F5Dij67yAthHs/TPTfl/pp187MnPNJV:VmJTqVUSKTjyPcyEM5ZT","tlshash":"1c13fae973dab17283ef11b660ff4646f3391894580e5428f618d8da382949d41f3fba","first_seen":"2024-03-12T01:47:23Z","last_seen":"2026-04-18T19:54:04.593048Z","times_seen":138,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@phosphor-icons/web@2.1.1/src/regular/style.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:43.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /@phosphor-icons/web@2.1.1/src/regular/style.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.up-4ever.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 01 Jan 2026 20:08:43 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\ncf-ray: 9b74a67a7eed569b-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 269117\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 01 Jan 2027 20:08:43 GMT\r\nlast-modified: Fri, 21 Nov 2025 02:59:03 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:hzdhuHERR9xRa2ECk26a0AXzowFTSe/N4aSW8DJvEFE=:\r\nfly-request-id: 01KAJ5KP0JWAB9B517MVFC48JQ-fra\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78131,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"7fe7108986e8596a197c607b2d989d89","sha1":"9feab57e5c948507134250af34e342e753fc029d","sha256":"873761b8711147dc516b6102936e9ad005f3a3015349efcde1a496f0326f1051","sha512":"73b14fe9422707df4bdfd7fe031a94f3826d8e48e250188f934cfcd61a050c994790f21da68ca1914d87703e4886b71b54817e030c5a6843b480d55144a8dec8","ssdeep":"768:xy23Hzs74dchpGALQhS3cmfGtA6g7i4zzx9/yLR1rkzSX:xy23HIznLj35e66S9ze","tlshash":"8173f0e4f5fd18d05389e1d123072661bf0da329994a2c69cab3bd8df1c2219c78e6dd","first_seen":"2024-04-04T21:10:47Z","last_seen":"2026-04-19T10:30:38.915053Z","times_seen":1296,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":27,"dns":1,"connect":1,"send":0,"wait":21,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:43.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.up-4ever.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 01 Jan 2026 20:08:44 GMT\r\ndate: Thu, 01 Jan 2026 20:08:44 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21659,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"17ded04af7b0636d4f8c934291f09ac8","sha1":"d7766b8a83cf1d92c52f7a94654999e4b033365e","sha256":"54985fb48cc0470e63eaaf30034b348ed6bd73cac3f6a759bc1a1c19387af7e7","sha512":"ce25e5ca2afca5d262b17c8d5c5667cccaebce41eacc6afb16f5cd89a838bfd3192564f9a28b450646f2a2fd76414c462f095065c3a45ca72ce31df9c257748d","ssdeep":"384:H3w3s3VR9xqWSUq+DnLami0A0BNBOi/mkX:XEA3mkX","tlshash":"5fa27ad1087be114ab871cc122cf6d36ee0ea254b850e9786bfd1cd8ad97c654371b2d","first_seen":"2025-09-17T03:38:53.893526Z","last_seen":"2026-04-19T11:48:55.657824Z","times_seen":36783,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":174,"dns":1,"connect":10,"send":0,"wait":20,"receive":0,"ssl":180},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/assets/img/lang/english.png","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:43.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"up-4ever.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:42:49 GMT","end":"Mon, 02 Mar 2026 07:40:08 GMT"},"fingerprint":{"sha1":"5D:0C:68:8C:13:32:D0:C6:34:09:49:CD:B5:A7:39:BF:3F:39:32:24","sha256":"0D:88:63:0B:F9:FE:73:A7:AE:23:52:F3:81:9D:72:27:1A:5C:14:42:91:FC:00:19:3E:31:CE:43:BF:21:B4:E2"}}},"request":{"raw":"GET /assets/img/lang/english.png HTTP/1.1\r\nHost: www.up-4ever.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.up-4ever.net/b99nfkkhbe29\r\nCookie: affiliate=npj6%2FbmCqCt7%2FgY7FmNkO%2BQiMJMZ80msZ7dHZag82Ignw70sy7I61rFkaIdD7yZDxuEA5aZmgVlHsk1Qj6PQ270vtBmeknxZXNNMFWs%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 01 Jan 2026 20:08:43 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 24 May 2024 14:56:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18065\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=obajeiB%2FLTwJSm9LcTKQwOLAoX5I0lUxqro7tHhTnwz9quyjhYqTZP3Cwx3Gqx1YFPxeceBGCEEk%2BxhaENR4dVXs6EtE93%2FqkbC77G7i\"}]}\r\ncontent-type: image/png\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,csam-hash\r\ncf-polished: ok\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 3675\r\ncache-control: max-age=14400\r\ncf-ray: 9b74a67a4ef50b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18065,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"522cd947786223c980335caf0dd2a849","sha1":"dcc5330cc2d096a9b2beb2c8d4ae0818476b57ac","sha256":"9c5eedee31ed4a0f1085f727f2ef4e3726539ee8c2e9a35c86f084ed62b9b873","sha512":"6a2f8b560a46f40967eb3a5c4d617a03ad818ec48be0d8505353a78d9e14a585bc93b8496af29650498c137af57e76bcb5e1df0a26f5cf329f20ce91a6c6470b","ssdeep":"384:5CV18oH12+PUY+tbO7jqS0gAPB+wlvEcrfr2Me16In/Fe:5g1vtH0+qvEHFP/o","tlshash":"f282d0f742d1d87e1211e3e48959924ca9e6aa4fba708c476f5c3dbeb0c7102a45f81f","first_seen":"2023-10-26T11:09:31Z","last_seen":"2026-04-16T20:11:32.271744Z","times_seen":99,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:44.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.up-4ever.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 31 Dec 2025 19:56:18 GMT\r\nexpires: Thu, 31 Dec 2026 19:56:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 87146\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-04-19T12:32:39.4344Z","times_seen":213667,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.up-4ever.net/cdn-cgi/challenge-platform/h/g/scripts/jsd/d39f91d70ce1/main.js?","fqdn":"www.up-4ever.net","domain":"up-4ever.net","tld":"net"},"ip":{"addr":"172.67.216.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.up-4ever.net/b99nfkkhbe29","date":"2026-01-01T20:08:44.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"up-4ever.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 06:42:49 GMT","end":"Mon, 02 Mar 2026 07:40:08 GMT"},"fingerprint":{"sha1":"5D:0C:68:8C:13:32:D0:C6:34:09:49:CD:B5:A7:39:BF:3F:39:32:24","sha256":"0D:88:63:0B:F9:FE:73:A7:AE:23:52:F3:81:9D:72:27:1A:5C:14:42:91:FC:00:19:3E:31:CE:43:BF:21:B4:E2"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/d39f91d70ce1/main.js? HTTP/1.1\r\nHost: www.up-4ever.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: affiliate=npj6%2FbmCqCt7%2FgY7FmNkO%2BQiMJMZ80msZ7dHZag82Ignw70sy7I61rFkaIdD7yZDxuEA5aZmgVlHsk1Qj6PQ270vtBmeknxZXNNMFWs%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 01 Jan 2026 20:08:44 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=d5kW0APbO29kJdJjRGjhS3fl952ZywA1IcXecslxj9vPrweLyWSpZIEgzQj9fqP%2FTrzfAimRfTzmBWAUngFkYgvgAWUi9nzWDHZZItjT%2Fti8L%2BHD1%2F1IJ38nrhbkRvMm9Rvp\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncf-ray: 9b74a67e5f130b65-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=2020\u0026min_rtt=498\u0026rtt_var=1528\u0026sent=267\u0026recv=52\u0026lost=0\u0026retrans=0\u0026sent_bytes=269857\u0026recv_bytes=10858\u0026delivery_rate=8901090\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=35722\u0026ss_exit_bw=5696658\u0026ss_exit_reason=2\u0026cwnd=23268\u0026unsent_bytes=0\u0026cid=070be8cf5886ea40\u0026ts=878\u0026inflight_dur=208\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10368,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10368), with no line terminators","md5":"900467002704b285aa6a7b87ec9a43b9","sha1":"eab117560915c4bfd0594ed1bf5663dd79525abd","sha256":"8b4e76cfac343938221a94e9c4962d9697fb8a321b028208fd928e8f3c366e44","sha512":"62724226bc2e4c1856ae04c32f6730b97a5ad2bb8994a14f336a4f4821353458eff1fa5858995ff69f3973c5d2368ff4ec554fd06ff273af2aee68099ae1caf5","ssdeep":"192:kXSrIwDPF2WIDmImPFBGJhoRfi4ZbsHMCYxG0GuFlGHlQzuX:sSrIwDP6DmImPFUJVMCYxEnX","tlshash":"e222d7937c8c6db0d19160d81a9735c672c78f527042ad4e97207bf46d3339aeb4aea8","first_seen":"2026-01-01T20:06:17.279642Z","last_seen":"2026-01-01T20:45:23.518447Z","times_seen":5,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}