{"report_id":"859b8e8a-cac3-440c-9d25-94f419c724e7","version":0,"status":"done","tags":[],"date":"2026-07-01T01:56:03Z","url":{"schema":"https","addr":"upwardsaverbc.com","fqdn":"upwardsaverbc.com","domain":"upwardsaverbc.com","tld":"com"},"ip":{"addr":"104.21.22.246","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"upwardsaverbc.com/","fqdn":"upwardsaverbc.com","domain":"upwardsaverbc.com","tld":"com"},"title":"Upward Saver Bank Corporation","dom":{"size":55222,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14510)","md5":"b993067a8a48d6b9a0d94c9d155f576d","sha1":"6a5e75b20b49cad796083b2b82a5e899e9a1c90b","sha256":"b25c0a697a2df8f9a54863459515ccaf5e4cf429ff635769e546a7fb7a3a7d26","sha512":"03e1a68f909434769642176313fd1cea70d193bbc01d0de79414f0cb955264eb9b590b6bf9864b862710593ca458788f6c0df6ab96d63f49e4982b535da0d3bb","ssdeep":"768:0G3smIIFNrzGNt9Zs+GPTnZwbbQNKhrp+ohCzoxaSrE0X1Xmh2fld1ClthJu/fi1:0YIII3ihrmhIZJL","tlshash":"c24363b279e3283f896384c6ba536b4ab5d6d31bc5518c00b7ee4a978f92f10fc17251","dom_hash":"domhash8972c7aa9d6a076dc677d3de544fdeaa","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"upwardsaverbc.com","fqdn":"upwardsaverbc.com","domain":"upwardsaverbc.com","tld":"com"},"ip":{"addr":"104.21.22.246","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-05T01:56:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"upwardsaverbc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-06-28T22:47:06.167692Z","alert_count":0,"request_count":2,"received_data":237924,"sent_data":1107,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-28T22:19:26.805281Z","alert_count":0,"request_count":7,"received_data":298023,"sent_data":3992,"comment":"","tags":null,"fingerprints":null},{"fqdn":"upwardsaverbc.com","ip":{"addr":"172.67.207.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-20","domain_rank":0,"first_seen":"2026-07-01T01:56:04.541715Z","last_seen":"2026-07-01T01:56:04.541715Z","alert_count":15,"request_count":15,"received_data":958261,"sent_data":17876,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"flagcdn.com","ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-05","domain_rank":30920,"first_seen":"2020-04-05T08:17:33Z","last_seen":"2026-06-26T00:57:24.009908Z","alert_count":0,"request_count":5,"received_data":5276,"sent_data":2685,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.gtranslate.net","ip":{"addr":"104.26.13.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-05-26","domain_rank":101861,"first_seen":"2022-11-07T21:49:20Z","last_seen":"2026-06-25T20:58:53.992168Z","alert_count":0,"request_count":2,"received_data":25425,"sent_data":1024,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-28T22:22:13.875484Z","alert_count":0,"request_count":1,"received_data":19751,"sent_data":569,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"upwardsaverbc.com/","fqdn":"upwardsaverbc.com","domain":"upwardsaverbc.com","tld":"com"},"ip":{"addr":"172.67.207.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f0a37035095e3231edd0d45465db28f0","sha1":"6d9bd8e8462b84b37ae168b3b49dbf64f8563e63","sha256":"20ab837e0bde58684cec30199a7486efc4cd290249143a710b20171722827a7f","sha512":"f4de81b43a22e0ff1fc8425ceb78bf646c60f8126252c57a52da95ffc245ff3f26c58316d68214f85af6a8ec820c7f57a95448a98fae3846f328d95c98dab654","ssdeep":"","tlshash":"dae07d1440710030147a661862cd26a1112047bb9d243c74b3eea1c50fcd01fe6ba6cf","size":339,"data":"","first_seen":"2026-07-01T01:56:09.594266Z","last_seen":"2026-07-01T01:56:09.594266Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upwardsaverbc.com/","fqdn":"upwardsaverbc.com","domain":"upwardsaverbc.com","tld":"com"},"ip":{"addr":"172.67.207.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"75a434aeccef6ad7b97f7a19e9122df9","sha1":"767b4344ecb148ba4d8d690ee518e405d79c2caa","sha256":"0c48fe6bcebcdc65a74dff8eb1b9bd7cafaeb1cb8f1b91675adb95060d729920","sha512":"1ab4819e648ddb34ffbc8805433d96bbf4f21bec5e0a673e14e67b7a0607eb063d088041574b6d3ce37a1e3c76d2dedf55d88330d38156214ebc964bd6146f69","ssdeep":"","tlshash":"8771457bb862147658fb9777629f62883625000b0d45c4513cdcd4ca4ff0fa6556ebf4","size":3631,"data":"","first_seen":"2026-07-01T01:56:09.595468Z","last_seen":"2026-07-01T01:56:09.595468Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/float.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.13.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"68ee10aa7ede43f8bb3293b220daf775","sha1":"1f26a636577ea9aaa524c0a23ae8cf342be925e9","sha256":"76e28fc0425d80422e45305464ada45c7c9b4a00132c65012c737c22814c259f","sha512":"531d2baf5f4d61c0def2c5f45fd8d9b69b143c24d0474a01291d858b086b45c233d1cca885cc722d6e6eaff3f8cb62e637df797beca8f5aec20d090f0e23fe08","ssdeep":"384:UzCKMPZATN09o0mtvwfEXMb5TZ/dDszCnfYI:UVMhAh060svwcX0T1dhh","tlshash":"10a2c62921b3003a49531265efff165c607a02b78004ec24bfaeddc2dfd59a9caa77d5","size":23138,"data":"","first_seen":"2026-05-06T20:53:53.345523Z","last_seen":"2026-07-17T22:26:00.501258Z","times_seen":961,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upwardsaverbc.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"upwardsaverbc.com","domain":"upwardsaverbc.com","tld":"com"},"ip":{"addr":"172.67.207.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-17T22:41:32.597263Z","times_seen":398963,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upwardsaverbc.com/","date":"2026-07-01T01:55:39.812Z","timestamp":1782870939812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://upwardsaverbc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 28 Jun 2026 10:12:28 GMT\r\nexpires: Mon, 28 Jun 2027 10:12:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 229391\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-07-17T22:37:18.97784Z","times_seen":33212,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":26,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upwardsaverbc.com/css/modern-homepage.css","fqdn":"upwardsaverbc.com","domain":"upwardsaverbc.com","tld":"com"},"ip":{"addr":"172.67.207.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upwardsaverbc.com/","date":"2026-07-01T01:55:39.030Z","timestamp":1782870939030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upwardsaverbc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 15:31:01 GMT","end":"Tue, 18 Aug 2026 15:31:00 GMT"},"fingerprint":{"sha1":"C6:C0:73:B4:0A:3C:9A:64:E2:B8:CD:61:3D:4E:A3:F5:42:49:B8:E1","sha256":"32:57:DE:D4:A8:36:D1:BB:69:8B:95:19:E1:FB:77:AE:99:50:8A:CD:A2:13:83:23:76:2F:74:82:5F:EE:AB:45"}}},"request":{"raw":"GET /css/modern-homepage.css HTTP/1.1\r\nHost: upwardsaverbc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upwardsaverbc.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im9qbzBrekl3Qnp5TG1xMGdsTXF0a1E9PSIsInZhbHVlIjoiMkFQMzNUdWhSYVBTRzY0N0ViSHVWcVhkMUJWYU5leVZIMGd4eXd0dVZROUEyUGZYTUZCQWJ2TUQ2YjVZQk5ZN3NaSzkvVmFoNEVYR2NGcmtZcDhZNXRSemxXU01ma01EQnY5R0VrbWhRWTcrZHkzODQvdjV5OXloRDAzSmZJaFUiLCJtYWMiOiIzY2VkNDliYzUzZmFjZDMwODQ2NGUwYjkwZGY3MGQ0ZTU4YmRlOGY3ZTIwMDAyMWFlNTc0ZDg3NWQ3ZmM2NDhiIiwidGFnIjoiIn0%3D; upward_session=eyJpdiI6IjlNU0ZlZC9VWFdzQjROelNQbFJ2SlE9PSIsInZhbHVlIjoieE9IVktxcDdIV2ZEbzBvVkJQd004aVdIK0tRcHlGWFhpMWVZZWdFVUJpZFlrRmZLOTJ4MGZ1ODJRcHNnNnkzZC9adUdUNTllUlV6WWQrajlUNndVUXVCTkRvQ3AybDhpbXVJcDNlaG5CTnZCWlVIMjNsNVZCblo3cGNzR1NOSWoiLCJtYWMiOiJlYThkMTg3NzdmYzE4MDE2NWI0MGY0YTBlZjExY2RiNDljNmQzYTc3ZGFlZWExY2NkMDE4OGQ3ZDAwMTY1NGFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 01 Jul 2026 01:55:39 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fs4W3A8t4r83xx9C26qo%2BdsZ7dnPDou98ca25rZYoK7J%2Fg1t%2B0Bc4LSPjupr7xwnbvv7FjFydrbOS0vn5%2Fh4g5rOTB1AulNg58btE9a3q7UHl%2BYn%2BqcVn59Qu6YVMC1B52nOVg%3D%3D\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 01:55:39 GMT\r\nlast-modified: Sun, 22 Mar 2026 16:29:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-length: 7320\r\ncf-ray: a141ca28fb2ac759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42650,"size_decoded":8126,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (385)","md5":"d99641a1eff793d156224d9fcb36d417","sha1":"ae8714a1ea3eb223642d02f579dd7cf73b11b006","sha256":"dc3f9f665426af1762677deffd1ef1e5d2662143d72c170c46b8cd83e6f395fe","sha512":"afe85098277daa8528464971756099ba304ef2f39020d87e90e2dad4f38b5f6de4ef28eb3e98aa6fe30ccfc502cffd2230b766b2798165031a5686401365aed5","ssdeep":"768:c2DRHNFknR37oNNLn/F9mFqHoHF8mVJKd2ElYu42409XJoGS:1RHNFknR37ojLn/F9mlF8mjKdLp42LJs","tlshash":"05130f32321651b47517ee5c76b29f4e7228b082f50525b8ab9530c8cffd1a8ce67bb4","first_seen":"2026-07-01T01:56:09.572443Z","last_seen":"2026-07-01T01:56:09.572443Z","times_seen":1,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"upwardsaverbc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upwardsaverbc.com/our-logo.png","fqdn":"upwardsaverbc.com","domain":"upwardsaverbc.com","tld":"com"},"ip":{"addr":"172.67.207.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upwardsaverbc.com/","date":"2026-07-01T01:55:39.051Z","timestamp":1782870939051,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upwardsaverbc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 15:31:01 GMT","end":"Tue, 18 Aug 2026 15:31:00 GMT"},"fingerprint":{"sha1":"C6:C0:73:B4:0A:3C:9A:64:E2:B8:CD:61:3D:4E:A3:F5:42:49:B8:E1","sha256":"32:57:DE:D4:A8:36:D1:BB:69:8B:95:19:E1:FB:77:AE:99:50:8A:CD:A2:13:83:23:76:2F:74:82:5F:EE:AB:45"}}},"request":{"raw":"GET /our-logo.png HTTP/1.1\r\nHost: upwardsaverbc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upwardsaverbc.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im9qbzBrekl3Qnp5TG1xMGdsTXF0a1E9PSIsInZhbHVlIjoiMkFQMzNUdWhSYVBTRzY0N0ViSHVWcVhkMUJWYU5leVZIMGd4eXd0dVZROUEyUGZYTUZCQWJ2TUQ2YjVZQk5ZN3NaSzkvVmFoNEVYR2NGcmtZcDhZNXRSemxXU01ma01EQnY5R0VrbWhRWTcrZHkzODQvdjV5OXloRDAzSmZJaFUiLCJtYWMiOiIzY2VkNDliYzUzZmFjZDMwODQ2NGUwYjkwZGY3MGQ0ZTU4YmRlOGY3ZTIwMDAyMWFlNTc0ZDg3NWQ3ZmM2NDhiIiwidGFnIjoiIn0%3D; upward_session=eyJpdiI6IjlNU0ZlZC9VWFdzQjROelNQbFJ2SlE9PSIsInZhbHVlIjoieE9IVktxcDdIV2ZEbzBvVkJQd004aVdIK0tRcHlGWFhpMWVZZWdFVUJpZFlrRmZLOTJ4MGZ1ODJRcHNnNnkzZC9adUdUNTllUlV6WWQrajlUNndVUXVCTkRvQ3AybDhpbXVJcDNlaG5CTnZCWlVIMjNsNVZCblo3cGNzR1NOSWoiLCJtYWMiOiJlYThkMTg3NzdmYzE4MDE2NWI0MGY0YTBlZjExY2RiNDljNmQzYTc3ZGFlZWExY2NkMDE4OGQ3ZDAwMTY1NGFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 01 Jul 2026 01:55:39 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2Bo13V8jrW0oe8Mx0S2qXsw9c3MqnwpqckIXZqwrwt74QzdTq4%2BFPBIIUnob3ldfrkpHpK69CZMHGTm%2F%2FpSE5GHNaAnNLyNBoEcz4Z0PbwJMrgOZ64KTY0SlONsA8Pf81HbEtQ%3D%3D\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 01:55:39 GMT\r\nlast-modified: Sat, 04 Apr 2026 14:13:21 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 56811\r\ncf-ray: a141ca291b2cc759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":56811,"size_decoded":57565,"mime_type":"image/png","magic":"PNG image data, 938 x 281, 8-bit/color RGBA, non-interlaced","md5":"900db4ee21392603fca9cc37a6fba857","sha1":"81eaeda98a277afa0a8c51f41af2125ab70cf871","sha256":"7383f6cd6625c1c4176c6a51abeb38baa52ae456499748f8e02abb1761484f8a","sha512":"70bfa70fa25610a0cdd714f64eba8e34ed7f018f4acdb1db81954e7738b2d31f4446842998e73391e95cdf0b64e585935a914fa0d5805453f62b44fdf43948d5","ssdeep":"1536:O2yjsN6l0zWovWDnTx1l9bHpGA8B8NUKE2:OdjsN6mznEchBLK5","tlshash":"6543f123d649aa62d2253c9340bb727f52c007361ec6c737c83207c64a73917fa668ee","first_seen":"2026-07-01T01:56:09.573856Z","last_seen":"2026-07-01T01:56:09.573856Z","times_seen":1,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"upwardsaverbc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upwardsaverbc.com/frontassets/images/banner/5.jpg","fqdn":"upwardsaverbc.com","domain":"upwardsaverbc.com","tld":"com"},"ip":{"addr":"172.67.207.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upwardsaverbc.com/","date":"2026-07-01T01:55:39.054Z","timestamp":1782870939054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upwardsaverbc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 15:31:01 GMT","end":"Tue, 18 Aug 2026 15:31:00 GMT"},"fingerprint":{"sha1":"C6:C0:73:B4:0A:3C:9A:64:E2:B8:CD:61:3D:4E:A3:F5:42:49:B8:E1","sha256":"32:57:DE:D4:A8:36:D1:BB:69:8B:95:19:E1:FB:77:AE:99:50:8A:CD:A2:13:83:23:76:2F:74:82:5F:EE:AB:45"}}},"request":{"raw":"GET /frontassets/images/banner/5.jpg HTTP/1.1\r\nHost: upwardsaverbc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upwardsaverbc.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im9qbzBrekl3Qnp5TG1xMGdsTXF0a1E9PSIsInZhbHVlIjoiMkFQMzNUdWhSYVBTRzY0N0ViSHVWcVhkMUJWYU5leVZIMGd4eXd0dVZROUEyUGZYTUZCQWJ2TUQ2YjVZQk5ZN3NaSzkvVmFoNEVYR2NGcmtZcDhZNXRSemxXU01ma01EQnY5R0VrbWhRWTcrZHkzODQvdjV5OXloRDAzSmZJaFUiLCJtYWMiOiIzY2VkNDliYzUzZmFjZDMwODQ2NGUwYjkwZGY3MGQ0ZTU4YmRlOGY3ZTIwMDAyMWFlNTc0ZDg3NWQ3ZmM2NDhiIiwidGFnIjoiIn0%3D; upward_session=eyJpdiI6IjlNU0ZlZC9VWFdzQjROelNQbFJ2SlE9PSIsInZhbHVlIjoieE9IVktxcDdIV2ZEbzBvVkJQd004aVdIK0tRcHlGWFhpMWVZZWdFVUJpZFlrRmZLOTJ4MGZ1ODJRcHNnNnkzZC9adUdUNTllUlV6WWQrajlUNndVUXVCTkRvQ3AybDhpbXVJcDNlaG5CTnZCWlVIMjNsNVZCblo3cGNzR1NOSWoiLCJtYWMiOiJlYThkMTg3NzdmYzE4MDE2NWI0MGY0YTBlZjExY2RiNDljNmQzYTc3ZGFlZWExY2NkMDE4OGQ3ZDAwMTY1NGFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 01 Jul 2026 01:55:39 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TKafYNkreeCnTD2UFoe3vZq9bvrEid7b9j9RZduFPRMUEkWoT2%2FUq1UoAN%2FxpxdW0jBsevVZk7yh2a5%2BPAco7dNmNvbk6IL9mh%2FeWc9Ei7tVv4ewRO%2B16j7z1BBAo8rwWpSYGQ%3D%3D\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 01:55:39 GMT\r\nlast-modified: Sun, 22 Mar 2026 16:29:42 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 195177\r\ncf-ray: a141ca291b2ec759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":195177,"size_decoded":195935,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x900, components 3","md5":"e672ef15f30ab6e1e3605d86b6556d7c","sha1":"3fb480adea805a1107c3e7b84340e282e4691f57","sha256":"d0781a90e8a3fc997233e8766351f90c810aad457d08945728470ff046eb48a5","sha512":"678d8f79b02c6ffe990a01322ac1f0d93298b95480148c7a9044db2f4d8a01e653bce55b4f1e3092593ddf6068431032df6c25f0d81085fa49cd3f69880d8181","ssdeep":"3072:0causEuuT8DFqVMBz14QTsB3vbuVWVZNKaOdwBu5BNziS+ZNsnd95i7fQHICnGQ:0causLuT8B/Bh4vBDE+ZsaOdwA5BNeSX","tlshash":"d01422217ec5a731af9ebf0643da3f5ba7619c9fd11ce080b3461b2dae2157c912421a","first_seen":"2026-07-01T01:56:09.575589Z","last_seen":"2026-07-01T01:56:09.575589Z","times_seen":1,"resource_available":false,"data":null}},"time_used":664,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"upwardsaverbc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/gb.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upwardsaverbc.com/","date":"2026-07-01T01:55:39.056Z","timestamp":1782870939056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 01:26:53 GMT","end":"Sat, 29 Aug 2026 02:26:16 GMT"},"fingerprint":{"sha1":"D2:6E:B0:B6:96:56:08:49:68:3B:CB:E0:E3:66:23:60:CD:73:2B:8D","sha256":"F5:81:41:B3:1E:2C:6F:26:A5:EF:89:3C:3C:84:66:48:2D:2F:E3:EA:E4:EF:C2:ED:58:8E:15:45:FB:B1:55:93"}}},"request":{"raw":"GET /w40/gb.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upwardsaverbc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 01 Jul 2026 01:55:39 GMT\r\ncontent-type: image/png\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-120\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1887583\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fXCDxeNKWdb9KKfVHbKdyYxWvaKxGzCA6k79CrWKbbpeCDf%2BnKeCBokmV92RMPgG9JmFCczpu479iq2sDkyTd2xFDDEjpr%2BfI7XI%2BjojWNktlT8%2BH%2BLiqwL6FtsYJw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 288\r\ncf-ray: a141ca298a182efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":288,"size_decoded":1122,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"5f94d206a4956ec58c461b2520f12887","sha1":"b8c3380dd5a5243098bbc6c99b309f549f6e99e4","sha256":"e2e39a14b87527ab4893d3f17510fcf2d12c6078f15289a2289a6b96da0d7098","sha512":"ea3a151f671611f444a92d28f4a75336871e051db9650a5796d10fd6953afd4d909ed0a72019c593c4ab349a37e1fa645b9034ebe2c8e51789c13bc924425b50","ssdeep":"","tlshash":"c2d027f57b7e2c28f9c5772b09114076d51a519d1b174716374cb4711f414d76495343","first_seen":"2023-12-03T06:20:21Z","last_seen":"2026-07-17T04:38:13.998782Z","times_seen":752,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upwardsaverbc.com/","date":"2026-07-01T01:55:39.807Z","timestamp":1782870939807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://upwardsaverbc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 01:48:06 GMT\r\nexpires: Fri, 25 Jun 2027 01:48:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 518853\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-17T22:41:53.427851Z","times_seen":237975,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":34,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upwardsaverbc.com/","date":"2026-07-01T01:55:39.809Z","timestamp":1782870939809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://upwardsaverbc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 01:48:06 GMT\r\nexpires: Fri, 25 Jun 2027 01:48:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 518853\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-17T22:41:53.427851Z","times_seen":237975,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":46,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/float.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.13.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upwardsaverbc.com/","date":"2026-07-01T01:55:39.037Z","timestamp":1782870939037,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 02:04:42 GMT","end":"Wed, 23 Sep 2026 03:04:28 GMT"},"fingerprint":{"sha1":"7E:41:C7:FB:AD:E5:FE:5D:B3:02:94:54:88:D4:EE:DD:EA:46:BC:9C","sha256":"0F:62:03:25:71:9E:01:C5:E5:A6:FD:62:89:4B:D6:28:CC:04:66:24:A5:08:2F:E1:17:68:AA:E7:51:AA:E9:A3"}}},"request":{"raw":"GET /widgets/latest/float.js HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upwardsaverbc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 01 Jul 2026 01:55:39 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 06 May 2026 19:42:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Tue, 29 Jun 2027 06:31:30 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b0IaiFBW%2Bc2iyJLKM6XaoEoxmUU9UfqHeVlTargxinwPcUWThp13Br7PQzmj0PAi3eLuZEU5wr521WCxj7Oco%2Bwrt8f29Then6e6%2BlUz%2BOgnyAoAvVlFL0PACXaV%2FP2DzFJluA%3D%3D\"}]}\r\nage: 156248\r\ncf-cache-status: HIT\r\netag: W/\"69fb99bb-5a62\"\r\ncontent-encoding: br\r\ncf-ray: a141ca293d3c569a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23138,"size_decoded":7508,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3129)","md5":"68ee10aa7ede43f8bb3293b220daf775","sha1":"1f26a636577ea9aaa524c0a23ae8cf342be925e9","sha256":"76e28fc0425d80422e45305464ada45c7c9b4a00132c65012c737c22814c259f","sha512":"531d2baf5f4d61c0def2c5f45fd8d9b69b143c24d0474a01291d858b086b45c233d1cca885cc722d6e6eaff3f8cb62e637df797beca8f5aec20d090f0e23fe08","ssdeep":"384:UzCKMPZATN09o0mtvwfEXMb5TZ/dDszCnfYI:UVMhAh060svwcX0T1dhh","tlshash":"10a2c62921b3003a49531265efff165c607a02b78004ec24bfaeddc2dfd59a9caa77d5","first_seen":"2026-05-06T20:53:53.345523Z","last_seen":"2026-07-17T22:26:00.501258Z","times_seen":961,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":18,"connect":3,"send":0,"wait":9,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/jp.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upwardsaverbc.com/","date":"2026-07-01T01:55:39.062Z","timestamp":1782870939062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 01:26:53 GMT","end":"Sat, 29 Aug 2026 02:26:16 GMT"},"fingerprint":{"sha1":"D2:6E:B0:B6:96:56:08:49:68:3B:CB:E0:E3:66:23:60:CD:73:2B:8D","sha256":"F5:81:41:B3:1E:2C:6F:26:A5:EF:89:3C:3C:84:66:48:2D:2F:E3:EA:E4:EF:C2:ED:58:8E:15:45:FB:B1:55:93"}}},"request":{"raw":"GET /w40/jp.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upwardsaverbc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 01 Jul 2026 01:55:39 GMT\r\ncontent-type: image/png\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-ef\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1901632\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bQmf%2BOWUJGone5O5uvZ0Kq0d6Ac1fr53uWpaUNGsrO0SkT9wRerse1W6qpIqNY4kGInOPHBicXHCTHIZnMAZywpCnfB2LJFfWPtUxO7O8dLYV%2FpzwB5s4IY1XguQlw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 239\r\ncf-ray: a141ca298a172efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":239,"size_decoded":1066,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"83e65aec2cc399a5d434f2662bfa842e","sha1":"005c45af9a8ce06d3dfba29f2ae01d818cd25edb","sha256":"ec7131f162be04e0c5ef2680ef5bd4b433e482f20913bab1fe9ae9f748ec3693","sha512":"188e7fff29afed8562028cba7033d1d46c27629c452c528ad2f7fcc58f1ecc8a4118b8ef26e5fc7fbba2e891ab04f8eea0d026fc6b44b3557a154ee0facb6532","ssdeep":"","tlshash":"5ad097af61280830c9688272d039020ccef89023d3a60071056c83f218c230598cc9af","first_seen":"2025-02-12T08:32:15.782071Z","last_seen":"2026-07-17T04:38:14.008125Z","times_seen":179,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ca.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upwardsaverbc.com/","date":"2026-07-01T01:55:39.064Z","timestamp":1782870939064,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 01:26:53 GMT","end":"Sat, 29 Aug 2026 02:26:16 GMT"},"fingerprint":{"sha1":"D2:6E:B0:B6:96:56:08:49:68:3B:CB:E0:E3:66:23:60:CD:73:2B:8D","sha256":"F5:81:41:B3:1E:2C:6F:26:A5:EF:89:3C:3C:84:66:48:2D:2F:E3:EA:E4:EF:C2:ED:58:8E:15:45:FB:B1:55:93"}}},"request":{"raw":"GET /w40/ca.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upwardsaverbc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 01 Jul 2026 01:55:39 GMT\r\ncontent-type: image/png\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-11e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1817281\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h7RlA959edZf1poXgQThJg90Oop7YL%2FwfxQa5DobEnT4kFTXIxLN74MtgwYXR%2BSKsKT%2F2h5lLvnpDWSic8G52JsfZb%2BOTtZVcbgKnNEvwvIAETIPH9Y7Mk7D8ne3QA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 286\r\ncf-ray: a141ca298a142efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":286,"size_decoded":1118,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"0a867d3850f151347bdcf48c254d30a5","sha1":"95ecd1576f3b7d83a078adb9dfa83695251ebff9","sha256":"c239959c36c5316ff09b76cdb342732ee7ff12a5036ae602a1f82fcdc6a2da0b","sha512":"99ecd4d33f281cc9462b0820b77777a5851a6942d87fa4604a0e5a4ce02e1c66fa9d2d35cc909eb82d0575dd28dc2fa25f0e560f17db74081c4635d93c40c8bd","ssdeep":"","tlshash":"cad0ebeb03942824e50dcbb6e688440fe83b710a0f298d000f47083b043918691cc30a","first_seen":"2023-12-21T03:08:36Z","last_seen":"2026-07-16T17:24:24.565563Z","times_seen":192,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upwardsaverbc.com/frontassets/images/banner/banner-slide-2.jpg","fqdn":"upwardsaverbc.com","domain":"upwardsaverbc.com","tld":"com"},"ip":{"addr":"172.67.207.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upwardsaverbc.com/","date":"2026-07-01T01:55:39.845Z","timestamp":1782870939845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upwardsaverbc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 15:31:01 GMT","end":"Tue, 18 Aug 2026 15:31:00 GMT"},"fingerprint":{"sha1":"C6:C0:73:B4:0A:3C:9A:64:E2:B8:CD:61:3D:4E:A3:F5:42:49:B8:E1","sha256":"32:57:DE:D4:A8:36:D1:BB:69:8B:95:19:E1:FB:77:AE:99:50:8A:CD:A2:13:83:23:76:2F:74:82:5F:EE:AB:45"}}},"request":{"raw":"GET /frontassets/images/banner/banner-slide-2.jpg HTTP/1.1\r\nHost: upwardsaverbc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upwardsaverbc.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im9qbzBrekl3Qnp5TG1xMGdsTXF0a1E9PSIsInZhbHVlIjoiMkFQMzNUdWhSYVBTRzY0N0ViSHVWcVhkMUJWYU5leVZIMGd4eXd0dVZROUEyUGZYTUZCQWJ2TUQ2YjVZQk5ZN3NaSzkvVmFoNEVYR2NGcmtZcDhZNXRSemxXU01ma01EQnY5R0VrbWhRWTcrZHkzODQvdjV5OXloRDAzSmZJaFUiLCJtYWMiOiIzY2VkNDliYzUzZmFjZDMwODQ2NGUwYjkwZGY3MGQ0ZTU4YmRlOGY3ZTIwMDAyMWFlNTc0ZDg3NWQ3ZmM2NDhiIiwidGFnIjoiIn0%3D; upward_session=eyJpdiI6IjlNU0ZlZC9VWFdzQjROelNQbFJ2SlE9PSIsInZhbHVlIjoieE9IVktxcDdIV2ZEbzBvVkJQd004aVdIK0tRcHlGWFhpMWVZZWdFVUJpZFlrRmZLOTJ4MGZ1ODJRcHNnNnkzZC9adUdUNTllUlV6WWQrajlUNndVUXVCTkRvQ3AybDhpbXVJcDNlaG5CTnZCWlVIMjNsNVZCblo3cGNzR1NOSWoiLCJtYWMiOiJlYThkMTg3NzdmYzE4MDE2NWI0MGY0YTBlZjExY2RiNDljNmQzYTc3ZGFlZWExY2NkMDE4OGQ3ZDAwMTY1NGFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 01 Jul 2026 01:55:39 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fY3wrhioztv85MJ2fZxC0qOBE9JZD8P%2BUlff%2FcJ0ahyMAKPe%2BB%2Fn7g3RgutCoFKbNrE1o2LQpuS76nUi%2BnSjt81fNGdh3V98GQA0ZWfyon51m7bZaD8QkMX27ds9zRxnbMXsaw%3D%3D\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 01:55:39 GMT\r\nlast-modified: Sun, 22 Mar 2026 16:29:42 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncontent-length: 215349\r\ncf-ray: a141ca2e0b63c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":215349,"size_decoded":216107,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1920x1280, components 3","md5":"6df7d30871e1bd1e7e654dbd23868b90","sha1":"7de286b325086abffbf2650c46ebbf1c9be2db96","sha256":"7f1872f605c1f9fbc50765be1a157b7b9966872171f7559059e500ab26b6cd2d","sha512":"ed30257082b7f8bc370cd0f10ea273d374abe3203d7ad3beaa5cbb57213eac19cc6ebaec9ff0ad4f4ae982197d8533702f1bf3c5aceac2d8508f5810642e8691","ssdeep":"6144:Bd0w9SBN8SUVCGooFeOUQShiX428ed6UiOmVlky+ODq:BwBN8eoF68AjOmfkIDq","tlshash":"5f2422887f709fc6c87d73b889a4771b8b327914df4216a9f1a49b67e4d0f42431a19c","first_seen":"2026-07-01T01:56:09.579897Z","last_seen":"2026-07-01T01:56:09.579897Z","times_seen":1,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":366,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"upwardsaverbc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upwardsaverbc.com/","date":"2026-07-01T01:55:39.974Z","timestamp":1782870939974,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://upwardsaverbc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 01:48:06 GMT\r\nexpires: Fri, 25 Jun 2027 01:48:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 518853\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-17T22:41:53.427851Z","times_seen":237975,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upwardsaverbc.com/","date":"2026-07-01T01:55:39.810Z","timestamp":1782870939810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://upwardsaverbc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 01:48:06 GMT\r\nexpires: Fri, 25 Jun 2027 01:48:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 518853\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-17T22:41:53.427851Z","times_seen":237975,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":40,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/flags/svg/en.svg","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.13.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upwardsaverbc.com/","date":"2026-07-01T01:55:39.984Z","timestamp":1782870939984,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 02:04:42 GMT","end":"Wed, 23 Sep 2026 03:04:28 GMT"},"fingerprint":{"sha1":"7E:41:C7:FB:AD:E5:FE:5D:B3:02:94:54:88:D4:EE:DD:EA:46:BC:9C","sha256":"0F:62:03:25:71:9E:01:C5:E5:A6:FD:62:89:4B:D6:28:CC:04:66:24:A5:08:2F:E1:17:68:AA:E7:51:AA:E9:A3"}}},"request":{"raw":"GET /flags/svg/en.svg HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upwardsaverbc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 01 Jul 2026 01:55:39 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Dec 2022 23:34:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Fri, 04 Jun 2027 03:43:22 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YSswPHb5JOAqD7rOwrw00uVELQnpRxIhCSvzFaWf%2BIe9jURL26l9rFTbkZ5CrpNQdPxYlS4eJr3aXKoHw7%2FqlCID5aB8%2BcROg%2Bq6c6BFi8ag2KElGLQmrVC9tj%2F1UgoqoYndPw%3D%3D\"}]}\r\nage: 2326337\r\ncf-cache-status: HIT\r\netag: W/\"639d0089-35e\"\r\ncontent-encoding: br\r\ncf-ray: a141ca2eef40569a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":862,"size_decoded":1178,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f9bbc4885a348eff84e4ef4155121fae","sha1":"afaa1646576b96aa105a66c3273f13f0cb30e0c3","sha256":"de46013c87c1d6b0e4804a6bd8be50f2c5f961c5adbc42ba40b8913af33afe75","sha512":"b0e944509060a802c1b2d4c014070e41bd9b8af4d1969670094cecdff21b537b14a2d64e3368881f49694bd9582f10ee58674b90e0e7acf36e70d51c0b08b664","ssdeep":"","tlshash":"5211a384996a505c2c86c6cbfed46e8443ff72cef6650984644d229c7149d9f47c4b1d","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-07-17T21:59:08.533355Z","times_seen":13157,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800\u0026family=Manrope:wght@600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upwardsaverbc.com/","date":"2026-07-01T01:55:39.021Z","timestamp":1782870939021,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700;800\u0026family=Manrope:wght@600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upwardsaverbc.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 01 Jul 2026 01:55:39 GMT\r\ndate: Wed, 01 Jul 2026 01:55:39 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19067,"size_decoded":1642,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0cc43b4702f7268d97df554f3a1136ad","sha1":"48cb2d3f0216d9117f90c0a64ca6ef6c5093d279","sha256":"35d251c2555739e9c384415b4a20f69a5a975863bf547e82f25a2ecfed566335","sha512":"1e3158e054b978a1a35abb9390a038cba25ea71b5fdcd86b23d97e49849cbcba35d6b4bd15653d5005ee075f12c6224435cb024a68cc15a68a7a2247243340a7","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHTJlOV3MMP:vXuM0p2+g7rE02EQJ","tlshash":"4d828991002be400ab871dc273cf7e3aad8e60856485c5ba5ffd0dc9acebd62536475e","first_seen":"2025-11-19T08:48:52.772394Z","last_seen":"2026-07-02T19:36:30.0613Z","times_seen":19,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":32,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upwardsaverbc.com/front/images/clients/1.png","fqdn":"upwardsaverbc.com","domain":"upwardsaverbc.com","tld":"com"},"ip":{"addr":"172.67.207.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upwardsaverbc.com/","date":"2026-07-01T01:55:39.067Z","timestamp":1782870939067,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upwardsaverbc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 15:31:01 GMT","end":"Tue, 18 Aug 2026 15:31:00 GMT"},"fingerprint":{"sha1":"C6:C0:73:B4:0A:3C:9A:64:E2:B8:CD:61:3D:4E:A3:F5:42:49:B8:E1","sha256":"32:57:DE:D4:A8:36:D1:BB:69:8B:95:19:E1:FB:77:AE:99:50:8A:CD:A2:13:83:23:76:2F:74:82:5F:EE:AB:45"}}},"request":{"raw":"GET /front/images/clients/1.png HTTP/1.1\r\nHost: upwardsaverbc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upwardsaverbc.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im9qbzBrekl3Qnp5TG1xMGdsTXF0a1E9PSIsInZhbHVlIjoiMkFQMzNUdWhSYVBTRzY0N0ViSHVWcVhkMUJWYU5leVZIMGd4eXd0dVZROUEyUGZYTUZCQWJ2TUQ2YjVZQk5ZN3NaSzkvVmFoNEVYR2NGcmtZcDhZNXRSemxXU01ma01EQnY5R0VrbWhRWTcrZHkzODQvdjV5OXloRDAzSmZJaFUiLCJtYWMiOiIzY2VkNDliYzUzZmFjZDMwODQ2NGUwYjkwZGY3MGQ0ZTU4YmRlOGY3ZTIwMDAyMWFlNTc0ZDg3NWQ3ZmM2NDhiIiwidGFnIjoiIn0%3D; upward_session=eyJpdiI6IjlNU0ZlZC9VWFdzQjROelNQbFJ2SlE9PSIsInZhbHVlIjoieE9IVktxcDdIV2ZEbzBvVkJQd004aVdIK0tRcHlGWFhpMWVZZWdFVUJpZFlrRmZLOTJ4MGZ1ODJRcHNnNnkzZC9adUdUNTllUlV6WWQrajlUNndVUXVCTkRvQ3AybDhpbXVJcDNlaG5CTnZCWlVIMjNsNVZCblo3cGNzR1NOSWoiLCJtYWMiOiJlYThkMTg3NzdmYzE4MDE2NWI0MGY0YTBlZjExY2RiNDljNmQzYTc3ZGFlZWExY2NkMDE4OGQ3ZDAwMTY1NGFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 01 Jul 2026 01:55:39 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ImvQVrnxqIpVx6DCmUEZzgBceoMdQBQPEXfvvEA6%2FtLWrQ2LV5G37bshvpDfJU%2BLf%2BVNm2q9TwjDhZvAgqaYKC1xE3wFFO1FjJvk84dlAXL3Q9DieCrF%2BNsedyGv6Mu%2Fim3P%2Bw%3D%3D\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 01:55:39 GMT\r\nlast-modified: Sun, 22 Mar 2026 16:29:42 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5293\r\ncf-ray: a141ca293b30c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5293,"size_decoded":6050,"mime_type":"image/png","magic":"PNG image data, 200 x 85, 8-bit/color RGBA, non-interlaced","md5":"ce51a51d5a40ad2b3bc416feda36662b","sha1":"48f0aabfe647b6e5d2787d6a366a122e2b4e006e","sha256":"9f6d5e0a5e65b0fe165a9db8c4b06e10e3adce7e46b153353c5cbfd65e3e3bd6","sha512":"7348409646fd4ceea79a5866b9f428282c2d6be4bfc1c378bf932378293d89bab300ed279381514bd109babf91df89a803db2b09f31d23fca58e6ff064ff07fd","ssdeep":"96:IIXRBPFTLYAgjpMfq/vjBTEMpduiyqB772uHv3dkVO100J1A46p:IIXRZhYXjyqnjBTlbrWuHVPebp","tlshash":"4bb16ddac9fa1f8f9582e2ba45022255c73af4f194940c9b8d0d14e5ac6931f4fbb613","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-07-13T10:22:15.353915Z","times_seen":1685,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"upwardsaverbc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upwardsaverbc.com/front/images/clients/5.png","fqdn":"upwardsaverbc.com","domain":"upwardsaverbc.com","tld":"com"},"ip":{"addr":"172.67.207.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upwardsaverbc.com/","date":"2026-07-01T01:55:39.072Z","timestamp":1782870939072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upwardsaverbc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 15:31:01 GMT","end":"Tue, 18 Aug 2026 15:31:00 GMT"},"fingerprint":{"sha1":"C6:C0:73:B4:0A:3C:9A:64:E2:B8:CD:61:3D:4E:A3:F5:42:49:B8:E1","sha256":"32:57:DE:D4:A8:36:D1:BB:69:8B:95:19:E1:FB:77:AE:99:50:8A:CD:A2:13:83:23:76:2F:74:82:5F:EE:AB:45"}}},"request":{"raw":"GET /front/images/clients/5.png HTTP/1.1\r\nHost: upwardsaverbc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upwardsaverbc.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im9qbzBrekl3Qnp5TG1xMGdsTXF0a1E9PSIsInZhbHVlIjoiMkFQMzNUdWhSYVBTRzY0N0ViSHVWcVhkMUJWYU5leVZIMGd4eXd0dVZROUEyUGZYTUZCQWJ2TUQ2YjVZQk5ZN3NaSzkvVmFoNEVYR2NGcmtZcDhZNXRSemxXU01ma01EQnY5R0VrbWhRWTcrZHkzODQvdjV5OXloRDAzSmZJaFUiLCJtYWMiOiIzY2VkNDliYzUzZmFjZDMwODQ2NGUwYjkwZGY3MGQ0ZTU4YmRlOGY3ZTIwMDAyMWFlNTc0ZDg3NWQ3ZmM2NDhiIiwidGFnIjoiIn0%3D; upward_session=eyJpdiI6IjlNU0ZlZC9VWFdzQjROelNQbFJ2SlE9PSIsInZhbHVlIjoieE9IVktxcDdIV2ZEbzBvVkJQd004aVdIK0tRcHlGWFhpMWVZZWdFVUJpZFlrRmZLOTJ4MGZ1ODJRcHNnNnkzZC9adUdUNTllUlV6WWQrajlUNndVUXVCTkRvQ3AybDhpbXVJcDNlaG5CTnZCWlVIMjNsNVZCblo3cGNzR1NOSWoiLCJtYWMiOiJlYThkMTg3NzdmYzE4MDE2NWI0MGY0YTBlZjExY2RiNDljNmQzYTc3ZGFlZWExY2NkMDE4OGQ3ZDAwMTY1NGFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 01 Jul 2026 01:55:39 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wBr3C%2FyELnQdfyA6d3FECjcPqfJdgXFreuveLHwb8Gi60YRxO%2FLDcfCGTSgBptd1CNwlAj5s0bBy7puAiwQY2%2FDcqgJU%2FWWL%2BhLlC9bXvx9R%2Fk9ScdH8MxAiad3%2Fe0r0JzSgEA%3D%3D\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 01:55:39 GMT\r\nlast-modified: Sun, 22 Mar 2026 16:29:42 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 5221\r\ncf-ray: a141ca296b33c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5221,"size_decoded":5980,"mime_type":"image/png","magic":"PNG image data, 200 x 85, 8-bit/color RGBA, non-interlaced","md5":"dcbced3fa2394523e7ea0f5e9f4d97d8","sha1":"ebd5aa25062b570f641a3ea3fb53fd66ea2b4179","sha256":"1c39ce50059038537ed88974043ee85a3aafe3d6560577c9cb1b33604653d042","sha512":"f94fa8b231de9f1329f20cd21a6afcb0e86c0d8f049b958a2f80b521d361b6fe19acd73cc16466f62118fbdc69df409ffdf1cb0df0456fb72e05d7ad1d3f4e9f","ssdeep":"96:niVHawrM8ZUzB0+sOz1BF1d4BvboybO3gMLS1wMbdr79vQNtA/Pa:nGiBaER4Bl69m1R7BQNy/Pa","tlshash":"feb19fd43c0bc424c4a20421dd4a90348746091bfdf546b8b2b5eee7c2d6d5df8b8bb6","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-07-13T10:22:15.360559Z","times_seen":1686,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"upwardsaverbc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upwardsaverbc.com/storage/app/public/photos/SogsHXqU6Y0ICRb6DyZgVRWFyDOm44mgql9lWKwW.png","fqdn":"upwardsaverbc.com","domain":"upwardsaverbc.com","tld":"com"},"ip":{"addr":"172.67.207.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upwardsaverbc.com/","date":"2026-07-01T01:55:40.532Z","timestamp":1782870940532,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upwardsaverbc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 15:31:01 GMT","end":"Tue, 18 Aug 2026 15:31:00 GMT"},"fingerprint":{"sha1":"C6:C0:73:B4:0A:3C:9A:64:E2:B8:CD:61:3D:4E:A3:F5:42:49:B8:E1","sha256":"32:57:DE:D4:A8:36:D1:BB:69:8B:95:19:E1:FB:77:AE:99:50:8A:CD:A2:13:83:23:76:2F:74:82:5F:EE:AB:45"}}},"request":{"raw":"GET /storage/app/public/photos/SogsHXqU6Y0ICRb6DyZgVRWFyDOm44mgql9lWKwW.png HTTP/1.1\r\nHost: upwardsaverbc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upwardsaverbc.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im9qbzBrekl3Qnp5TG1xMGdsTXF0a1E9PSIsInZhbHVlIjoiMkFQMzNUdWhSYVBTRzY0N0ViSHVWcVhkMUJWYU5leVZIMGd4eXd0dVZROUEyUGZYTUZCQWJ2TUQ2YjVZQk5ZN3NaSzkvVmFoNEVYR2NGcmtZcDhZNXRSemxXU01ma01EQnY5R0VrbWhRWTcrZHkzODQvdjV5OXloRDAzSmZJaFUiLCJtYWMiOiIzY2VkNDliYzUzZmFjZDMwODQ2NGUwYjkwZGY3MGQ0ZTU4YmRlOGY3ZTIwMDAyMWFlNTc0ZDg3NWQ3ZmM2NDhiIiwidGFnIjoiIn0%3D; upward_session=eyJpdiI6IjlNU0ZlZC9VWFdzQjROelNQbFJ2SlE9PSIsInZhbHVlIjoieE9IVktxcDdIV2ZEbzBvVkJQd004aVdIK0tRcHlGWFhpMWVZZWdFVUJpZFlrRmZLOTJ4MGZ1ODJRcHNnNnkzZC9adUdUNTllUlV6WWQrajlUNndVUXVCTkRvQ3AybDhpbXVJcDNlaG5CTnZCWlVIMjNsNVZCblo3cGNzR1NOSWoiLCJtYWMiOiJlYThkMTg3NzdmYzE4MDE2NWI0MGY0YTBlZjExY2RiNDljNmQzYTc3ZGFlZWExY2NkMDE4OGQ3ZDAwMTY1NGFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 500 \r\ndate: Wed, 01 Jul 2026 01:55:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/8.2.29\r\ncache-control: no-cache, private\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mNhbPAGrpeLpqio8qEpD%2Fb%2FS0bI76MGNLeACBkdax0GKMPhBjA8jiLDOmulL3lxSMREeZFWVDUm1JNR57%2Fg8oOecxcLcxU6DdtkxggCfuNYv%2BCvyglUyMHf%2B%2F5AtuaTnDQkHNg%3D%3D\"}]}\r\ncf-ray: a141ca325b8fc759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7351,"size_decoded":8042,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"06225ced7b8ba9ceb2b7837f06dfe71c","sha1":"75cea8ef92264f318757da658f962fb56468df82","sha256":"38fc3fc16d8ebe641bcc89751787235b9f3ce40ac333dc96051b9b2bc8633077","sha512":"80611307f54a4ebac179ffcfb27844297ad9c3a1f957a0b2890ca74149046d91a63ede31dfa6a1b425cca9e66f3cefd32cf1ffac14db7b12d7a1f7786ccae50f","ssdeep":"192:iF9HzDuaPvjjNDWvT+8OAQoiqeTWcS4KvZYKzvAkCylYybXTJW0De4:I9UDe4","tlshash":"6fe1451978b311a32c53a16427e76f8a36b59043cd16de267fdda240cf867b8add3348","first_seen":"2026-07-01T01:56:09.584495Z","last_seen":"2026-07-01T01:56:09.584495Z","times_seen":1,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":553,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"upwardsaverbc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upwardsaverbc.com/frontassets/images/banner/banner-slide-1.jpg","fqdn":"upwardsaverbc.com","domain":"upwardsaverbc.com","tld":"com"},"ip":{"addr":"172.67.207.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upwardsaverbc.com/","date":"2026-07-01T01:55:39.833Z","timestamp":1782870939833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upwardsaverbc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 15:31:01 GMT","end":"Tue, 18 Aug 2026 15:31:00 GMT"},"fingerprint":{"sha1":"C6:C0:73:B4:0A:3C:9A:64:E2:B8:CD:61:3D:4E:A3:F5:42:49:B8:E1","sha256":"32:57:DE:D4:A8:36:D1:BB:69:8B:95:19:E1:FB:77:AE:99:50:8A:CD:A2:13:83:23:76:2F:74:82:5F:EE:AB:45"}}},"request":{"raw":"GET /frontassets/images/banner/banner-slide-1.jpg HTTP/1.1\r\nHost: upwardsaverbc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upwardsaverbc.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im9qbzBrekl3Qnp5TG1xMGdsTXF0a1E9PSIsInZhbHVlIjoiMkFQMzNUdWhSYVBTRzY0N0ViSHVWcVhkMUJWYU5leVZIMGd4eXd0dVZROUEyUGZYTUZCQWJ2TUQ2YjVZQk5ZN3NaSzkvVmFoNEVYR2NGcmtZcDhZNXRSemxXU01ma01EQnY5R0VrbWhRWTcrZHkzODQvdjV5OXloRDAzSmZJaFUiLCJtYWMiOiIzY2VkNDliYzUzZmFjZDMwODQ2NGUwYjkwZGY3MGQ0ZTU4YmRlOGY3ZTIwMDAyMWFlNTc0ZDg3NWQ3ZmM2NDhiIiwidGFnIjoiIn0%3D; upward_session=eyJpdiI6IjlNU0ZlZC9VWFdzQjROelNQbFJ2SlE9PSIsInZhbHVlIjoieE9IVktxcDdIV2ZEbzBvVkJQd004aVdIK0tRcHlGWFhpMWVZZWdFVUJpZFlrRmZLOTJ4MGZ1ODJRcHNnNnkzZC9adUdUNTllUlV6WWQrajlUNndVUXVCTkRvQ3AybDhpbXVJcDNlaG5CTnZCWlVIMjNsNVZCblo3cGNzR1NOSWoiLCJtYWMiOiJlYThkMTg3NzdmYzE4MDE2NWI0MGY0YTBlZjExY2RiNDljNmQzYTc3ZGFlZWExY2NkMDE4OGQ3ZDAwMTY1NGFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 01 Jul 2026 01:55:40 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DboUp152tThX6o1u1%2FgajHDDDK4QbDWxrALjht%2FrUetvtkUxhLCh2DvfCykLLWaFme5Dox%2FzxxEiGAWLEUvAtu%2Boh1LRQLQlFpGOwESXmNDKyLQX0QsOtKtxJo7Xj6eFH2mv7Q%3D%3D\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 01:55:40 GMT\r\nlast-modified: Sun, 22 Mar 2026 16:29:42 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncontent-length: 231317\r\ncf-ray: a141ca2dfb5fc759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231317,"size_decoded":232073,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1920x1280, components 3","md5":"2c7ace035cad147846328dede8888499","sha1":"f812c71030657ae57e110aaebd882bc9e393ad44","sha256":"63c7169e33b63d6d29aa60cdf23042b28668bed4fdedd90513d0d734f12be9ca","sha512":"6704fea4c005e21df6dda3961faf9a23ee876a1316aecfcbb94da945f02dc647c9056b3069c67740f7028a550b701b808481cf4d72786b859dcdb304ce19ccd7","ssdeep":"3072:0CdmCZgDOLGhS6mTkLk2gLKCBe6EdNU2pG6GQC7I1aYRH8ioi4tP5VWCgve81BBF:fEB89kLkJIdXpHFCM1a83SVWbN1BI8U6","tlshash":"95341231259c75d2dd8483345ce9e68a928a9e5d468b078bf02ffe05cd1e8ba871b1cd","first_seen":"2026-07-01T01:56:09.585715Z","last_seen":"2026-07-01T01:56:09.585715Z","times_seen":1,"resource_available":false,"data":null}},"time_used":883,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":325,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"upwardsaverbc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upwardsaverbc.com/frontassets/images/banner/banner-slide-3.jpg","fqdn":"upwardsaverbc.com","domain":"upwardsaverbc.com","tld":"com"},"ip":{"addr":"172.67.207.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upwardsaverbc.com/","date":"2026-07-01T01:55:39.848Z","timestamp":1782870939848,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upwardsaverbc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 15:31:01 GMT","end":"Tue, 18 Aug 2026 15:31:00 GMT"},"fingerprint":{"sha1":"C6:C0:73:B4:0A:3C:9A:64:E2:B8:CD:61:3D:4E:A3:F5:42:49:B8:E1","sha256":"32:57:DE:D4:A8:36:D1:BB:69:8B:95:19:E1:FB:77:AE:99:50:8A:CD:A2:13:83:23:76:2F:74:82:5F:EE:AB:45"}}},"request":{"raw":"GET /frontassets/images/banner/banner-slide-3.jpg HTTP/1.1\r\nHost: upwardsaverbc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upwardsaverbc.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im9qbzBrekl3Qnp5TG1xMGdsTXF0a1E9PSIsInZhbHVlIjoiMkFQMzNUdWhSYVBTRzY0N0ViSHVWcVhkMUJWYU5leVZIMGd4eXd0dVZROUEyUGZYTUZCQWJ2TUQ2YjVZQk5ZN3NaSzkvVmFoNEVYR2NGcmtZcDhZNXRSemxXU01ma01EQnY5R0VrbWhRWTcrZHkzODQvdjV5OXloRDAzSmZJaFUiLCJtYWMiOiIzY2VkNDliYzUzZmFjZDMwODQ2NGUwYjkwZGY3MGQ0ZTU4YmRlOGY3ZTIwMDAyMWFlNTc0ZDg3NWQ3ZmM2NDhiIiwidGFnIjoiIn0%3D; upward_session=eyJpdiI6IjlNU0ZlZC9VWFdzQjROelNQbFJ2SlE9PSIsInZhbHVlIjoieE9IVktxcDdIV2ZEbzBvVkJQd004aVdIK0tRcHlGWFhpMWVZZWdFVUJpZFlrRmZLOTJ4MGZ1ODJRcHNnNnkzZC9adUdUNTllUlV6WWQrajlUNndVUXVCTkRvQ3AybDhpbXVJcDNlaG5CTnZCWlVIMjNsNVZCblo3cGNzR1NOSWoiLCJtYWMiOiJlYThkMTg3NzdmYzE4MDE2NWI0MGY0YTBlZjExY2RiNDljNmQzYTc3ZGFlZWExY2NkMDE4OGQ3ZDAwMTY1NGFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 01 Jul 2026 01:55:40 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OyQ571DibaB2Y2S08WzKD4OnCEzLEpv0TtdxAZywKrnxVQG7goj1IDf3TDue2HMIKpfceaINAbKT5LC1IF3rDYBhC1Z21kopzGcUo4WJi97ah4MUDU%2BTRZfziknLzHHtgVXvbw%3D%3D\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 01:55:40 GMT\r\nlast-modified: Sun, 22 Mar 2026 16:29:42 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncontent-length: 132994\r\ncf-ray: a141ca2e0b64c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":132994,"size_decoded":133744,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1920x1282, components 3","md5":"b5dc85727e2cb943572f7603419f3822","sha1":"a9b9e311e8b5ef88415ff389638bd7ea32e710af","sha256":"d31e99dc530c2251ed570ec17bca483d13299fcddd6a0111bea6fdad29c5682e","sha512":"5e73ce97f48cf9dd391cdad5dd1452dccbef8f0aa6f603a94dfefb5c3c6242fd02098dae0280986be389d9cf9b57821c0a141e47e602396a7237116968daea5c","ssdeep":"3072:J8UFn03boYiHKGzd4ctaIqcUdQcmPQ2ZMz2qBYgfwP08:J8an03bL+FdlZcmPcz5Y40","tlshash":"12d312659680b609ec7d7ffbe93f2f70de722f77432a7a824191980d6b4405816a90b8","first_seen":"2026-07-01T01:56:09.586887Z","last_seen":"2026-07-01T01:56:09.586887Z","times_seen":1,"resource_available":false,"data":null}},"time_used":708,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":508,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"upwardsaverbc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upwardsaverbc.com/","fqdn":"upwardsaverbc.com","domain":"upwardsaverbc.com","tld":"com"},"ip":{"addr":"172.67.207.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-01T01:55:37.452Z","timestamp":1782870937452,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upwardsaverbc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 15:31:01 GMT","end":"Tue, 18 Aug 2026 15:31:00 GMT"},"fingerprint":{"sha1":"C6:C0:73:B4:0A:3C:9A:64:E2:B8:CD:61:3D:4E:A3:F5:42:49:B8:E1","sha256":"32:57:DE:D4:A8:36:D1:BB:69:8B:95:19:E1:FB:77:AE:99:50:8A:CD:A2:13:83:23:76:2F:74:82:5F:EE:AB:45"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: upwardsaverbc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 01 Jul 2026 01:55:38 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JxdeNIasflqyY7MWRTkrttMAzAitb13X2BXcH7bw7ZeZqcGSE9zWz2rvDwsfRLaZN29ljPKG4U29oShkSbiS4frqSDEuIh%2FT4sero29LMSTuNaxoaYI82XZ52rgp3Fj%2B2%2Bqmcw%3D%3D\"}]}\r\nx-powered-by: PHP/8.2.29\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Im9qbzBrekl3Qnp5TG1xMGdsTXF0a1E9PSIsInZhbHVlIjoiMkFQMzNUdWhSYVBTRzY0N0ViSHVWcVhkMUJWYU5leVZIMGd4eXd0dVZROUEyUGZYTUZCQWJ2TUQ2YjVZQk5ZN3NaSzkvVmFoNEVYR2NGcmtZcDhZNXRSemxXU01ma01EQnY5R0VrbWhRWTcrZHkzODQvdjV5OXloRDAzSmZJaFUiLCJtYWMiOiIzY2VkNDliYzUzZmFjZDMwODQ2NGUwYjkwZGY3MGQ0ZTU4YmRlOGY3ZTIwMDAyMWFlNTc0ZDg3NWQ3ZmM2NDhiIiwidGFnIjoiIn0%3D; expires=Wed, 01 Jul 2026 03:55:37 GMT; Max-Age=7200; path=/; secure; samesite=lax\nupward_session=eyJpdiI6IjlNU0ZlZC9VWFdzQjROelNQbFJ2SlE9PSIsInZhbHVlIjoieE9IVktxcDdIV2ZEbzBvVkJQd004aVdIK0tRcHlGWFhpMWVZZWdFVUJpZFlrRmZLOTJ4MGZ1ODJRcHNnNnkzZC9adUdUNTllUlV6WWQrajlUNndVUXVCTkRvQ3AybDhpbXVJcDNlaG5CTnZCWlVIMjNsNVZCblo3cGNzR1NOSWoiLCJtYWMiOiJlYThkMTg3NzdmYzE4MDE2NWI0MGY0YTBlZjExY2RiNDljNmQzYTc3ZGFlZWExY2NkMDE4OGQ3ZDAwMTY1NGFjIiwidGFnIjoiIn0%3D; expires=Wed, 01 Jul 2026 03:55:37 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a141ca1f4a74c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":38692,"size_decoded":10870,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (515)","md5":"2bdb9b0613d368e44dcef83f2cc8ca9f","sha1":"febc5286c18014eddd7fdb499170a37be772ffd6","sha256":"9a2dc075fd62ed7338ebfd1f9cb8b93fe570e9fb5ad0275d38aee88f0fab8844","sha512":"9648e134d01ad8da4649ce7562dc0953c6e3768428251db71d970527ba85697f905bb3c957c3a94ab8e4e0800da69770a1fd2a23511be348e2f48619309b082c","ssdeep":"384:+H3V8M9II2/RzIUgwddze7RStqNT8Tnlq2nt9jbR1uCqGcfh18EOrHwJ82MfLN3F:+H3emIIwbzTdhr/uhI5JBJB","tlshash":"31032162b8f3343f057388c52a63ab1b7ae1c60bca56890076ed47d91fe6f46f913245","first_seen":"2026-07-01T01:56:09.588Z","last_seen":"2026-07-01T01:56:09.588Z","times_seen":1,"resource_available":true,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":9,"connect":20,"send":0,"wait":558,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"upwardsaverbc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upwardsaverbc.com/temp/custom/assets/css/flaticon.css","fqdn":"upwardsaverbc.com","domain":"upwardsaverbc.com","tld":"com"},"ip":{"addr":"172.67.207.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upwardsaverbc.com/","date":"2026-07-01T01:55:39.027Z","timestamp":1782870939027,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upwardsaverbc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 15:31:01 GMT","end":"Tue, 18 Aug 2026 15:31:00 GMT"},"fingerprint":{"sha1":"C6:C0:73:B4:0A:3C:9A:64:E2:B8:CD:61:3D:4E:A3:F5:42:49:B8:E1","sha256":"32:57:DE:D4:A8:36:D1:BB:69:8B:95:19:E1:FB:77:AE:99:50:8A:CD:A2:13:83:23:76:2F:74:82:5F:EE:AB:45"}}},"request":{"raw":"GET /temp/custom/assets/css/flaticon.css HTTP/1.1\r\nHost: upwardsaverbc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upwardsaverbc.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im9qbzBrekl3Qnp5TG1xMGdsTXF0a1E9PSIsInZhbHVlIjoiMkFQMzNUdWhSYVBTRzY0N0ViSHVWcVhkMUJWYU5leVZIMGd4eXd0dVZROUEyUGZYTUZCQWJ2TUQ2YjVZQk5ZN3NaSzkvVmFoNEVYR2NGcmtZcDhZNXRSemxXU01ma01EQnY5R0VrbWhRWTcrZHkzODQvdjV5OXloRDAzSmZJaFUiLCJtYWMiOiIzY2VkNDliYzUzZmFjZDMwODQ2NGUwYjkwZGY3MGQ0ZTU4YmRlOGY3ZTIwMDAyMWFlNTc0ZDg3NWQ3ZmM2NDhiIiwidGFnIjoiIn0%3D; upward_session=eyJpdiI6IjlNU0ZlZC9VWFdzQjROelNQbFJ2SlE9PSIsInZhbHVlIjoieE9IVktxcDdIV2ZEbzBvVkJQd004aVdIK0tRcHlGWFhpMWVZZWdFVUJpZFlrRmZLOTJ4MGZ1ODJRcHNnNnkzZC9adUdUNTllUlV6WWQrajlUNndVUXVCTkRvQ3AybDhpbXVJcDNlaG5CTnZCWlVIMjNsNVZCblo3cGNzR1NOSWoiLCJtYWMiOiJlYThkMTg3NzdmYzE4MDE2NWI0MGY0YTBlZjExY2RiNDljNmQzYTc3ZGFlZWExY2NkMDE4OGQ3ZDAwMTY1NGFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 01 Jul 2026 01:55:39 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bvBzp02BT6SBZKrG8PBB%2FhaO4icb7sVVp6mzjJCf0gajDtPBuxKxx4heqKl8ejEf5XG2ZySHO0NHflFP3RHK0HJqY9%2BDZs59MCYMcwT8YRPT32y6RLv0heEjWpmKlizcC9jLMA%3D%3D\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 01:55:39 GMT\r\nlast-modified: Sun, 22 Mar 2026 16:29:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-length: 1149\r\ncf-ray: a141ca28eb29c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5680,"size_decoded":1945,"mime_type":"text/css","magic":"ASCII text, with very long lines (5680), with no line terminators","md5":"09bfb87f4fc89fa772195da8afa1489f","sha1":"88ee2649f1e1b1e8048a0f8fb8ee750a16f339ea","sha256":"53f7eaccc5cabff8999753b23d2e2aab91a4fa445707494f4ce0d0af103fa211","sha512":"37dba85918d11177c8c46601bcd6651181afdddf0659ca24bd31213d8482e647faf0a0b25a532b316ce4fd80c9474c3ea0ad575cc98f378d5cf13634f87a512c","ssdeep":"48:s8HaHKHAEGQ4GDb3aHF1bmZmr2mHkw+JbO+TnVBGa045LDyeXoiXA:pHaHKHAEGQtQb6cF+JbO+LzTXG","tlshash":"dcc10fa4e46a10c47732ce0bafe9b218e698b128cdc19d15f11f4e1cbdf1b554386eb9","first_seen":"2023-11-12T08:26:56Z","last_seen":"2026-07-17T06:00:05.123443Z","times_seen":838,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"upwardsaverbc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/eu.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upwardsaverbc.com/","date":"2026-07-01T01:55:39.058Z","timestamp":1782870939058,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 01:26:53 GMT","end":"Sat, 29 Aug 2026 02:26:16 GMT"},"fingerprint":{"sha1":"D2:6E:B0:B6:96:56:08:49:68:3B:CB:E0:E3:66:23:60:CD:73:2B:8D","sha256":"F5:81:41:B3:1E:2C:6F:26:A5:EF:89:3C:3C:84:66:48:2D:2F:E3:EA:E4:EF:C2:ED:58:8E:15:45:FB:B1:55:93"}}},"request":{"raw":"GET /w40/eu.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upwardsaverbc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 01 Jul 2026 01:55:39 GMT\r\ncontent-type: image/png\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Tue, 01 Jul 2025 15:40:00 GMT\r\netag: \"68640150-105\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2339\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Btl%2FH0g4tvxl99Nl2uFd1lCdBTgKJJDvDqgSRUXE899H0ca6v46bzdAz6s3Gh4e1FisXXKu1TprjV2Jkeg0Qzw47u2fzZ7k%2B%2FUtEMKCCGVlUkWVyM29lMZcZEO%2B%2FMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 261\r\ncf-ray: a141ca298a152efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":261,"size_decoded":1002,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"05eb9168ed0d480fc0a8792ef674aa84","sha1":"efcc817766ba7703e73782ec007b0ae09f33abaf","sha256":"02be670766fcedb52575690ca891bc48040c9f4000e73a2535daa2ca79e54011","sha512":"29de8c77b8725ada2f95ebd5fc1f781559c4a33594c1092bb5a4b54fae5e121f472730f43fe8525a348c048b59ffef829c4341f6bbb5bae14d773e198f6c95d4","ssdeep":"","tlshash":"91d02bd5d3111d95d6a04665a12d8705aa54133a85005b1f515b053458e3a08c0ec7ca","first_seen":"2025-11-05T18:48:20.393546Z","last_seen":"2026-07-14T15:59:59.822269Z","times_seen":38,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":29,"dns":0,"connect":13,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upwardsaverbc.com/front/images/clients/2.png","fqdn":"upwardsaverbc.com","domain":"upwardsaverbc.com","tld":"com"},"ip":{"addr":"172.67.207.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upwardsaverbc.com/","date":"2026-07-01T01:55:39.069Z","timestamp":1782870939069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upwardsaverbc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 15:31:01 GMT","end":"Tue, 18 Aug 2026 15:31:00 GMT"},"fingerprint":{"sha1":"C6:C0:73:B4:0A:3C:9A:64:E2:B8:CD:61:3D:4E:A3:F5:42:49:B8:E1","sha256":"32:57:DE:D4:A8:36:D1:BB:69:8B:95:19:E1:FB:77:AE:99:50:8A:CD:A2:13:83:23:76:2F:74:82:5F:EE:AB:45"}}},"request":{"raw":"GET /front/images/clients/2.png HTTP/1.1\r\nHost: upwardsaverbc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upwardsaverbc.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im9qbzBrekl3Qnp5TG1xMGdsTXF0a1E9PSIsInZhbHVlIjoiMkFQMzNUdWhSYVBTRzY0N0ViSHVWcVhkMUJWYU5leVZIMGd4eXd0dVZROUEyUGZYTUZCQWJ2TUQ2YjVZQk5ZN3NaSzkvVmFoNEVYR2NGcmtZcDhZNXRSemxXU01ma01EQnY5R0VrbWhRWTcrZHkzODQvdjV5OXloRDAzSmZJaFUiLCJtYWMiOiIzY2VkNDliYzUzZmFjZDMwODQ2NGUwYjkwZGY3MGQ0ZTU4YmRlOGY3ZTIwMDAyMWFlNTc0ZDg3NWQ3ZmM2NDhiIiwidGFnIjoiIn0%3D; upward_session=eyJpdiI6IjlNU0ZlZC9VWFdzQjROelNQbFJ2SlE9PSIsInZhbHVlIjoieE9IVktxcDdIV2ZEbzBvVkJQd004aVdIK0tRcHlGWFhpMWVZZWdFVUJpZFlrRmZLOTJ4MGZ1ODJRcHNnNnkzZC9adUdUNTllUlV6WWQrajlUNndVUXVCTkRvQ3AybDhpbXVJcDNlaG5CTnZCWlVIMjNsNVZCblo3cGNzR1NOSWoiLCJtYWMiOiJlYThkMTg3NzdmYzE4MDE2NWI0MGY0YTBlZjExY2RiNDljNmQzYTc3ZGFlZWExY2NkMDE4OGQ3ZDAwMTY1NGFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 01 Jul 2026 01:55:39 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nQGOKBnx6Du77XNxBULIYjl8SOFuIaHKVOnuQAvnMBm4ErcMK3BszQzL%2FybesXQf%2BLGYIeCa2W131p30kLpS%2Fwue0GsShbUZ3b2e22xRaW28QLYROE6H7NkV9ugWmNmOJu0%2B0g%3D%3D\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 01:55:39 GMT\r\nlast-modified: Sun, 22 Mar 2026 16:29:42 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3967\r\ncf-ray: a141ca293b31c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3967,"size_decoded":4720,"mime_type":"image/png","magic":"PNG image data, 200 x 85, 8-bit/color RGBA, non-interlaced","md5":"ecc117188f83d241b46026f9d939f043","sha1":"fcdcb640310bf0b87c8c268e1e378b19417f84ba","sha256":"fdbda551f75c52d504ad1d0de2b598d92bbc9d899363c560c9c3ce2eaf26f28e","sha512":"a21f02265b0b626cb65b7395a54a6158bbf6f14c9c4231cb73d2f4dc7ab2f98ac63703b0474351fb6ecb413dd1000526b993cc7c77ce7b3f0e64844c6c584b21","ssdeep":"","tlshash":"9c817e2f2dcf39e0a44ee3b1454730cbf3c8341ba8108de46de5e8dd825564e9941c15","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-07-13T10:22:15.299088Z","times_seen":1684,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"upwardsaverbc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upwardsaverbc.com/front/images/clients/4.png","fqdn":"upwardsaverbc.com","domain":"upwardsaverbc.com","tld":"com"},"ip":{"addr":"172.67.207.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upwardsaverbc.com/","date":"2026-07-01T01:55:39.070Z","timestamp":1782870939070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upwardsaverbc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 15:31:01 GMT","end":"Tue, 18 Aug 2026 15:31:00 GMT"},"fingerprint":{"sha1":"C6:C0:73:B4:0A:3C:9A:64:E2:B8:CD:61:3D:4E:A3:F5:42:49:B8:E1","sha256":"32:57:DE:D4:A8:36:D1:BB:69:8B:95:19:E1:FB:77:AE:99:50:8A:CD:A2:13:83:23:76:2F:74:82:5F:EE:AB:45"}}},"request":{"raw":"GET /front/images/clients/4.png HTTP/1.1\r\nHost: upwardsaverbc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upwardsaverbc.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im9qbzBrekl3Qnp5TG1xMGdsTXF0a1E9PSIsInZhbHVlIjoiMkFQMzNUdWhSYVBTRzY0N0ViSHVWcVhkMUJWYU5leVZIMGd4eXd0dVZROUEyUGZYTUZCQWJ2TUQ2YjVZQk5ZN3NaSzkvVmFoNEVYR2NGcmtZcDhZNXRSemxXU01ma01EQnY5R0VrbWhRWTcrZHkzODQvdjV5OXloRDAzSmZJaFUiLCJtYWMiOiIzY2VkNDliYzUzZmFjZDMwODQ2NGUwYjkwZGY3MGQ0ZTU4YmRlOGY3ZTIwMDAyMWFlNTc0ZDg3NWQ3ZmM2NDhiIiwidGFnIjoiIn0%3D; upward_session=eyJpdiI6IjlNU0ZlZC9VWFdzQjROelNQbFJ2SlE9PSIsInZhbHVlIjoieE9IVktxcDdIV2ZEbzBvVkJQd004aVdIK0tRcHlGWFhpMWVZZWdFVUJpZFlrRmZLOTJ4MGZ1ODJRcHNnNnkzZC9adUdUNTllUlV6WWQrajlUNndVUXVCTkRvQ3AybDhpbXVJcDNlaG5CTnZCWlVIMjNsNVZCblo3cGNzR1NOSWoiLCJtYWMiOiJlYThkMTg3NzdmYzE4MDE2NWI0MGY0YTBlZjExY2RiNDljNmQzYTc3ZGFlZWExY2NkMDE4OGQ3ZDAwMTY1NGFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 01 Jul 2026 01:55:39 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sxf2%2BQosF2qGPJolY9MRLNpnIzbzVlhgywipPUk1Z0LVOk5ug5uIesAaDUg0JpAk7NDWe9fKncoX5Tx5BjJgVuzOnpjbf1cjupu6PzgREh%2Bex9uDllaKRmrcS7YwJ3H1IVlfLw%3D%3D\"}]}\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 01:55:39 GMT\r\nlast-modified: Sun, 22 Mar 2026 16:29:42 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-length: 3310\r\ncf-ray: a141ca293b32c759-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3310,"size_decoded":4059,"mime_type":"image/png","magic":"PNG image data, 200 x 85, 8-bit/color RGBA, non-interlaced","md5":"3144536b122ea301d260a09205cd0282","sha1":"d067fc569a70e598be196fe13e068ee3a8488570","sha256":"8c24b15d0840d74eb7c403aa6ae0e4e44d53fe814638e4ffc0258a3109b79eee","sha512":"e747db566297ba8e4d62fdc211d9bbe9d17b1c8faba0e220d059873454734689630caf0ae5914b371c368286a27d412610c1ebd2a5adf64c975528a674a91d43","ssdeep":"","tlshash":"71615bab1121c5747ce43f9665b6b98246a0bce1fe3fa199f64e91707092172e02c2ec","first_seen":"2023-09-16T07:21:59Z","last_seen":"2026-07-13T10:22:15.299574Z","times_seen":1684,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"upwardsaverbc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upwardsaverbc.com/","date":"2026-07-01T01:55:39.975Z","timestamp":1782870939975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://upwardsaverbc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 01:48:06 GMT\r\nexpires: Fri, 25 Jun 2027 01:48:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 518853\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-17T22:41:53.427851Z","times_seen":237975,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upwardsaverbc.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"upwardsaverbc.com","domain":"upwardsaverbc.com","tld":"com"},"ip":{"addr":"172.67.207.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upwardsaverbc.com/","date":"2026-07-01T01:55:39.034Z","timestamp":1782870939034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upwardsaverbc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 15:31:01 GMT","end":"Tue, 18 Aug 2026 15:31:00 GMT"},"fingerprint":{"sha1":"C6:C0:73:B4:0A:3C:9A:64:E2:B8:CD:61:3D:4E:A3:F5:42:49:B8:E1","sha256":"32:57:DE:D4:A8:36:D1:BB:69:8B:95:19:E1:FB:77:AE:99:50:8A:CD:A2:13:83:23:76:2F:74:82:5F:EE:AB:45"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: upwardsaverbc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upwardsaverbc.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im9qbzBrekl3Qnp5TG1xMGdsTXF0a1E9PSIsInZhbHVlIjoiMkFQMzNUdWhSYVBTRzY0N0ViSHVWcVhkMUJWYU5leVZIMGd4eXd0dVZROUEyUGZYTUZCQWJ2TUQ2YjVZQk5ZN3NaSzkvVmFoNEVYR2NGcmtZcDhZNXRSemxXU01ma01EQnY5R0VrbWhRWTcrZHkzODQvdjV5OXloRDAzSmZJaFUiLCJtYWMiOiIzY2VkNDliYzUzZmFjZDMwODQ2NGUwYjkwZGY3MGQ0ZTU4YmRlOGY3ZTIwMDAyMWFlNTc0ZDg3NWQ3ZmM2NDhiIiwidGFnIjoiIn0%3D; upward_session=eyJpdiI6IjlNU0ZlZC9VWFdzQjROelNQbFJ2SlE9PSIsInZhbHVlIjoieE9IVktxcDdIV2ZEbzBvVkJQd004aVdIK0tRcHlGWFhpMWVZZWdFVUJpZFlrRmZLOTJ4MGZ1ODJRcHNnNnkzZC9adUdUNTllUlV6WWQrajlUNndVUXVCTkRvQ3AybDhpbXVJcDNlaG5CTnZCWlVIMjNsNVZCblo3cGNzR1NOSWoiLCJtYWMiOiJlYThkMTg3NzdmYzE4MDE2NWI0MGY0YTBlZjExY2RiNDljNmQzYTc3ZGFlZWExY2NkMDE4OGQ3ZDAwMTY1NGFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 03 Jul 2026 01:55:39 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=50kxsplLzmj8%2FFws38ABwd1VbwRkkCnn71GrOeQRqM9%2F%2FNjdVS3S8OW9842wNqCE%2FnG4%2Fx06iHF55ckYEO2xpcJ5tP8vRvxes51RFw6mqVBd7oxILwMS4375JAMdzshAW8dJDQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Wed, 01 Jul 2026 01:55:39 GMT\r\nserver: cloudflare\r\ncf-ray: a141ca28fb2bc759-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1300,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-17T22:41:32.597263Z","times_seen":398963,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"upwardsaverbc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/remixicon@2.5.0/fonts/remixicon.woff2?t=1590207869815","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upwardsaverbc.com/","date":"2026-07-01T01:55:39.808Z","timestamp":1782870939808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/remixicon@2.5.0/fonts/remixicon.woff2?t=1590207869815 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://upwardsaverbc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/remixicon@2.5.0/fonts/remixicon.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 01 Jul 2026 01:55:39 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 125268\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 2.5.0\r\nx-jsd-version-type: version\r\netag: W/\"1e954-TTdav0PtGKpUJkwbWXFLClnFk6Q\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230045-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 4284133\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wf8p0gh3uvQEQcuIxGF7%2FwTXptIPsD3frPgJneMDUrz7Z4Xe4fF9Lu2Jp1swO0dUBM3mnNUKTdymIzr32Wn5cKWYsDxkbgWPs62TntAHfhdkozC82f8JclIbsXYfJgCa3pI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a141ca2def544c11-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":125268,"size_decoded":126357,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 125268, version 1.0","md5":"9915fef980fa539085da55b84dfde760","sha1":"4d375abf43ed18aa54264c1b59714b0a59c593a4","sha256":"e61f0d10c8cac8cd0ecb36790d6cce883380c0b185ff3c9bf849ed336ba8285c","sha512":"1e4c9a5e0f5150fe33870544c7d70a73724096e60ee10e0ade4def46f31647664afe361292c7ffb39a2edda98cab06bab206f64feb7f610ab137d17fc789a3b1","ssdeep":"3072:5vCveG1NooSPyIFS5WDTVKAQI+UHmfGsrKwfGXoiEw:tq5eTFa47QIVHmusrKWGoix","tlshash":"bcc312b6e11a945cfc80e9a278dc932d4d60145e4f80b7c7ce1912ac433ecdb4bec5a9","first_seen":"2023-04-12T01:04:15Z","last_seen":"2026-07-17T21:59:50.176251Z","times_seen":3456,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":6,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upwardsaverbc.com/","date":"2026-07-01T01:55:39.814Z","timestamp":1782870939814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://upwardsaverbc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 28 Jun 2026 10:12:28 GMT\r\nexpires: Mon, 28 Jun 2027 10:12:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 229391\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-07-17T22:37:18.97784Z","times_seen":33212,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":19,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upwardsaverbc.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"upwardsaverbc.com","domain":"upwardsaverbc.com","tld":"com"},"ip":{"addr":"172.67.207.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upwardsaverbc.com/","date":"2026-07-01T01:55:39.821Z","timestamp":1782870939821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upwardsaverbc.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 15:31:01 GMT","end":"Tue, 18 Aug 2026 15:31:00 GMT"},"fingerprint":{"sha1":"C6:C0:73:B4:0A:3C:9A:64:E2:B8:CD:61:3D:4E:A3:F5:42:49:B8:E1","sha256":"32:57:DE:D4:A8:36:D1:BB:69:8B:95:19:E1:FB:77:AE:99:50:8A:CD:A2:13:83:23:76:2F:74:82:5F:EE:AB:45"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: upwardsaverbc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upwardsaverbc.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im9qbzBrekl3Qnp5TG1xMGdsTXF0a1E9PSIsInZhbHVlIjoiMkFQMzNUdWhSYVBTRzY0N0ViSHVWcVhkMUJWYU5leVZIMGd4eXd0dVZROUEyUGZYTUZCQWJ2TUQ2YjVZQk5ZN3NaSzkvVmFoNEVYR2NGcmtZcDhZNXRSemxXU01ma01EQnY5R0VrbWhRWTcrZHkzODQvdjV5OXloRDAzSmZJaFUiLCJtYWMiOiIzY2VkNDliYzUzZmFjZDMwODQ2NGUwYjkwZGY3MGQ0ZTU4YmRlOGY3ZTIwMDAyMWFlNTc0ZDg3NWQ3ZmM2NDhiIiwidGFnIjoiIn0%3D; upward_session=eyJpdiI6IjlNU0ZlZC9VWFdzQjROelNQbFJ2SlE9PSIsInZhbHVlIjoieE9IVktxcDdIV2ZEbzBvVkJQd004aVdIK0tRcHlGWFhpMWVZZWdFVUJpZFlrRmZLOTJ4MGZ1ODJRcHNnNnkzZC9adUdUNTllUlV6WWQrajlUNndVUXVCTkRvQ3AybDhpbXVJcDNlaG5CTnZCWlVIMjNsNVZCblo3cGNzR1NOSWoiLCJtYWMiOiJlYThkMTg3NzdmYzE4MDE2NWI0MGY0YTBlZjExY2RiNDljNmQzYTc3ZGFlZWExY2NkMDE4OGQ3ZDAwMTY1NGFjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 03 Jul 2026 01:55:39 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0E9mL6RsjZBZ%2Ftdnm5Hv%2BSsVSnEg4R%2BTZaAcELs%2FYYuruqCNT4wvH6vahgjE0O147ia9uHjSdVPMzMPsrOtZ9dQ83UKHCCLzZUmYmz5ozbijmjjQPRMFvt7PsHeas46ml92y8A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Wed, 01 Jul 2026 01:55:39 GMT\r\nserver: cloudflare\r\ncf-ray: a141ca2deb5ec759-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1298,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-17T22:41:32.597263Z","times_seen":398963,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"upwardsaverbc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/remixicon@2.5.0/fonts/remixicon.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upwardsaverbc.com/","date":"2026-07-01T01:55:39.025Z","timestamp":1782870939025,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/remixicon@2.5.0/fonts/remixicon.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upwardsaverbc.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 01 Jul 2026 01:55:39 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 13855\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 2.5.0\r\nx-jsd-version-type: version\r\netag: W/\"1af66-MA7aTWKCoG0FYjklj9PTw0TfSFM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230094-FRA, cache-ber1080048-BER\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 4148240\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8vjQA7GV7jGPKHKtcg32ztz3w9jsDRuyCzERzGdK5UjYeNX48CP3X8YXGks%2BK%2FQYUw5UoY7FJx4RhQ5KXwCfeRLQA0v%2Bj1MNJMQ44uD5tfJF63jLN17Hs5gSu7S3phVu55U%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a141ca293837b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":110438,"size_decoded":14984,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a8aec561d3b9b905472b815cb2b818c2","sha1":"300eda4d6282a06d056239258fd3d3c344df4853","sha256":"13e29a29baade86f4e7a88d8e076d6a6f3ac8950757b50a0f8bbea1c33658d5c","sha512":"096467665b61140bb4e669b83eee51fe290357fda33e8e9c82692976d04559463dfe6a8d16e4e68309e9056a8388878c767e70bf534440576df36fc093ebb392","ssdeep":"1536:jncvr8vn4cYzgKvP1IqRCwNd1l3JclUaqM1:j48v4cYcKZ7clh","tlshash":"45b3c8beea4f44801702e8d66367274163b9b77d8d817c7ad413688df7c766883862ec","first_seen":"2023-04-06T15:22:09Z","last_seen":"2026-07-17T19:08:17.791343Z","times_seen":3688,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":29,"connect":2,"send":0,"wait":6,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ch.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upwardsaverbc.com/","date":"2026-07-01T01:55:39.066Z","timestamp":1782870939066,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 01:26:53 GMT","end":"Sat, 29 Aug 2026 02:26:16 GMT"},"fingerprint":{"sha1":"D2:6E:B0:B6:96:56:08:49:68:3B:CB:E0:E3:66:23:60:CD:73:2B:8D","sha256":"F5:81:41:B3:1E:2C:6F:26:A5:EF:89:3C:3C:84:66:48:2D:2F:E3:EA:E4:EF:C2:ED:58:8E:15:45:FB:B1:55:93"}}},"request":{"raw":"GET /w40/ch.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upwardsaverbc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 01 Jul 2026 01:55:39 GMT\r\ncontent-type: image/png\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-8d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1863119\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FyfRF%2FgfVOrkBDTN6pAWz2dtljffgs1iz7PoQ1haR0zv2mC2WotLudQELgIvE5iAmYIwmwyejpXnZNt75lacIqVPKZL0giUB3C414m3AaCLHQhstErwN7qnMEHk78g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 141\r\ncf-ray: a141ca298a162efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":141,"size_decoded":968,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 4-bit colormap, non-interlaced","md5":"81fb10da6ef49e89ea6d8ad5c4eb1c42","sha1":"f0fd2d5153b2c15ac3d71668922504fe46772d41","sha256":"2d807ed896b1aca7810cd8dc6968c6b5f23620da10ba0f0da40923dedb8aafb5","sha512":"a96be73fe7e8eb13e569a891fdf2ef03582e02da9b3e932a13cd04f027f779d00d1c0949d097a3ff82396d136c8f0ad3c2708225845e44d79d9fe8a998dedaa5","ssdeep":"","tlshash":"e1c02bc7b2d0ec63c4247023c0680958e867ce8d2400c10b41d38159e36085840af3c3","first_seen":"2025-04-25T03:41:10.089939Z","last_seen":"2026-07-15T22:57:23.19488Z","times_seen":129,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}