{"report_id":"94076ab6-ec5a-418e-ae9e-b590b106a039","version":6,"status":"done","tags":[],"date":"2025-10-12T20:53:30Z","url":{"schema":"http","addr":"upfiles.com/eeu8hlL","fqdn":"upfiles.com","domain":"upfiles.com","tld":"com"},"ip":{"addr":"104.26.4.165","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"upfion.com/eeu8hlL","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"title":"25E16.mp4"},"submit":{"url":{"schema":"http","addr":"upfiles.com/eeu8hlL","fqdn":"upfiles.com","domain":"upfiles.com","tld":"com"},"ip":{"addr":"104.26.4.165","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-16T20:53:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"x3os.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"orbsdiacle.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"orbsdiacle.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"my.rtmark.net","ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2025-10-06T00:34:29.689436Z","alert_count":0,"request_count":1,"received_data":833,"sent_data":427,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-05T22:12:07.052692Z","alert_count":0,"request_count":3,"received_data":1056176,"sent_data":1311,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.recaptcha.net","ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-01-06","domain_rank":7582,"first_seen":"2012-07-11T14:32:37Z","last_seen":"2025-10-05T23:40:58.958224Z","alert_count":0,"request_count":1,"received_data":1829,"sent_data":464,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-05T22:12:06.373682Z","alert_count":0,"request_count":1,"received_data":33134,"sent_data":504,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"st.mastinstungmoreal.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-21","domain_rank":6290671,"first_seen":"2023-05-30T05:22:23Z","last_seen":"2025-10-10T06:22:15.095376Z","alert_count":0,"request_count":14,"received_data":8902,"sent_data":6447,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-05T22:12:07.524768Z","alert_count":0,"request_count":7,"received_data":292233,"sent_data":3832,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pagead2.googlesyndication.com","ip":{"addr":"216.58.207.194","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2003-01-21","domain_rank":610,"first_seen":"2012-05-21T07:15:40Z","last_seen":"2025-10-05T22:34:20.930547Z","alert_count":0,"request_count":2,"received_data":1581,"sent_data":874,"comment":"","tags":null,"fingerprints":null},{"fqdn":"upfion.com","ip":{"addr":"172.67.185.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-09","domain_rank":82494,"first_seen":"2025-02-26T19:27:49.150609Z","last_seen":"2025-10-07T13:03:04.450046Z","alert_count":0,"request_count":12,"received_data":1824023,"sent_data":13940,"comment":"","tags":null,"fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP:8.2.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"x3os.com","ip":{"addr":"139.45.196.64","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2021-03-18","domain_rank":19468,"first_seen":"2025-04-24T02:39:31.647355Z","last_seen":"2025-10-09T13:48:13.159743Z","alert_count":1,"request_count":1,"received_data":825,"sent_data":584,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"upfiles.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-06-05","domain_rank":228583,"first_seen":"2015-10-29T09:28:55Z","last_seen":"2025-10-09T22:31:21.255891Z","alert_count":0,"request_count":1,"received_data":30642,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fstatic.netpub.media","ip":{"addr":"104.20.41.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-06-11","domain_rank":573390,"first_seen":"2022-01-24T12:18:10Z","last_seen":"2025-10-07T10:57:35.589882Z","alert_count":0,"request_count":1,"received_data":946,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bvtpk.com","ip":{"addr":"172.67.154.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-03-16","domain_rank":37068,"first_seen":"2025-05-21T11:34:02.786268Z","last_seen":"2025-10-07T14:59:13.045889Z","alert_count":0,"request_count":1,"received_data":111115,"sent_data":403,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"orbsdiacle.com","ip":{"addr":"172.241.53.164","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-04-21","domain_rank":461887,"first_seen":"2024-07-16T10:43:03Z","last_seen":"2025-10-10T06:22:15.106036Z","alert_count":2,"request_count":1,"received_data":1122,"sent_data":409,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"gpp.netpub.media","ip":{"addr":"104.20.41.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-06-11","domain_rank":645272,"first_seen":"2024-12-11T17:07:09Z","last_seen":"2025-10-07T13:03:04.437501Z","alert_count":0,"request_count":2,"received_data":1737,"sent_data":879,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-10-05T22:12:07.360997Z","alert_count":0,"request_count":1,"received_data":825840,"sent_data":484,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"upfion.com/eeu8hlL","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"172.67.185.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce3c6c91583912d465bfb227ebe3195b","sha1":"d311ab64071f1d4e574e70e1f977a5519ebf32bc","sha256":"dfd654ee36c9dcabb9e5f23054f77fff5968d4aa29dd66bf296c9286fb18b552","sha512":"11aef7e6166e2054e3cb5ad62bb7054b0413494e8c0e2ffe73488007fbb2d9bf0ea11b8deb018f40999afc88cada52fb53220adc2f7dab0c68e1af87b7709ca9","ssdeep":"","tlshash":"3cc092ca0081200621a231b16f43b308346310f708086900790c8a203f6831f9e3bbc4","size":137,"data":"","first_seen":"2024-06-14T21:34:22Z","last_seen":"2026-02-15T18:20:10.638739Z","times_seen":1162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/sandbox%20eval%20code","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-09T15:34:22.198168Z","times_seen":858668,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-09T15:34:22.197122Z","times_seen":857002,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-75C4L64NEB\u0026cx=c\u0026gtm=4e5a80","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ea264724212ecf6229aed6e5ccc25ae","sha1":"aac99bc02b476a5282df6e3a62a29cf67656fd47","sha256":"ac47353bc2a8f9dcdc2e4bd5e22aca69f2c9406ef298d32adf8a22367674d7f7","sha512":"c7f74809500711c045a05cbb9459e9bf1291a29c2ab850af0936be9535cfb18a07d756fe2cedc61df22ea82bfd40e896b1f884184c1578b44d560b780c014231","ssdeep":"6144:RwW/yp2a4tk0uwbWZJT+Nju5204OZSkndXAQF:AYJm0KZJu0JB","tlshash":"c58419ce73d674265392a478503f018bb57b2892f44cc899f18adee52e70a9a0137f7c","size":374714,"data":"","first_seen":"2025-10-12T20:53:35.60321Z","last_seen":"2025-10-12T20:53:35.60321Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/bGi-DxR800F5_ueMVcTwXc6q/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5bce9e85f38aa11d35ab51517f8d07e4","sha1":"44102e17b879843f3ce36a51c0f132d11a24588a","sha256":"1a828972d3e667311b0fe5662301cc433f2c5e97d5018cbd331c4c59ad34d311","sha512":"08489944c9e40c9f71bad98402a22467e3de06545feab6314b08a2510224d75eae877604b64bb37f281f3bb5e1408b3a3c2ef71ec9c742120c002fe553b751b0","ssdeep":"12288:l4zpNa1FTCz4BpuKYXsrFoCvL67G1+zEnHYJ7HlEiU9J:OzBkruKYsuyO7G1gs4JBhk","tlshash":"66054ad87112b5e59322b9f2a067201da37ea535c84c4c5eb29588f12ef1c4e70b6ef7","size":824931,"data":"","first_seen":"2025-10-07T06:40:38.110565Z","last_seen":"2026-04-19T23:55:10.463994Z","times_seen":16341,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orbsdiacle.com/1clkn/34742","fqdn":"orbsdiacle.com","domain":"orbsdiacle.com","tld":"com"},"ip":{"addr":"172.241.53.164","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"9082dc37e5e8046929da411544ad071a","sha1":"41e0e3963ed94e59e8a2f115994c382712411537","sha256":"b7848d86edc8dc3b5bc6a5c666069f9a31e000cee51575d3b6083951607e1550","sha512":"8c7a47aba28936b7fb4083892dfc8643afe90452d6cc789f5f8562ebeb253000ba0dc23f35af988b9288afa32d701fd8c3e95f9b0966f3789dc269f393f6b039","ssdeep":"","tlshash":"714000000000000000000000f00000000000000000000c00c000000000000000000000","size":6,"data":"","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-05-09T15:52:32.588337Z","times_seen":16045,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/eeu8hlL","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"172.67.185.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f34283ed2e23adcd4891e8e25510d229","sha1":"219f5d41d7b157ccdc6948d340fdbfea4eaa3cc8","sha256":"84461264e35f5c4b820a12a174a60da6bf2bfd3b0feed015b8e30f1980fdca8e","sha512":"c7922891ff4a5dbcfa9bb33b4fa47ffaabf6f284582b001959460f2dd3b8f41675756b267c5d20a64eaf2f1b24a8b2cb1410c5bbb4def000c327c3dba6886c5c","ssdeep":"","tlshash":"4fc080b564e59531545500da307bdbf57c74311875527080c8dd7c5c9964fd71851c65","size":179,"data":"","first_seen":"2025-08-28T02:11:02.232538Z","last_seen":"2026-02-10T19:12:40.646937Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fstatic.netpub.media/extra/cmp/cmp-gdpr.js","fqdn":"fstatic.netpub.media","domain":"netpub.media","tld":"media"},"ip":{"addr":"104.20.41.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aaee79c1ad6d5d6ce8c18aa000285386","sha1":"3c20aa1526d0d2a123a665e563b3b7427b3b33cb","sha256":"078ca4194bef5fc3c8e4c9e79f0f65254c1bf602d7c8ad4d589a60052a618074","sha512":"9415b9f072a43326e66ba9d437e389efa95260e8ae7c7cd062716c82c2d28de1527d4e1a1144aa8ce395536da1391373007c8c7ac768126b8d29c26fb2f3a39c","ssdeep":"","tlshash":"c301492d9d90e5394136236f5b76d2c8fe70102bb412a50bb49dd9082f30ed90ad4dd1","size":739,"data":"","first_seen":"2024-12-11T18:21:45.151305Z","last_seen":"2026-05-09T13:38:38.38952Z","times_seen":1862,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/eeu8hlL","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"172.67.185.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"50a0d6afa9ad3868ef310483a2add8fa","sha1":"ae372ce5054f2c50b95aa0e1ec6f7d40002efd60","sha256":"ad2a8daf63fe201b025130e431582846aaffe73f9c02c500f6b95dcfaa5024ed","sha512":"0e9264809439b4ed59fcf21995f6fb74316c384aea50e9d1dec719ab0c0abc86676e12a1ca8c6850829774be1c25e62762ca748968c1f9e9c9af91d4f715dbb6","ssdeep":"","tlshash":"d0d02bef095108340ba370696f2fb24834b7505f1407a6017e4c4a000f5430ec21a7cd","size":283,"data":"","first_seen":"2025-08-12T21:51:14.858929Z","last_seen":"2026-02-11T20:26:43.620408Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/js/frontend.js?id=a9ead52fa97a2708e6e9","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"172.67.185.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9ead52fa97a2708e6e909b3777bd7fc","sha1":"b03c394ee849507472f56ab74b7535f6732334f7","sha256":"b57bb1cc8f2421dfce98acb639dc6177ef3588289d0a175b1f7eac9d704e6b9f","sha512":"9bb3b132a1412494d26244062b08a1649f07144065100359f00753507816144eb409755d304bd9bc49e6fa7a80e90d58b6a7cf147b12bb13341c6ebbc807729b","ssdeep":"24576:QaQbgvThYzoRcckPLNKdL4BgbOe5Je+VMCs7wFlkJHbJW0OX:bQbg7hYzoRccuLNKdL4BEOe5Je+MOFln","tlshash":"ff65954077c0b85913979f7ab31fb1eaf45a0caf3c88484be105fca065a9617fae5931","size":1427021,"data":"","first_seen":"2024-11-30T23:21:10.544949Z","last_seen":"2025-12-06T07:16:32.096441Z","times_seen":243,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-X2GS5JDQMX","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"514f03f9e5afc90df9ca0cffae857e91","sha1":"c02d66e0599adac1036f9951d616bb07c2d27436","sha256":"824e3457ced3e7f7fb3d5ac71343f80c2dd2c8217c4a652bf77a0ed86ee0fe68","sha512":"09d98ed70e6d0946519f3b30ffd2ff72c7a1070ca107025585bab77fd925b92ee6225d97577d75542e0abb034fbf259e48132e681a77dfc69f80b3dc66a2f080","ssdeep":"6144:UAC/yp2a4tk0uwbWZJT+Nju5204OTSkndXAQy:/YJm0KZJu0P+","tlshash":"947408ce73d670665392a478503f018bb57b2892f44cc899f186dee52e74a9a0277f3c","size":366944,"data":"","first_seen":"2025-10-12T20:53:35.617141Z","last_seen":"2025-10-12T20:53:35.617141Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api.js?onload=onloadRecaptchaCallback\u0026render=explicit","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"40e5f1c11741690f3adced6a1da2dcec","sha1":"adedec350f8b0d7c2ce25c35d7087843b592ec76","sha256":"260fce41986f0ae6c798379afd07a4f6ccf639e330470e6361dfc34dac0a1be6","sha512":"6ed984603ee3a9e4a2d211f6ebf4f1169e28a8b9c877b854a9586547d8d6d927475da1ac6bd847743856c2d5bc6f1a3b733f841a0ddd57feacfc2a4c0000493e","ssdeep":"","tlshash":"d821eb761b05e03d4b3219d1a1fecbb1e891340db15848d8b646aac46e7accbce05549","size":1129,"data":"","first_seen":"2025-10-08T13:27:09.771607Z","last_seen":"2025-10-13T03:39:22.909136Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/eeu8hlL","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"172.67.185.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"988e1886ce1f3a274575674e522e0141","sha1":"9c78c66005197a564ea33800eefab76fd669981e","sha256":"c5aaab4e6b1ecd2d19a1b68a3dc4d5a7c4a2b6e3c3d6f6f8ac429faebd0d5842","sha512":"4772d93282b09b8557f7eb3dab76a1b5f6f7742e5b728a1b3ff3bb8696ed426d377630a5840a4651a259e6938e944400f3ff9ff3061d8af22e34eb0ca105db53","ssdeep":"","tlshash":"85d0a7bb2c30a3353d5a51caa475faeebc70107e5cab9026d4decc9e241cf90496de01","size":241,"data":"","first_seen":"2025-03-05T16:05:38.685752Z","last_seen":"2026-02-11T20:26:43.622635Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/eeu8hlL","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"172.67.185.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"988e1886ce1f3a274575674e522e0141","sha1":"9c78c66005197a564ea33800eefab76fd669981e","sha256":"c5aaab4e6b1ecd2d19a1b68a3dc4d5a7c4a2b6e3c3d6f6f8ac429faebd0d5842","sha512":"4772d93282b09b8557f7eb3dab76a1b5f6f7742e5b728a1b3ff3bb8696ed426d377630a5840a4651a259e6938e944400f3ff9ff3061d8af22e34eb0ca105db53","ssdeep":"","tlshash":"85d0a7bb2c30a3353d5a51caa475faeebc70107e5cab9026d4decc9e241cf90496de01","size":241,"data":"","first_seen":"2025-03-05T16:05:38.685752Z","last_seen":"2026-02-11T20:26:43.622635Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/eeu8hlL","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"172.67.185.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"988e1886ce1f3a274575674e522e0141","sha1":"9c78c66005197a564ea33800eefab76fd669981e","sha256":"c5aaab4e6b1ecd2d19a1b68a3dc4d5a7c4a2b6e3c3d6f6f8ac429faebd0d5842","sha512":"4772d93282b09b8557f7eb3dab76a1b5f6f7742e5b728a1b3ff3bb8696ed426d377630a5840a4651a259e6938e944400f3ff9ff3061d8af22e34eb0ca105db53","ssdeep":"","tlshash":"85d0a7bb2c30a3353d5a51caa475faeebc70107e5cab9026d4decc9e241cf90496de01","size":241,"data":"","first_seen":"2025-03-05T16:05:38.685752Z","last_seen":"2026-02-11T20:26:43.622635Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/eeu8hlL","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"172.67.185.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"988e1886ce1f3a274575674e522e0141","sha1":"9c78c66005197a564ea33800eefab76fd669981e","sha256":"c5aaab4e6b1ecd2d19a1b68a3dc4d5a7c4a2b6e3c3d6f6f8ac429faebd0d5842","sha512":"4772d93282b09b8557f7eb3dab76a1b5f6f7742e5b728a1b3ff3bb8696ed426d377630a5840a4651a259e6938e944400f3ff9ff3061d8af22e34eb0ca105db53","ssdeep":"","tlshash":"85d0a7bb2c30a3353d5a51caa475faeebc70107e5cab9026d4decc9e241cf90496de01","size":241,"data":"","first_seen":"2025-03-05T16:05:38.685752Z","last_seen":"2026-02-11T20:26:43.622635Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/eeu8hlL","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"172.67.185.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"988e1886ce1f3a274575674e522e0141","sha1":"9c78c66005197a564ea33800eefab76fd669981e","sha256":"c5aaab4e6b1ecd2d19a1b68a3dc4d5a7c4a2b6e3c3d6f6f8ac429faebd0d5842","sha512":"4772d93282b09b8557f7eb3dab76a1b5f6f7742e5b728a1b3ff3bb8696ed426d377630a5840a4651a259e6938e944400f3ff9ff3061d8af22e34eb0ca105db53","ssdeep":"","tlshash":"85d0a7bb2c30a3353d5a51caa475faeebc70107e5cab9026d4decc9e241cf90496de01","size":241,"data":"","first_seen":"2025-03-05T16:05:38.685752Z","last_seen":"2026-02-11T20:26:43.622635Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gpp.netpub.media/17603023905440.5268106866988157/run.js?v=17603023905440.5268106866988157","fqdn":"gpp.netpub.media","domain":"netpub.media","tld":"media"},"ip":{"addr":"104.20.41.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"54f643b0fa8a7d71cb117679a6fbb2ce","sha1":"573d440c0f9fa4cf53e85cf86a86eba173933a1c","sha256":"851d2ece063bcac9a5addec55308a32557f978d2daf3950395fc3dc41e9e9336","sha512":"35a57a6a05d467bc1326d4171220562c440e2834f6a01878246bf951659100efcc40f8f63609ee594251f20f494f4d8f9230bf476dc3897c0334494e7e7b1424","ssdeep":"","tlshash":"e6d05e5ca72a29942c3272b55baf2614a13b242310828a043b0c49c00fbb956c189eec","size":251,"data":"","first_seen":"2024-02-21T20:01:38Z","last_seen":"2026-05-09T13:38:38.436979Z","times_seen":2517,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bvtpk.com/tag.min.js","fqdn":"bvtpk.com","domain":"bvtpk.com","tld":"com"},"ip":{"addr":"172.67.154.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"99ed14845d523486e83b412ebc56c503","sha1":"695728f7aceac2eb849bd77befe207a36daec956","sha256":"ac81dafc8972f87ebeb69de37db97085ef1c0955ff2a93c52c5f626bdcafb556","sha512":"6b50263ede737927c66723bc661e9913ba211b47c2a7f8985d6d16a021f71db997ae2f31005bb59de3daf0553b6776c76bb8c619eaa4ce59867d7060d7de4f91","ssdeep":"1536:I8zmHlk4JQ9aO4kD9VaZ06GUqo54Az0SBYQ4+DIVV3BWw:jzsJkaO44I06GUb0S6z3xWw","tlshash":"feb33bc6226a241612bf8034445bed0eb5aecd8104cdcdb8e1e5b8662d78b16d3f7fd9","size":109923,"data":"","first_seen":"2025-10-08T18:57:46.63277Z","last_seen":"2025-10-13T11:28:33.058992Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/js/ads.js","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"172.67.185.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfda8d31536e90428f6d37f17590d92d","sha1":"c161162410c27db721479da020406e9e56a8b851","sha256":"d92d2a6719b8462f29f2c9dc8f7c84be379feb798fdcc85ddade83fbb8fb2a45","sha512":"97739f1e2dfcf12521374f3efae56d7e24b6e8010b4bda3046e44088d2b690603c40a2c2a0431034f426d9337b6181969f3aa74f2c5d8ce093e1e9856f7cf2ce","ssdeep":"","tlshash":"1a31cb582ea0aab8334303d6772f64d8f532dd5628b28d0cd021ee95fc08a34d5abe31","size":1499,"data":"","first_seen":"2024-11-30T23:21:10.233947Z","last_seen":"2026-03-04T04:55:38.593842Z","times_seen":263,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/eeu8hlL","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"172.67.185.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"988e1886ce1f3a274575674e522e0141","sha1":"9c78c66005197a564ea33800eefab76fd669981e","sha256":"c5aaab4e6b1ecd2d19a1b68a3dc4d5a7c4a2b6e3c3d6f6f8ac429faebd0d5842","sha512":"4772d93282b09b8557f7eb3dab76a1b5f6f7742e5b728a1b3ff3bb8696ed426d377630a5840a4651a259e6938e944400f3ff9ff3061d8af22e34eb0ca105db53","ssdeep":"","tlshash":"85d0a7bb2c30a3353d5a51caa475faeebc70107e5cab9026d4decc9e241cf90496de01","size":241,"data":"","first_seen":"2025-03-05T16:05:38.685752Z","last_seen":"2026-02-11T20:26:43.622635Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/eeu8hlL","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"172.67.185.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"988e1886ce1f3a274575674e522e0141","sha1":"9c78c66005197a564ea33800eefab76fd669981e","sha256":"c5aaab4e6b1ecd2d19a1b68a3dc4d5a7c4a2b6e3c3d6f6f8ac429faebd0d5842","sha512":"4772d93282b09b8557f7eb3dab76a1b5f6f7742e5b728a1b3ff3bb8696ed426d377630a5840a4651a259e6938e944400f3ff9ff3061d8af22e34eb0ca105db53","ssdeep":"","tlshash":"85d0a7bb2c30a3353d5a51caa475faeebc70107e5cab9026d4decc9e241cf90496de01","size":241,"data":"","first_seen":"2025-03-05T16:05:38.685752Z","last_seen":"2026-02-11T20:26:43.622635Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/eeu8hlL","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"172.67.185.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"12604c455f59caa26193e0457fdc2553","sha1":"d359991ad86caab20bc5e572fefa58ae69da1a19","sha256":"dc40c5c4f643992b5286c5463d506a49f7b7466376c0c980325d7744c8445507","sha512":"9e197db98c25722f087a7d73fd96eedd32cf25851aef02e72be163950ed5c74c1d1c1afd103f19c065e179347cd434fd2c8f800310934ffbdcf61552372df947","ssdeep":"","tlshash":"27112137659798b6bfd09084860079c1ce770233df492646a7a885884bef9f9a107c6f","size":1011,"data":"","first_seen":"2025-10-12T20:53:35.661451Z","last_seen":"2025-10-12T20:53:35.661451Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/eeu8hlL","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"172.67.185.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f91d7c0b21b5fb7e2315eb075b7919b","sha1":"0238127f6ba64eb33a76fcaf4816cf59f913ad7b","sha256":"c5cad620a326c31474dbb15667204511db0845970467bf17d6e57348fb0f67cf","sha512":"e9ebddeabf571fdc174a284bae51b6ee0e6e53ab5d5b3b5e5ff52cd57a73ce7c4099ffee9691155a03185ca20674b59910aecc5adf795ddd3e23bbc8008b6833","ssdeep":"","tlshash":"18d08c8c268b2c7040f73a454b7f6200b006611360d18e323e0ea3849f70e2bd714908","size":205,"data":"","first_seen":"2024-08-31T03:54:09Z","last_seen":"2026-02-11T20:26:43.632227Z","times_seen":236,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-197252557-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e89efe7444746998431ae95066851afa","sha1":"0c844cae211d50be096a39d4795a0620b8bb7ba0","sha256":"f6d8db824d6fa774df532eac9db8ab63192dc8fe340ae3dfe4996fb64e994b0c","sha512":"f6d417bc33dcbbed2e1e90cec5541040a8f6ecbd6227de753d1241b6d5b0d4c39dba3703c30280f035776f8fcde6cbc21221c71dd16b0c4526699a66d7a436a2","ssdeep":"3072:Z/Vwpcam+So4ypmh06s6VIkDcajIu1yeZGbQU4vT8JWNjxW55204O/XpAmCRstCI:Gc/ypm0hk0uwb7ngNju5204OKtEbkbC","tlshash":"546408cd77d674228393a478503f018bb17b68d2f84cc899e186d9e52e70a9a4277f3d","size":312680,"data":"","first_seen":"2025-10-12T09:15:55.969315Z","last_seen":"2025-10-12T20:53:35.559002Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/eeu8hlL","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"172.67.185.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a1e0d623f9e510e759498d67c8281999","sha1":"65e9e9287fd8060ebb5b624463ff977040e3d154","sha256":"c66a236b63a0191f0cc1cb5a3c1b675c0fb7bf7d5e56b8c5ed34d70b10059aa7","sha512":"0df45eef69cc2b494630ac663481553a335db913f9afd1061320767eca3464f93691071fe2fae91800c8bd19ff52b4a7cffcab7636192c58950d598a770a3e63","ssdeep":"","tlshash":"95c02bc8360a0c71c6fb27008b7ffa00bc43321494d05d324c0933048e60e03d754800","size":155,"data":"","first_seen":"2023-03-08T15:28:47Z","last_seen":"2026-02-13T14:00:01.941423Z","times_seen":1352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.recaptcha.net/recaptcha/api.js?onload=onloadRecaptchaCallback\u0026render=explicit","fqdn":"www.recaptcha.net","domain":"recaptcha.net","tld":"net"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:11.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:00 GMT","end":"Mon, 15 Dec 2025 08:40:59 GMT"},"fingerprint":{"sha1":"5D:6E:CA:B8:08:9E:E1:F4:B4:78:92:D5:75:88:BE:03:28:F2:4A:E1","sha256":"BA:63:01:1A:D2:22:90:D7:47:90:35:07:32:CA:30:22:94:87:39:15:E9:4C:43:89:4C:B7:3E:8E:F5:0B:D2:2A"}}},"request":{"raw":"GET /recaptcha/api.js?onload=onloadRecaptchaCallback\u0026render=explicit HTTP/1.1\r\nHost: www.recaptcha.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sun, 12 Oct 2025 20:53:11 GMT\r\ndate: Sun, 12 Oct 2025 20:53:11 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1129,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1129), with no line terminators","md5":"40e5f1c11741690f3adced6a1da2dcec","sha1":"adedec350f8b0d7c2ce25c35d7087843b592ec76","sha256":"260fce41986f0ae6c798379afd07a4f6ccf639e330470e6361dfc34dac0a1be6","sha512":"6ed984603ee3a9e4a2d211f6ebf4f1169e28a8b9c877b854a9586547d8d6d927475da1ac6bd847743856c2d5bc6f1a3b733f841a0ddd57feacfc2a4c0000493e","ssdeep":"","tlshash":"d821eb761b05e03d4b3219d1a1fecbb1e891340db15848d8b646aac46e7accbce05549","first_seen":"2025-10-08T13:27:09.771607Z","last_seen":"2025-10-13T03:39:22.909136Z","times_seen":30,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":54,"dns":5,"connect":8,"send":0,"wait":22,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026family=Roboto:wght@400;500;700;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"04:E6:D3:58:E3:A1:E3:05:2B:C3:56:5D:68:BB:1B:0A:08:C6:E3:FB","sha256":"25:4C:B3:A3:9A:E1:D7:FD:25:B6:BF:E9:AA:97:95:20:5D:F2:15:EA:41:46:B6:6B:01:17:19:26:EC:EF:D3:CA"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026family=Roboto:wght@400;500;700;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 12 Oct 2025 20:53:10 GMT\r\ndate: Sun, 12 Oct 2025 20:53:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32448,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"15173303b8b080c78c8257c34b0980eb","sha1":"a5e46baaac82ae28094821987185fcbfce784870","sha256":"d68715ed279536f09cddc571282f7453129572c5d9b3be369f9c12af05d8d2aa","sha512":"a9a49afcdefd2d64ae9ab313238393870760b965947bf9b53316d3cfa65ae167a993e82880d55a2b4bdf77894219aec9285c2cd5d7e99e617b4304e32b907a30","ssdeep":"768:0JKBLfhQE8YtCR6UfaQ7zfTYHw+fQQVNJBe9m4fGQvXrR:bia0p","tlshash":"afe22d91041b9400ab834cd223cebf39fe8e51557085d0b9abfd5f9bacdbc66426836d","first_seen":"2025-09-11T04:18:38.193737Z","last_seen":"2025-11-18T23:16:02.190004Z","times_seen":60,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":120,"dns":2,"connect":22,"send":0,"wait":35,"receive":0,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.mastinstungmoreal.com/static/9cb58b5eb2422c8f734769e7cf0146cf.min.js?1760302390411","fqdn":"st.mastinstungmoreal.com","domain":"mastinstungmoreal.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastinstungmoreal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 00:15:48 GMT","end":"Mon, 24 Nov 2025 01:15:28 GMT"},"fingerprint":{"sha1":"67:EC:62:B9:D1:61:A8:6E:39:F9:BE:EF:BF:BE:89:4E:05:98:79:37","sha256":"AE:FD:E4:B1:E4:29:A8:BE:02:21:51:E5:8F:DC:3D:1F:07:B4:B9:6B:14:CB:C2:DD:CC:37:7D:E6:39:83:9D:58"}}},"request":{"raw":"GET /static/9cb58b5eb2422c8f734769e7cf0146cf.min.js?1760302390411 HTTP/1.1\r\nHost: st.mastinstungmoreal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 12 Oct 2025 20:53:10 GMT\r\nlocation: https://st.mastinstungmoreal.com/r/9cb58b5eb2422c8f734769e7cf0146cf/service.js\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=abpMfMsh3Vz9H4XPl6G6CmxeSKPNtFH3nY0Ex%2FziPPFVK3hu1v7k2CsxXU08my4JeVZk0uAL6k3XR7pVEV7naOaxkk5%2BjT2WYA%2B0Q36PLF7msfoVAPY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98d97c34f91b5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":11,"connect":1,"send":0,"wait":4,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://upfion.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Oct 2025 12:56:02 GMT\r\nexpires: Fri, 09 Oct 2026 12:56:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 287828\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-09T15:22:38.78062Z","times_seen":805665,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":148,"dns":5,"connect":24,"send":0,"wait":12,"receive":1,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:11.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 13:14:02 GMT","end":"Wed, 26 Nov 2025 14:13:48 GMT"},"fingerprint":{"sha1":"7A:B2:21:7F:72:E3:39:3E:95:5D:FB:ED:BB:1C:7E:88:C4:7A:B1:B3","sha256":"FB:1D:6D:AF:DA:57:8D:9A:8B:B2:CC:FF:A2:55:C8:F3:71:3D:49:77:06:FC:4D:6F:16:91:61:6F:89:1C:A3:CB"}}},"request":{"raw":"GET /gid.js HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://upfion.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Oct 2025 20:53:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://upfion.com\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=0802601178e54980e5737cec459e1f4d; expires=Mon, 12 Oct 2026 20:53:11 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 98d97c386a5376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3ff53f0b886443c145a9eda04dbad313","sha1":"5d92eeb07d9bdc4b2c461e1d5650aceeed5c73ac","sha256":"8b6db65088f6b67ef58da3038ee12a8c61b522e21698b3578f0d5258ee18f770","sha512":"cdaba813d1593e5ed546735851dfc65ddef175deb1bf0790ef0a13eb3d5b890ccbfb2c6027386516046ee4537e9bf98c7aa8b4b956b1ae8e111c35c14f46450c","ssdeep":"","tlshash":"f0a002a05c384584c544651ffacf9651830702667466fb8c51d9c902529655cda5b394","first_seen":"2025-10-12T20:53:35.52362Z","last_seen":"2025-10-12T20:53:35.52362Z","times_seen":1,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":106,"dns":33,"connect":1,"send":0,"wait":41,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagead2.googlesyndication.com/pagead/js/adsbygoogle.js","fqdn":"pagead2.googlesyndication.com","domain":"googlesyndication.com","tld":"com"},"ip":{"addr":"216.58.207.194","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:11.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.doubleclick.net","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"57:4F:37:52:35:3F:6C:48:14:D9:58:C8:25:71:FC:8E:BA:C6:9D:D7","sha256":"12:75:2E:3D:26:85:EA:B7:93:6B:DE:18:A4:AB:5B:9E:10:E7:92:FC:4E:D9:FD:CA:D3:1C:9D:72:D0:73:84:3A"}}},"request":{"raw":"HEAD /pagead/js/adsbygoogle.js HTTP/1.1\r\nHost: pagead2.googlesyndication.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://upfion.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nlink: \u003chttps://googleads.g.doubleclick.net\u003e; rel=\"preconnect\"; crossorigin\r\nvary: Accept-Encoding\r\ndate: Sun, 12 Oct 2025 20:53:11 GMT\r\nexpires: Sun, 12 Oct 2025 20:53:11 GMT\r\ncache-control: private, max-age=3600, stale-while-revalidate=3600\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: 16538201270781522829\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 54265\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":54,"dns":0,"connect":10,"send":0,"wait":29,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/favicon.ico","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"172.67.185.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:11.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upfion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 06:45:15 GMT","end":"Sun, 16 Nov 2025 07:42:54 GMT"},"fingerprint":{"sha1":"ED:0D:7D:52:B9:81:CB:24:42:30:EE:05:EA:B2:F8:4C:D5:A4:7D:C9","sha256":"DB:73:72:C9:AC:6A:DF:41:47:C0:36:7F:DD:8D:EF:4C:B3:17:D7:0E:3C:52:09:8D:2D:C6:3A:93:52:1A:63:88"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: upfion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/eeu8hlL\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVBZ202cUxxb2Q2OHUreXAwMU1uOHc9PSIsInZhbHVlIjoiejJFUTdMYm1va1RUcm5TYlEzbWs5UjVKdUdDTk5mWmRUTWhWOUFybkk4ci9HbS9XOGxyS05oQzF4cEdCSnlJZ2E2QTM0R05QL1JzckNZOWg2SGo3YnU5V1BmM2FET2l4UExNa1dkOTZCVVpZWWN3YlE0dEg0b24vYVhyVE9ScGIiLCJtYWMiOiJlMGEyYzQ1ZmFhOTU3MzY3NTk3YTBmMTY2ZjVjMzNjYWE1ZGY0OTVlODUwYmI1OGYzNzA0ZWE0M2VhZGIyZTcwIiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6ImNxYi9WN0VYeEdpdWZ0VDBqMmlrb0E9PSIsInZhbHVlIjoiVFlTM3paQ2xzaFJrVjhXTUJTK2wyY2ovOWh2MzhVbCtFN1Jld2l4MFlrNlJ4NGdyWUV0dkgxZVczaUtmSGJSSFdCRTZOTWk0TkVxa2JkM2xMS1hPSUh0b0owdk92R05QZlJNcWtLU2wxTm9rYTc5ODRXV2dUUTMwcHdkcUQ2ZzIiLCJtYWMiOiJiMmFkMzE1ZmYwY2JhMjA2NWYwNDY5YzQzN2ViZDhkMjU0MGNjYWM3MWM4YjZmNWY0MThkMzcyMmJhODBjOGIxIiwidGFnIjoiIn0%3D; ab=1; _ga_X2GS5JDQMX=GS2.1.s1760302390$o1$g0$t1760302390$j60$l0$h0; _ga=GA1.1.1203234505.1760302391; _ga_75C4L64NEB=GS2.1.s1760302391$o1$g0$t1760302391$j60$l0$h0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 20:53:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\nx-powered-by: PHP/8.2.15\r\nlink: \u003chttps://upfion.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-redirect-by: WordPress\r\nlocation: https://upfion.com/wp-content/uploads/2025/02/cropped-Add-a-heading-28-32x32.png\r\ncf-cache-status: BYPASS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FDNGkPrOzTs5AKuTeqQcY5tdfGwF0tyEjD00wgip46IiToh5hDaSxHq3%2FmP2D69evAnzzmXvkdlc7Xn7ZLLCxt0FMGRBQXbz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d97c38fe34568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP:8.2.15","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1793,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/wp-content/uploads/2025/02/cropped-Add-a-heading-28-32x32.png","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"172.67.185.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:11.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upfion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 06:45:15 GMT","end":"Sun, 16 Nov 2025 07:42:54 GMT"},"fingerprint":{"sha1":"ED:0D:7D:52:B9:81:CB:24:42:30:EE:05:EA:B2:F8:4C:D5:A4:7D:C9","sha256":"DB:73:72:C9:AC:6A:DF:41:47:C0:36:7F:DD:8D:EF:4C:B3:17:D7:0E:3C:52:09:8D:2D:C6:3A:93:52:1A:63:88"}}},"request":{"raw":"GET /wp-content/uploads/2025/02/cropped-Add-a-heading-28-32x32.png HTTP/1.1\r\nHost: upfion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://upfion.com/eeu8hlL\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVBZ202cUxxb2Q2OHUreXAwMU1uOHc9PSIsInZhbHVlIjoiejJFUTdMYm1va1RUcm5TYlEzbWs5UjVKdUdDTk5mWmRUTWhWOUFybkk4ci9HbS9XOGxyS05oQzF4cEdCSnlJZ2E2QTM0R05QL1JzckNZOWg2SGo3YnU5V1BmM2FET2l4UExNa1dkOTZCVVpZWWN3YlE0dEg0b24vYVhyVE9ScGIiLCJtYWMiOiJlMGEyYzQ1ZmFhOTU3MzY3NTk3YTBmMTY2ZjVjMzNjYWE1ZGY0OTVlODUwYmI1OGYzNzA0ZWE0M2VhZGIyZTcwIiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6ImNxYi9WN0VYeEdpdWZ0VDBqMmlrb0E9PSIsInZhbHVlIjoiVFlTM3paQ2xzaFJrVjhXTUJTK2wyY2ovOWh2MzhVbCtFN1Jld2l4MFlrNlJ4NGdyWUV0dkgxZVczaUtmSGJSSFdCRTZOTWk0TkVxa2JkM2xMS1hPSUh0b0owdk92R05QZlJNcWtLU2wxTm9rYTc5ODRXV2dUUTMwcHdkcUQ2ZzIiLCJtYWMiOiJiMmFkMzE1ZmYwY2JhMjA2NWYwNDY5YzQzN2ViZDhkMjU0MGNjYWM3MWM4YjZmNWY0MThkMzcyMmJhODBjOGIxIiwidGFnIjoiIn0%3D; ab=1; _ga_X2GS5JDQMX=GS2.1.s1760302390$o1$g0$t1760302390$j60$l0$h0; _ga=GA1.1.1203234505.1760302391; _ga_75C4L64NEB=GS2.1.s1760302391$o1$g0$t1760302391$j60$l0$h0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 20:53:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 1793\r\nlast-modified: Sun, 23 Feb 2025 18:56:19 GMT\r\netag: \"701-62ed3c775e9cc\"\r\naccept-ranges: bytes\r\nage: 3200\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uMtLOkSl2iiTDUscjK7dukQ3ZlmSC2gWG1cRLnio8YoJsY9zwh2ZlbqPsc61HIb2PN5K5dSdKWpCFsOBeMTIWzO81oP1D9U2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98d97c3aee47568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1793,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"15bb3649bd37d8bc93f009e8d9bb7cb5","sha1":"08c30dcea1a2d845e36ae2a413d4d4db00d506e3","sha256":"f813406101c46d6450d337ee018b2d780a978ca041fd3e782952bcb817a750b7","sha512":"aa35ec2c7b00826affa3089c75f0b17a6f89d1ba3fe333079f7ae349adb9cd083602899bbbd98e138b12688674d454c775712e9521d7a5aeeefb1c8613e773ae","ssdeep":"","tlshash":"d1310982966831e92a66c5d21ce86b817f025c608c4ab41efbeb70dee20c98c41b2563","first_seen":"2025-02-26T19:27:53.194758Z","last_seen":"2026-04-11T09:04:52.30262Z","times_seen":107,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x3os.com/5/9776947/?oo=1\u0026js_build=iclick-v1.1586.2\u0026userId=0802601178e54980e5737cec459e1f4d\u0026dmn=bvtpk.com\u0026tt=2\u0026ix=0","fqdn":"x3os.com","domain":"x3os.com","tld":"com"},"ip":{"addr":"139.45.196.64","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:11.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"x3os.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Sep 2025 05:23:11 GMT","end":"Sun, 28 Dec 2025 05:23:10 GMT"},"fingerprint":{"sha1":"4C:6E:3B:CA:38:7D:B2:00:EF:B4:4F:88:9B:3E:29:55:91:FE:AF:0E","sha256":"D2:5C:87:BC:0F:B8:02:33:A0:8D:AD:46:BB:C5:BC:CF:EF:1B:AA:A6:7C:F2:DE:D3:6F:DC:A2:89:AC:97:C0:87"}}},"request":{"raw":"POST /5/9776947/?oo=1\u0026js_build=iclick-v1.1586.2\u0026userId=0802601178e54980e5737cec459e1f4d\u0026dmn=bvtpk.com\u0026tt=2\u0026ix=0 HTTP/1.1\r\nHost: x3os.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2574\r\nOrigin: https://upfion.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sun, 12 Oct 2025 20:53:11 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://upfion.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":99,"dns":13,"connect":26,"send":0,"wait":29,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"x3os.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/eeu8hlL","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"172.67.185.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-12T20:53:08.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upfion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 06:45:15 GMT","end":"Sun, 16 Nov 2025 07:42:54 GMT"},"fingerprint":{"sha1":"ED:0D:7D:52:B9:81:CB:24:42:30:EE:05:EA:B2:F8:4C:D5:A4:7D:C9","sha256":"DB:73:72:C9:AC:6A:DF:41:47:C0:36:7F:DD:8D:EF:4C:B3:17:D7:0E:3C:52:09:8D:2D:C6:3A:93:52:1A:63:88"}}},"request":{"raw":"GET /eeu8hlL HTTP/1.1\r\nHost: upfion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Im1nanJpcTI1cGh0TXk1L3QrL1ZrUmc9PSIsInZhbHVlIjoiQjRHdVduSHpjWTN3cldIUERjUkdnRU1qVklad0MxSXY4QXVMRnVhaEpDYkFzZzVCWFcxQUJzcStMWHRTSHE2cGRKRDRpY1VPRVNWeEhBQmlPYmpsdzZFVDh4UTVheVNrcUJLVXNVY2VOSEl6UTVQTDVBVUVhSEprVFd5d1ljbHUiLCJtYWMiOiIwODE2NzllNzFkYjc0YjkyOGFmMjMxNjdlMzllYWU1OGQwYTZjYWQ5NjQyMTBlYmJlMDhmODllYWNlNWZjYTZjIiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6IkFHczJ3TFdINFhlSjZBanRoN0crcnc9PSIsInZhbHVlIjoiS21wYXlJUEU5RTNrMzBUeS81UnVoQ2dKZEFDbytCQnRmNzBSWnE1dHR3WkNCTm4rNW1ESWVqQzNVWCtoVThLK2ZldDNaWHNVUVAxTzRjVWdHYkdjdnRkOFhyOXBCK3c4RHRvYWdhSVoxL3NneEdDaTN5NGRta2JjNmluNHVHczEiLCJtYWMiOiJkYzkzMGQ2MzI3ZGNjM2E4YzhiN2I0ZmM5ZDE0OTk3MmI3MzdjZDA3NDBkMGY1ZDcxYWI5YzNhOGU5ZjI4YmE2IiwidGFnIjoiIn0%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Oct 2025 20:53:09 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ASVXF4hCQyedUqMbjjzkoZZhtlDHESkXog0tD3mPhjKhoiXEXh3Lt6VrUO%2FCdSfKOP3tiV3reyJ6o5w4k0l9NnrVgqZILdjE\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IjVBZ202cUxxb2Q2OHUreXAwMU1uOHc9PSIsInZhbHVlIjoiejJFUTdMYm1va1RUcm5TYlEzbWs5UjVKdUdDTk5mWmRUTWhWOUFybkk4ci9HbS9XOGxyS05oQzF4cEdCSnlJZ2E2QTM0R05QL1JzckNZOWg2SGo3YnU5V1BmM2FET2l4UExNa1dkOTZCVVpZWWN3YlE0dEg0b24vYVhyVE9ScGIiLCJtYWMiOiJlMGEyYzQ1ZmFhOTU3MzY3NTk3YTBmMTY2ZjVjMzNjYWE1ZGY0OTVlODUwYmI1OGYzNzA0ZWE0M2VhZGIyZTcwIiwidGFnIjoiIn0%3D; SameSite=Lax; Path=/; Max-Age=604800; Expires=Sun, 19 Oct 2025 20:53:09 GMT\nupfiles_session=eyJpdiI6ImNxYi9WN0VYeEdpdWZ0VDBqMmlrb0E9PSIsInZhbHVlIjoiVFlTM3paQ2xzaFJrVjhXTUJTK2wyY2ovOWh2MzhVbCtFN1Jld2l4MFlrNlJ4NGdyWUV0dkgxZVczaUtmSGJSSFdCRTZOTWk0TkVxa2JkM2xMS1hPSUh0b0owdk92R05QZlJNcWtLU2wxTm9rYTc5ODRXV2dUUTMwcHdkcUQ2ZzIiLCJtYWMiOiJiMmFkMzE1ZmYwY2JhMjA2NWYwNDY5YzQzN2ViZDhkMjU0MGNjYWM3MWM4YjZmNWY0MThkMzcyMmJhODBjOGIxIiwidGFnIjoiIn0%3D; HttpOnly; SameSite=Lax; Path=/; Max-Age=604800; Expires=Sun, 19 Oct 2025 20:53:09 GMT\r\ncf-ray: 98d97c2af9e50b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":28779,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (975), with CRLF, LF line terminators","md5":"0f60ee06093b3e75bdcc8ecbb76a4eb5","sha1":"d618293745c63805ff160075d6f013e836bf18cb","sha256":"dc693d9b8d6ec7371a940759ce38a934862991fecad49c18a88acb4f5f7aac1d","sha512":"23cef92b1789326d95a4157c35eac4f5a163d1b8b10c11490fa3cc74a6680c1088453fb46a4834059dd5f9892e39f0ae29804fee17d144b50ebf94a969ff87d9","ssdeep":"768:vT1yAK4dZ8Vp4UoAatOaw2OakMVhKbDPlsbYOwJ:ByAK4dZ8VNN2OakMVhKb6b3wJ","tlshash":"0dd2e82b39d42532af8201a6bb21fb5fef129103c6469401f49d464f2f53ee78d5b4ae","first_seen":"2025-10-12T20:53:35.533146Z","last_seen":"2025-10-12T20:53:35.533146Z","times_seen":1,"resource_available":false,"data":null}},"time_used":844,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":844,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/img/menu.svg","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"172.67.185.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upfion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 06:45:15 GMT","end":"Sun, 16 Nov 2025 07:42:54 GMT"},"fingerprint":{"sha1":"ED:0D:7D:52:B9:81:CB:24:42:30:EE:05:EA:B2:F8:4C:D5:A4:7D:C9","sha256":"DB:73:72:C9:AC:6A:DF:41:47:C0:36:7F:DD:8D:EF:4C:B3:17:D7:0E:3C:52:09:8D:2D:C6:3A:93:52:1A:63:88"}}},"request":{"raw":"GET /img/menu.svg HTTP/1.1\r\nHost: upfion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/eeu8hlL\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVBZ202cUxxb2Q2OHUreXAwMU1uOHc9PSIsInZhbHVlIjoiejJFUTdMYm1va1RUcm5TYlEzbWs5UjVKdUdDTk5mWmRUTWhWOUFybkk4ci9HbS9XOGxyS05oQzF4cEdCSnlJZ2E2QTM0R05QL1JzckNZOWg2SGo3YnU5V1BmM2FET2l4UExNa1dkOTZCVVpZWWN3YlE0dEg0b24vYVhyVE9ScGIiLCJtYWMiOiJlMGEyYzQ1ZmFhOTU3MzY3NTk3YTBmMTY2ZjVjMzNjYWE1ZGY0OTVlODUwYmI1OGYzNzA0ZWE0M2VhZGIyZTcwIiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6ImNxYi9WN0VYeEdpdWZ0VDBqMmlrb0E9PSIsInZhbHVlIjoiVFlTM3paQ2xzaFJrVjhXTUJTK2wyY2ovOWh2MzhVbCtFN1Jld2l4MFlrNlJ4NGdyWUV0dkgxZVczaUtmSGJSSFdCRTZOTWk0TkVxa2JkM2xMS1hPSUh0b0owdk92R05QZlJNcWtLU2wxTm9rYTc5ODRXV2dUUTMwcHdkcUQ2ZzIiLCJtYWMiOiJiMmFkMzE1ZmYwY2JhMjA2NWYwNDY5YzQzN2ViZDhkMjU0MGNjYWM3MWM4YjZmNWY0MThkMzcyMmJhODBjOGIxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 20:53:10 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Sat, 28 Sep 2024 07:01:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nage: 4557\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\netag: W/\"66f7a9b2-72e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4k%2B6F%2FZHdpPr1MK8AdvV4cm1ogNfnIi1hq3snWKRp7yLiP37GeV%2BabkgFQVk9KHXWd2YHIg2P1RQHZe%2BHd%2BCU7omjUSAi%2BL1\"}]}\r\ncf-ray: 98d97c31edd6568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1838,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e194fab3eea9f00d5a3814c4df00ac8c","sha1":"4a9760c8ec110364d025527e26730e78ae0b3ac0","sha256":"3d3e6705b468cecdd78fb9a1ee6688d60e1d2c1caa0db7baa88db460315dccea","sha512":"a36c7795597d5b13ca7d3592de5234133a1e56d35d6ea66da9212448a26d7ffc91c604d5a8d64c3abfb3109b2ab62ecdd46f9fcbe1f783caba95991bd044950a","ssdeep":"","tlshash":"5231c3fc904ecc1ad13ceb206ef5be2584a7266361dc06dcf2ec18167f00ba52d15aac","first_seen":"2023-05-07T20:47:11Z","last_seen":"2026-05-07T04:45:14.577094Z","times_seen":749,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.mastinstungmoreal.com/static/9cb58b5eb2422c8f734769e7cf0146cf.min.js?1760302390409","fqdn":"st.mastinstungmoreal.com","domain":"mastinstungmoreal.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastinstungmoreal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 00:15:48 GMT","end":"Mon, 24 Nov 2025 01:15:28 GMT"},"fingerprint":{"sha1":"67:EC:62:B9:D1:61:A8:6E:39:F9:BE:EF:BF:BE:89:4E:05:98:79:37","sha256":"AE:FD:E4:B1:E4:29:A8:BE:02:21:51:E5:8F:DC:3D:1F:07:B4:B9:6B:14:CB:C2:DD:CC:37:7D:E6:39:83:9D:58"}}},"request":{"raw":"GET /static/9cb58b5eb2422c8f734769e7cf0146cf.min.js?1760302390409 HTTP/1.1\r\nHost: st.mastinstungmoreal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 12 Oct 2025 20:53:10 GMT\r\nlocation: https://st.mastinstungmoreal.com/r/9cb58b5eb2422c8f734769e7cf0146cf/service.js\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CM2Wrgkg3zx1Qpb9Is4jTLA8pI%2FnaeKeJ7ebL3n4whA4Hrk1QhQQ%2BhzplfjnvY9elYLOmEkHjcGzltXsF32jEmGeC6f2vWOiZ%2FOCsDLNv%2BGXDzT6Bdo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98d97c34e9125690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":120,"dns":21,"connect":2,"send":0,"wait":6,"receive":0,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.mastinstungmoreal.com/static/9cb58b5eb2422c8f734769e7cf0146cf.min.js?1760302390410","fqdn":"st.mastinstungmoreal.com","domain":"mastinstungmoreal.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastinstungmoreal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 00:15:48 GMT","end":"Mon, 24 Nov 2025 01:15:28 GMT"},"fingerprint":{"sha1":"67:EC:62:B9:D1:61:A8:6E:39:F9:BE:EF:BF:BE:89:4E:05:98:79:37","sha256":"AE:FD:E4:B1:E4:29:A8:BE:02:21:51:E5:8F:DC:3D:1F:07:B4:B9:6B:14:CB:C2:DD:CC:37:7D:E6:39:83:9D:58"}}},"request":{"raw":"GET /static/9cb58b5eb2422c8f734769e7cf0146cf.min.js?1760302390410 HTTP/1.1\r\nHost: st.mastinstungmoreal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 12 Oct 2025 20:53:10 GMT\r\nlocation: https://st.mastinstungmoreal.com/r/9cb58b5eb2422c8f734769e7cf0146cf/service.js\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=STofebH6FhGkwEsQA0g4fdkpfZzstE%2BX6td7JDfAJe4i94xCE6LQhY8wYroCoFszvnqWYGaJn%2ByG02PYSU622jzlwp4%2BuuSuWWObRJUOkxniFTELcnE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98d97c34f9245690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":126,"dns":13,"connect":1,"send":0,"wait":4,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://upfion.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Oct 2025 12:56:02 GMT\r\nexpires: Fri, 09 Oct 2026 12:56:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 287828\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-09T15:22:38.78062Z","times_seen":805665,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":1,"dns":17,"connect":21,"send":0,"wait":15,"receive":1,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.mastinstungmoreal.com/r/9cb58b5eb2422c8f734769e7cf0146cf/service.js","fqdn":"st.mastinstungmoreal.com","domain":"mastinstungmoreal.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastinstungmoreal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 00:15:48 GMT","end":"Mon, 24 Nov 2025 01:15:28 GMT"},"fingerprint":{"sha1":"67:EC:62:B9:D1:61:A8:6E:39:F9:BE:EF:BF:BE:89:4E:05:98:79:37","sha256":"AE:FD:E4:B1:E4:29:A8:BE:02:21:51:E5:8F:DC:3D:1F:07:B4:B9:6B:14:CB:C2:DD:CC:37:7D:E6:39:83:9D:58"}}},"request":{"raw":"GET /r/9cb58b5eb2422c8f734769e7cf0146cf/service.js HTTP/1.1\r\nHost: st.mastinstungmoreal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://upfion.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 12 Oct 2025 20:53:10 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 11 Apr 2022 19:57:13 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TOi7hvM2jSVOxLka%2FbW4EN2id7i8mPl%2BzIYPS9wrLrK1nfI4ccFizexw64J5pESpjq5ujCBslmOQ5Q8UbPLjRU1%2F8ZLVuc7g9YfnhZbD4XKbzhz41fc%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 98d97c3539635690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/img/logo.svg","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"172.67.185.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upfion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 06:45:15 GMT","end":"Sun, 16 Nov 2025 07:42:54 GMT"},"fingerprint":{"sha1":"ED:0D:7D:52:B9:81:CB:24:42:30:EE:05:EA:B2:F8:4C:D5:A4:7D:C9","sha256":"DB:73:72:C9:AC:6A:DF:41:47:C0:36:7F:DD:8D:EF:4C:B3:17:D7:0E:3C:52:09:8D:2D:C6:3A:93:52:1A:63:88"}}},"request":{"raw":"GET /img/logo.svg HTTP/1.1\r\nHost: upfion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/eeu8hlL\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVBZ202cUxxb2Q2OHUreXAwMU1uOHc9PSIsInZhbHVlIjoiejJFUTdMYm1va1RUcm5TYlEzbWs5UjVKdUdDTk5mWmRUTWhWOUFybkk4ci9HbS9XOGxyS05oQzF4cEdCSnlJZ2E2QTM0R05QL1JzckNZOWg2SGo3YnU5V1BmM2FET2l4UExNa1dkOTZCVVpZWWN3YlE0dEg0b24vYVhyVE9ScGIiLCJtYWMiOiJlMGEyYzQ1ZmFhOTU3MzY3NTk3YTBmMTY2ZjVjMzNjYWE1ZGY0OTVlODUwYmI1OGYzNzA0ZWE0M2VhZGIyZTcwIiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6ImNxYi9WN0VYeEdpdWZ0VDBqMmlrb0E9PSIsInZhbHVlIjoiVFlTM3paQ2xzaFJrVjhXTUJTK2wyY2ovOWh2MzhVbCtFN1Jld2l4MFlrNlJ4NGdyWUV0dkgxZVczaUtmSGJSSFdCRTZOTWk0TkVxa2JkM2xMS1hPSUh0b0owdk92R05QZlJNcWtLU2wxTm9rYTc5ODRXV2dUUTMwcHdkcUQ2ZzIiLCJtYWMiOiJiMmFkMzE1ZmYwY2JhMjA2NWYwNDY5YzQzN2ViZDhkMjU0MGNjYWM3MWM4YjZmNWY0MThkMzcyMmJhODBjOGIxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 20:53:10 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Sat, 28 Sep 2024 07:01:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nage: 4557\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\netag: W/\"66f7a9b2-56e8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CInwN7NJ%2F1%2FVuZ5%2BqcYQBbFPEq0L0z43mPFU%2Bn9fYct4aqWcoEjMj82z%2BYblKM2lB5nB%2BMaZx7xAPAT%2FI2qNn4ESDh4t3DmU\"}]}\r\ncf-ray: 98d97c31edd5568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22248,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1e28749acbd90e7e99a883c1890327cd","sha1":"638b4525d3f0ed776db136ca1025a8961f46c9e0","sha256":"d526da1f4d4af45cefd2a0d140abec2beddc3150d13c47d3de893eaa278a369d","sha512":"eb6e6778841d6d33b0c7349ffc2107e97c00452bd55e804b4459931a557b20430630772da3a8b523f7053b252dd9e07f40bf7c1d47ecf1d5be18e96031412825","ssdeep":"384:SKoVBb8Z3DmFUMHhIPUufhR4QYoStQ2RwXJp7K3sgnoETp:iQDmzIHhR47oKQ2/fp","tlshash":"efa295eda752dde50e8f47c119616ad13f5be87e5f2503f4c099c7f03822ab84c96a82","first_seen":"2023-05-03T01:43:27Z","last_seen":"2026-05-07T04:45:14.578302Z","times_seen":1474,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.mastinstungmoreal.com/r/9cb58b5eb2422c8f734769e7cf0146cf/service.js","fqdn":"st.mastinstungmoreal.com","domain":"mastinstungmoreal.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastinstungmoreal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 00:15:48 GMT","end":"Mon, 24 Nov 2025 01:15:28 GMT"},"fingerprint":{"sha1":"67:EC:62:B9:D1:61:A8:6E:39:F9:BE:EF:BF:BE:89:4E:05:98:79:37","sha256":"AE:FD:E4:B1:E4:29:A8:BE:02:21:51:E5:8F:DC:3D:1F:07:B4:B9:6B:14:CB:C2:DD:CC:37:7D:E6:39:83:9D:58"}}},"request":{"raw":"GET /r/9cb58b5eb2422c8f734769e7cf0146cf/service.js HTTP/1.1\r\nHost: st.mastinstungmoreal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://upfion.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 12 Oct 2025 20:53:10 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 11 Apr 2022 19:57:13 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rQF0uCdOWChNUrJIRVWiNEjbWf6Hyo2vDE8Af2v%2BCz5KyzGY9%2B2vo0mmbV1%2B7ABz2GCOOZJ%2Bq9%2FODHNxQA0PikoikXCDUIpeGwkEGiA0X5o1GMPp%2BHY%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 98d97c3549665690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.mastinstungmoreal.com/r/9cb58b5eb2422c8f734769e7cf0146cf/service.js","fqdn":"st.mastinstungmoreal.com","domain":"mastinstungmoreal.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastinstungmoreal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 00:15:48 GMT","end":"Mon, 24 Nov 2025 01:15:28 GMT"},"fingerprint":{"sha1":"67:EC:62:B9:D1:61:A8:6E:39:F9:BE:EF:BF:BE:89:4E:05:98:79:37","sha256":"AE:FD:E4:B1:E4:29:A8:BE:02:21:51:E5:8F:DC:3D:1F:07:B4:B9:6B:14:CB:C2:DD:CC:37:7D:E6:39:83:9D:58"}}},"request":{"raw":"GET /r/9cb58b5eb2422c8f734769e7cf0146cf/service.js HTTP/1.1\r\nHost: st.mastinstungmoreal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://upfion.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 12 Oct 2025 20:53:10 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 11 Apr 2022 19:57:13 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4l2%2BVCLiN%2FMkwJimFm1vmIkPkUz2DtvDy2i3TKt5TEwJ4Wdl7cqkok6uCOK62SMCXQUKB9qklq3Zw%2BzRYVHkPGTosH4A6fs9v6oIUIEe4tue8E6wA5w%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 98d97c35496b5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.mastinstungmoreal.com/r/9cb58b5eb2422c8f734769e7cf0146cf/service.js","fqdn":"st.mastinstungmoreal.com","domain":"mastinstungmoreal.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastinstungmoreal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 00:15:48 GMT","end":"Mon, 24 Nov 2025 01:15:28 GMT"},"fingerprint":{"sha1":"67:EC:62:B9:D1:61:A8:6E:39:F9:BE:EF:BF:BE:89:4E:05:98:79:37","sha256":"AE:FD:E4:B1:E4:29:A8:BE:02:21:51:E5:8F:DC:3D:1F:07:B4:B9:6B:14:CB:C2:DD:CC:37:7D:E6:39:83:9D:58"}}},"request":{"raw":"GET /r/9cb58b5eb2422c8f734769e7cf0146cf/service.js HTTP/1.1\r\nHost: st.mastinstungmoreal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://upfion.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 12 Oct 2025 20:53:10 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 11 Apr 2022 19:57:13 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eyGYyAhjrNhksYUg2jtYhT2XklvmQb6%2BdWykXTLbVB24TkKKvIeI0ECIAvrv4Cegp%2Fa5SD1jl6F4j9ddKlwaV20oUj9jvVcxW9r6TN8Ooewwlwd0%2FbE%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 98d97c35496f5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagead2.googlesyndication.com/pagead/js/adsbygoogle.js","fqdn":"pagead2.googlesyndication.com","domain":"googlesyndication.com","tld":"com"},"ip":{"addr":"216.58.207.194","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:12.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.doubleclick.net","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"57:4F:37:52:35:3F:6C:48:14:D9:58:C8:25:71:FC:8E:BA:C6:9D:D7","sha256":"12:75:2E:3D:26:85:EA:B7:93:6B:DE:18:A4:AB:5B:9E:10:E7:92:FC:4E:D9:FD:CA:D3:1C:9D:72:D0:73:84:3A"}}},"request":{"raw":"HEAD /pagead/js/adsbygoogle.js HTTP/1.1\r\nHost: pagead2.googlesyndication.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://upfion.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nlink: \u003chttps://googleads.g.doubleclick.net\u003e; rel=\"preconnect\"; crossorigin\r\nvary: Accept-Encoding\r\ndate: Sun, 12 Oct 2025 20:53:12 GMT\r\nexpires: Sun, 12 Oct 2025 20:53:12 GMT\r\ncache-control: private, max-age=3600, stale-while-revalidate=3600\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: 7914852822591587846\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 54261\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/css/frontend.css?id=d2ff22fb187252e60fbb","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"172.67.185.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upfion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 06:45:15 GMT","end":"Sun, 16 Nov 2025 07:42:54 GMT"},"fingerprint":{"sha1":"ED:0D:7D:52:B9:81:CB:24:42:30:EE:05:EA:B2:F8:4C:D5:A4:7D:C9","sha256":"DB:73:72:C9:AC:6A:DF:41:47:C0:36:7F:DD:8D:EF:4C:B3:17:D7:0E:3C:52:09:8D:2D:C6:3A:93:52:1A:63:88"}}},"request":{"raw":"GET /css/frontend.css?id=d2ff22fb187252e60fbb HTTP/1.1\r\nHost: upfion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/eeu8hlL\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVBZ202cUxxb2Q2OHUreXAwMU1uOHc9PSIsInZhbHVlIjoiejJFUTdMYm1va1RUcm5TYlEzbWs5UjVKdUdDTk5mWmRUTWhWOUFybkk4ci9HbS9XOGxyS05oQzF4cEdCSnlJZ2E2QTM0R05QL1JzckNZOWg2SGo3YnU5V1BmM2FET2l4UExNa1dkOTZCVVpZWWN3YlE0dEg0b24vYVhyVE9ScGIiLCJtYWMiOiJlMGEyYzQ1ZmFhOTU3MzY3NTk3YTBmMTY2ZjVjMzNjYWE1ZGY0OTVlODUwYmI1OGYzNzA0ZWE0M2VhZGIyZTcwIiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6ImNxYi9WN0VYeEdpdWZ0VDBqMmlrb0E9PSIsInZhbHVlIjoiVFlTM3paQ2xzaFJrVjhXTUJTK2wyY2ovOWh2MzhVbCtFN1Jld2l4MFlrNlJ4NGdyWUV0dkgxZVczaUtmSGJSSFdCRTZOTWk0TkVxa2JkM2xMS1hPSUh0b0owdk92R05QZlJNcWtLU2wxTm9rYTc5ODRXV2dUUTMwcHdkcUQ2ZzIiLCJtYWMiOiJiMmFkMzE1ZmYwY2JhMjA2NWYwNDY5YzQzN2ViZDhkMjU0MGNjYWM3MWM4YjZmNWY0MThkMzcyMmJhODBjOGIxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 20:53:10 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Jz1SngKPQXsPJCE1i5tvACracETDi%2Fmvk4d8SmukbT%2FFhpOAym7desufPNpoPw5hmQrVrfl4hs4rNRCaMMi8Uk0DVqhuOVB\"}]}\r\nlast-modified: Sun, 29 Sep 2024 07:44:34 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nage: 1288\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\netag: W/\"66f90562-3f92a\"\r\ncf-ray: 98d97c31edd4568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":260394,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59910)","md5":"d2ff22fb187252e60fbb52e57a64d23a","sha1":"2272fb2bcae1f21a225a487975a976f631cc34e6","sha256":"f72739ecbc1c32fa446c33a271c8eb262503e62e2f38d230ab29518a88871643","sha512":"616f4be209693c1922715032ef406bfc5d63775a770c7ae543778c46c5f158abf914eb55d0e124112b05c5b16be4b734d2b3e958a8aa5e2626ac3da03484020f","ssdeep":"6144:hPx0yFTO0PY5pje60I4P1YAFcf61WyTqvAt:NOyFTSM1qZAt","tlshash":"ba4484e6f14420d9b777c50bab81bbbc157af619d2424e6af00b2f6c8ac13d60592f5c","first_seen":"2024-07-24T00:00:42Z","last_seen":"2025-12-06T07:16:32.073849Z","times_seen":250,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/img/plane.svg","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"172.67.185.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upfion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 06:45:15 GMT","end":"Sun, 16 Nov 2025 07:42:54 GMT"},"fingerprint":{"sha1":"ED:0D:7D:52:B9:81:CB:24:42:30:EE:05:EA:B2:F8:4C:D5:A4:7D:C9","sha256":"DB:73:72:C9:AC:6A:DF:41:47:C0:36:7F:DD:8D:EF:4C:B3:17:D7:0E:3C:52:09:8D:2D:C6:3A:93:52:1A:63:88"}}},"request":{"raw":"GET /img/plane.svg HTTP/1.1\r\nHost: upfion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/eeu8hlL\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVBZ202cUxxb2Q2OHUreXAwMU1uOHc9PSIsInZhbHVlIjoiejJFUTdMYm1va1RUcm5TYlEzbWs5UjVKdUdDTk5mWmRUTWhWOUFybkk4ci9HbS9XOGxyS05oQzF4cEdCSnlJZ2E2QTM0R05QL1JzckNZOWg2SGo3YnU5V1BmM2FET2l4UExNa1dkOTZCVVpZWWN3YlE0dEg0b24vYVhyVE9ScGIiLCJtYWMiOiJlMGEyYzQ1ZmFhOTU3MzY3NTk3YTBmMTY2ZjVjMzNjYWE1ZGY0OTVlODUwYmI1OGYzNzA0ZWE0M2VhZGIyZTcwIiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6ImNxYi9WN0VYeEdpdWZ0VDBqMmlrb0E9PSIsInZhbHVlIjoiVFlTM3paQ2xzaFJrVjhXTUJTK2wyY2ovOWh2MzhVbCtFN1Jld2l4MFlrNlJ4NGdyWUV0dkgxZVczaUtmSGJSSFdCRTZOTWk0TkVxa2JkM2xMS1hPSUh0b0owdk92R05QZlJNcWtLU2wxTm9rYTc5ODRXV2dUUTMwcHdkcUQ2ZzIiLCJtYWMiOiJiMmFkMzE1ZmYwY2JhMjA2NWYwNDY5YzQzN2ViZDhkMjU0MGNjYWM3MWM4YjZmNWY0MThkMzcyMmJhODBjOGIxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 20:53:10 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Sat, 28 Sep 2024 07:01:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nage: 4557\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\netag: W/\"66f7a9b2-2ac\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V8goWvmCEaLvWPr0IEh7byNL8iBwtsfcK%2Fb4A7mPN%2FbPP8TjsY1H81Yrq6aC8yBjIuwJG%2BdODqauOM0TylbgwPOr4ax2UORg\"}]}\r\ncf-ray: 98d97c31fdd8568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":684,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4f25968fc51a5e49dc1ea503d5d60e38","sha1":"4221937e757eb15329dbc318092c9058044c5f73","sha256":"d454583aa343d4c8aa4e42c0876b20e60c20c0b89284e4ef0c662d0426c18254","sha512":"78b392f17a56d3fca46875ac6ee6ce0374381edd94b0f15afdcfab8754586d627bce98f5b68aa5b33e4f329f5454cb737f119573affc8c74f8e0a7a52f07ce09","ssdeep":"","tlshash":"d701fef0b368d1d451c46b649f67b932866b38f70b8dd05581c2a940f02c6cb8d409e4","first_seen":"2023-05-07T16:40:31Z","last_seen":"2026-05-07T04:45:14.564425Z","times_seen":702,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-197252557-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtag/js?id=UA-197252557-1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 12 Oct 2025 20:53:10 GMT\r\nexpires: Sun, 12 Oct 2025 20:53:10 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 12 Oct 2025 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 108970\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":312680,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"e89efe7444746998431ae95066851afa","sha1":"0c844cae211d50be096a39d4795a0620b8bb7ba0","sha256":"f6d8db824d6fa774df532eac9db8ab63192dc8fe340ae3dfe4996fb64e994b0c","sha512":"f6d417bc33dcbbed2e1e90cec5541040a8f6ecbd6227de753d1241b6d5b0d4c39dba3703c30280f035776f8fcde6cbc21221c71dd16b0c4526699a66d7a436a2","ssdeep":"3072:Z/Vwpcam+So4ypmh06s6VIkDcajIu1yeZGbQU4vT8JWNjxW55204O/XpAmCRstCI:Gc/ypm0hk0uwb7ngNju5204OKtEbkbC","tlshash":"546408cd77d674228393a478503f018bb17b68d2f84cc899e186d9e52e70a9a4277f3d","first_seen":"2025-10-12T09:15:55.969315Z","last_seen":"2025-10-12T20:53:35.559002Z","times_seen":2,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":104,"dns":0,"connect":21,"send":0,"wait":29,"receive":21,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bvtpk.com/tag.min.js","fqdn":"bvtpk.com","domain":"bvtpk.com","tld":"com"},"ip":{"addr":"172.67.154.171","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bvtpk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 16:15:33 GMT","end":"Mon, 08 Dec 2025 17:13:51 GMT"},"fingerprint":{"sha1":"57:53:1B:12:8D:B5:A7:B6:96:E2:B4:FE:90:A1:D8:FA:24:94:9A:B9","sha256":"4E:2A:10:4F:06:F6:4E:34:B3:5A:E6:9B:A2:C7:FC:B2:A4:7D:55:44:3D:06:2B:38:35:A7:52:1D:F2:4E:80:5E"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: bvtpk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Oct 2025 20:53:10 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-trace-id: 2a74e33d39e86ca70abf3cf1f72471c3\r\ncache-control: public, max-age=600, s-maxage=1800\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 561\r\ncf-cache-status: HIT\r\nlast-modified: Sun, 12 Oct 2025 20:43:48 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MANXX%2BVZ7WJFM%2BPBU8LvWnMQ3mzBwfgF3%2FUg63QeXCKke7%2B0gjcNhqAUtbMPnR0hNOl2HSbzzMsednuadB%2FjTeoWYlIDGvQ%3D\"}]}\r\ncf-ray: 98d97c354d6e56ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109923,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"99ed14845d523486e83b412ebc56c503","sha1":"695728f7aceac2eb849bd77befe207a36daec956","sha256":"ac81dafc8972f87ebeb69de37db97085ef1c0955ff2a93c52c5f626bdcafb556","sha512":"6b50263ede737927c66723bc661e9913ba211b47c2a7f8985d6d16a021f71db997ae2f31005bb59de3daf0553b6776c76bb8c619eaa4ce59867d7060d7de4f91","ssdeep":"1536:I8zmHlk4JQ9aO4kD9VaZ06GUqo54Az0SBYQ4+DIVV3BWw:jzsJkaO44I06GUb0S6z3xWw","tlshash":"feb33bc6226a241612bf8034445bed0eb5aecd8104cdcdb8e1e5b8662d78b16d3f7fd9","first_seen":"2025-10-08T18:57:46.63277Z","last_seen":"2025-10-13T11:28:33.058992Z","times_seen":93,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":193,"dns":38,"connect":1,"send":0,"wait":7,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.mastinstungmoreal.com/static/9cb58b5eb2422c8f734769e7cf0146cf.min.js?1760302390410","fqdn":"st.mastinstungmoreal.com","domain":"mastinstungmoreal.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastinstungmoreal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 00:15:48 GMT","end":"Mon, 24 Nov 2025 01:15:28 GMT"},"fingerprint":{"sha1":"67:EC:62:B9:D1:61:A8:6E:39:F9:BE:EF:BF:BE:89:4E:05:98:79:37","sha256":"AE:FD:E4:B1:E4:29:A8:BE:02:21:51:E5:8F:DC:3D:1F:07:B4:B9:6B:14:CB:C2:DD:CC:37:7D:E6:39:83:9D:58"}}},"request":{"raw":"GET /static/9cb58b5eb2422c8f734769e7cf0146cf.min.js?1760302390410 HTTP/1.1\r\nHost: st.mastinstungmoreal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 12 Oct 2025 20:53:10 GMT\r\nlocation: https://st.mastinstungmoreal.com/r/9cb58b5eb2422c8f734769e7cf0146cf/service.js\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hyZ8Ta5eZiuFdrGPemoFzVWa3DsGBMa6BpBou%2FmZXbYyqj2Rj%2FVSSTFRx9kGyJQNcVcLTa6C0MXgN%2FdAf4Aa64fZnbuwev3roL2%2BC5sb8%2Bu3wyU1yfU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98d97c35193e5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":144,"dns":13,"connect":1,"send":0,"wait":4,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orbsdiacle.com/1clkn/34742","fqdn":"orbsdiacle.com","domain":"orbsdiacle.com","tld":"com"},"ip":{"addr":"172.241.53.164","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"orbsdiacle.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 01:52:47 GMT","end":"Fri, 02 Jan 2026 01:52:46 GMT"},"fingerprint":{"sha1":"06:C6:C0:08:5E:38:74:FA:8E:21:5E:EB:8F:CF:83:D5:B2:4E:7A:C3","sha256":"56:3B:E5:AF:9C:FF:D3:4E:AB:F9:9B:75:F5:13:92:DE:D3:30:76:32:47:9A:BA:99:BA:98:0D:E9:C9:3A:82:15"}}},"request":{"raw":"GET /1clkn/34742 HTTP/1.1\r\nHost: orbsdiacle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 12 Oct 2025 20:53:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list\r\nset-cookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; expires=Mon, 13-Oct-2025 20:53:10 GMT; Max-Age=86400; path=/; secure; SameSite=None\nGL_GI10=eJwVyE0KglAUhmHvSYxIig8kaOakqWip4ExynBItIMQihItHrtrfphq2i7YRzVtANngHz6tpGllTUFnDjDwnch1%2F6XiBD3ECpRmoqGCkrC75DUKB3BVIVRhnjWQ74a5q%2B19A%2FxuixGQty6u9Y9m1JVcNqG%2BUsKpZ5e0RojYEqGWDQM3B0iDOxgwkczPefN%2BDx%2FPTg814cd%2FOX8M9qG6gu0EY%2FgCi5ymX; expires=Mon, 13-Oct-2025 20:53:10 GMT; Max-Age=86400; path=/; secure; SameSite=None\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"9082dc37e5e8046929da411544ad071a","sha1":"41e0e3963ed94e59e8a2f115994c382712411537","sha256":"b7848d86edc8dc3b5bc6a5c666069f9a31e000cee51575d3b6083951607e1550","sha512":"8c7a47aba28936b7fb4083892dfc8643afe90452d6cc789f5f8562ebeb253000ba0dc23f35af988b9288afa32d701fd8c3e95f9b0966f3789dc269f393f6b039","ssdeep":"","tlshash":"714000000000000000000000f00000000000000000000c00c000000000000000000000","first_seen":"2023-03-07T01:03:04Z","last_seen":"2026-05-09T15:52:32.588337Z","times_seen":16045,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":107,"dns":68,"connect":22,"send":0,"wait":26,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"orbsdiacle.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"orbsdiacle.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/js/ads.js","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"172.67.185.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upfion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 06:45:15 GMT","end":"Sun, 16 Nov 2025 07:42:54 GMT"},"fingerprint":{"sha1":"ED:0D:7D:52:B9:81:CB:24:42:30:EE:05:EA:B2:F8:4C:D5:A4:7D:C9","sha256":"DB:73:72:C9:AC:6A:DF:41:47:C0:36:7F:DD:8D:EF:4C:B3:17:D7:0E:3C:52:09:8D:2D:C6:3A:93:52:1A:63:88"}}},"request":{"raw":"GET /js/ads.js HTTP/1.1\r\nHost: upfion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/eeu8hlL\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVBZ202cUxxb2Q2OHUreXAwMU1uOHc9PSIsInZhbHVlIjoiejJFUTdMYm1va1RUcm5TYlEzbWs5UjVKdUdDTk5mWmRUTWhWOUFybkk4ci9HbS9XOGxyS05oQzF4cEdCSnlJZ2E2QTM0R05QL1JzckNZOWg2SGo3YnU5V1BmM2FET2l4UExNa1dkOTZCVVpZWWN3YlE0dEg0b24vYVhyVE9ScGIiLCJtYWMiOiJlMGEyYzQ1ZmFhOTU3MzY3NTk3YTBmMTY2ZjVjMzNjYWE1ZGY0OTVlODUwYmI1OGYzNzA0ZWE0M2VhZGIyZTcwIiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6ImNxYi9WN0VYeEdpdWZ0VDBqMmlrb0E9PSIsInZhbHVlIjoiVFlTM3paQ2xzaFJrVjhXTUJTK2wyY2ovOWh2MzhVbCtFN1Jld2l4MFlrNlJ4NGdyWUV0dkgxZVczaUtmSGJSSFdCRTZOTWk0TkVxa2JkM2xMS1hPSUh0b0owdk92R05QZlJNcWtLU2wxTm9rYTc5ODRXV2dUUTMwcHdkcUQ2ZzIiLCJtYWMiOiJiMmFkMzE1ZmYwY2JhMjA2NWYwNDY5YzQzN2ViZDhkMjU0MGNjYWM3MWM4YjZmNWY0MThkMzcyMmJhODBjOGIxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 20:53:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XEl1T%2F%2B01cK10q2ub4aaljegc64En%2B8unT6THrnqTtDVlobmzt%2FOEwabPbZvHoVAo8HgJoDKUg94GJTvjMM9nG5QEP99oSsn\"}]}\r\nlast-modified: Thu, 28 Nov 2024 12:18:07 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nage: 4557\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\netag: W/\"67485f7f-5db\"\r\ncf-ray: 98d97c31fdd9568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1499,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1499), with no line terminators","md5":"cfda8d31536e90428f6d37f17590d92d","sha1":"c161162410c27db721479da020406e9e56a8b851","sha256":"d92d2a6719b8462f29f2c9dc8f7c84be379feb798fdcc85ddade83fbb8fb2a45","sha512":"97739f1e2dfcf12521374f3efae56d7e24b6e8010b4bda3046e44088d2b690603c40a2c2a0431034f426d9337b6181969f3aa74f2c5d8ce093e1e9856f7cf2ce","ssdeep":"","tlshash":"1a31cb582ea0aab8334303d6772f64d8f532dd5628b28d0cd021ee95fc08a34d5abe31","first_seen":"2024-11-30T23:21:10.233947Z","last_seen":"2026-03-04T04:55:38.593842Z","times_seen":263,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gpp.netpub.media/init.js","fqdn":"gpp.netpub.media","domain":"netpub.media","tld":"media"},"ip":{"addr":"104.20.41.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netpub.media","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 19:26:51 GMT","end":"Fri, 21 Nov 2025 20:26:45 GMT"},"fingerprint":{"sha1":"25:EA:05:A4:29:84:F0:D3:CF:23:A4:98:07:38:96:F8:5F:05:E8:8A","sha256":"6D:8D:BB:BD:B1:BC:BF:10:36:D6:BB:D6:96:5E:3C:61:E9:7D:14:F3:5E:BA:BE:17:CE:61:62:6F:C7:DE:FF:CE"}}},"request":{"raw":"GET /init.js HTTP/1.1\r\nHost: gpp.netpub.media\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://upfion.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Oct 2025 20:53:10 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 08 Dec 2024 00:36:50 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 98d97c32bf04b517-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":739,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"aaee79c1ad6d5d6ce8c18aa000285386","sha1":"3c20aa1526d0d2a123a665e563b3b7427b3b33cb","sha256":"078ca4194bef5fc3c8e4c9e79f0f65254c1bf602d7c8ad4d589a60052a618074","sha512":"9415b9f072a43326e66ba9d437e389efa95260e8ae7c7cd062716c82c2d28de1527d4e1a1144aa8ce395536da1391373007c8c7ac768126b8d29c26fb2f3a39c","ssdeep":"","tlshash":"c301492d9d90e5394136236f5b76d2c8fe70102bb412a50bb49dd9082f30ed90ad4dd1","first_seen":"2024-12-11T18:21:45.151305Z","last_seen":"2026-05-09T13:38:38.38952Z","times_seen":1862,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://upfion.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 07 Oct 2025 23:36:02 GMT\r\nexpires: Wed, 07 Oct 2026 23:36:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 422228\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-05-09T15:33:37.192114Z","times_seen":172253,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":17,"connect":21,"send":0,"wait":8,"receive":2,"ssl":145},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gpp.netpub.media/17603023905440.5268106866988157/run.js?v=17603023905440.5268106866988157","fqdn":"gpp.netpub.media","domain":"netpub.media","tld":"media"},"ip":{"addr":"104.20.41.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netpub.media","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 19:26:51 GMT","end":"Fri, 21 Nov 2025 20:26:45 GMT"},"fingerprint":{"sha1":"25:EA:05:A4:29:84:F0:D3:CF:23:A4:98:07:38:96:F8:5F:05:E8:8A","sha256":"6D:8D:BB:BD:B1:BC:BF:10:36:D6:BB:D6:96:5E:3C:61:E9:7D:14:F3:5E:BA:BE:17:CE:61:62:6F:C7:DE:FF:CE"}}},"request":{"raw":"GET /17603023905440.5268106866988157/run.js?v=17603023905440.5268106866988157 HTTP/1.1\r\nHost: gpp.netpub.media\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Oct 2025 20:53:10 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 21 Feb 2024 16:05:00 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: BYPASS\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 98d97c34f921b517-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":251,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"54f643b0fa8a7d71cb117679a6fbb2ce","sha1":"573d440c0f9fa4cf53e85cf86a86eba173933a1c","sha256":"851d2ece063bcac9a5addec55308a32557f978d2daf3950395fc3dc41e9e9336","sha512":"35a57a6a05d467bc1326d4171220562c440e2834f6a01878246bf951659100efcc40f8f63609ee594251f20f494f4d8f9230bf476dc3897c0334494e7e7b1424","ssdeep":"","tlshash":"e6d05e5ca72a29942c3272b55baf2614a13b242310828a043b0c49c00fbb956c189eec","first_seen":"2024-02-21T20:01:38Z","last_seen":"2026-05-09T13:38:38.436979Z","times_seen":2517,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.mastinstungmoreal.com/r/9cb58b5eb2422c8f734769e7cf0146cf/service.js","fqdn":"st.mastinstungmoreal.com","domain":"mastinstungmoreal.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastinstungmoreal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 00:15:48 GMT","end":"Mon, 24 Nov 2025 01:15:28 GMT"},"fingerprint":{"sha1":"67:EC:62:B9:D1:61:A8:6E:39:F9:BE:EF:BF:BE:89:4E:05:98:79:37","sha256":"AE:FD:E4:B1:E4:29:A8:BE:02:21:51:E5:8F:DC:3D:1F:07:B4:B9:6B:14:CB:C2:DD:CC:37:7D:E6:39:83:9D:58"}}},"request":{"raw":"GET /r/9cb58b5eb2422c8f734769e7cf0146cf/service.js HTTP/1.1\r\nHost: st.mastinstungmoreal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://upfion.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 12 Oct 2025 20:53:10 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 11 Apr 2022 19:57:13 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oI9lPge8X47cuB%2BhAlJrCc3zttHch0%2B3x8y%2BXrDz9THDAmsS5SCarb%2BuVqhetcmOXBqvxB4A%2B2rL1bqPe8hEoMdxaw1pbgxSU3D7MGdWZ%2Bk8716qRss%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 98d97c35395a5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/img/faqs-image.svg","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"172.67.185.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upfion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 06:45:15 GMT","end":"Sun, 16 Nov 2025 07:42:54 GMT"},"fingerprint":{"sha1":"ED:0D:7D:52:B9:81:CB:24:42:30:EE:05:EA:B2:F8:4C:D5:A4:7D:C9","sha256":"DB:73:72:C9:AC:6A:DF:41:47:C0:36:7F:DD:8D:EF:4C:B3:17:D7:0E:3C:52:09:8D:2D:C6:3A:93:52:1A:63:88"}}},"request":{"raw":"GET /img/faqs-image.svg HTTP/1.1\r\nHost: upfion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/eeu8hlL\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVBZ202cUxxb2Q2OHUreXAwMU1uOHc9PSIsInZhbHVlIjoiejJFUTdMYm1va1RUcm5TYlEzbWs5UjVKdUdDTk5mWmRUTWhWOUFybkk4ci9HbS9XOGxyS05oQzF4cEdCSnlJZ2E2QTM0R05QL1JzckNZOWg2SGo3YnU5V1BmM2FET2l4UExNa1dkOTZCVVpZWWN3YlE0dEg0b24vYVhyVE9ScGIiLCJtYWMiOiJlMGEyYzQ1ZmFhOTU3MzY3NTk3YTBmMTY2ZjVjMzNjYWE1ZGY0OTVlODUwYmI1OGYzNzA0ZWE0M2VhZGIyZTcwIiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6ImNxYi9WN0VYeEdpdWZ0VDBqMmlrb0E9PSIsInZhbHVlIjoiVFlTM3paQ2xzaFJrVjhXTUJTK2wyY2ovOWh2MzhVbCtFN1Jld2l4MFlrNlJ4NGdyWUV0dkgxZVczaUtmSGJSSFdCRTZOTWk0TkVxa2JkM2xMS1hPSUh0b0owdk92R05QZlJNcWtLU2wxTm9rYTc5ODRXV2dUUTMwcHdkcUQ2ZzIiLCJtYWMiOiJiMmFkMzE1ZmYwY2JhMjA2NWYwNDY5YzQzN2ViZDhkMjU0MGNjYWM3MWM4YjZmNWY0MThkMzcyMmJhODBjOGIxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 20:53:10 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Sat, 28 Sep 2024 07:01:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nage: 4557\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\netag: W/\"66f7a9b2-95fb\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3aWbXYRLKRLVRbcKO%2FKDEFfPo9Vb3xiBvchzUMTVliAZ%2BSWj88XpuO2I0hDBm4TePSLR50lIhtR6zy1KyU0433CIXHIDotM7\"}]}\r\ncf-ray: 98d97c31edd7568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38395,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a60b7216905928c625ae9592044476cd","sha1":"e70c5be728c7bd1198100337487aafe126834ca3","sha256":"9a717285429d468fadc4d25179fc6feb49e6335f3af1675fb6be1cb50e7e8322","sha512":"7ad55a995e2eb24a0a01c4e23eb289b58278ef50c288e8fbed537621e7d50937479a0a6a9243fedf266c22368745326998bab4dfc8bf4f11ab37a16440e41a30","ssdeep":"768:xCytqG2ELo5kwY1slCtWbtjsDEUse3FxB5ggzVL+SYbobbo51+M:x3t6V0ltUsDVTFxf6+M","tlshash":"e40362dc3bb01ceca9d88bdbff0271bc282355b389558608c5295b7c148592dad7bed2","first_seen":"2023-05-03T01:43:27Z","last_seen":"2026-05-07T04:45:14.582337Z","times_seen":1324,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://upfion.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Oct 2025 12:56:02 GMT\r\nexpires: Fri, 09 Oct 2026 12:56:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 287828\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-09T15:22:38.78062Z","times_seen":805665,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":152,"dns":5,"connect":21,"send":0,"wait":10,"receive":2,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://upfion.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20408\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Oct 2025 12:57:40 GMT\r\nexpires: Fri, 09 Oct 2026 12:57:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 287730\r\nlast-modified: Mon, 08 Sep 2025 18:08:08 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20408,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20408, version 1.0","md5":"e8730678d4610fa908d3cba1ef0b4ddf","sha1":"1efcbee909ce74bf04878d74867f12a1e41ae7a4","sha256":"e921785496ed2d98c2257c88a6f838afa6acbee05cb8467048501bfe2a301461","sha512":"d7c3f81ad11ac5b3e6f454fbbb9be0940b3e8da93cde0b80f9a91a8259966be466b4d6a0fd5527fcc6c8f218aad8ffd0124bb29dfa08f6ca658ce49fe9e37e6c","ssdeep":"384:D+h1xN53scre+kLtT5+wpcR98ffVvdSMyNaHAUvLFNPBtn2aotFn9mTCAKDi055c:Ss/XRT5+wpM98ffxd6uZZRXnemWDj5WL","tlshash":"fa92d1cdfc0e5797a8e14ee93c0a7a4dd76f438af366a94b25e66122e67a55c040320c","first_seen":"2025-01-09T02:30:28.977279Z","last_seen":"2026-05-09T15:13:16.694534Z","times_seen":57520,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":9,"dns":13,"connect":15,"send":0,"wait":13,"receive":1,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://upfion.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 07 Oct 2025 23:36:02 GMT\r\nexpires: Wed, 07 Oct 2026 23:36:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 422228\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-05-09T15:33:37.192114Z","times_seen":172253,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":119,"dns":0,"connect":0,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.mastinstungmoreal.com/r/9cb58b5eb2422c8f734769e7cf0146cf/service.js","fqdn":"st.mastinstungmoreal.com","domain":"mastinstungmoreal.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastinstungmoreal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 00:15:48 GMT","end":"Mon, 24 Nov 2025 01:15:28 GMT"},"fingerprint":{"sha1":"67:EC:62:B9:D1:61:A8:6E:39:F9:BE:EF:BF:BE:89:4E:05:98:79:37","sha256":"AE:FD:E4:B1:E4:29:A8:BE:02:21:51:E5:8F:DC:3D:1F:07:B4:B9:6B:14:CB:C2:DD:CC:37:7D:E6:39:83:9D:58"}}},"request":{"raw":"GET /r/9cb58b5eb2422c8f734769e7cf0146cf/service.js HTTP/1.1\r\nHost: st.mastinstungmoreal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://upfion.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 12 Oct 2025 20:53:11 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 11 Apr 2022 19:57:13 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lc%2FjH2JpYjc0%2BR5SdTiHeddMIL%2FsizlST2WwOsNAJAUnRziuQYH8UcVl8VlSz%2B%2FGn%2BbZ6ciMGQvMfLCwFW%2BMfCvo1JcMY4jQzOBHLr5hctLFswa%2BKqg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 98d97c379844b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/eeu8hlL?token=eyJpdiI6IkYzMll3R3BwK0pFbU4zdmJaNWF6RGc9PSIsInZhbHVlIjoiNnoyRlkvYUpoVmpVQ2JrbSs0SlFEZz09IiwibWFjIjoiZDFhODgzNWIyYmExZGM4OWNjNmUwMWM4ODcxMmRiMzg0ZDg5NGQzNTNjZTdiZjhiMzgxM2E1NjlkMmI5OTNjMiIsInRhZyI6IiJ9","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"172.67.185.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-12T20:53:07.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upfion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 06:45:15 GMT","end":"Sun, 16 Nov 2025 07:42:54 GMT"},"fingerprint":{"sha1":"ED:0D:7D:52:B9:81:CB:24:42:30:EE:05:EA:B2:F8:4C:D5:A4:7D:C9","sha256":"DB:73:72:C9:AC:6A:DF:41:47:C0:36:7F:DD:8D:EF:4C:B3:17:D7:0E:3C:52:09:8D:2D:C6:3A:93:52:1A:63:88"}}},"request":{"raw":"GET /eeu8hlL?token=eyJpdiI6IkYzMll3R3BwK0pFbU4zdmJaNWF6RGc9PSIsInZhbHVlIjoiNnoyRlkvYUpoVmpVQ2JrbSs0SlFEZz09IiwibWFjIjoiZDFhODgzNWIyYmExZGM4OWNjNmUwMWM4ODcxMmRiMzg0ZDg5NGQzNTNjZTdiZjhiMzgxM2E1NjlkMmI5OTNjMiIsInRhZyI6IiJ9 HTTP/1.1\r\nHost: upfion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 12 Oct 2025 20:53:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://upfion.com/eeu8hlL\r\nserver: cloudflare\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BeB9G5yBtFOuAUAYqFQxXPn9BG2HtZx0SBjssn3U%2BKqiz7K7ZnP9Hf671obHcVrU7oHx67BDQo2dAtdJVsm%2FboIFG%2B5226re\"}]}\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Im1nanJpcTI1cGh0TXk1L3QrL1ZrUmc9PSIsInZhbHVlIjoiQjRHdVduSHpjWTN3cldIUERjUkdnRU1qVklad0MxSXY4QXVMRnVhaEpDYkFzZzVCWFcxQUJzcStMWHRTSHE2cGRKRDRpY1VPRVNWeEhBQmlPYmpsdzZFVDh4UTVheVNrcUJLVXNVY2VOSEl6UTVQTDVBVUVhSEprVFd5d1ljbHUiLCJtYWMiOiIwODE2NzllNzFkYjc0YjkyOGFmMjMxNjdlMzllYWU1OGQwYTZjYWQ5NjQyMTBlYmJlMDhmODllYWNlNWZjYTZjIiwidGFnIjoiIn0%3D; SameSite=Lax; Path=/; Max-Age=604800; Expires=Sun, 19 Oct 2025 20:53:08 GMT\nupfiles_session=eyJpdiI6IkFHczJ3TFdINFhlSjZBanRoN0crcnc9PSIsInZhbHVlIjoiS21wYXlJUEU5RTNrMzBUeS81UnVoQ2dKZEFDbytCQnRmNzBSWnE1dHR3WkNCTm4rNW1ESWVqQzNVWCtoVThLK2ZldDNaWHNVUVAxTzRjVWdHYkdjdnRkOFhyOXBCK3c4RHRvYWdhSVoxL3NneEdDaTN5NGRta2JjNmluNHVHczEiLCJtYWMiOiJkYzkzMGQ2MzI3ZGNjM2E4YzhiN2I0ZmM5ZDE0OTk3MmI3MzdjZDA3NDBkMGY1ZDcxYWI5YzNhOGU5ZjI4YmE2IiwidGFnIjoiIn0%3D; HttpOnly; SameSite=Lax; Path=/; Max-Age=604800; Expires=Sun, 19 Oct 2025 20:53:08 GMT\r\ncf-ray: 98d97c222a100b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28779,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":1559,"timings":{"blocked":75,"dns":22,"connect":1,"send":0,"wait":1409,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/js/frontend.js?id=a9ead52fa97a2708e6e9","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"172.67.185.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upfion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 06:45:15 GMT","end":"Sun, 16 Nov 2025 07:42:54 GMT"},"fingerprint":{"sha1":"ED:0D:7D:52:B9:81:CB:24:42:30:EE:05:EA:B2:F8:4C:D5:A4:7D:C9","sha256":"DB:73:72:C9:AC:6A:DF:41:47:C0:36:7F:DD:8D:EF:4C:B3:17:D7:0E:3C:52:09:8D:2D:C6:3A:93:52:1A:63:88"}}},"request":{"raw":"GET /js/frontend.js?id=a9ead52fa97a2708e6e9 HTTP/1.1\r\nHost: upfion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/eeu8hlL\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVBZ202cUxxb2Q2OHUreXAwMU1uOHc9PSIsInZhbHVlIjoiejJFUTdMYm1va1RUcm5TYlEzbWs5UjVKdUdDTk5mWmRUTWhWOUFybkk4ci9HbS9XOGxyS05oQzF4cEdCSnlJZ2E2QTM0R05QL1JzckNZOWg2SGo3YnU5V1BmM2FET2l4UExNa1dkOTZCVVpZWWN3YlE0dEg0b24vYVhyVE9ScGIiLCJtYWMiOiJlMGEyYzQ1ZmFhOTU3MzY3NTk3YTBmMTY2ZjVjMzNjYWE1ZGY0OTVlODUwYmI1OGYzNzA0ZWE0M2VhZGIyZTcwIiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6ImNxYi9WN0VYeEdpdWZ0VDBqMmlrb0E9PSIsInZhbHVlIjoiVFlTM3paQ2xzaFJrVjhXTUJTK2wyY2ovOWh2MzhVbCtFN1Jld2l4MFlrNlJ4NGdyWUV0dkgxZVczaUtmSGJSSFdCRTZOTWk0TkVxa2JkM2xMS1hPSUh0b0owdk92R05QZlJNcWtLU2wxTm9rYTc5ODRXV2dUUTMwcHdkcUQ2ZzIiLCJtYWMiOiJiMmFkMzE1ZmYwY2JhMjA2NWYwNDY5YzQzN2ViZDhkMjU0MGNjYWM3MWM4YjZmNWY0MThkMzcyMmJhODBjOGIxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 20:53:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3g%2FFRdeUhuQ1uXijD2wzsXxTrvQoPPYfZ1AAFl2ZmFPUVpVlgcg5PaCS7adoaaJfCPP3TCYJEuy66PknBfA99uYRt%2F7GyfC9\"}]}\r\nlast-modified: Thu, 28 Nov 2024 12:18:07 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nage: 3205\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\netag: W/\"67485f7f-15c64d\"\r\ncf-ray: 98d97c31fdda568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427021,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"366594a9252c866bea715b80eb561c7c","sha1":"b8c527cc2dcdfae98e3e55e99acd8c02e3f542f8","sha256":"a50258785ef4e58993ddd68cfe82e46594fea95abe6135281f1936c3cd0bf949","sha512":"eaf7e502525ce7ec0e18600b60804980c4848e5d47b83bfdd9c94e49b92f55a0703089c4f46459463b16a9c95137c70110532f72966e5cc782549cf8a2653ed1","ssdeep":"24576:QaQbgvThYzoRcckPLNKdL4BgbOe5Je+VMCs7wFlkJD:bQbg7hYzoRccuLNKdL4BEOe5Je+MOFlK","tlshash":"0525934077c0a858138b9f79731fb5e6f85a0caf3c88484fe115fca065a9627fae5931","first_seen":"2025-07-27T23:41:32.88728Z","last_seen":"2025-12-06T07:16:32.076069Z","times_seen":120,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.mastinstungmoreal.com/static/9cb58b5eb2422c8f734769e7cf0146cf.min.js?1760302390408","fqdn":"st.mastinstungmoreal.com","domain":"mastinstungmoreal.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastinstungmoreal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 00:15:48 GMT","end":"Mon, 24 Nov 2025 01:15:28 GMT"},"fingerprint":{"sha1":"67:EC:62:B9:D1:61:A8:6E:39:F9:BE:EF:BF:BE:89:4E:05:98:79:37","sha256":"AE:FD:E4:B1:E4:29:A8:BE:02:21:51:E5:8F:DC:3D:1F:07:B4:B9:6B:14:CB:C2:DD:CC:37:7D:E6:39:83:9D:58"}}},"request":{"raw":"GET /static/9cb58b5eb2422c8f734769e7cf0146cf.min.js?1760302390408 HTTP/1.1\r\nHost: st.mastinstungmoreal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 12 Oct 2025 20:53:10 GMT\r\nlocation: https://st.mastinstungmoreal.com/r/9cb58b5eb2422c8f734769e7cf0146cf/service.js\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XWmirVVOwtXKGxPRK7prbz8nyjEHvC15cXazBsFeSdpXheRZX3lOvAaMA0gl%2FT5ajuzZaPH1xE1GkHgR8bd1zVhcVjr2Px3NjupXbWYHTnA00p3j0r0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98d97c34c8f05690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":107,"dns":16,"connect":1,"send":0,"wait":6,"receive":0,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://upfion.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 07 Oct 2025 23:36:02 GMT\r\nexpires: Wed, 07 Oct 2026 23:36:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 422228\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-05-09T15:33:37.192114Z","times_seen":172253,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":139,"dns":5,"connect":11,"send":0,"wait":9,"receive":10,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.mastinstungmoreal.com/r/9cb58b5eb2422c8f734769e7cf0146cf/service.js","fqdn":"st.mastinstungmoreal.com","domain":"mastinstungmoreal.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastinstungmoreal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 00:15:48 GMT","end":"Mon, 24 Nov 2025 01:15:28 GMT"},"fingerprint":{"sha1":"67:EC:62:B9:D1:61:A8:6E:39:F9:BE:EF:BF:BE:89:4E:05:98:79:37","sha256":"AE:FD:E4:B1:E4:29:A8:BE:02:21:51:E5:8F:DC:3D:1F:07:B4:B9:6B:14:CB:C2:DD:CC:37:7D:E6:39:83:9D:58"}}},"request":{"raw":"GET /r/9cb58b5eb2422c8f734769e7cf0146cf/service.js HTTP/1.1\r\nHost: st.mastinstungmoreal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://upfion.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 12 Oct 2025 20:53:10 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 11 Apr 2022 19:57:13 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F8dUke3XmGI0UUawphvZvMUfgYRAQKe7eT%2B%2F2FuHCPGaPg2E2K9wnzWjKm1QaG2Zc991mHCzEoWyY1JhEgGOfqCtI4IqKDOsdrwDh4lohGzaTcrZz%2Bk%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 98d97c3539615690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-75C4L64NEB\u0026cx=c\u0026gtm=4e5a80","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtag/js?id=G-75C4L64NEB\u0026cx=c\u0026gtm=4e5a80 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 12 Oct 2025 20:53:10 GMT\r\nexpires: Sun, 12 Oct 2025 20:53:10 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 129755\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":374714,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"1ea264724212ecf6229aed6e5ccc25ae","sha1":"aac99bc02b476a5282df6e3a62a29cf67656fd47","sha256":"ac47353bc2a8f9dcdc2e4bd5e22aca69f2c9406ef298d32adf8a22367674d7f7","sha512":"c7f74809500711c045a05cbb9459e9bf1291a29c2ab850af0936be9535cfb18a07d756fe2cedc61df22ea82bfd40e896b1f884184c1578b44d560b780c014231","ssdeep":"6144:RwW/yp2a4tk0uwbWZJT+Nju5204OZSkndXAQF:AYJm0KZJu0JB","tlshash":"c58419ce73d674265392a478503f018bb57b2892f44cc899f18adee52e70a9a0137f7c","first_seen":"2025-10-12T20:53:35.60321Z","last_seen":"2025-10-12T20:53:35.60321Z","times_seen":1,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/bGi-DxR800F5_ueMVcTwXc6q/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:11.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /recaptcha/releases/bGi-DxR800F5_ueMVcTwXc6q/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://upfion.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 352219\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 06 Oct 2025 17:57:22 GMT\r\nexpires: Tue, 06 Oct 2026 17:57:22 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 06 Oct 2025 04:00:11 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 528949\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":824931,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"5bce9e85f38aa11d35ab51517f8d07e4","sha1":"44102e17b879843f3ce36a51c0f132d11a24588a","sha256":"1a828972d3e667311b0fe5662301cc433f2c5e97d5018cbd331c4c59ad34d311","sha512":"08489944c9e40c9f71bad98402a22467e3de06545feab6314b08a2510224d75eae877604b64bb37f281f3bb5e1408b3a3c2ef71ec9c742120c002fe553b751b0","ssdeep":"12288:l4zpNa1FTCz4BpuKYXsrFoCvL67G1+zEnHYJ7HlEiU9J:OzBkruKYsuyO7G1gs4JBhk","tlshash":"66054ad87112b5e59322b9f2a067201da37ea535c84c4c5eb29588f12ef1c4e70b6ef7","first_seen":"2025-10-07T06:40:38.110565Z","last_seen":"2026-04-19T23:55:10.463994Z","times_seen":16341,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":106,"dns":1,"connect":29,"send":0,"wait":28,"receive":120,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.mastinstungmoreal.com/static/9cb58b5eb2422c8f734769e7cf0146cf.min.js?1760302390412","fqdn":"st.mastinstungmoreal.com","domain":"mastinstungmoreal.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastinstungmoreal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 00:15:48 GMT","end":"Mon, 24 Nov 2025 01:15:28 GMT"},"fingerprint":{"sha1":"67:EC:62:B9:D1:61:A8:6E:39:F9:BE:EF:BF:BE:89:4E:05:98:79:37","sha256":"AE:FD:E4:B1:E4:29:A8:BE:02:21:51:E5:8F:DC:3D:1F:07:B4:B9:6B:14:CB:C2:DD:CC:37:7D:E6:39:83:9D:58"}}},"request":{"raw":"GET /static/9cb58b5eb2422c8f734769e7cf0146cf.min.js?1760302390412 HTTP/1.1\r\nHost: st.mastinstungmoreal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 12 Oct 2025 20:53:10 GMT\r\nlocation: https://st.mastinstungmoreal.com/r/9cb58b5eb2422c8f734769e7cf0146cf/service.js\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GgCxto4NCbDfcTg21u6Z%2FZllpuZPzRlfAQFrA3pm87IYIcOyrqAPLd5Gfv1d61UTEj9T%2BADQ54eYM%2BSS69Bzi5rWvCRgZBzV6p2wRrKhxPWdr4cM9YM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98d97c34c8f35690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfiles.com/eeu8hlL","fqdn":"upfiles.com","domain":"upfiles.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-12T20:53:06.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upfiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 14:31:23 GMT","end":"Wed, 07 Jan 2026 15:29:54 GMT"},"fingerprint":{"sha1":"7D:87:B0:47:FA:CF:74:AD:E7:2D:F1:6D:1B:00:52:52:F6:F4:D6:07","sha256":"D8:46:93:97:57:38:28:F1:A3:06:F6:78:41:87:40:EF:17:11:68:B1:63:F0:20:C0:DE:96:9E:FE:7C:F7:E4:78"}}},"request":{"raw":"GET /eeu8hlL HTTP/1.1\r\nHost: upfiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 12 Oct 2025 20:53:07 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://upfion.com/eeu8hlL?token=eyJpdiI6IkYzMll3R3BwK0pFbU4zdmJaNWF6RGc9PSIsInZhbHVlIjoiNnoyRlkvYUpoVmpVQ2JrbSs0SlFEZz09IiwibWFjIjoiZDFhODgzNWIyYmExZGM4OWNjNmUwMWM4ODcxMmRiMzg0ZDg5NGQzNTNjZTdiZjhiMzgxM2E1NjlkMmI5OTNjMiIsInRhZyI6IiJ9\r\nserver: cloudflare\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XA8fqY7OXlr90UBlnpCIdqfPL5lHjDTZZb2QPqQHRPTsTYWFg1iOv%2FxC2Ta4Mr72k4EVMJ%2FpMiTj%2FCT4E9OXamYDHiqBI6QZqw%3D%3D\"}]}\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IlpicUNKdENzamFTeUJYN3p5eFBLMEE9PSIsInZhbHVlIjoiajlRcE5qTWpONm90ekNBbWVLZi9LcmxVRlRTT0dOWjdJS3pPYzJaeUxNT2JRTGNHc0hpbXVVRGEzbVBnQzhLNGI4QytCeU9sL1JQQjU0NzFxY3FCbUx3RDJLeGEwNEtlTDBCa0NSOEx1SmJFc0FGZ3VqcFlpdmgrb3l0R1RUSmMiLCJtYWMiOiJmNzBjMmViZDViOTdlNzdkOWY1ZjVmNWY3ZDViN2M5MTQ0ODZmNDRhNTM3MTE4NGQyNzRiZWMxOTk4MWVmN2E0IiwidGFnIjoiIn0%3D; SameSite=Lax; Path=/; Max-Age=604800; Expires=Sun, 19 Oct 2025 20:53:07 GMT\nupfiles_session=eyJpdiI6Im9Dcy90T3pQN3lFYlAzemtXRzF2bWc9PSIsInZhbHVlIjoiY2tGbGhGMmtDTFJ6MGRRNmpFZDNudEdKb3ZreDFwcDUwUnJCQjcrVG5NTm5NQ0pkWkZhWk1uM1NhdFpHTGdXNjhMdCtCR3dMWmo1UkxySGt2SnNJang4WEFIaTFiOUg4MVptZjlmakZiOWhLbGJMSkVQUDB4Z2MxbzQ0MHJsQUUiLCJtYWMiOiIxNTliY2Y3MTM5NGEzNmI3Y2QwNGYzNDFkNWJiZDI3OTEyNGNhMzQzMDAxYjM3ZDQzZTRhZDVlOGYyYTlkN2ZkIiwidGFnIjoiIn0%3D; HttpOnly; SameSite=Lax; Path=/; Max-Age=604800; Expires=Sun, 19 Oct 2025 20:53:07 GMT\r\ncf-ray: 98d97c1d7e4456c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28779,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":725,"timings":{"blocked":32,"dns":12,"connect":1,"send":0,"wait":661,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fstatic.netpub.media/extra/cmp/cmp-gdpr.js","fqdn":"fstatic.netpub.media","domain":"netpub.media","tld":"media"},"ip":{"addr":"104.20.41.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netpub.media","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 19:26:51 GMT","end":"Fri, 21 Nov 2025 20:26:45 GMT"},"fingerprint":{"sha1":"25:EA:05:A4:29:84:F0:D3:CF:23:A4:98:07:38:96:F8:5F:05:E8:8A","sha256":"6D:8D:BB:BD:B1:BC:BF:10:36:D6:BB:D6:96:5E:3C:61:E9:7D:14:F3:5E:BA:BE:17:CE:61:62:6F:C7:DE:FF:CE"}}},"request":{"raw":"GET /extra/cmp/cmp-gdpr.js HTTP/1.1\r\nHost: fstatic.netpub.media\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ndate: Sun, 12 Oct 2025 20:53:10 GMT\r\nlocation: https://gpp.netpub.media/init.js\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 98d97c326eb2b517-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":739,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":65,"dns":20,"connect":1,"send":0,"wait":2,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-X2GS5JDQMX","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtag/js?id=G-X2GS5JDQMX HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 12 Oct 2025 20:53:10 GMT\r\nexpires: Sun, 12 Oct 2025 20:53:10 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 127499\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":366944,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"514f03f9e5afc90df9ca0cffae857e91","sha1":"c02d66e0599adac1036f9951d616bb07c2d27436","sha256":"824e3457ced3e7f7fb3d5ac71343f80c2dd2c8217c4a652bf77a0ed86ee0fe68","sha512":"09d98ed70e6d0946519f3b30ffd2ff72c7a1070ca107025585bab77fd925b92ee6225d97577d75542e0abb034fbf259e48132e681a77dfc69f80b3dc66a2f080","ssdeep":"6144:UAC/yp2a4tk0uwbWZJT+Nju5204OTSkndXAQy:/YJm0KZJu0P+","tlshash":"947408ce73d670665392a478503f018bb57b2892f44cc899f186dee52e74a9a0277f3c","first_seen":"2025-10-12T20:53:35.617141Z","last_seen":"2025-10-12T20:53:35.617141Z","times_seen":1,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":75,"dns":0,"connect":8,"send":0,"wait":31,"receive":27,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"st.mastinstungmoreal.com/static/9cb58b5eb2422c8f734769e7cf0146cf.min.js?1760302390408","fqdn":"st.mastinstungmoreal.com","domain":"mastinstungmoreal.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mastinstungmoreal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 00:15:48 GMT","end":"Mon, 24 Nov 2025 01:15:28 GMT"},"fingerprint":{"sha1":"67:EC:62:B9:D1:61:A8:6E:39:F9:BE:EF:BF:BE:89:4E:05:98:79:37","sha256":"AE:FD:E4:B1:E4:29:A8:BE:02:21:51:E5:8F:DC:3D:1F:07:B4:B9:6B:14:CB:C2:DD:CC:37:7D:E6:39:83:9D:58"}}},"request":{"raw":"GET /static/9cb58b5eb2422c8f734769e7cf0146cf.min.js?1760302390408 HTTP/1.1\r\nHost: st.mastinstungmoreal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 12 Oct 2025 20:53:10 GMT\r\nlocation: https://st.mastinstungmoreal.com/r/9cb58b5eb2422c8f734769e7cf0146cf/service.js\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c%2Bd5lg8wKy55%2BOkGDviVOpijIc3pcEITfieEGmDuio0dObonjd9VCYzxZiGZdNtVpupvZ1PdGwFc2TWbXyQFTq5KBaVGqDmSYAZrA1q0E00HWykwEX8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98d97c35294b5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":156,"dns":19,"connect":1,"send":0,"wait":6,"receive":0,"ssl":133},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upfion.com/images/arrow-down.png?c98e5283a69cb508d054d30256af43c6","fqdn":"upfion.com","domain":"upfion.com","tld":"com"},"ip":{"addr":"172.67.185.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upfion.com/eeu8hlL","date":"2025-10-12T20:53:10.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upfion.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 06:45:15 GMT","end":"Sun, 16 Nov 2025 07:42:54 GMT"},"fingerprint":{"sha1":"ED:0D:7D:52:B9:81:CB:24:42:30:EE:05:EA:B2:F8:4C:D5:A4:7D:C9","sha256":"DB:73:72:C9:AC:6A:DF:41:47:C0:36:7F:DD:8D:EF:4C:B3:17:D7:0E:3C:52:09:8D:2D:C6:3A:93:52:1A:63:88"}}},"request":{"raw":"GET /images/arrow-down.png?c98e5283a69cb508d054d30256af43c6 HTTP/1.1\r\nHost: upfion.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upfion.com/css/frontend.css?id=d2ff22fb187252e60fbb\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVBZ202cUxxb2Q2OHUreXAwMU1uOHc9PSIsInZhbHVlIjoiejJFUTdMYm1va1RUcm5TYlEzbWs5UjVKdUdDTk5mWmRUTWhWOUFybkk4ci9HbS9XOGxyS05oQzF4cEdCSnlJZ2E2QTM0R05QL1JzckNZOWg2SGo3YnU5V1BmM2FET2l4UExNa1dkOTZCVVpZWWN3YlE0dEg0b24vYVhyVE9ScGIiLCJtYWMiOiJlMGEyYzQ1ZmFhOTU3MzY3NTk3YTBmMTY2ZjVjMzNjYWE1ZGY0OTVlODUwYmI1OGYzNzA0ZWE0M2VhZGIyZTcwIiwidGFnIjoiIn0%3D; upfiles_session=eyJpdiI6ImNxYi9WN0VYeEdpdWZ0VDBqMmlrb0E9PSIsInZhbHVlIjoiVFlTM3paQ2xzaFJrVjhXTUJTK2wyY2ovOWh2MzhVbCtFN1Jld2l4MFlrNlJ4NGdyWUV0dkgxZVczaUtmSGJSSFdCRTZOTWk0TkVxa2JkM2xMS1hPSUh0b0owdk92R05QZlJNcWtLU2wxTm9rYTc5ODRXV2dUUTMwcHdkcUQ2ZzIiLCJtYWMiOiJiMmFkMzE1ZmYwY2JhMjA2NWYwNDY5YzQzN2ViZDhkMjU0MGNjYWM3MWM4YjZmNWY0MThkMzcyMmJhODBjOGIxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 12 Oct 2025 20:53:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 208\r\nlast-modified: Sat, 28 Sep 2024 07:01:06 GMT\r\netag: \"66f7a9b2-d0\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nage: 6972\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e9AWRH%2BaDdQg7l4E7m%2BbE5Cd2R275XcBb7boFfmvNEGqV2T2GbMFXLSKMCrQbcMOVC1sBAXskb6xDq22DDP%2Fr%2FERVvLIkZ62\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98d97c343dfb568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":208,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 6 x 12, 8-bit/color RGBA, non-interlaced","md5":"31f073499665afb237f3294219d2d7c6","sha1":"c1ada0510e31f661dab66203c15a3d6c8f5468d0","sha256":"59b7ad6d6f457b624e25d22959edc7c83af2ac52edba32fd6648c97af0d1780c","sha512":"3204c81e9b3a996189afdd5011824b6bf7de8c9ee32d0f9893c2c42e15d01cb2b9957ae747739d5f25f1d5e6464228127495907229d53bd3c3dacf0fdc376efd","ssdeep":"","tlshash":"56d023cf1f5e4cbde54d547655379070746b5b6a4445c5066550745511164ec13c7340","first_seen":"2023-05-03T01:43:27Z","last_seen":"2026-02-11T20:26:43.617438Z","times_seen":1328,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}