{"report_id":"cfe7a028-2c4f-400a-bb67-83b882e87955","version":6,"status":"done","tags":[],"date":"2025-11-11T01:22:09Z","url":{"schema":"http","addr":"upmidiass.net/","fqdn":"upmidiass.net","domain":"upmidiass.net","tld":"net"},"ip":{"addr":"152.228.155.76","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"final":{"url":{"schema":"https","addr":"upmidiass.net/","fqdn":"upmidiass.net","domain":"upmidiass.net","tld":"net"},"title":"Fornecedor SMM","dom":{"size":6867,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"f667f4a00ac10066458a2acd5f4fe35b","sha1":"2172dd3cbb24f9ba4382f32b6706861d61466376","sha256":"4e57078e7d326ea37af78598058366c90b7abee054d8a7d0435ccfb4320c6774","sha512":"74ee9a57e69adba1ebd2676f8f2f2380f50f985cf6f637fcf6635b1ca5efdb14ff02c5722f1ee41b380268ada1f19eeb6455a2d57a184c8f301fceeae304f40a","ssdeep":"192:KKzJrxrXVYpz8RhkO7aB96ymWZBGhJsbKo/q6pYrjhxwbYpJmThoQYBK:K6xir9","tlshash":"9be1626325a421666473e1382fc6628c7230e423e467ddaa7c9d4b25dfcefd144b62dc","dom_hash":"domhash4bb247295a06bc2ee2d8fa45cae6f346","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"upmidiass.net/","fqdn":"upmidiass.net","domain":"upmidiass.net","tld":"net"},"ip":{"addr":"152.228.155.76","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-16T01:22:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"refilupmidiass.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.mypanel.link","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2019-02-03","domain_rank":6862206,"first_seen":"2020-07-14T07:22:18Z","last_seen":"2025-11-06T11:37:59.669155Z","alert_count":0,"request_count":3,"received_data":506155,"sent_data":1574,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"upmidiass.net","ip":{"addr":"152.228.155.79","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"unknown","domain_rank":699361,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":44099,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Sentry:9.12.0","description":"Sentry is an open-source platform for workflow productivity, aggregating errors from across the stack in real time.","website":"https://sentry.io/","common_platform_enumeration":"","icon":"Sentry.svg","categories":["Issue trackers"]},{"name":"Google Sign-in","description":"Google Sign-In is a secure authentication system that reduces the burden of login for users, by enabling them to sign in with their Google account.","website":"https://developers.google.com/identity/sign-in/web","common_platform_enumeration":"","icon":"Google.svg","categories":["Authentication"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"browser.sentry-cdn.com","ip":{"addr":"151.101.66.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2018-05-30","domain_rank":23677,"first_seen":"2018-07-13T11:42:06Z","last_seen":"2025-11-09T22:51:57.959742Z","alert_count":0,"request_count":1,"received_data":74309,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"storage.perfectcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2016-06-11","domain_rank":2178217,"first_seen":"2024-12-24T20:25:43.951141Z","last_seen":"2025-11-08T23:31:03.349971Z","alert_count":0,"request_count":7,"received_data":2582425,"sent_data":3097,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"play.google.com","ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":48,"first_seen":"2013-05-30T23:24:35Z","last_seen":"2025-11-09T22:29:01.589606Z","alert_count":0,"request_count":2,"received_data":1121,"sent_data":1052,"comment":"","tags":null,"fingerprints":null},{"fqdn":"upload.wikimedia.org","ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":4329,"first_seen":"2012-05-21T09:39:45Z","last_seen":"2025-11-09T23:46:35.721456Z","alert_count":0,"request_count":1,"received_data":3842,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Apache Traffic Server:9.2.11","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-09T22:13:15.598397Z","alert_count":0,"request_count":4,"received_data":430562,"sent_data":2136,"comment":"","tags":null,"fingerprints":null},{"fqdn":"refilupmidiass.xyz","ip":{"addr":"89.117.7.136","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"domain_registered":"2025-05-19","domain_rank":0,"first_seen":"2025-11-11T01:22:11.685306Z","last_seen":"2025-11-11T01:22:11.685306Z","alert_count":1,"request_count":1,"received_data":7681,"sent_data":518,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"accounts.google.com","ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2025-11-09T22:37:48.153273Z","alert_count":0,"request_count":4,"received_data":430012,"sent_data":2272,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i.ibb.co","ip":{"addr":"108.181.22.211","port":443,"asn":40676,"as":"AS40676","country":"United States","country_code":"US"},"domain_registered":"2010-07-20","domain_rank":21643,"first_seen":"2018-11-25T10:13:48Z","last_seen":"2025-11-10T08:41:17.624255Z","alert_count":0,"request_count":1,"received_data":8755,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"upmidiass.net/","fqdn":"upmidiass.net","domain":"upmidiass.net","tld":"net"},"ip":{"addr":"152.228.155.79","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"e8f0c4b4223affeabd5dc0088b7f3e92","sha1":"adf7db2b041fa44971528dfdfc861a319d035666","sha256":"e89cfb2cfd40f64f650ab691d5ae62559dd0f17ae3e8ebb4f7410aa67949de3a","sha512":"d2a95ef861815c693ed30fe8ebb96fe8c9aafdc122e2dc737e19ead420f7dc63d225f1cb3abd72dd33a10414c2f0a58c75043e5991608c9f55391013af34d995","ssdeep":"","tlshash":"1921592925f326126e5f22bf6bcb03946030c2137944ce1a793f43914f9959e25659fd","size":1220,"data":"","first_seen":"2025-11-11T01:22:18.139578Z","last_seen":"2025-11-11T01:22:18.139578Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.perfectcdn.com/global/6k54ozpzw8o83xr3.js","fqdn":"storage.perfectcdn.com","domain":"perfectcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d854daca3d8ca0727a0d4a50bc3f84e5","sha1":"6ce1022baf6c3fd290aa0252a63e2c985ecb142b","sha256":"d5904095e20a362f27c6e130ed88d59ab101942402de1bd289076fff7f49114d","sha512":"7208bafe17e0b9df80cb52a315d7f3d50c3c75a1f685ed88b627058dc80de77b76e1882d5cefcc273d7d6b7f1993144735b13d997e75b69408635ac24f27d2d9","ssdeep":"6144:CgLIre50evCm50dpz3NGz+41b0vj1AZiA38d1SXrHjH:pUe5WrLN41bO4FzjH","tlshash":"b67408887295b16243ab20f5107f490bf23aaca9940e9418f19dd4ed3dbcc4951bbf7e","size":347025,"data":"","first_seen":"2025-09-30T07:52:00.077337Z","last_seen":"2026-05-23T03:38:47.081168Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upmidiass.net/","fqdn":"upmidiass.net","domain":"upmidiass.net","tld":"net"},"ip":{"addr":"152.228.155.79","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"bb57d4dcd5b308f8f43612ec7bd23e11","sha1":"9ef60aa48b955ff1ac5c607b6c0a95bc13d02dd9","sha256":"7c0fca1cf6240b46ac5e117fa901e140bb80f563a723fc37cbf3783153d14037","sha512":"46c13da2946c785dad91942af49171c13543c2c573c98ca670b11f0ae5e1c0ccf1176d63553c9cc9e1126980c8ed598cf137b42415e2546e941139d4e4488792","ssdeep":"","tlshash":"7e800020003220022038280aba82232038aa00a20020a0002acc82a82a20c2b80c0b80","size":28,"data":"","first_seen":"2024-01-02T19:50:21Z","last_seen":"2026-05-23T10:03:19.907376Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.perfectcdn.com/global/2k4ql5ke4jrdfp9j.js","fqdn":"storage.perfectcdn.com","domain":"perfectcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f3f54d3a2c824d03346be2f6e4e650d","sha1":"709681ccf5f125c6b4e41c7365ef16f5676e41ca","sha256":"f4cb27eb605eb6915319735bbd5a2951bab660017ea2db4f9ba6fa48290f5bb3","sha512":"769ef7cadbc3ce76923c71acb81531cc9d905def77ae5764903071b03b388e17483667cf1963da067c8492c2e3a14cb23cee037557b06cdce0d3223c0867f4e2","ssdeep":"12288:w5G+6HblsXBclpjeJAnt9cO9glpXIHRb+75dYuOMGcPFY:w5WHbxlQOt9cO9KaRb+75pOqFY","tlshash":"d6154a8c3546b66243a721f5403f190ab3396b69984e8800f56ed9d5be78c6ca337f7c","size":890503,"data":"","first_seen":"2025-09-27T01:40:49.915608Z","last_seen":"2025-11-11T01:22:18.10659Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.perfectcdn.com/global/2t0wrbkqkg6p2yz4.js","fqdn":"storage.perfectcdn.com","domain":"perfectcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b28a393f962859366f3089df67c73660","sha1":"d47e7a384e16f86d08ffddec77465ba9cac07fce","sha256":"019ace4f12cc43aad530daee44533a0ae511aba0d7ef751e7a28de8fc8db4af7","sha512":"c1bc319a0e2a1eaf97fd9e2779fcd7fcf4f0b9212ca4f1f11d04beee20ace398889aecd0cb91c3cc3e8da604e6d98047cfa33610fe95ec065d4f76c29a6b3489","ssdeep":"3072:kUWO4QWIIwHaRxATh11hfHZ3f5nDIwx9J6HIypXT:kXrQWAHoC11hHhxnkwx9typXT","tlshash":"1634294436f1653153f794d948b70a1f7335b346c40a4908b67caaea2badc44f1bbb39","size":248470,"data":"","first_seen":"2025-11-11T01:22:18.114028Z","last_seen":"2025-11-19T23:14:15.643053Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/gsi/client","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffde76e3f2ba4200476df8aabdb54c4f","sha1":"e69cc6ce18b3c79c5e0f5d9070ad65f71fd07e4a","sha256":"b0929ce50e37b1f66bfbad65fad6d49b08c93705475d1a05d953f1588c089739","sha512":"ebe82685df279d695a138b6e17d9e35fc3baeadb20e705d9655f870b4fd4dacf244d1bd2c37bae7526399e33df19a1cc1305ceb758b15d33b1c6183017e73ce0","ssdeep":"6144:D+Ku0xn5th2Lz6t/C7II/dnCqHffHas/VgyP5wQ:DVheU/C7IUNd/fHas/+KyQ","tlshash":"30345bdcb6e270359213f8b5d43f410ab036aa79f44a8c6cf694c6f5acb09850167f7a","size":241527,"data":"","first_seen":"2025-11-07T20:12:29.426751Z","last_seen":"2025-11-13T02:07:49.109525Z","times_seen":1168,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upmidiass.net/","fqdn":"upmidiass.net","domain":"upmidiass.net","tld":"net"},"ip":{"addr":"152.228.155.79","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"246b9091b4b2dd5bd073e270b6352afe","sha1":"ac2a6e46ed307b8706e20952aa6909d1611e9743","sha256":"b3a1aa497a48b379738a1d8c3059d6be30d7eb56335cd15d54e08cd29fc79dcd","sha512":"f701d09574fef3da3788cae32ef20c3cd327b7c99f96e2bf16ca0755f39e7c8baa65f40946a479c0b47bf2dad1942443101a1a5903b452f0f7c3ee4fb06b1d35","ssdeep":"","tlshash":"84c02b9b70813030d0a33178818301f43730415770024071384cd34b0f20b6048b33dc","size":167,"data":"","first_seen":"2025-11-11T01:22:18.14172Z","last_seen":"2025-11-11T01:22:18.14172Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/_/gsi/_/js/k=gsi.gsi.no.dv45X-y1POM.O/am=AACAEOLW/d=1/rs=AF0KOtVoUjQQmBM_GpaI5RSPlzQyscJaWw/m=credential_button_library","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"af07c3c0b28805d9fff3082b0feead98","sha1":"b66ee0fcdf78abf76d85f3ec1d97a63b27ccbfb2","sha256":"a0f64935aaf57dacaf2e2ea61dc8cb9fee269136a6359b75ddd324a111e18212","sha512":"6e7cb14de449dd72ad8fba9455ed23837d1f5807dbd6c445e080840d8badea8e3b38688e44138f5d0a90ca969869c6417fcb5cbab0916d338e78c440c3d740d9","ssdeep":"1536:4gchL3+eUMW0XFTtwriUu0xn5BpDJASPkbKRDIK9Blf0Eqt1Gz2Q2PfdaupYD:2+yWFu0xn5dFkbKRpfMt1Gzyc","tlshash":"f3c3d8d8b2a2b4629363f4a4813f000bb17b68a9f44c5cacf295d9e1adf05498177f7d","size":123490,"data":"","first_seen":"2025-11-04T21:26:38.667569Z","last_seen":"2025-11-13T01:08:27.506872Z","times_seen":173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upmidiass.net/","fqdn":"upmidiass.net","domain":"upmidiass.net","tld":"net"},"ip":{"addr":"152.228.155.79","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"e81c33cb5a5b3aa15b7220bcd038059b","sha1":"60318aee56fd7be2f87d82c1246d334969fd5d40","sha256":"82dd2cf0fd8f3d2e9a26761c4c5bbfb670a02213581e4a43070c31d95ad67404","sha512":"fa74f2fc120e820fb9f28682db5539ede702c5073bcfeb00d5ad99d6e7dca80ac0fb2e618f16999071d2bb1ca850b999c6ab905b7a58d756f09ce795857ade0d","ssdeep":"","tlshash":"83b02bc113d78b0511252a0810b1484d9432803c20a37200b09407c427028393100348","size":120,"data":"","first_seen":"2025-09-27T01:40:49.923895Z","last_seen":"2025-11-11T01:22:18.143786Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upmidiass.net/","fqdn":"upmidiass.net","domain":"upmidiass.net","tld":"net"},"ip":{"addr":"152.228.155.79","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"1eae9cfd98ff44d96406f0b830fa7e74","sha1":"fae140c8708fd1f522801e142646a6cb6fe6e37f","sha256":"9e5fe89f2a6bc14d7ab1f69b2965781afa7f8db71f2889c666eb856bc231a331","sha512":"f83d9771e9c774b61614892eb57a0bb562ba65fa7629d2c87805f1676623dbe88cd997b4493851586e1338efc2b29ca97e59781a47227283e091c2c236dc8838","ssdeep":"","tlshash":"ddc08050905a52739640741eb6e3ba15e4fcc077242219027ddfd7264724e1713425d4","size":174,"data":"","first_seen":"2025-11-11T01:22:18.144467Z","last_seen":"2025-11-11T01:22:18.144467Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upmidiass.net/","fqdn":"upmidiass.net","domain":"upmidiass.net","tld":"net"},"ip":{"addr":"152.228.155.79","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"c47a63569e75a931d6f34329af5cfdbc","sha1":"131ee67ca7bb22879241157b800b2f6ce689c434","sha256":"7df125006e098b99307526bb657a0cac2218bc823ad18ef753f819181178ac01","sha512":"eb97d2ee7acc6ab795a0eb026665b013f9e475ea0ed883cd125fea072c052a56b9ecd6e8d9e0ae186a93945757c5ed9c3f6b9b3a4065fac73f71e2e969acf3eb","ssdeep":"","tlshash":"7180043010311001d0541400f5d555507d4514d310f01000370c41dc73104174151144","size":36,"data":"","first_seen":"2023-03-07T14:03:54Z","last_seen":"2026-05-23T10:03:20.021443Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/gsi/button?type=standard\u0026size=large\u0026theme=outline\u0026text=sign_in_with\u0026shape=rectangular\u0026logo_alignment=left\u0026is_fedcm_supported=false\u0026client_id=1079841415737-jqm9f77s3vlbpkirhnh6h7slhh8pvd0n.apps.googleusercontent.com\u0026iframe_id=gsi_107218_585439\u0026cas=W9rdfzGHYrZEJ6CvsV3Z454wWAo0mskM3EdxxnoreS4","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9acf6adf8837403e57362dbeb64b8827","sha1":"8d0c79bde9ff77ddb364a7ec3ec9c4fd7f9a7438","sha256":"49fce8af0cf5505592dd848803846e87c67c317039b53b681e964020de2ef8c3","sha512":"aff7a0382ed87b232e7a0ca0e60d4f38284d5d9b818116a4002a5a35e2e32dfc4fa07953174f3302f479ab9ee5f88361ac404219bc30720d24e47376cd8e84f4","ssdeep":"1536:QgchL3+eUMW0XFTtwriUu0xn5BpDJASPkbKRDIK9Blf0Eqt1Gz2Q2PfdaupYD:u+yWFu0xn5dFkbKRpfMt1Gzyc","tlshash":"b9c3d8d8b2a2b4629363f4a4813f000bb17b68a9f44c5cacf295d9e1adf05498177f7d","size":123489,"data":"","first_seen":"2025-11-04T21:26:38.664321Z","last_seen":"2025-11-13T01:08:27.507488Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upmidiass.net/","fqdn":"upmidiass.net","domain":"upmidiass.net","tld":"net"},"ip":{"addr":"152.228.155.79","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"269280a55008b32ac612c65fca0f3d15","sha1":"6ea783e1f9d19384e158b080762d5b0ce8ec212a","sha256":"70c0d3c4b0f72214dc2f4878c26f4a45cba3195983739f84ee928c2554958ad1","sha512":"a494a7db42aac7506f6377b11d5a70ccbe435894f5d58fcda2695bb26d702393811a4d82764f48a41c8fba5f583500396fa8660bfea0ca78fe3c545017940a60","ssdeep":"","tlshash":"1e4000000000000000000000000000000000000300000000300c000003000000000000","size":7,"data":"","first_seen":"2023-03-07T14:03:54Z","last_seen":"2026-05-24T04:40:54.137519Z","times_seen":516,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser.sentry-cdn.com/9.12.0/bundle.min.js","fqdn":"browser.sentry-cdn.com","domain":"sentry-cdn.com","tld":"com"},"ip":{"addr":"151.101.66.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bdface08ccbf51a82ffd7a01f8d5a3e","sha1":"a1c17b0e3e1ed1d931fe84a3a71bdc89e8c2e69b","sha256":"0c19c16d3d50ab060356873e9d1820638028bf1ad83d556b07e2e34b1405a808","sha512":"30bbe21e848eeb3e57e8c292f7cf0584f5aafcff78a6c02266c8a4111932fc95264e1484493a9697317e17a8f912f0e9a7cdaf2df90847128947c1fb050ba7b1","ssdeep":"1536:BRrZqN2dzvOfuYnOliozMq2EBETTVcxM5pT7TxTfnmse:vV3y4zaESTMOpTXxax","tlshash":"1273a3c8b1d2b03147e71aa5a17b0106f73a5d90304bc594f56cddea2ea244be2b7f2d","size":73795,"data":"","first_seen":"2025-05-26T19:01:12.683935Z","last_seen":"2026-03-25T21:03:06.681136Z","times_seen":374,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refilupmidiass.xyz/","fqdn":"refilupmidiass.xyz","domain":"refilupmidiass.xyz","tld":"xyz"},"ip":{"addr":"89.117.7.136","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c620ef921a2ae29f68f5d506a3d6dd8","sha1":"537f5e8a6cab5c8560ae74b4a49bcbbf85d3204e","sha256":"6133891988ba23b777cbc39dd188e55d9a4b12948aac1541c6cc283f0f3d466e","sha512":"f0b31deb5a7e0f77869a2f4e3a180b94f6a5f175e4248189e43230b95872930e143fd12471fda2f6ffd0f269f99a6f70a320a7c1c88c54e9e3d7969db8cd3125","ssdeep":"","tlshash":"00118cfb757b1d308bbbb97a13cb6345752690032c01c4877e0c4a541f59f9520b3aca","size":1035,"data":"","first_seen":"2025-11-11T01:22:18.148692Z","last_seen":"2025-11-11T01:22:18.148692Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"storage.perfectcdn.com/global/2k4ql5ke4jrdfp9j.js","fqdn":"storage.perfectcdn.com","domain":"perfectcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upmidiass.net/","date":"2025-11-11T01:21:46.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1528564941.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 08:36:53 GMT","end":"Mon, 29 Dec 2025 08:36:52 GMT"},"fingerprint":{"sha1":"58:F9:AB:D3:41:F0:F0:57:36:0E:FE:0B:8C:2E:59:87:05:74:76:2F","sha256":"BC:2C:BC:93:39:19:24:20:29:A7:D3:A0:B1:7A:C8:9D:E5:8B:A7:AF:A4:43:CD:89:93:EC:72:1D:1C:DC:8F:F9"}}},"request":{"raw":"GET /global/2k4ql5ke4jrdfp9j.js HTTP/1.1\r\nHost: storage.perfectcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upmidiass.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 01:21:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 03 Oct 2025 05:16:56 GMT\r\nx-rgw-object-type: Normal\r\netag: W/\"3f3f54d3a2c824d03346be2f6e4e650d\"\r\ncache-control: public, max-age=31536000\r\nx-amz-request-id: tx000006bd152a047cb7915-0068df5c48-a40a9f8-prg\r\nx-77-nzt: FAwBuUwJGwH34zEzAAwBuUwKCQH3fgEAAAwBJRPCNAG3AAAAAAgBWbu8rAAA\r\nx-77-nzt-ray: fdb5412320d8f0ddaa8f12699772322d\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-77-cache: HIT\r\nx-77-age: 3355107\r\nserver: CDN77-Turbo\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":890503,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3f3f54d3a2c824d03346be2f6e4e650d","sha1":"709681ccf5f125c6b4e41c7365ef16f5676e41ca","sha256":"f4cb27eb605eb6915319735bbd5a2951bab660017ea2db4f9ba6fa48290f5bb3","sha512":"769ef7cadbc3ce76923c71acb81531cc9d905def77ae5764903071b03b388e17483667cf1963da067c8492c2e3a14cb23cee037557b06cdce0d3223c0867f4e2","ssdeep":"12288:w5G+6HblsXBclpjeJAnt9cO9glpXIHRb+75dYuOMGcPFY:w5WHbxlQOt9cO9KaRb+75pOqFY","tlshash":"d6154a8c3546b66243a721f5403f190ab3396b69984e8800f56ed9d5be78c6ca337f7c","first_seen":"2025-09-27T01:40:49.915608Z","last_seen":"2025-11-11T01:22:18.10659Z","times_seen":6,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":129,"dns":64,"connect":8,"send":0,"wait":14,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play.google.com/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"play.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://accounts.google.com/gsi/button?type=standard\u0026size=large\u0026theme=outline\u0026text=sign_in_with\u0026shape=rectangular\u0026logo_alignment=left\u0026is_fedcm_supported=false\u0026client_id=1079841415737-jqm9f77s3vlbpkirhnh6h7slhh8pvd0n.apps.googleusercontent.com\u0026iframe_id=gsi_107218_585439\u0026cas=W9rdfzGHYrZEJ6CvsV3Z454wWAo0mskM3EdxxnoreS4","date":"2025-11-11T01:21:57.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:46 GMT","end":"Mon, 05 Jan 2026 08:37:45 GMT"},"fingerprint":{"sha1":"2C:0B:CF:F3:2B:F7:F0:76:D4:B1:1F:DB:E2:21:58:B5:EC:B7:6A:FF","sha256":"DE:F5:87:79:4F:56:FB:34:64:B9:21:C9:8F:92:27:D5:ED:C7:A3:88:BD:53:84:65:7D:EF:99:09:59:84:48:BE"}}},"request":{"raw":"POST /log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: play.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-AuthUser: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 467\r\nOrigin: https://accounts.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://accounts.google.com\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Tue, 11 Nov 2025 01:21:57 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-05-24T17:06:26.340329Z","times_seen":543071,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.perfectcdn.com/global/6k54ozpzw8o83xr3.js","fqdn":"storage.perfectcdn.com","domain":"perfectcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upmidiass.net/","date":"2025-11-11T01:21:46.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1528564941.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 08:36:53 GMT","end":"Mon, 29 Dec 2025 08:36:52 GMT"},"fingerprint":{"sha1":"58:F9:AB:D3:41:F0:F0:57:36:0E:FE:0B:8C:2E:59:87:05:74:76:2F","sha256":"BC:2C:BC:93:39:19:24:20:29:A7:D3:A0:B1:7A:C8:9D:E5:8B:A7:AF:A4:43:CD:89:93:EC:72:1D:1C:DC:8F:F9"}}},"request":{"raw":"GET /global/6k54ozpzw8o83xr3.js HTTP/1.1\r\nHost: storage.perfectcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upmidiass.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 01:21:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 03 Oct 2025 05:16:44 GMT\r\nx-rgw-object-type: Normal\r\netag: W/\"d854daca3d8ca0727a0d4a50bc3f84e5\"\r\ncache-control: public, max-age=31536000\r\nx-amz-request-id: tx00000b73296ecd7ddb09c-0068df5c47-a591023-prg\r\nx-77-nzt: FAwBuUwJGwH3+ykzAAwBuUwKDAH3ZgkAAAwBw7WvFwG3AQAAAAgBWbu8pgAA\r\nx-77-nzt-ray: fdb5412320d8f0ddaa8f12691eefa92c\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-77-cache: HIT\r\nx-77-age: 3353083\r\nserver: CDN77-Turbo\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":347025,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"d854daca3d8ca0727a0d4a50bc3f84e5","sha1":"6ce1022baf6c3fd290aa0252a63e2c985ecb142b","sha256":"d5904095e20a362f27c6e130ed88d59ab101942402de1bd289076fff7f49114d","sha512":"7208bafe17e0b9df80cb52a315d7f3d50c3c75a1f685ed88b627058dc80de77b76e1882d5cefcc273d7d6b7f1993144735b13d997e75b69408635ac24f27d2d9","ssdeep":"6144:CgLIre50evCm50dpz3NGz+41b0vj1AZiA38d1SXrHjH:pUe5WrLN41bO4FzjH","tlshash":"b67408887295b16243ab20f5107f490bf23aaca9940e9418f19dd4ed3dbcc4951bbf7e","first_seen":"2025-09-30T07:52:00.077337Z","last_seen":"2026-05-23T03:38:47.081168Z","times_seen":49,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":122,"dns":64,"connect":8,"send":0,"wait":17,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.perfectcdn.com/global/2t0wrbkqkg6p2yz4.js","fqdn":"storage.perfectcdn.com","domain":"perfectcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upmidiass.net/","date":"2025-11-11T01:21:46.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1528564941.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 08:36:53 GMT","end":"Mon, 29 Dec 2025 08:36:52 GMT"},"fingerprint":{"sha1":"58:F9:AB:D3:41:F0:F0:57:36:0E:FE:0B:8C:2E:59:87:05:74:76:2F","sha256":"BC:2C:BC:93:39:19:24:20:29:A7:D3:A0:B1:7A:C8:9D:E5:8B:A7:AF:A4:43:CD:89:93:EC:72:1D:1C:DC:8F:F9"}}},"request":{"raw":"GET /global/2t0wrbkqkg6p2yz4.js HTTP/1.1\r\nHost: storage.perfectcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upmidiass.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 01:21:46 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 07 Nov 2025 06:22:52 GMT\r\nx-rgw-object-type: Normal\r\netag: W/\"b28a393f962859366f3089df67c73660\"\r\ncache-control: public, max-age=31536000\r\nx-amz-request-id: tx0000096d736b03b3486c9-00690d903d-a7126a5-prg\r\nx-77-nzt: FAwBuUwJGwH38vsEAAwBuUwKEwH3eAMAAAwBJRPCVwG3AwAAAAgBWbu8qAAA\r\nx-77-nzt-ray: fdb5412320d8f0ddaa8f1269cb0e172d\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-77-cache: HIT\r\nx-77-age: 326642\r\nserver: CDN77-Turbo\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":248470,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b28a393f962859366f3089df67c73660","sha1":"d47e7a384e16f86d08ffddec77465ba9cac07fce","sha256":"019ace4f12cc43aad530daee44533a0ae511aba0d7ef751e7a28de8fc8db4af7","sha512":"c1bc319a0e2a1eaf97fd9e2779fcd7fcf4f0b9212ca4f1f11d04beee20ace398889aecd0cb91c3cc3e8da604e6d98047cfa33610fe95ec065d4f76c29a6b3489","ssdeep":"3072:kUWO4QWIIwHaRxATh11hfHZ3f5nDIwx9J6HIypXT:kXrQWAHoC11hHhxnkwx9typXT","tlshash":"1634294436f1653153f794d948b70a1f7335b346c40a4908b67caaea2badc44f1bbb39","first_seen":"2025-11-11T01:22:18.114028Z","last_seen":"2025-11-19T23:14:15.643053Z","times_seen":3,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":62,"connect":7,"send":0,"wait":15,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.perfectcdn.com/global/w9z8nk0wkyg9w246.js","fqdn":"storage.perfectcdn.com","domain":"perfectcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upmidiass.net/","date":"2025-11-11T01:21:46.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1528564941.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 08:36:53 GMT","end":"Mon, 29 Dec 2025 08:36:52 GMT"},"fingerprint":{"sha1":"58:F9:AB:D3:41:F0:F0:57:36:0E:FE:0B:8C:2E:59:87:05:74:76:2F","sha256":"BC:2C:BC:93:39:19:24:20:29:A7:D3:A0:B1:7A:C8:9D:E5:8B:A7:AF:A4:43:CD:89:93:EC:72:1D:1C:DC:8F:F9"}}},"request":{"raw":"GET /global/w9z8nk0wkyg9w246.js HTTP/1.1\r\nHost: storage.perfectcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upmidiass.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 01:21:46 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 0\r\nlast-modified: Fri, 03 Oct 2025 05:16:45 GMT\r\nx-rgw-object-type: Normal\r\netag: \"d41d8cd98f00b204e9800998ecf8427e\"\r\ncache-control: public, max-age=31536000\r\nx-amz-request-id: tx00000e147aee14d396940-0068df5c47-a40a9f8-prg\r\nx-77-nzt: FAwBuUwJGwH3+SkzAAwBuUwKDAH3aQkAAAwBw7WvAgG3AQAAAAgBWbu8qAAA\r\nx-77-nzt-ray: fdb5412320d8f0ddaa8f1269904fda2c\r\nx-77-cache: HIT\r\nx-77-age: 3353081\r\nserver: CDN77-Turbo\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T17:07:59.023654Z","times_seen":15665480,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":61,"connect":21,"send":0,"wait":14,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mypanel.link/editor/assets/fa-solid-900.woff2","fqdn":"cdn.mypanel.link","domain":"mypanel.link","tld":"link"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upmidiass.net/","date":"2025-11-11T01:21:47.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1293389392.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 16:41:24 GMT","end":"Wed, 14 Jan 2026 16:41:23 GMT"},"fingerprint":{"sha1":"FB:55:73:98:BB:13:43:95:76:B8:20:AD:CF:F0:FD:FF:10:13:B9:38","sha256":"8F:FB:83:8D:6A:29:8F:69:69:0D:68:3C:85:AB:DE:F6:40:F0:F8:EF:BB:E9:EC:6E:49:AC:07:B2:B7:CD:A5:56"}}},"request":{"raw":"GET /editor/assets/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdn.mypanel.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://upmidiass.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://storage.perfectcdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 01:21:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 141036\r\nlast-modified: Thu, 05 Jun 2025 14:20:04 GMT\r\nx-rgw-object-type: Normal\r\netag: \"c56adeae94c455cb58c9b1e09d55a993\"\r\ncache-control: public, max-age=31536000\r\nx-amz-request-id: tx000002678bbbde6f929ae-00685d569c-9980a52-prg\r\nx-77-nzt: FAwBuUwJGwH3KWq0AAwBuUwKEwH3YswAAAwBJRPCNAG3gwIAAAgBbT1aDgAA\r\nx-77-nzt-ray: fdb5412392d6d6e1ab8f126977d0be09\r\nx-77-cache: HIT\r\nx-77-age: 11823657\r\nserver: CDN77-Turbo\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":141036,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 141036, version 331.-31458","md5":"c56adeae94c455cb58c9b1e09d55a993","sha1":"2c027afa09b59ede71968884034db8c5e0094825","sha256":"de64c5d9bc64ed989fe8ba1314eafa430d239579f730b4bdd2c7dc85c4f7fb0b","sha512":"82f7fde45c98f00fa4c6a08b847f4fb8babc03c18eaa62633e0ae7c93fec3fc8a3b1dcd7dd5c34a47ad8aa07791ac79058b8ee9f185e23b6eaee1b9279349212","ssdeep":"3072:4rOumuSNpi1d4/F12q5glnqctwTjgjfFqylKBGB8j5JnG7o8eJppNwPsp8:buSNqdCeq5YnqctigjLI2EDG7oHpTwPJ","tlshash":"27d312f53f6575ba344a3930e86cade717b2eb236b52fa357219424dd7f062d2c28180","first_seen":"2023-05-06T03:56:25Z","last_seen":"2026-05-23T23:34:47.102072Z","times_seen":534,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":130,"dns":66,"connect":8,"send":0,"wait":8,"receive":35,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.perfectcdn.com/global/atg8oy6k63y60mi2.css","fqdn":"storage.perfectcdn.com","domain":"perfectcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upmidiass.net/","date":"2025-11-11T01:21:46.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1528564941.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 08:36:53 GMT","end":"Mon, 29 Dec 2025 08:36:52 GMT"},"fingerprint":{"sha1":"58:F9:AB:D3:41:F0:F0:57:36:0E:FE:0B:8C:2E:59:87:05:74:76:2F","sha256":"BC:2C:BC:93:39:19:24:20:29:A7:D3:A0:B1:7A:C8:9D:E5:8B:A7:AF:A4:43:CD:89:93:EC:72:1D:1C:DC:8F:F9"}}},"request":{"raw":"GET /global/atg8oy6k63y60mi2.css HTTP/1.1\r\nHost: storage.perfectcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upmidiass.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 01:21:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 03 Oct 2025 05:16:45 GMT\r\nx-rgw-object-type: Normal\r\netag: W/\"824d1f48f41d071ebb66142f1cd644ab\"\r\ncache-control: public, max-age=31536000\r\nx-amz-request-id: tx00000af9bab91ebce0f85-0068df5c47-a79358e-prg\r\nx-77-nzt: FAwBuUwJGwH33yszAAwBuUwKCQH3gwcAAAwBw7WvAgG3AQAAAAgBWbu8pgAA\r\nx-77-nzt-ray: fdb5412320d8f0ddaa8f1269c0ce582c\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-77-cache: HIT\r\nx-77-age: 3353567\r\nserver: CDN77-Turbo\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":363879,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"824d1f48f41d071ebb66142f1cd644ab","sha1":"4868c772df50341e1aa00b052118490e89032b70","sha256":"6907b0debbc0a4a2fef94016afc2beea23474577915fb3a943ea5c45fe4f570e","sha512":"0aab03238155ac31f15a30c25391577a0e3a4d1c825040f640a72207bc5dafa905ea0465e7b93743855c85081acfd1ddb157ca1e7bee047ee7ba83a0ed62121a","ssdeep":"6144:BhL66a3SYiHENM6HN2681qsN362uejAzu/mhd:D1ZY2PjAKS","tlshash":"f27411b6e15914e8b377ca1f8390b6799936f339d1050e9ff08b9e0d4ec6b890192b5c","first_seen":"2025-09-30T07:52:00.075104Z","last_seen":"2026-01-20T06:24:06.284845Z","times_seen":21,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":127,"dns":75,"connect":7,"send":0,"wait":13,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/6/6b/WhatsApp.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upmidiass.net/","date":"2025-11-11T01:21:46.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 07:25:45 GMT","end":"Tue, 13 Jan 2026 07:25:44 GMT"},"fingerprint":{"sha1":"4F:30:D3:13:28:19:1F:F1:40:FE:1E:F5:B4:A8:89:FD:9E:AC:EC:AD","sha256":"2E:EF:3D:23:1B:2B:63:B9:1F:1A:F1:5A:43:84:9A:6A:40:7F:00:3E:4B:E6:48:EB:EB:7B:3D:2A:90:B7:F4:7E"}}},"request":{"raw":"GET /wikipedia/commons/6/6b/WhatsApp.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upmidiass.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 10 Nov 2025 07:36:26 GMT\r\nserver: ATS/9.2.11\r\netag: W/4025a2c2826def311c3b73dfa38a9b20\r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: qag4572nwx19x1y7zian641jyclf2pf\r\nlast-modified: Mon, 28 Feb 2022 22:39:04 GMT\r\ncontent-encoding: gzip\r\nage: 63920\r\naccept-ranges: bytes\r\nx-cache: cp3076 hit, cp3076 hit/62877\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=p2z_Wl2zllLWlbkpJnhjoAKoAAAAAFvdGBIS_MORxz4BqeXkdC2Bc2TExuPiRxzY;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Wed, 11 Nov 2026 00:00:00 GMT\r\ncontent-length: 1057\r\nx-request-id: e89e3e95-1099-4ca4-9eca-a19aafdf1abc\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server:9.2.11","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2501,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4025a2c2826def311c3b73dfa38a9b20","sha1":"e110e162c96cb014763e841bad3615da27348073","sha256":"dd6a4db2c394ca11aa8ab087369f2f50a12e6f874e49db7b1d5609d0a8fb28ca","sha512":"a40b02ab07e917b0070c7f1e0587a0f8753e157a218296f9ec2d2e06e273657ab82d831d494de839730546e3473ced9f0516175f755d313189528811bc4f4c60","ssdeep":"","tlshash":"695189e5b7ecf17dd8a787ecca31686c131e159e72278d98c24dee00c492d4d954c8d1","first_seen":"2023-07-13T00:36:46Z","last_seen":"2026-05-24T17:33:53.724201Z","times_seen":1785,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":39,"dns":0,"connect":21,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cairo/v6/SLXLc1nY6Hkvalr-ar6M7dd8aGZk.ttf","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upmidiass.net/","date":"2025-11-11T01:21:47.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:57 GMT","end":"Mon, 05 Jan 2026 08:38:56 GMT"},"fingerprint":{"sha1":"50:87:4B:4E:FB:30:AB:11:12:23:8E:8F:6B:DB:F7:6D:9A:37:CE:D9","sha256":"E1:35:48:CB:CA:92:00:73:EB:EA:EF:E9:B3:8E:D0:29:54:33:B5:C7:4E:73:DF:B7:7C:F8:B6:07:E7:AD:8C:24"}}},"request":{"raw":"GET /s/cairo/v6/SLXLc1nY6Hkvalr-ar6M7dd8aGZk.ttf HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://upmidiass.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://storage.perfectcdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: font/ttf\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 162588\r\ndate: Tue, 11 Nov 2025 01:21:47 GMT\r\nexpires: Wed, 11 Nov 2026 01:21:47 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Jul 2019 23:52:57 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":162588,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 15 names, Microsoft, language 0x409, Copyright 2009 The Cairo Project Authors (gaber@gaberism.net)Cairo SemiBoldRegular2.009;1KTF;Cai","md5":"47622f2d4b9fbf054502c6b7c8680a16","sha1":"e35e9970932e5e1e2a5dc176244e31a449fed46a","sha256":"cab52f2ef604ca851380fbb0bb555e884748d31a0747340d837cbf631724ad1f","sha512":"ae7825b180eb67cd0a1d1acd8af1cb6817f3d2b70cffeb034a2cb08ecab2d7667442d24be003bb8b1cfc8c2cd110c6b7883d84a1dc303b20aced6692ea6adab9","ssdeep":"3072:fkgj4Y1w865YgEhkBSyZcU9I9OG6LkPSImYsTKfpi5qMGI69i:fZEzYgEhQizj6Lk6IKkk5r","tlshash":"30f34a03fb05f305ee165b3554648393a3a4fc653b13c78ba17dbba8e85b1e21d82786","first_seen":"2023-05-09T03:54:39Z","last_seen":"2026-05-23T10:03:19.839335Z","times_seen":77,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":130,"dns":3,"connect":15,"send":0,"wait":29,"receive":47,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upmidiass.net/","fqdn":"upmidiass.net","domain":"upmidiass.net","tld":"net"},"ip":{"addr":"152.228.155.79","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-11T01:21:46.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"upmidiass.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Sep 2025 05:26:49 GMT","end":"Thu, 18 Dec 2025 05:26:48 GMT"},"fingerprint":{"sha1":"3B:E6:72:6D:75:E5:69:D8:A1:91:75:C9:4F:98:83:85:F2:19:0A:50","sha256":"34:10:11:0A:36:01:2E:C6:6B:4A:E7:8E:0A:64:75:26:8C:3C:6C:CE:54:A2:68:CC:0F:FA:3D:AE:68:8E:2C:9C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: upmidiass.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 11 Nov 2025 01:21:46 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nX-Query-Count: 9\r\nX-Cache-Enabled: 1\r\nSet-Cookie: PHPSESSID=rfenjc0ql92t67gft77he5bhhl; path=/; HttpOnly\n_csrf=010d99e517da8ba46e5a4e842947318fe25d28be0f54f09b7f674965f48937d7a%3A2%3A%7Bi%3A0%3Bs%3A5%3A%22_csrf%22%3Bi%3A1%3Bs%3A32%3A%22Wz8c5knvcgULGkgVLAtgThApMxRnZj8A%22%3B%7D; path=/; HttpOnly; SameSite=Lax\r\nX-Frame-Options: sameorigin, sameorigin\r\nContent-Security-Policy: frame-ancestors 'self', frame-ancestors 'self'\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=31536000;\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Sentry:9.12.0","description":"Sentry is an open-source platform for workflow productivity, aggregating errors from across the stack in real time.","website":"https://sentry.io/","common_platform_enumeration":"","icon":"Sentry.svg","categories":["Issue trackers"]},{"name":"Google Sign-in","description":"Google Sign-In is a secure authentication system that reduces the burden of login for users, by enabling them to sign in with their Google account.","website":"https://developers.google.com/identity/sign-in/web","common_platform_enumeration":"","icon":"Google.svg","categories":["Authentication"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":43308,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (891), with CRLF, LF line terminators","md5":"7d081cddbb0c7b86e13158763cd5788f","sha1":"f237a252af23d5f1b565d43b224cc7690acd1def","sha256":"62ce703ec5eedfe6d93797aaed3df8d3275b8c2db34ae7243e6edad8e5ccc98c","sha512":"6f7ecbd5900735244dd1e25ecd078fe1a8f96e12e167a2e7944a56bdb3396af3a8eaf509a2c0d54fe8bd74aa334c332ffe42bec6ea2373aba6291c2b29b79e57","ssdeep":"768:b1CyowuV3a0JYXA+h239wEwxuEhiNFB8RnKpP:b1CyowuV3VJYXA+h239wriNzinKpP","tlshash":"a013652599f314a25453c0dcafb29b0a2f90d207ca0b8a55b7ee43e55fcadd39c5368c","first_seen":"2025-11-11T01:22:18.122859Z","last_seen":"2025-11-11T01:22:18.122859Z","times_seen":1,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":133,"dns":52,"connect":25,"send":0,"wait":63,"receive":1,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refilupmidiass.xyz/","fqdn":"refilupmidiass.xyz","domain":"refilupmidiass.xyz","tld":"xyz"},"ip":{"addr":"89.117.7.136","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://upmidiass.net/","date":"2025-11-11T01:21:46.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refilupmidiass.xyz","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Sep 2025 13:01:52 GMT","end":"Mon, 15 Dec 2025 13:01:51 GMT"},"fingerprint":{"sha1":"6B:80:8E:4E:19:C0:64:88:27:0B:F0:CA:4B:A4:46:04:43:05:09:4E","sha256":"09:05:EA:66:7B:E9:07:B5:95:C3:C2:66:10:93:41:7E:CF:7D:C1:EE:1E:EE:28:44:19:7A:12:EB:96:60:23:8C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: refilupmidiass.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upmidiass.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.2.29\r\nset-cookie: PHPSESSID=3dus9er2mjj4sfj7hvr4clktfj; path=/; secure; HttpOnly; SameSite=None\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 2395\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 11 Nov 2025 01:21:47 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":6988,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"01706cee320681463a429934e89275a9","sha1":"4b4c60c0b65dd028b957405dab5d50b4f0eb1b54","sha256":"3b350f488bdebef34551ce9969263615060c46adfa18f89d9f6a572c5e619427","sha512":"5558e7460c0fd3d0548272f1ff9abab7b8b3f12058a9524b12a1f51d5867e3dbe0553a4e02743f6080263d04b0355789a1b8df5cbd0970c4d813746dc531d53d","ssdeep":"96:/E/lKbNWqGCKuBGVYtBp4WAwgIwZ2clqHmxDEHo:/EhqlGGtBpUwjS2E6mdEI","tlshash":"5ae15263254421656473e338ef92e28cf630a423e45395aa7c9d1b27dfeee904436bd8","first_seen":"2025-11-11T01:22:18.124549Z","last_seen":"2025-11-11T01:22:18.124549Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1820,"timings":{"blocked":803,"dns":92,"connect":210,"send":0,"wait":214,"receive":0,"ssl":498},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-11","alert":"Sinkholed","trigger":"refilupmidiass.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mypanel.link/editor/assets/fa-regular-400.woff2","fqdn":"cdn.mypanel.link","domain":"mypanel.link","tld":"link"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upmidiass.net/","date":"2025-11-11T01:21:47.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1293389392.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 16:41:24 GMT","end":"Wed, 14 Jan 2026 16:41:23 GMT"},"fingerprint":{"sha1":"FB:55:73:98:BB:13:43:95:76:B8:20:AD:CF:F0:FD:FF:10:13:B9:38","sha256":"8F:FB:83:8D:6A:29:8F:69:69:0D:68:3C:85:AB:DE:F6:40:F0:F8:EF:BB:E9:EC:6E:49:AC:07:B2:B7:CD:A5:56"}}},"request":{"raw":"GET /editor/assets/fa-regular-400.woff2 HTTP/1.1\r\nHost: cdn.mypanel.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://upmidiass.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://storage.perfectcdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 01:21:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 173528\r\nlast-modified: Thu, 05 Jun 2025 14:20:04 GMT\r\nx-rgw-object-type: Normal\r\netag: \"68790d777b27bd80f36997f36e06a1b6\"\r\ncache-control: public, max-age=31536000\r\nx-amz-request-id: tx000003472ba7a5e975001-00685d56b1-9609f36-prg\r\nx-77-nzt: FAwBuUwJGwH3ptqzAAwBuUwKCQH35VsBAAwBJRPCVwG3bwIAAAgBbT1aDQAA\r\nx-77-nzt-ray: fdb5412392d6d6e1ab8f126919542c0a\r\nx-77-cache: HIT\r\nx-77-age: 11786918\r\nserver: CDN77-Turbo\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":173528,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 173528, version 331.-31458","md5":"68790d777b27bd80f36997f36e06a1b6","sha1":"789b5df7a1d0957e466eff37aecfe48d07b0c076","sha256":"3f0558f4c3a401aaed3a3666bb127323fe4c79a29b6c422021b08166a5b81db5","sha512":"bf25f97a6c45d920e7e7b598e6b7332faa68fc55d61bd255369ff85869618aefad2f4ad8ecb1446e8327220b4419369884bdcd0ddff94df749a6f58db452abab","ssdeep":"3072:w9Wi/pGKJH2if+2jGADo+QzpIXN02wmaCDE3wkdieehJgULZ:QWImUDuSXNoTCDnleI1Z","tlshash":"430413047a0353fbccc9654b46b8083360ab08d40ee86dfe2bf980c955acddba5da75d","first_seen":"2023-05-10T03:36:52Z","last_seen":"2026-05-23T17:20:11.208365Z","times_seen":453,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":110,"dns":0,"connect":12,"send":0,"wait":18,"receive":31,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cairo/v6/SLXLc1nY6Hkvalqaa76M7dd8aGZk.ttf","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upmidiass.net/","date":"2025-11-11T01:21:47.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:57 GMT","end":"Mon, 05 Jan 2026 08:38:56 GMT"},"fingerprint":{"sha1":"50:87:4B:4E:FB:30:AB:11:12:23:8E:8F:6B:DB:F7:6D:9A:37:CE:D9","sha256":"E1:35:48:CB:CA:92:00:73:EB:EA:EF:E9:B3:8E:D0:29:54:33:B5:C7:4E:73:DF:B7:7C:F8:B6:07:E7:AD:8C:24"}}},"request":{"raw":"GET /s/cairo/v6/SLXLc1nY6Hkvalqaa76M7dd8aGZk.ttf HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://upmidiass.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://storage.perfectcdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: font/ttf\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 154184\r\ndate: Tue, 11 Nov 2025 01:21:47 GMT\r\nexpires: Wed, 11 Nov 2026 01:21:47 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 17 Jul 2019 00:02:19 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":154184,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright 2009 The Cairo Project Authors (gaber@gaberism.net)CairoBold2.009;1KTF;Cairo-BoldCairo","md5":"a14c20325bb25764f63bcfbc076e9201","sha1":"0abf7584eebee8b8f78cd769dd486a84d7e82762","sha256":"09740b09161fb32f9d6e836a210e9c7350e68713af7310158686041bb2f62acb","sha512":"924b0a63d4cc1e43edf899a4ae9252385dc7e0f5550276ee2e43b9ad95a13f9e0c4c0686ad3598eaa9ebc3dfb9aa18c7677d3677f9db50e78bd67f1331ef7c5d","ssdeep":"1536:Y9B0vOvjl6ZHuGJ+R91m25er+KOn00xpLZxCTol27FUvywg2EzUNXaqzjpI6wlgQ:Sjl6uR91znMFUKAIZsbe4qiEgX3jX3li","tlshash":"3ce31957fb44f309ee1a6a35546053a3a3a4fc343b13c787a16db758f8ab0e10d86297","first_seen":"2023-05-09T03:54:39Z","last_seen":"2026-05-23T10:03:19.859584Z","times_seen":73,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":252,"dns":0,"connect":0,"send":0,"wait":26,"receive":24,"ssl":224},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/gsi/button?type=standard\u0026size=large\u0026theme=outline\u0026text=sign_in_with\u0026shape=rectangular\u0026logo_alignment=left\u0026is_fedcm_supported=false\u0026client_id=1079841415737-jqm9f77s3vlbpkirhnh6h7slhh8pvd0n.apps.googleusercontent.com\u0026iframe_id=gsi_107218_585439\u0026cas=W9rdfzGHYrZEJ6CvsV3Z454wWAo0mskM3EdxxnoreS4","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://upmidiass.net/","date":"2025-11-11T01:21:47.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:33 GMT","end":"Mon, 05 Jan 2026 08:37:32 GMT"},"fingerprint":{"sha1":"17:9D:6B:F6:A8:18:29:EC:16:2C:3C:3D:F2:EA:93:19:C7:92:EE:AA","sha256":"AA:D4:E9:5C:D4:70:A7:86:45:DE:62:83:82:60:F9:B9:46:CF:40:73:19:FA:3B:01:A9:7E:9B:32:24:EE:57:EC"}}},"request":{"raw":"GET /gsi/button?type=standard\u0026size=large\u0026theme=outline\u0026text=sign_in_with\u0026shape=rectangular\u0026logo_alignment=left\u0026is_fedcm_supported=false\u0026client_id=1079841415737-jqm9f77s3vlbpkirhnh6h7slhh8pvd0n.apps.googleusercontent.com\u0026iframe_id=gsi_107218_585439\u0026cas=W9rdfzGHYrZEJ6CvsV3Z454wWAo0mskM3EdxxnoreS4 HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upmidiass.net/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 11 Nov 2025 01:21:47 GMT\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_dd7de8473bddc59c6b748810a67a39b1\"\r\ncontent-security-policy: script-src 'nonce-zS1W0kfFv8j6KSPpa0BfMA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http\r\nreport-to: {\"group\":\"coop_dd7de8473bddc59c6b748810a67a39b1\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":183411,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (59246)","md5":"a3a84a591bc584af2dcf4536ac49398b","sha1":"919003eb8ecfa7b612adc3bf117ddb9211700c91","sha256":"781ee28b0202d59361538b02eb35c0719dfc117fb44caff972fed6cad38c4d3f","sha512":"7308bfba5f55f7845a94068db9de829eff1454d5d3c80ffc34ab1c59dc6eeab7f13fb8aae0f43328c6146472b094156606fee44b7b7068de43bdad7f844adcda","ssdeep":"1536:H36iFOogchL3+eUMW0XFTtwriUu0xn5BpDJASPkbKRDIK9Blf0Eqt1Gz2Q2Pfdab:HP+yWFu0xn5dFkbKRpfMt1GzyC","tlshash":"2e043998b3a2b0269273f472602f100af43ba466f4596daef294d8f4ddf14690173f79","first_seen":"2025-11-11T01:22:18.128462Z","last_seen":"2025-11-11T01:22:18.128462Z","times_seen":1,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/gFznRwxt/Imagem-do-Whats-App-de-2025-10-22-s-15-39-25-cda57cbd.jpg","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"108.181.22.211","port":443,"asn":40676,"as":"AS40676","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refilupmidiass.xyz/","date":"2025-11-11T01:21:48.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Oct 2025 07:16:26 GMT","end":"Thu, 15 Jan 2026 07:16:25 GMT"},"fingerprint":{"sha1":"EF:64:1C:29:71:7D:F8:71:95:24:AA:07:38:6F:83:7C:BD:D5:84:21","sha256":"6E:ED:52:F6:82:45:93:34:E3:3E:85:E8:88:D8:4C:99:C3:07:8E:E9:96:05:93:39:A5:F6:39:0C:29:EE:51:38"}}},"request":{"raw":"GET /gFznRwxt/Imagem-do-Whats-App-de-2025-10-22-s-15-39-25-cda57cbd.jpg HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://refilupmidiass.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 11 Nov 2025 01:21:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8392\r\nlast-modified: Wed, 22 Oct 2025 18:42:44 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8392,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 180x180, components 3","md5":"325f69669c68b33f715ded36877c9ebc","sha1":"48e5a2c6af81550abe6657fd3096f627d2995291","sha256":"71da5d90271fdbfbb877f8fd7655fbb006097c45aa95585defdf49b99b42dc23","sha512":"0859fcf684edc6372bbab53e9cc64f3157a419c59b4bb851717182153b863a422416e72d2043c359615fcc4eaf3959cacc7c1159f111e36f0d6892b287bbb972","ssdeep":"192:NrQMPr6YZh62dhDyN3Lz8p2GF8iYFOa7T5OB47DmR:NrQGhZhrXyj7FhROBiM","tlshash":"98029e41de544ddafdf141b8f644bf201af834312ddf649f92de40a40c7286b5fa4aa4","first_seen":"2025-11-11T01:22:18.130334Z","last_seen":"2025-11-11T01:22:18.130334Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3505,"timings":{"blocked":357,"dns":49,"connect":147,"send":0,"wait":2776,"receive":15,"ssl":157},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.perfectcdn.com/hz3ntn/nwjl1jcoeazp5w3e.css","fqdn":"storage.perfectcdn.com","domain":"perfectcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upmidiass.net/","date":"2025-11-11T01:21:46.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1528564941.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 08:36:53 GMT","end":"Mon, 29 Dec 2025 08:36:52 GMT"},"fingerprint":{"sha1":"58:F9:AB:D3:41:F0:F0:57:36:0E:FE:0B:8C:2E:59:87:05:74:76:2F","sha256":"BC:2C:BC:93:39:19:24:20:29:A7:D3:A0:B1:7A:C8:9D:E5:8B:A7:AF:A4:43:CD:89:93:EC:72:1D:1C:DC:8F:F9"}}},"request":{"raw":"GET /hz3ntn/nwjl1jcoeazp5w3e.css HTTP/1.1\r\nHost: storage.perfectcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upmidiass.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 01:21:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 25 Oct 2025 02:44:11 GMT\r\nx-rgw-object-type: Normal\r\netag: W/\"b5d30dfd5851d5478902590055da4ff9\"\r\ncache-control: public, max-age=31536000\r\nx-amz-request-id: tx000001723916063acc0c7-0068fc4146-aa3a405-prg\r\nx-77-nzt: FAgBuUwJGwFBDAG5TAoBAdf9YhUADAElE8IuAbdn6wAACAFZu7yDAAA\r\nx-77-nzt-ray: fdb5412320d8f0ddaa8f1269a64f852c\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-77-cache: HIT\r\nx-77-age: 1401597\r\nserver: CDN77-Turbo\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":577637,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (54836)","md5":"b5d30dfd5851d5478902590055da4ff9","sha1":"74ec57fe896f46414900ae03dfc78ccb0d29b6f8","sha256":"927966e39085784523d18a773cc7fe696bb18f13e0eb580ac20822ec33c1bd54","sha512":"11a0e7b26a633e05e93aad0fb3259044eec35e48787432aa3935c4edc50a62da7a0c02cffb2d2619ce81e23e5eba5008c30f3984caaacc9edc037b08ba003a61","ssdeep":"1536:57ttVA3L+7zKUZ7pWQadqIBS8XOC6sAN6Cx1FVghwZv7UqaZ8wqIjSupe+EFQZjh:5C+gFJt","tlshash":"4cc4f010e67466fb3963532c4fdadf9d33455282e80247e5bf9881c063ca7fb11e998a","first_seen":"2025-11-11T01:22:18.132003Z","last_seen":"2025-11-11T01:22:18.132003Z","times_seen":1,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":128,"dns":73,"connect":7,"send":0,"wait":35,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/gsi/client","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upmidiass.net/","date":"2025-11-11T01:21:46.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:39:43 GMT","end":"Mon, 05 Jan 2026 08:39:42 GMT"},"fingerprint":{"sha1":"32:1E:F2:5F:CD:B5:6F:E8:7C:2C:1A:DD:B8:05:4B:D6:B4:FE:9E:1B","sha256":"A8:A2:E6:F7:C3:89:AC:E8:56:D8:99:42:F8:8B:17:DA:51:F5:2F:40:31:9B:33:DD:6F:E8:60:7E:07:B6:83:37"}}},"request":{"raw":"GET /gsi/client HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upmidiass.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nexpires: Tue, 11 Nov 2025 01:21:46 GMT\r\ndate: Tue, 11 Nov 2025 01:21:46 GMT\r\ncache-control: private, max-age=1800\r\ncontent-security-policy: script-src 'nonce-__GzBvkSMvKgJ9VjjcWR0Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_dd7de8473bddc59c6b748810a67a39b1\"\r\nreport-to: {\"group\":\"coop_dd7de8473bddc59c6b748810a67a39b1\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":241527,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2663)","md5":"ffde76e3f2ba4200476df8aabdb54c4f","sha1":"e69cc6ce18b3c79c5e0f5d9070ad65f71fd07e4a","sha256":"b0929ce50e37b1f66bfbad65fad6d49b08c93705475d1a05d953f1588c089739","sha512":"ebe82685df279d695a138b6e17d9e35fc3baeadb20e705d9655f870b4fd4dacf244d1bd2c37bae7526399e33df19a1cc1305ceb758b15d33b1c6183017e73ce0","ssdeep":"6144:D+Ku0xn5th2Lz6t/C7II/dnCqHffHas/VgyP5wQ:DVheU/C7IUNd/fHas/+KyQ","tlshash":"30345bdcb6e270359213f8b5d43f410ab036aa79f44a8c6cf694c6f5acb09850167f7a","first_seen":"2025-11-07T20:12:29.426751Z","last_seen":"2025-11-13T02:07:49.109525Z","times_seen":1168,"resource_available":true,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":1,"connect":22,"send":0,"wait":62,"receive":0,"ssl":300},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/googlesans/v62/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCIhMl07v0x.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://accounts.google.com/gsi/button?type=standard\u0026size=large\u0026theme=outline\u0026text=sign_in_with\u0026shape=rectangular\u0026logo_alignment=left\u0026is_fedcm_supported=false\u0026client_id=1079841415737-jqm9f77s3vlbpkirhnh6h7slhh8pvd0n.apps.googleusercontent.com\u0026iframe_id=gsi_107218_585439\u0026cas=W9rdfzGHYrZEJ6CvsV3Z454wWAo0mskM3EdxxnoreS4","date":"2025-11-11T01:21:47.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:57 GMT","end":"Mon, 05 Jan 2026 08:38:56 GMT"},"fingerprint":{"sha1":"50:87:4B:4E:FB:30:AB:11:12:23:8E:8F:6B:DB:F7:6D:9A:37:CE:D9","sha256":"E1:35:48:CB:CA:92:00:73:EB:EA:EF:E9:B3:8E:D0:29:54:33:B5:C7:4E:73:DF:B7:7C:F8:B6:07:E7:AD:8C:24"}}},"request":{"raw":"GET /s/googlesans/v62/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCIhMl07v0x.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://accounts.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 55216\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Nov 2025 18:28:46 GMT\r\nexpires: Fri, 06 Nov 2026 18:28:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 370381\r\nlast-modified: Tue, 29 Oct 2024 18:37:59 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55216,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 55216, version 1.0","md5":"79a898c4178c1c3da9702e53272b28f4","sha1":"47039421fbe12912a6ec8731181f20b0d084eda9","sha256":"d1f470e35f02537a3290ad9015b7c81fe9ca3295f6e691ef564520bcb6314501","sha512":"0a7894f91f314ada88b69e8e710e42fc3c69e5abba5149a52a3ae7aacbc09bcd6332626c1c5bf9f7637d5d1ced6fac7e3a0cffeb780b733b879b71fc7322813a","ssdeep":"768:GM5rYySQ4HdDApsqID60V1GIchzku+4/Asgjo4f7vmyKjrE7iE7RvJ80cDrATlkO:HIe0mxoNkAY4fFK07vM0cDrqzAhHSTf","tlshash":"f04301ebb01a1189e6a2207112261979609b84e19f3fa118717f638d8cd7bfd75d8374","first_seen":"2025-03-21T06:19:09.564073Z","last_seen":"2026-05-24T17:20:48.893355Z","times_seen":100842,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":16,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play.google.com/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"play.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://accounts.google.com/gsi/button?type=standard\u0026size=large\u0026theme=outline\u0026text=sign_in_with\u0026shape=rectangular\u0026logo_alignment=left\u0026is_fedcm_supported=false\u0026client_id=1079841415737-jqm9f77s3vlbpkirhnh6h7slhh8pvd0n.apps.googleusercontent.com\u0026iframe_id=gsi_107218_585439\u0026cas=W9rdfzGHYrZEJ6CvsV3Z454wWAo0mskM3EdxxnoreS4","date":"2025-11-11T01:21:57.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:46 GMT","end":"Mon, 05 Jan 2026 08:37:45 GMT"},"fingerprint":{"sha1":"2C:0B:CF:F3:2B:F7:F0:76:D4:B1:1F:DB:E2:21:58:B5:EC:B7:6A:FF","sha256":"DE:F5:87:79:4F:56:FB:34:64:B9:21:C9:8F:92:27:D5:ED:C7:A3:88:BD:53:84:65:7D:EF:99:09:59:84:48:BE"}}},"request":{"raw":"OPTIONS /log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: play.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-goog-authuser\r\nOrigin: https://accounts.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://accounts.google.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Tue, 11 Nov 2025 01:21:57 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T17:07:59.023654Z","times_seen":15665480,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":124,"dns":0,"connect":27,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/gsi/log?client_id=undefined\u0026as=undefined\u0026bs=undefined\u0026event=id.init.relativeLoginUri.%2Fconfirm_signup","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://upmidiass.net/","date":"2025-11-11T01:21:47.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:33 GMT","end":"Mon, 05 Jan 2026 08:37:32 GMT"},"fingerprint":{"sha1":"17:9D:6B:F6:A8:18:29:EC:16:2C:3C:3D:F2:EA:93:19:C7:92:EE:AA","sha256":"AA:D4:E9:5C:D4:70:A7:86:45:DE:62:83:82:60:F9:B9:46:CF:40:73:19:FA:3B:01:A9:7E:9B:32:24:EE:57:EC"}}},"request":{"raw":"POST /gsi/log?client_id=undefined\u0026as=undefined\u0026bs=undefined\u0026event=id.init.relativeLoginUri.%2Fconfirm_signup HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nContent-Length: 0\r\nOrigin: https://upmidiass.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upmidiass.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://upmidiass.net\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 11 Nov 2025 01:21:47 GMT\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, script-src 'nonce-e_J1lKMrCvDyuJx8Togcow' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http\r\nreport-to: {\"group\":\"coop_dd7de8473bddc59c6b748810a67a39b1\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_dd7de8473bddc59c6b748810a67a39b1\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T17:07:59.023654Z","times_seen":15665480,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/googlesans/v62/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCIhMl07v0x.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://accounts.google.com/gsi/button?type=standard\u0026size=large\u0026theme=outline\u0026text=sign_in_with\u0026shape=rectangular\u0026logo_alignment=left\u0026is_fedcm_supported=false\u0026client_id=1079841415737-jqm9f77s3vlbpkirhnh6h7slhh8pvd0n.apps.googleusercontent.com\u0026iframe_id=gsi_107218_585439\u0026cas=W9rdfzGHYrZEJ6CvsV3Z454wWAo0mskM3EdxxnoreS4","date":"2025-11-11T01:21:47.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:57 GMT","end":"Mon, 05 Jan 2026 08:38:56 GMT"},"fingerprint":{"sha1":"50:87:4B:4E:FB:30:AB:11:12:23:8E:8F:6B:DB:F7:6D:9A:37:CE:D9","sha256":"E1:35:48:CB:CA:92:00:73:EB:EA:EF:E9:B3:8E:D0:29:54:33:B5:C7:4E:73:DF:B7:7C:F8:B6:07:E7:AD:8C:24"}}},"request":{"raw":"GET /s/googlesans/v62/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCIhMl07v0x.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://accounts.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 55216\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Nov 2025 18:28:46 GMT\r\nexpires: Fri, 06 Nov 2026 18:28:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 370381\r\nlast-modified: Tue, 29 Oct 2024 18:37:59 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55216,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 55216, version 1.0","md5":"79a898c4178c1c3da9702e53272b28f4","sha1":"47039421fbe12912a6ec8731181f20b0d084eda9","sha256":"d1f470e35f02537a3290ad9015b7c81fe9ca3295f6e691ef564520bcb6314501","sha512":"0a7894f91f314ada88b69e8e710e42fc3c69e5abba5149a52a3ae7aacbc09bcd6332626c1c5bf9f7637d5d1ced6fac7e3a0cffeb780b733b879b71fc7322813a","ssdeep":"768:GM5rYySQ4HdDApsqID60V1GIchzku+4/Asgjo4f7vmyKjrE7iE7RvJ80cDrATlkO:HIe0mxoNkAY4fFK07vM0cDrqzAhHSTf","tlshash":"f04301ebb01a1189e6a2207112261979609b84e19f3fa118717f638d8cd7bfd75d8374","first_seen":"2025-03-21T06:19:09.564073Z","last_seen":"2026-05-24T17:20:48.893355Z","times_seen":100842,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser.sentry-cdn.com/9.12.0/bundle.min.js","fqdn":"browser.sentry-cdn.com","domain":"sentry-cdn.com","tld":"com"},"ip":{"addr":"151.101.66.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upmidiass.net/","date":"2025-11-11T01:21:46.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sentry-cdn.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q1","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 07 Apr 2025 18:50:27 GMT","end":"Sat, 09 May 2026 18:50:26 GMT"},"fingerprint":{"sha1":"00:4D:2B:16:F6:29:29:D8:2F:20:48:BD:32:13:96:5D:37:EB:F8:25","sha256":"07:FA:B8:3E:6D:AC:BB:16:5C:22:49:01:30:87:B9:66:E1:FB:75:FD:50:1B:81:91:9A:06:CF:FF:A4:67:5D:F2"}}},"request":{"raw":"GET /9.12.0/bundle.min.js HTTP/1.1\r\nHost: browser.sentry-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://upmidiass.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upmidiass.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 08 Sep 2026 15:56:05 GMT\r\nlast-modified: Tue, 08 Apr 2025 14:19:54 GMT\r\netag: \"615a302e18050b88ff11e1a3ca8980bb\"\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Tue, 11 Nov 2025 01:21:46 GMT\r\nage: 2880478\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: Fastly\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-length: 25300\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73795,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"0bdface08ccbf51a82ffd7a01f8d5a3e","sha1":"a1c17b0e3e1ed1d931fe84a3a71bdc89e8c2e69b","sha256":"0c19c16d3d50ab060356873e9d1820638028bf1ad83d556b07e2e34b1405a808","sha512":"30bbe21e848eeb3e57e8c292f7cf0584f5aafcff78a6c02266c8a4111932fc95264e1484493a9697317e17a8f912f0e9a7cdaf2df90847128947c1fb050ba7b1","ssdeep":"1536:BRrZqN2dzvOfuYnOliozMq2EBETTVcxM5pT7TxTfnmse:vV3y4zaESTMOpTXxax","tlshash":"1273a3c8b1d2b03147e71aa5a17b0106f73a5d90304bc594f56cddea2ea244be2b7f2d","first_seen":"2025-05-26T19:01:12.683935Z","last_seen":"2026-03-25T21:03:06.681136Z","times_seen":374,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":32,"dns":1,"connect":13,"send":0,"wait":14,"receive":4,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mypanel.link/editor/assets/fa-light-300.woff2","fqdn":"cdn.mypanel.link","domain":"mypanel.link","tld":"link"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upmidiass.net/","date":"2025-11-11T01:21:47.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1293389392.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Oct 2025 16:41:24 GMT","end":"Wed, 14 Jan 2026 16:41:23 GMT"},"fingerprint":{"sha1":"FB:55:73:98:BB:13:43:95:76:B8:20:AD:CF:F0:FD:FF:10:13:B9:38","sha256":"8F:FB:83:8D:6A:29:8F:69:69:0D:68:3C:85:AB:DE:F6:40:F0:F8:EF:BB:E9:EC:6E:49:AC:07:B2:B7:CD:A5:56"}}},"request":{"raw":"GET /editor/assets/fa-light-300.woff2 HTTP/1.1\r\nHost: cdn.mypanel.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://upmidiass.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://storage.perfectcdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 01:21:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 189716\r\nlast-modified: Thu, 05 Jun 2025 14:20:04 GMT\r\nx-rgw-object-type: Normal\r\netag: \"a42ca4042887a2f595122160e1055073\"\r\ncache-control: public, max-age=31536000\r\nx-amz-request-id: tx00000c6e49635f6f46a1c-00685d56ad-96a0ccf-prg\r\nx-77-nzt: FAwBuUwJGwH3UUW0AAwBuUwKAQH3rfEAAAwBnJIhHwG3AAIAAAgBbT1aDgAA\r\nx-77-nzt-ray: fdb5412392d6d6e1ab8f12693473ec09\r\nx-77-cache: HIT\r\nx-77-age: 11814225\r\nserver: CDN77-Turbo\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":189716,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 189716, version 331.-31458","md5":"a42ca4042887a2f595122160e1055073","sha1":"aacda65c14e1a8a611b98dde15b48d612f7f8182","sha256":"2d743e9a1f404caf0d504a661f1d6d801e118fe2e928556e2798a7a2efe82daf","sha512":"98c51f2dec7b3df550a51688bee5d96537ad7724b538d2ade4bda26fd3d7a62bb12dd1a313cf890640c2b41aa150f6d7cf7b43ff5bde0818e0c93566417d7842","ssdeep":"3072:xsazuf7j3VgrGsDCWNd5qfxpZjArLaNB/8Y/W1hIr2kW9bIF6fT3S1M2TailGj:eom3Vkf+WNDEx1r0Y41R7S+we","tlshash":"75041239da4306e8220818bbfd2dcd15f18979cfbf40877da0ea41492a6d1b4d60ceb9","first_seen":"2023-05-05T17:44:06Z","last_seen":"2026-05-23T17:20:11.178338Z","times_seen":539,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":97,"dns":58,"connect":8,"send":0,"wait":22,"receive":25,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/gsi/style","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.147.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upmidiass.net/","date":"2025-11-11T01:21:47.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:33 GMT","end":"Mon, 05 Jan 2026 08:37:32 GMT"},"fingerprint":{"sha1":"17:9D:6B:F6:A8:18:29:EC:16:2C:3C:3D:F2:EA:93:19:C7:92:EE:AA","sha256":"AA:D4:E9:5C:D4:70:A7:86:45:DE:62:83:82:60:F9:B9:46:CF:40:73:19:FA:3B:01:A9:7E:9B:32:24:EE:57:EC"}}},"request":{"raw":"GET /gsi/style HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upmidiass.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nexpires: Tue, 11 Nov 2025 01:21:47 GMT\r\ndate: Tue, 11 Nov 2025 01:21:47 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_dd7de8473bddc59c6b748810a67a39b1\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1\"}]}\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, script-src 'nonce-iq4VA8XfLr7IKSnyMMr-QA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_dd7de8473bddc59c6b748810a67a39b1\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":696,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (696), with no line terminators","md5":"ee570cebd6ae40b9567844b080aee1e9","sha1":"2b7b0ffcfe8aca40ced147fb7ce107010392d6b9","sha256":"d49e8f04be7ccbb69e87ae474ee50f6903b780451989e66d35ffc247a80510fe","sha512":"836c832111c285f7cb692c4eb62e2bca615017b6ab4af6920674f17df0ae1da040f7171208d5d312c3c43ed8ed7e49b653e7fce0948f24076d0548f7c8e8f25a","ssdeep":"","tlshash":"430197321aa2602eecb3ab3bf04a9d8c023aa117eeb705ccb59cca15c38d95874a5041","first_seen":"2025-10-22T21:08:41.081019Z","last_seen":"2026-05-24T17:04:20.226444Z","times_seen":66289,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"storage.perfectcdn.com/hz3ntn/8kd9ac1cz9fw95e1.png","fqdn":"storage.perfectcdn.com","domain":"perfectcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upmidiass.net/","date":"2025-11-11T01:21:46.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1528564941.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 08:36:53 GMT","end":"Mon, 29 Dec 2025 08:36:52 GMT"},"fingerprint":{"sha1":"58:F9:AB:D3:41:F0:F0:57:36:0E:FE:0B:8C:2E:59:87:05:74:76:2F","sha256":"BC:2C:BC:93:39:19:24:20:29:A7:D3:A0:B1:7A:C8:9D:E5:8B:A7:AF:A4:43:CD:89:93:EC:72:1D:1C:DC:8F:F9"}}},"request":{"raw":"GET /hz3ntn/8kd9ac1cz9fw95e1.png HTTP/1.1\r\nHost: storage.perfectcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://upmidiass.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 11 Nov 2025 01:21:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 150508\r\nlast-modified: Thu, 05 Jun 2025 15:46:25 GMT\r\nx-rgw-object-type: Normal\r\netag: \"6f20dcff6bbba5ead487f3fb427255b1\"\r\ncache-control: public, max-age=31536000\r\nx-amz-request-id: tx000002fa47a6970301329-00687e8b7d-9b58266-prg\r\nx-77-nzt: FAgBuUwJGwFBDAG5TAoMAdcXG4cADAElE8I0AZcW6QwACAFtPVoOAAA\r\nx-77-nzt-ray: fdb5412320d8f0ddaa8f1269d61b6f2c\r\nx-77-cache: HIT\r\nx-77-age: 8854295\r\nserver: CDN77-Turbo\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":150508,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 954 x 262, 8-bit/color RGBA, non-interlaced","md5":"6f20dcff6bbba5ead487f3fb427255b1","sha1":"55c004800d1cd9c7c40b30ae5b218a600a4026f7","sha256":"e2652ed03ed74a668c5665c367b5bfcb52fbdb8c3561ba96578f2412300cc94b","sha512":"5af99422e790d481e7d358e09bd90a7542ca65a9dc9da276fcc8811edc0ae1b01df73aa6feda2702204c85542f3f9eb1f7b12e72fd0f09cd21cc9973bab884ba","ssdeep":"3072:DKu3viiw5Wu6kL6XWbInFsUxknJV3+WUsiWJ3NUaH97uTn19H3S:DKFWu6kL3IniUgJVLvpDUpjrH3S","tlshash":"3ee3128ad275027e1fc60efb09da94d0e6c02fca3bb48e0066595696474c3be17ec6f1","first_seen":"2025-11-11T01:22:18.137974Z","last_seen":"2025-11-11T01:22:18.137974Z","times_seen":1,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":126,"dns":0,"connect":0,"send":0,"wait":36,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}