{"report_id":"ef447884-bc98-4a28-bd2b-23b36d15b2be","version":6,"status":"done","tags":[],"date":"2026-03-02T20:45:56Z","url":{"schema":"http","addr":"ww.anime4up.rest/","fqdn":"ww.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"104.21.44.172","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"w1.anime4up.rest/","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"title":"Anime4up | مشاهدة وتحميل الانمي المترجم اون لاين","dom":{"size":363,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (363), with no line terminators","md5":"818a25cd8b9ca06f584a7f87fcf27248","sha1":"33197952e91bd3ebe27dec0d9381e075fa8f74e2","sha256":"7d006113fdef4a0756e98a27e90fa24e125b8c4ce5720f0d7b8b26afa23a0636","sha512":"62853f6fad912fccba3a11047c8d5fbaa68a965f3fc5f45444f46e7654bc16178c7d5855e914cc55fd642c6a6453ea4d5cabf6f695da12d6e0ff2232f7153e10","ssdeep":"","tlshash":"3ee020ea5d79c93476b4068b30f3e39c1a20a6d07611d64452d5dc3b9f10fd74c63958","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ww.anime4up.rest/","fqdn":"ww.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"104.21.44.172","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-06T20:45:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-02T20:45:30Z","timestamp":1772484330,"ip_dst":{"addr":"172.67.201.154","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":43358,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO HUNTING Observed Unusual Host (ww.)","source":"{\"timestamp\":\"2026-03-02T20:45:30.323851+0000\",\"flow_id\":702162575961611,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.28\",\"src_port\":43358,\"dest_ip\":\"172.67.201.154\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2845065,\"rev\":1,\"signature\":\"ETPRO HUNTING Observed Unusual Host (ww.)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2020_10_21\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_10_21\"]}},\"http\":{\"hostname\":\"ww.anime4up.rest\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://ww.anime4up.rest/\",\"length\":167},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":1335,\"start\":\"2026-03-02T20:45:30.273931+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ww.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ww.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"w1.anime4up.rest","ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-07-27","domain_rank":0,"first_seen":"2025-12-30T18:58:24.875581Z","last_seen":"2026-02-04T08:20:09.569235Z","alert_count":42,"request_count":42,"received_data":3337702,"sent_data":35178,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.23","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Yoast SEO:27.0","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"W3 Total Cache","description":"W3 Total Cache (W3TC) improves the SEO and increases website performance and reducing load times by leveraging features like content delivery network (CDN) integration and the latest best practices.","website":"https://www.w3-edge.com/wordpress-plugins/w3-total-cache","common_platform_enumeration":"","icon":"W3 Total Cache.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-03-01T22:48:56.265504Z","alert_count":0,"request_count":1,"received_data":88736,"sent_data":424,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-03-01T22:33:58.871316Z","alert_count":0,"request_count":2,"received_data":40688,"sent_data":984,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-01T22:20:53.525798Z","alert_count":0,"request_count":1,"received_data":393942,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-03-01T22:46:40.031318Z","alert_count":0,"request_count":6,"received_data":512262,"sent_data":4047,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ww.anime4up.rest","ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-07-27","domain_rank":6933139,"first_seen":"2025-07-17T06:30:09.187692Z","last_seen":"2026-01-26T07:55:22.865709Z","alert_count":26,"request_count":11,"received_data":609947,"sent_data":7135,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"site-assets.fontawesome.com","ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":380600,"first_seen":"2022-02-10T06:20:21Z","last_seen":"2026-02-26T23:43:09.419982Z","alert_count":0,"request_count":5,"received_data":744585,"sent_data":2682,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-01T22:28:03.022415Z","alert_count":0,"request_count":2,"received_data":6372,"sent_data":965,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"w1.anime4up.rest/","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"43bb027bdcc7d1d9c9619a2a45f1e294","sha1":"1bee6d031eff8266f17fc2c86ed4e2e4a935e572","sha256":"427c00965a1a0ef3af4681808f2ebea5cde4f869db99ecf589084668b81a1088","sha512":"76240b3f87037f35523b234ece85101cee49dcf9e12eba8284a7f5d5bd37e913dff9a210460aa46aa8a2370279f8f174f9810320e9900ee27c251ec7539bfff7","ssdeep":"","tlshash":"2ac02b8c310e1cf282f727008f3ff604f0423228a4e06d31484923444d30e03d74c810","size":153,"data":"","first_seen":"2025-11-09T19:08:55.007971Z","last_seen":"2026-03-02T20:46:12.42655Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww.anime4up.rest/","fqdn":"ww.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"34ff1e05de8646e7d3f7b1500566ef79","sha1":"38c91a7a8302124245a9d37fff93464f75cc4d3e","sha256":"2e9f4d65bdee47bcbe6ca188fcb092a315f986d7377f98b07724dea3cc6906b0","sha512":"e82331721c440062d4cffb5d65df97299d8320f9071caa60956e1bbee90ca4c34ca53e8e55a99681c9bbf482c4b15c81e8786d2b776b0d76d1a785e61e1e1b1e","ssdeep":"3:N/BKL1XlVWW6TXn:eL1PUn","tlshash":"785504d075c434745410c444f15014d55305041110dd0503705f04d41f744404011d40","size":1337359,"data":"","first_seen":"2026-03-02T20:46:12.427963Z","last_seen":"2026-03-02T20:46:12.427963Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-02T20:45:30Z","timestamp":1772484330,"ip_dst":{"addr":"172.67.201.154","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.28","port":43358,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO HUNTING Observed Unusual Host (ww.)","source":"{\"timestamp\":\"2026-03-02T20:45:30.323851+0000\",\"flow_id\":702162575961611,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.28\",\"src_port\":43358,\"dest_ip\":\"172.67.201.154\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2845065,\"rev\":1,\"signature\":\"ETPRO HUNTING Observed Unusual Host (ww.)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2020_10_21\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_10_21\"]}},\"http\":{\"hostname\":\"ww.anime4up.rest\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://ww.anime4up.rest/\",\"length\":167},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":1335,\"start\":\"2026-03-02T20:45:30.273931+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd8715fe83d666caa092b4ece8f5f348","sha1":"2d6cbcd0ddc923764e378332892ef51b1b4df01e","sha256":"90213b87443c73cb627aee9241809ece06affdf3e9f0ca230679533af0ebf7d9","sha512":"6baf84eb1aeda17273ed76d199bec782f25212539fdfbf2a3710ef7e90e5c068db83307e4042738a39384c3e24f0718d276bdbd848f25637224a7d8fb7630f41","ssdeep":"1536:BJ9kuPIniWNm0m6CTPNtXDv5MxmKeqj23oqiP3BJjosC3TwfVhdpO5B1sDNzZjZK:BJ9kmIfLCTP/vmxjUiJTd+s5pjxoMo","tlshash":"90041acaf7ca3455d3673474102730c9b2a75898b42d886ddd01acf138a5778aabadfc","size":187994,"data":"","first_seen":"2026-03-02T20:46:12.428824Z","last_seen":"2026-03-02T20:46:12.428824Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/mirai-contact-form-js-js-after","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc8f2e8cc587f25215223815f64f1a13","sha1":"9b5611e040b33997cea7b674ec36e3b57c956c39","sha256":"0ee6efa8f3703ed2bb2b20fa362f6fc55257261a48a8d2e8cf3f195d46c08a34","sha512":"84f6986d42f64ed16a0969bb5af1034a4c2f478b6807bc588b7e32a4315bb1e1d56b4464a1744953803904dba548e1902cd5ab6fab657ce5a5eaac6299066d67","ssdeep":"48:dXyo3S6T9FXsPUdiO2vmG34CFeFFYBRhFesTry7NZh:8o3SsVYVTOh","tlshash":"4e2212d5fc5c19682ab3787ee6dfa604f1612803e189d7217d6c48441fc284c98637fc","size":10073,"data":"","first_seen":"2026-03-02T20:46:12.431603Z","last_seen":"2026-03-02T20:46:12.431603Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"28823087469fc100e19982c41ef71022","sha1":"9bfc030b31629e0b8dddb475ee9b38d1aa8a1169","sha256":"c6c728d1cd143f10016aa3421587a6bdbf50b2a73e443dbe39dacc1779d84dbc","sha512":"92044be1f49776b496561484f2f7781ac1e809def6f23256d69d6254de6620008ed6cd118b419b2f5eb2209e20ea0a3b15cb3373ec571ab3c7955f4fbc149d60","ssdeep":"384:KQ7aLmr2WkFEo4c+Xv73ucrvVyIjOioqrS9IPkmPoAPu:T2WVo4c+zJj9k9WQAW","tlshash":"1ac2c98738d9b278a3a5f0b3186773ce22b9bd48205c5816c310afa878b57795737d6c","size":26237,"data":"","first_seen":"2026-03-02T20:39:19.937282Z","last_seen":"2026-03-02T20:46:12.398792Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1d2acc5165080dd018feaf08ea69e588","sha1":"26698128d62a4d0c2c902723f8eb8d62043dab06","sha256":"6d5c9f536080a954f2b1bfcc1f1273fda5a5d464111900b8fe9c7c49c6f2b9dc","sha512":"f7d043666452e754ff920d140259646db50571fcdf5d04fa1c747ff91fcf01b8f31319eba8a82512d3037f6bcd70bd7f1aa85f0fae796916b00b9a20cff4fdda","ssdeep":"","tlshash":"8fb0125027e22020d313d034c84b9804f008074630a80404745953300f0056b857d7a8","size":87,"data":"","first_seen":"2025-02-20T12:03:37.091719Z","last_seen":"2026-04-04T09:22:53.888154Z","times_seen":21156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/mirai-contact-form-js-js-before","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"157bcfd9517ff06a1fd1cd4328bea1d2","sha1":"3d99a9afa8940a33dc85974dc593a8b6aecb0cc9","sha256":"9e8a742ae3097189d9067be94e376b7c13ebbb0a2484c6dec0a389263ee5f38a","sha512":"5fe575d6c5efe85bac37a37be92ab5a3166d7ea29393c7390550b39a75c2c9918713aa50a274fd3e721b07e47a00656e51fc28c7e7e052edee17c76da770e89d","ssdeep":"3:HWwbBK23knYz4QXJ1V1AM8FE+3HngdGQREMWInAQA8C4bK:2YhUS4CXAM8++3AdJiMWIAQA8Cb","tlshash":"c70280c5e59c1dc551f11cf41579f31373e5715dec250c481749508d1171082c844787","size":8541,"data":"","first_seen":"2026-03-02T20:46:12.433059Z","last_seen":"2026-03-02T20:46:12.433059Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww.anime4up.rest/?__cf_chl_rt_tk=nUYjP4dEkdgcY62qkHeugl43pR5Gl1ggEn9Finom5io-1772484330-1.0.1.1-USchamq7loTixAvwLXV9rnVon6UP2cFNSwj1kdLQ2r0","fqdn":"ww.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww.anime4up.rest/","fqdn":"ww.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3392cb9b8db47821a0cca94f7b2dedc7","sha1":"83d2018161a86c2ae8406114f080444204d0cd01","sha256":"8aeb87ea7595041a28598f1ddb4cac3937af35d72654f7a00d15bd9de4987cd3","sha512":"54d0c3165afb21ae4732a6977da30280a81ae1a714643a36daf3b0bfc25e2c5a3c09df2158c62449b4132dde17eaa13745a473b99defd5e07f9de84096fc748b","ssdeep":"3:N/BKL1XlVWWCb:eL1PM","tlshash":"b65504d0754030744450c404f15014555107140110fd0403705f05d417344404011540","size":1337359,"data":"","first_seen":"2026-03-02T20:46:12.434085Z","last_seen":"2026-03-02T20:46:12.434085Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-02T20:45:30Z","timestamp":1772484330,"ip_dst":{"addr":"172.67.201.154","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.28","port":43358,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO HUNTING Observed Unusual Host (ww.)","source":"{\"timestamp\":\"2026-03-02T20:45:30.323851+0000\",\"flow_id\":702162575961611,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.28\",\"src_port\":43358,\"dest_ip\":\"172.67.201.154\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2845065,\"rev\":1,\"signature\":\"ETPRO HUNTING Observed Unusual Host (ww.)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2020_10_21\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_10_21\"]}},\"http\":{\"hostname\":\"ww.anime4up.rest\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://ww.anime4up.rest/\",\"length\":167},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":1335,\"start\":\"2026-03-02T20:45:30.273931+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"579ff99bd0b531eafe03d177008cd83e","sha1":"dce717dc121e6c5cdeafc0c3865db5ae03a498a7","sha256":"bd5040c2d4bc53eef75a755ed9396b875e899e28050c3ef6849b1dcfcd7ec21f","sha512":"4d6d7a24043f08371f234b29610da9824f8925ddf4710a6538d514c008bf84f3b7ec04acffdf03efef92b9554a6f05bf25e256e3d04a0afb4603df0981e2731d","ssdeep":"","tlshash":"c4d0a7662d7989307398014f70f7e3956a616ad06622d54091dacc2b6b11fd354b2a58","size":236,"data":"","first_seen":"2026-03-02T20:46:12.434907Z","last_seen":"2026-03-02T20:46:12.434907Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"71228234c804bf8ae45fd7325b11e5da","sha1":"a8eed241e931ec198a2971e37d0b61eb297f98bc","sha256":"986bce9093862e31651b626c128f45271550adbc04b520cd4dc6c815acdf46e2","sha512":"02a8aa2c9cdfc0a21e97f85f32217fd18d06661286310399d4778f090780c386d119c220f1e878f59feec092eb6e95adc926d5aa756307bfd35706dd8f678fd4","ssdeep":"3:N/BKL1XlVWWSQn:eL1PEQn","tlshash":"365504d077403074cc11c544f1501455510d040150dd0403705f04d417344004011540","size":1337359,"data":"","first_seen":"2026-03-02T20:46:12.435842Z","last_seen":"2026-03-02T20:46:12.435842Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8d8c90b27732bd949630532ce4f40ef3","sha1":"810dc78b80b0dadd5f97656fdaefcb1b59941bc2","sha256":"df8b41a9605a306fb59b916bd31c3ca932e9eb28058be1e6e9e0b7adede19c57","sha512":"f43a5fecffe55e2752f861cf6b41fd387b6148bba8221c5221e344382e85316991610fe3fe456515ee8fe8c1a7b47066a034b1bb0f0cf75da1a8b4a34fb53968","ssdeep":"","tlshash":"69019c9ebfe879952323a3e1ce6f268f5265fd8418006c414821d5dc3c21c124d9fbbe","size":745,"data":"","first_seen":"2026-03-02T20:19:02.371032Z","last_seen":"2026-03-02T21:24:02.84371Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-04T16:48:48.416818Z","times_seen":330217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww.anime4up.rest/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9d633ed88b820d38","fqdn":"ww.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c34350331a354a35b101a8cc9801a67","sha1":"298b1c429c730ed6f50f1e5088f421d163b2e77f","sha256":"d5c2bff467fabd83cb8a9670cbc0b2e467861f00c377f14ae6e9708d897b8ca6","sha512":"a29ba65b539b3a525aba5a36b600f95bf5ae4d0f3f995a1611b12678980cdb5026e9e0c1e7fa50a0e8000bc86ea80ba909d2b6736bba8cafae0499a3a4ec22c1","ssdeep":"3072:U2vHEnrwlI1Jf/TpAbZBSOqylq4tiXqsPk5pi69:jvHEnrwlI1JzpAbfSOqyU4tSqsPk5pf9","tlshash":"d7f30a8ebbd5752a1227a078001339caa2f56c442418bd6ff600a9f53de875d7b739bc","size":162591,"data":"","first_seen":"2026-03-02T20:46:12.412517Z","last_seen":"2026-03-02T20:46:12.412517Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww.anime4up.rest/","fqdn":"ww.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-02T20:45:30Z","timestamp":1772484330,"ip_dst":{"addr":"172.67.201.154","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.28","port":43358,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO HUNTING Observed Unusual Host (ww.)","source":"{\"timestamp\":\"2026-03-02T20:45:30.323851+0000\",\"flow_id\":702162575961611,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.28\",\"src_port\":43358,\"dest_ip\":\"172.67.201.154\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2845065,\"rev\":1,\"signature\":\"ETPRO HUNTING Observed Unusual Host (ww.)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2020_10_21\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_10_21\"]}},\"http\":{\"hostname\":\"ww.anime4up.rest\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://ww.anime4up.rest/\",\"length\":167},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":1335,\"start\":\"2026-03-02T20:45:30.273931+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww.anime4up.rest/","fqdn":"ww.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b365b13b1f7eed0caec8824f4983b15f","sha1":"979ff139a81f2a10408b96719add4fc0eb519a6d","sha256":"d8aa61afef1d93cda03380684b3f7f95b9247cf7351d0483cf25187474384ca5","sha512":"c3e32525e4c2c67d8089a3b05640bd0a38d45becccd8ea351eaea525e5518546e9ed1aa4c078f00b78d137f396495410143ccdcb414610a2d8bee55b1b382e2c","ssdeep":"3:N/BKL1XlVWWIXn:eL1P2X","tlshash":"115504d077403074dd11c444f15014575105044110dd0403f0df14d41734440c011540","size":1337359,"data":"","first_seen":"2026-03-02T20:46:12.437263Z","last_seen":"2026-03-02T20:46:12.437263Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-02T20:45:30Z","timestamp":1772484330,"ip_dst":{"addr":"172.67.201.154","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.28","port":43358,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO HUNTING Observed Unusual Host (ww.)","source":"{\"timestamp\":\"2026-03-02T20:45:30.323851+0000\",\"flow_id\":702162575961611,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.28\",\"src_port\":43358,\"dest_ip\":\"172.67.201.154\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2845065,\"rev\":1,\"signature\":\"ETPRO HUNTING Observed Unusual Host (ww.)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2020_10_21\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_10_21\"]}},\"http\":{\"hostname\":\"ww.anime4up.rest\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://ww.anime4up.rest/\",\"length\":167},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":1335,\"start\":\"2026-03-02T20:45:30.273931+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww.anime4up.rest/","fqdn":"ww.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b7068aa9f82a34509cb78f986ea6bdc3","sha1":"69d3e82ecb7b62d957ebfe4473083f5ce827c7fd","sha256":"7847103f4672137fc68374aa7245529a94bad29a19b8b410a60eb5f5897500f0","sha512":"c697ccbd15afaedeedad55e77722c4ba56931f091d518e180b2ca7e3a0caf4509430f1b268ec84c5bfb56c863003acbc9e6738eb6747f3e8f387f16a68dfe5ba","ssdeep":"3:N/BKL1XlVWWHUXn:eL1PRO","tlshash":"435504d0754030744450c404f55054555105040110dd0453715f0dd417344054011540","size":1337359,"data":"","first_seen":"2026-03-02T20:46:12.43827Z","last_seen":"2026-03-02T20:46:12.43827Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-02T20:45:30Z","timestamp":1772484330,"ip_dst":{"addr":"172.67.201.154","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.28","port":43358,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO HUNTING Observed Unusual Host (ww.)","source":"{\"timestamp\":\"2026-03-02T20:45:30.323851+0000\",\"flow_id\":702162575961611,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.28\",\"src_port\":43358,\"dest_ip\":\"172.67.201.154\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2845065,\"rev\":1,\"signature\":\"ETPRO HUNTING Observed Unusual Host (ww.)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2020_10_21\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_10_21\"]}},\"http\":{\"hostname\":\"ww.anime4up.rest\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://ww.anime4up.rest/\",\"length\":167},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":1335,\"start\":\"2026-03-02T20:45:30.273931+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.4.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-04-04T16:47:10.092496Z","times_seen":115077,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a4d40a75b40429b33820b03b69bc8f76","sha1":"b656a6a37311a08e8cba807001b418dac13806f0","sha256":"1a2b62cd3404b18eed1f078d60788f294b0183fc5fe5fd4ed7fcc4f8e0bbc3b5","sha512":"ff1c13dba4fd4461c4082736b561b125f979caf7b256696f21e2d6aa45ef8c78ad6d28750db8404b8c21c739c658fecdcee6f85d27835d2bb1e4e8793a01cb69","ssdeep":"","tlshash":"832178634a01026acc60b1c0759f0348eebb770d726799e1811e914874ba9eecbbfb0d","size":1248,"data":"","first_seen":"2026-03-02T20:46:12.43922Z","last_seen":"2026-03-02T20:46:12.43922Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7e99cf3a3b2b758204bbd1b7e462a8eb","sha1":"5d455dde9a6f7cdf33ac161ec911e39e61b64050","sha256":"35cf5fa9a09bc560d5a11b4c9088d15fd2e60d16987e397f6b08724c52029a9f","sha512":"09622522ea22b7c732b5d4fa059c28317fa6be91d6b97fa22045ab795187e22b5191301555d449e538c5e3af15a55412cec4f1bc6c3201047dda98ad473507ab","ssdeep":"","tlshash":"85c08ccaa59c1eca91f12cf42539f323b3e6a15dec290c881749608e22b2082c84878b","size":160,"data":"","first_seen":"2025-12-30T18:58:30.466917Z","last_seen":"2026-03-02T20:46:12.440027Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d03e64e8fcf0779522a608bf08ae7959","sha1":"e0da97e1da21cdc03d351231038f207d9fed67bb","sha256":"ea8a24b9c6d3ff651ee9f36e99eb42b8694f2aab7a18d6504e4fb3c047459f18","sha512":"801479210f13f07f7a022b1e9ae5d40565c96a4c01e8d277a25d165b8b4051dd46cdf0955293fb298e024a0a4daddbc25dd166431864e5291f6b04c717332a1c","ssdeep":"","tlshash":"453135d5bc5c19682ab3787ee6dfa604f1212c03a189d7217d6c48441fc284c98637fc","size":1686,"data":"","first_seen":"2025-12-04T12:10:47.248087Z","last_seen":"2026-03-02T20:46:12.440898Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww.anime4up.rest/","fqdn":"ww.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6411196d458d35daac564be999a69128","sha1":"bcbd63e7b94ac44e9ed2db3ad0eaaac8aa3f936f","sha256":"034d7d47220a5dc8a082ae787f02285dd7c657d55c63633613b1ac1b066fba93","sha512":"a6890e0ee4fcdb427f3ab7fb6f8c50a9b74bf56ce439d418af4b4663ac508e55f7ad710ee6f08bd5fcead8112cddf632eb2f834a6fe21225a3dae47f4c460baf","ssdeep":"96:RVhe8sz8OTQ9lTWoGzIhvpJcGvdfuUj0bIAq6JgWPTUYzueh8e8kmZ:fmNfzIhvcGlDorqITPT9yNZ","tlshash":"0aa14ce66e4700bfef3e3386da67a244a3750167a548325a1180c81cb57ad8fd17c5e5","size":4794,"data":"","first_seen":"2026-03-02T20:46:12.441789Z","last_seen":"2026-03-02T20:46:12.441789Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-02T20:45:30Z","timestamp":1772484330,"ip_dst":{"addr":"172.67.201.154","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.28","port":43358,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO HUNTING Observed Unusual Host (ww.)","source":"{\"timestamp\":\"2026-03-02T20:45:30.323851+0000\",\"flow_id\":702162575961611,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.28\",\"src_port\":43358,\"dest_ip\":\"172.67.201.154\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2845065,\"rev\":1,\"signature\":\"ETPRO HUNTING Observed Unusual Host (ww.)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2020_10_21\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_10_21\"]}},\"http\":{\"hostname\":\"ww.anime4up.rest\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://ww.anime4up.rest/\",\"length\":167},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":1335,\"start\":\"2026-03-02T20:45:30.273931+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-T9CZDRRQDP","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1fc38b4cc6fec8d05dbc4a0ae365c6d","sha1":"9b23f4d5061dd3ec70823c29742c154f2fd9e6ed","sha256":"3d2f307d431bd373022a8c507b3d4caeed9087ff09a5a325ce0472df18dda134","sha512":"a681602d0903ee7a0792f7cf140d479b16554e64ca8f99647a64158d8ffacaca78a6953813bb67edf6c2c7814c2d8b416ecaeb713e53c51a44f4251c97c93dad","ssdeep":"6144:C7OOW4p05W+MMZH9CyF8QyZbTxRMlKEmxoBJ7eTAIH:Iffp05W+MMZQ+87xov61","tlshash":"d2842acdb3d6702253a7b478403f018bb17a68a2f48cc899f18ad8d56e7469a4137f7d","size":393338,"data":"","first_seen":"2026-03-02T20:46:12.413386Z","last_seen":"2026-03-02T20:46:12.413386Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f47389d2f1abd47dbebeef3e2d3ae8a7","sha1":"dde5aa75f9a647e73d3e2d3fdda68898f850f72d","sha256":"30893b81b3c71cdbd5cf34b54fb52f8eef50b27d8a3f2498a28d2b89bd987fda","sha512":"3524a8ed2b83fe9d62a0708424707959d6cc8e89a918407da7c46540b5982fea9230792acffc47517cf5d009231375b00d5ec2ff5689bfb74ea6a3c926653318","ssdeep":"","tlshash":"56b0028869e5a404e21975a5495fd144f12cc802148a0515658885515f114294167868","size":94,"data":"","first_seen":"2024-12-12T23:50:40.522517Z","last_seen":"2026-04-04T16:49:06.295235Z","times_seen":245484,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ff03fc8f0c3179fb4dcf4389f88a1c16","sha1":"05ff911d7ddf2d7c14b4316a87fd08f42c618f9f","sha256":"025229ec6bb50e915572750c5045d22c5fe16851fd077f1411f41b19aa1dfece","sha512":"4acb3551ec49556a2a64f4a47e480df29f611f67d0ef4b2474e90f7b86caed3dedb0b56eba12e577f1401d4d701c9a4f0898a06eee8f6d7dbe3b4b5283a854e8","ssdeep":"","tlshash":"4f60000000c000000000030cc00300003cc0003300fc0300c30c003000cf3cc0000000","size":14,"data":"","first_seen":"2024-12-12T23:50:40.182598Z","last_seen":"2026-04-04T16:49:06.273082Z","times_seen":247062,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ca897fb253cc8807c5aafc947eb02fb6","sha1":"25137d68712ada7d3ad424c80bc0d688a696f7bb","sha256":"57f9c536daa79c4d770534dbafbe2e7b2b2aa48b9eb2617b4e670b8a78a4a4ce","sha512":"187200763128b83b777932b28834f8a21adf5824c5b9f8635249168aaefcc2451885b26da07411ccd56a52146f9b8cc2524647ebf2df4c1474f80d219d893f64","ssdeep":"","tlshash":"d96000030c00cc300033000c0003003f30f00c3003cc300c033003f003c030c0000030","size":16,"data":"","first_seen":"2024-12-12T23:50:40.144885Z","last_seen":"2026-04-04T16:49:06.341375Z","times_seen":245941,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"33ff6022e88df59f8dfc9eb546435e9c","sha1":"7f2ad96c0a1276fbc858c652a6e2d0b3c9d4d3e4","sha256":"a1c845cab782ea7dec04543ec72e0b354cb8e9aae23acc02ee02b1832e3acd9a","sha512":"99820974c649620d8dfd487054edee4863ca41025de5a87fcd6fddfafbecb53668799fdde6f7b809112fec178b18f28a9ff8e190d298aff5a29c6795ad639c25","ssdeep":"","tlshash":"0c600000c0303003000f3000f00000033cc000f0cccc3003030c00f000c000c0cc000c","size":14,"data":"","first_seen":"2024-12-12T23:50:40.556614Z","last_seen":"2026-04-04T16:49:06.232017Z","times_seen":248277,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww.anime4up.rest/","fqdn":"ww.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e7e3ca26d0a23b7a2034931806d25cd","sha1":"65cc6be39e3280a58b59d7a23b1b5e24887b2e7f","sha256":"9df1006c047996418e66d866fb22f47db363d5a4b122e464f8a5c289285f6dd1","sha512":"d7565c9229f33a17757145a8dda8c1968d0937f7e79c971078ad8431c548ab33e3f3bdab417e4b74acde53247ac6b4f0169cba21f6ecdbef2e6d74d2c603e6df","ssdeep":"3:N/BKL1XlVWWA:eL1Pu","tlshash":"265504d0f5403074cc51c404f1501c5d7105044110ff0403705f04d41734400c011540","size":1337359,"data":"","first_seen":"2026-03-02T20:46:12.445236Z","last_seen":"2026-03-02T20:46:12.445236Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-02T20:45:30Z","timestamp":1772484330,"ip_dst":{"addr":"172.67.201.154","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.28","port":43358,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO HUNTING Observed Unusual Host (ww.)","source":"{\"timestamp\":\"2026-03-02T20:45:30.323851+0000\",\"flow_id\":702162575961611,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.28\",\"src_port\":43358,\"dest_ip\":\"172.67.201.154\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2845065,\"rev\":1,\"signature\":\"ETPRO HUNTING Observed Unusual Host (ww.)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2020_10_21\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_10_21\"]}},\"http\":{\"hostname\":\"ww.anime4up.rest\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://ww.anime4up.rest/\",\"length\":167},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":1335,\"start\":\"2026-03-02T20:45:30.273931+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-04T16:48:48.416818Z","times_seen":330217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/ea2d291c0fdc/api.js?onload=MNurp8\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1bb037e4c3bba2a7fade0a7e3085e2e","sha1":"51e63090852f95448e189369f032fec53ce5d264","sha256":"e4c4cdba4fc50a031a1148b252e402d55bc9bb8e268500d9d3870fcbe0eb5714","sha512":"ff8a6bb6ebe30c4dfa36e308f9bd30a14ab7c25e2b955bbada3885923d3e4764782ecee55392e84ddcd0a55ca9f6bfca89aa94d9da002cd35ff2cfce174dbd9b","ssdeep":"768:GCBnK2seMK9iaD4ukeNqH/wLDsSTVGFdMs2bHLgPYjTgZ2fX7+REkm87P5GsSATG:82s7K9iaDLkeNtLzSdMzVTgsb","tlshash":"54332a583156387267d980e5717b63437325693af94cc890e823dd2536acecad233fba","size":51125,"data":"","first_seen":"2026-02-27T06:39:43.979641Z","last_seen":"2026-04-03T11:40:49.864376Z","times_seen":55745,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1e175bd5a3a4dc51d0678f7c4eb2f501","sha1":"617f85239a2a4becf64f5900b9d277b2174e5a24","sha256":"cc4a970163bd7282333447e71fa28a2b365908f74aafdd3ecd04042fbe11901a","sha512":"ceafca07411784ffce1caa3e0028c84477dea0216fb6a1e4c1c57ef3d0d7bd0feb66788c7b7ea74b0d41214f7ee9070779f94158ddafc71a31dc1cca5884462b","ssdeep":"3:N/BKL1XlVWWPd:eL1Pb","tlshash":"255504d075403074dc51c444f15014555145040110dd050370df04d41734440c011540","size":1337359,"data":"","first_seen":"2026-03-02T20:46:12.446177Z","last_seen":"2026-03-02T20:46:12.446177Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea27e08ebafe9e4a336b941b04aa0168","sha1":"af3a61ab208e30a4214af3af11d2edf9f0090a6e","sha256":"70fb99ad9bfa09b9f21aca3714a75a327a6a7eb98b1f246d5a11f3af088a7b99","sha512":"cd7ceffbe083ddff70dca01b50a2daff629529db734c6e9fcf97324087f0ffa1e237ba661f19bac2688e179fbfd9d58d7f3f57dca3480567fe7a6c292fd870ad","ssdeep":"192:gKZSoStqEXUOIXOIbdsRfpNiMJ9WYxo6aNN0sGHFHyDw37V7ZUQ9Dbfi71hk97I:gKZg+UfF9uN0VlSDw37fbfiBh0I","tlshash":"8e22f7a2b177207b05fb41fb73db6980363b1017a545c250befd4a890fc6e44a2b66dd","size":9931,"data":"","first_seen":"2025-12-30T18:58:30.470701Z","last_seen":"2026-03-02T20:46:12.446963Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ceab8264f0e1556a2ef57fd378ae095f","sha1":"8eb0040905e2d63276761f9254112a8c1f253ac8","sha256":"be66f5a31a26820a668d148239dd398382b5038eefc96da426bd70be76a160d5","sha512":"76eeb572e2dbc4bcb54499c417ca7f2bc8a90c8f60dd6089b2856951234af345f48046e7382d569aafa43b191d8dd32cddad34750b27d4449ce247bf50b89436","ssdeep":"3:N/BKL1XlVWWHRV:eL1PRRV","tlshash":"335504d0754030744454c404f55014555105040110dd0443705f0dd417354005c11540","size":1337359,"data":"","first_seen":"2026-03-02T20:46:12.447912Z","last_seen":"2026-03-02T20:46:12.447912Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea3713145f82a274f48b43f90c36823e","sha1":"bad129e1e196c9e17a4157f1630d2e679281514b","sha256":"4e1c6a9160e258349ee9736a7df587bf5492c70cbbe0fcb009d44b321d5e72f0","sha512":"6b91f91134c87a63cf5e8ed7d344fa944079fc31ce1b57b035ce4ef35e262163f06c43c08cb8349d6de440e9671c6693e87848b9ee728a64c1659930b36be5aa","ssdeep":"1536:aztaz+AmjgWhIXY+PLWZ99b+nZceNcvufGovTEtqkBTl50Wc+DAXIRE:aztazcIXY8LWZ99bw1cvufGovTEt5TlE","tlshash":"67934180b2c05c6d1387bb7a370ae0d7f58b185864ce8c4fe0a5bc61658d767b9e89f4","size":95133,"data":"","first_seen":"2025-11-09T19:08:55.046449Z","last_seen":"2026-03-02T20:46:12.448763Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T16:49:06.2297Z","times_seen":666180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dbfdc309ed148a1f25084870c8c1d4e3","sha1":"14184cecaf903799f1480eccc4b091683f81983b","sha256":"db30fb93a3b4700a00c9765a29c2da38df222ffb912ac62945ac4000eb81ace3","sha512":"36234e89f6bc0a01eddde433f5bde57aa09860f27ec87e9c699e88fa6272ee7269193ae6426b2988351be44ae448db7febb84580eb70335ff1bfc49e0870ce42","ssdeep":"","tlshash":"9b515486f554248a8773097981fb5a0db1ebb95bdc00ff82f69a10023f9150efd4276c","size":3159,"data":"","first_seen":"2025-12-30T18:58:30.475407Z","last_seen":"2026-03-02T20:46:12.449574Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-04-04T16:48:18.059942Z","times_seen":203566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-04-04T16:49:22.382878Z","times_seen":594195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","size":39,"data":"","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-04-04T16:49:22.100197Z","times_seen":747396,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"w1.anime4up.rest/cdn-cgi/rum?","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:34.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1528\r\nOrigin: https://w1.anime4up.rest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=lIvbaE7KNV1THN7PEc4uf3F2_P.NA5JGcqQXWaB.z.A-1772484334-1.2.1.1-axNFgh5QRSC03_L.5TAd2BRLnCbqVvb0RmCYqIPPdv9Vg88P0W2ky85eROKmpulpSbIPHAkHP3G1cbwHELqpc53Hc3PNwxcci7TqdtOKCzwpxDDNvGwwA_hR588.GRnCBOYUaa0zT861xSPVxjpHSY2QuQKQKCzb_ZIUMePsWtrlOvSQXYyQf6UcMC4fp02jQPP2I0GUufm7aDph15NKyvdL9VRBMNUuSYWnVFdiMwSD4IQtqkBJG.gR8XTAOSQ.; _ga_T9CZDRRQDP=GS2.1.s1772484334$o1$g0$t1772484334$j60$l0$h0; _ga=GA1.1.2109030791.1772484335\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1528,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":587,\"startTime\":1772484333134,\"versions\":{\"fl\":\"2025.9.1\",\"js\":\"2024.6.1\",\"timings\":2},\"pageloadId\":\"cb5e1ad9-b925-425f-a816-49c474b4e26b\",\"location\":\"https://w1.anime4up.rest/\",\"nt\":\"navigate\",\"serverTimings\":[{\"name\":\"cfCacheStatus\",\"dur\":0,\"desc\":\"DYNAMIC\"},{\"name\":\"cfOrigin\",\"dur\":100,\"desc\":\"\"},{\"name\":\"cfEdge\",\"dur\":18,\"desc\":\"\"},{\"name\":\"cfExtPri\",\"dur\":0,\"desc\":\"\"},{\"name\":\"cfL4\",\"dur\":0,\"desc\":\"?proto=QUIC\u0026rtt=8527\u0026min_rtt=8002\u0026rtt_var=566\u0026sent=117\u0026recv=51\u0026lost=0\u0026retrans=0\u0026sent_bytes=105052\u0026recv_bytes=18482\u0026delivery_rate=4697748\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=110907\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3154\u0026inflight_dur=194\u0026x=63\u0026mtc=none\"}],\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":693,\"domContentLoadedEventStart\":747,\"domContentLoadedEventEnd\":758,\"domComplete\":1183,\"loadEventStart\":1183,\"loadEventEnd\":1184,\"type\":\"navigate\",\"redirectCount\":0,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"h3\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":73,\"domainLookupStart\":73,\"domainLookupEnd\":73,\"connectStart\":73,\"connectEnd\":73,\"secureConnectionStart\":73,\"requestStart\":80,\"responseStart\":211,\"responseEnd\":211,\"transferSize\":72644,\"encodedBodySize\":71551,\"decodedBodySize\":367374,\"name\":\"https://w1.anime4up.rest/\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":1184},\"siteToken\":\"2fef01b7c21841c890f891afd54bfac4\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://w1.anime4up.rest\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nyk8oLBe2KrdvjPSRXgnkGifbw5n86WN906YAsncTxYrXxUOnuXYVd5e%2Fu2kiB2QyHWvK5bsxy9%2BfJ63JEhbhjG%2BSf53yQOP%2B5e6jzZowYE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Mon, 02 Mar 2026 20:45:34 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d633ef3cbbd0d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T16:49:31.594606Z","times_seen":13339169,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/214525986:1772482035:Bo9iX1rwCFxy64A_GTjJL5QWN-6dDNklM_V36e2LHNY/9d633edbc938618c/A9XCKpECxm74qpFMG.XD59nxtjiFkJZd3QTkFWttM0k-1772484330-1.2.1.1-AbGlE0W7YcKBmOvg5.bqkBPxTYrCjy9dkPlrBm5WSqK5EWR75yR72OxYDR7fI02d","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","date":"2026-03-02T20:45:31.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 19:28:54 GMT","end":"Tue, 19 May 2026 20:28:50 GMT"},"fingerprint":{"sha1":"83:61:74:2B:F1:77:DF:F1:68:3A:D1:0B:F1:05:8B:A7:0C:B7:B3:C2","sha256":"AB:12:F8:E1:72:C8:68:10:80:3A:9F:9D:C6:84:76:A4:16:06:31:A9:10:4A:34:B0:5D:62:B4:80:3D:63:F3:C5"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/214525986:1772482035:Bo9iX1rwCFxy64A_GTjJL5QWN-6dDNklM_V36e2LHNY/9d633edbc938618c/A9XCKpECxm74qpFMG.XD59nxtjiFkJZd3QTkFWttM0k-1772484330-1.2.1.1-AbGlE0W7YcKBmOvg5.bqkBPxTYrCjy9dkPlrBm5WSqK5EWR75yR72OxYDR7fI02d HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto\r\ncf-chl: A9XCKpECxm74qpFMG.XD59nxtjiFkJZd3QTkFWttM0k-1772484330-1.2.1.1-AbGlE0W7YcKBmOvg5.bqkBPxTYrCjy9dkPlrBm5WSqK5EWR75yR72OxYDR7fI02d\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3746\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3746,"data":"3mPQjSpQHo9+bH6L-LoY5sCW+uAjmzxdiJQeB8u0rT75QuVVbdr2N$SHd1-xxUsk7HIar1LDk83uCYQfj6XnYafH-DlGjEi3-$3mD$hZ9TlLuuQoO52w42U1UE-kg$gX8$usT5ZJm2B0a1kyr+Y-IN2$yilgvA5CJUrg5o9DaTzGPQP-0ZDwwr3CNbt6ws--gaCof$JZg+wfvSoLVZNyWBT4vj8BH0OzwCbfZ4bbswNDzgPHlyegiil3L+a+ky8ddVfCUEEB4DYVrPXoRKPBPf1Z0HB5RdBHZenh93MmdTxbrd1sS+rySyzak6S2pSqNsEt2v2pa3lizvLp8jC5Eefk4Cav5uPADd1O$$2ehNnKbo+0VTjyE1M474-AfrApTqNUnNpAVpwA3lNM24LEEMab-8Re$8YYxe4at+jM3WSNS5bJwBs6l9h+wmyOwnOiqNKEklY1MyULYEMwNE4A65ZqHknnWR3ne3p0DXZhTRexFMIibx2HQ7NvVZH668O7mXZihsB2Qlxol$n9XCy$VIpGoo6Mx4Zt0R3$B0lAYZLNvYZyxJFa5b5I9vVgBeY8T68I-B7LFl3IYPKP8+G1YZztHPaJRz6UymPdee$oCKs8wXmS3+hZeUAiOw9GELo8pv848X5mq$tVFp6DDUJ$mTdUyFTY-wiibXeL5187QuExjyVCzeapSYXjdPRCFsnu44oGMejozXm$5OdhM3NzoobPd506vGM9R-DwiBa3fMvF0oRCBGYrVyxlXA3ZbwYDtZ58+WYif6+kk05r-$Rf18krKq7lG4yl6uUSLm9E5rfY6Dh7gn2W+xP42ABLmZ9e9B6gQEELxHXFLifD8plXgrraAVealpPYBsqWXWBPHID-NJ8xZl3Y2MvLuXtoufh+ql2nH6t2D8zjuP-eN3XqOKCBVT6LzVnKVDiwww4o1sRHAZ9-WRt2G7WbDmzFbLgyUuvXlys0awxeJunN31PTRhgMsW4q1X3vnKBN6iHtNdMQ0+UNuT7fwtpI42U635CAB8aWEG7IolwBGDxvuZPjAl5K1A6GSomA69GX$HVt1b6ON2Er$+KAl5SM7e$irZguLsLk3id1$jW62VAe2eFq7zKt$6-1XpgTieMnSwxB70BmnsUKhV$B5IEOFagbPjJM7yKPM1F5AdRL6Qp41orGlBEqt5xQB0OUY2kopEE2N1tNsvNSxPN1wIQLSaK28WAuZm+pFqP$BbnT2ptknGUFaNlpoRO0AU1vIGh5$kbp8oV2ryPLSjGimbN58AemIm5QZbkebNBaaDO5wnPZQPSQJaoGLtF7rBCoESxxAgvPsQJ7r+FRsWlVoiZJMs2khsjRpq7tiOrxYzWg--6q64dIlPKyMpudRyH$UoClu+haobAAM4skb-fbOf4fkqiquHUW2Z-ByGm8Wig6rv87KMYkQd7lBuweK7-knh0rk258$HMCOJJ$PEotOBvOKmDD$l0bI6V0modVzUkkOSPE1G+G7wCCfmuTOZNBf3FnvAMbKQhl1QRFCFZxw3axPF6yhHIsCxiSPZVTlZoIsqVPIORJ+Y1ip7pVsl8onIN38hvgkaPm9BvbmqdIP$k0SNVYmSZ+KjLz-eECDvdS96P7ji5T3jzBKO9h6mqIGDgvmgp5iDkJIC$7QK6rlY7MtELun$tKqQVuX+dAJ95q+qX6nsWJtr7wdom4S2gAAe$RRGeVFZzErondrdM90VqqeAvDftwngu3xqW4VT1Z8-LvoifFrv4YglDK3+OKyrt3gr1IZSjab0UxZWQBPY9AXY9gf7H1BPaQl18I5-wogPRtm3EgTU6CB6kth$4d-dvE83u4RpEXXgn8CglKryxQbg3C+NZraZ5nIKo8OFjlvoqOvQQ-III8gR8EYmN4rAO6kmby7IZEvMLe6u9a+N7W1Ow8i732CYV5+A$swwVmiJEdb3gmVxh2tAjfBVwKhb+R33-OWD6949$AkB+uu8K79lC2NU0KlWqn5nkxGEpbOVo74lOmb+KmT91kJITbnxsAhvNYQnT-4XWY7YAdv4uEXCXoZpQF2Aw53ywXwN6qBMhX0wUZeqdnNRipt5jFAKV21RF2yNt0o3Qh3ugEd+Xi9HyqAA2Po0JenIarWetN$xzw5YS8VJD9RE8+9rQCD4KRgYJtpmiikXgoskYXD3mrdd6-lw0VGvTKnmBBsDpmZ7qu6j4ke2u-sA4ifXbVuHy+CIs5htUAML8MGx7HY34l8onDj9gtNFExnMv+8mJ+piwsCk0X1OgroumsJ+vjiQq5vOMOprqnMFqRekyQftifgILJF55i6VkynK2U62Xxs1vjUxxK9nCDCb2gYy63FmE5po6odwWSdSLEEl2uFHGlMvrTmeRAnUUEs36P8KnxvHFOzzC1n5oSbjSMbTMr3dnTHLDUi97vlHtg8S0u3OST5UGg2UT5OeJdIbkVGbovY3ByVG1YiomeGTL6m7nzwb20S5ng+N5z82dzWT4LAEyoq1-bP-7BBlUq1CoS23YKqfFopmIUFlFhymHUQWBote3-J2h49yoGRBhlrUqAp+ukCr7pXtEHEVgN+S00S$kSbx8lLoHMVIfhlsjbrssNqYDm-tuQakV2E8PjzXnLmtGMXoSbEeN-FKb4qrQgKCD8ag7Cv7xixdLvbrXqj9dt57MXjUTS+zET9R8ZCiG1gT8+5bor0RAHs2ekMeiDF7XVliBZsB3XNsreMw7V+k7ZDn3WnqiuM2$sw6jxsGPPyF37BFkH-gw$Gv3vxpoOMxPFihbsPpXESQIPiC$f$Ra8r0T4m-6VkDsSpznp7nh-1BhE7pFN9-nGR1xo7YPPANBYYi843vEw5xWpDjGAVyEjRnqRuLSqKV2D$+8qQwqVu9qpX7v5YUrPzWu2CXrk1zpITRfSWsGm64DtVD7xhvp49LiDyOwjnxgpCRphyo-WWogfenlgQJvol+TxVfWF-oLxFKwyxgQetia7T8xVgC6EZHyxLpnhXkBw3zXpF8yoaH$Gv4H$+XR+yOXR4O0xhGu++3ZAr+lQA2u7EGQjSrqzvjCdgtvRG1rU8oNVm8hieG2JIr79NfyLrYhUgX9QIT2Fhrao7-5l2R3pXwHyMVkYZ5oNzrIJEgea9$mCdYHWETbzXf4lYfGX0S04XI5LwgvPNyPg8hm9$i8vs2bGIyfbATIfGtgMI8rGlXOVmr180TRndWCG7Z0NF+LgxpetORPlw8$-nB-Od9n7Vvm2FFWN7rpp-FPrQJ+LzVVvZ+OFXrhrZKq3JW$r6NYDwfr8o+D-$MjpPWI$aYRm0JbWttnP-qQkuTByYd6NC8135vua2$-4tXhU$tFsvA79zdmT-rjI1-arZ-gLzIjh$OH4VSPWtrrIbF5tXbi16KpMrDZ3GYzlqG7Pk2WVn3b8+0$OkuBSXV6NdgmyYztbPo2OC3yH8pjM8Gb8WWsBmwj0jxyNTkDDlgU$NmtETCjrqQqZYhw$RlePPJPZQRrroJQmby4iSfRe3AOLba7bXdda+LeVWAkAVkB12zJOAUfXUdlfiJQjD3pKVeoD34o6hN+j1EDV1OsoPUkY$llnqioBSN76gl9eGPG3XTB7FEyAwnUPYHgJQ5agDMMUDKoV4y64dLu1p1oZBu11nHRAEiJdoktMCHfD9pAiF6kIg-vd9ujds9a8dVWCz8zGXCSa+J6+mjzSeSDrhuk$$GP9LdNberDx5RjaCnUH$sFT-gTCxsKqiYZ$eP6Aom$HrigG2w8dIfGrDJQZ"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:31 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: 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$PA4xKSrrAv6bQf8E6jmG5w==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d633ede6f26618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":245308,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"004fa312c06b81b3899fd6450023a50c","sha1":"bd765c92d1046d1749aed951f384ee8a77229d9f","sha256":"4301c6b1092b0c60674eb604eeb82c0a6d3379eb3bd90599733719ff1d9eac0d","sha512":"89af31b042cac02d3dbfd1ac96cf73876bf9016e679c801581e9e978867042aa70c6902f3d5d1305e24f17b800582a8ad5fe01c076742d14ce197e1f3d9920cf","ssdeep":"6144:qXx0W6+aGOpP42wrRDVgN2snwSgSF9BiigOm43WDRjU:qXx0W8lpQ2wdSNFn5gOqRA","tlshash":"4d3412acc67276a54077666447e6ee6d9ec0cdc20070d1806a63a74f14ebe4cbf2cd6e","first_seen":"2026-03-02T20:46:12.371079Z","last_seen":"2026-03-02T20:46:12.371079Z","times_seen":1,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.4.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:33.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.4.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15851\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Mon, 02 Mar 2026 20:45:33 GMT\r\nage: 1116334\r\nx-served-by: cache-lga21965-LGA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 23, 91519\r\nx-timer: S1772484333.486384,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30638\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":88145,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-04-04T16:47:10.092496Z","times_seen":115077,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":64,"dns":1,"connect":13,"send":0,"wait":14,"receive":8,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2026/01/ydfgthdfgf-e1768139415948-270x165.png","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:34.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/ydfgthdfgf-e1768139415948-270x165.png HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 86092\r\npriority: u=4,i=?0\r\ncf-ray: 9d633eefca680d38-ARN\r\nlast-modified: Sun, 11 Jan 2026 13:50:16 GMT\r\netag: \"6963aa98-1504c\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\nage: 1150\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=STiv5Bc0ReZEyureUvRayZq%2BPTzinij89q6rIquMuVb7v7OwLjz6ET%2Fg3J1JvGvpXfSNucmqL5J5tnogNXDJTayeRcK5bnecSMmRZEmM94Astv0qPCyJm6%2BY%2BLOY%2BXwojMz7\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=8815\u0026min_rtt=7635\u0026rtt_var=1087\u0026sent=1431\u0026recv=205\u0026lost=0\u0026retrans=0\u0026sent_bytes=1596885\u0026recv_bytes=44140\u0026delivery_rate=38966505\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=1022555\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3883\u0026inflight_dur=483\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86092,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 270 x 165, 8-bit/color RGBA, non-interlaced","md5":"09569521a5ef52ce7de65b7e0bad6287","sha1":"734051e5283ea3b73359df496fac0ac7f27d0455","sha256":"567e7b739d7876c300a0b68cf5254d0405fcc6e69d71c68091da9751a46b6dd4","sha512":"b23c6a2700d90904ca94d71e7b70808e5d3ce13e9a61ff9312fd16189115ac2a35515889dd86350c85654fcabf6c80e4962e065a647d679a3433f6058bd34cc1","ssdeep":"1536:1Plq4s247pblH/qvo+IuPrDTHYsTs1npuz66qPlF0p5LociIU5gX1rn7nse19:vsXpblH/LuPrj41npuzxqP70wct9b719","tlshash":"fe83122b4548d66686af4230372b51b05b4828f3b08cac7a05ecc7fe5fdcb9287e5257","first_seen":"2026-03-02T20:46:12.373374Z","last_seen":"2026-03-17T18:08:50.544434Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2026/01/%D9%82%D8%B5-1-e1767548440467-270x165.png","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:34.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/%D9%82%D8%B5-1-e1767548440467-270x165.png HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 96142\r\npriority: u=4,i=?0\r\ncf-ray: 9d633eefca6d0d38-ARN\r\nlast-modified: Sun, 04 Jan 2026 17:40:40 GMT\r\netag: \"695aa618-1778e\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\nage: 282\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gxDjCHB5znszx65ujqEfYAbpZnYRoRqYKT5ljrDvpTfvm0h9PBiKjkSYnEtedXz%2Fj%2BK9SJzHj3gjX3qCuMpHGkGv4%2BXCF60QrK%2F%2BVrVeix0UoWdeyTH8stI3E%2BDR5DFLuxxt\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=8815\u0026min_rtt=7635\u0026rtt_var=1087\u0026sent=1507\u0026recv=206\u0026lost=0\u0026retrans=0\u0026sent_bytes=1686087\u0026recv_bytes=44719\u0026delivery_rate=38966505\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=1022555\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3883\u0026inflight_dur=484\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96142,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 270 x 165, 8-bit/color RGBA, non-interlaced","md5":"975c621f41b427839ffcca59fda46bd9","sha1":"ab5bcde1dcfac0dd50624612bdc3932bfebea713","sha256":"6a5f7fe578ebc9bddeae96e99060486268b332843bba38ee51745f0fd0f6acca","sha512":"af23e8b487b69cb1feac39eb08f1b1e30bdcfd20e34e6da652bcec9e1cdca6158e85e7f20b51b8a2d91d9d822f48ae3ef85399da15ea7c79ef938aca31057f05","ssdeep":"1536:6AIq/5cQa4rNU4kCHKGp02pIsYHgUqxzWR0rylHLEPY1Bt3K0RDNn3I8HNa:6Zcqf4hLp02OfAbGe4H2gBtrRRnk","tlshash":"259312da84b835fec60460723eb60d538c2e4759f5106891c3c92aa3e687d97f7cdb26","first_seen":"2026-03-02T20:46:12.374579Z","last_seen":"2026-03-17T18:08:50.488376Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2026/01/%E2%80%8F%E2%80%8Fbx177580-ujQw6Ws3oVCi-%D9%86%D8%B3%D8%AE%D8%A9-e1767551718554-270x165.jpg","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:34.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/%E2%80%8F%E2%80%8Fbx177580-ujQw6Ws3oVCi-%D9%86%D8%B3%D8%AE%D8%A9-e1767551718554-270x165.jpg HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15133\r\npriority: u=4,i=?0\r\ncf-ray: 9d633eefca780d38-ARN\r\nlast-modified: Sun, 04 Jan 2026 18:35:18 GMT\r\netag: \"695ab2e6-3b1d\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\nage: 280\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=R9DOMdBVEWfy84C06dZsIWLjoO6uPkDKChHU2G5DLaPthe3ijA14UZamdqELeB%2BY57UUkbyDJ%2FddglMrnEuAbip4gru7pSsLBA%2BFCAhfspQmnhLzIwt7x%2FSJGFPuoc0qZwFk\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=8815\u0026min_rtt=7635\u0026rtt_var=1087\u0026sent=1681\u0026recv=207\u0026lost=0\u0026retrans=0\u0026sent_bytes=1889628\u0026recv_bytes=45287\u0026delivery_rate=38966505\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=1022555\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3887\u0026inflight_dur=488\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15133,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 270x165, components 3","md5":"4a57071802db446081fc3f9c457a2a21","sha1":"c8e5d1499e46d656caccbffbc993ea654f7a68fc","sha256":"c216c236943571aa39b30e505a91b9c9f72985396aacbe8e96ad642943eb348c","sha512":"a8d753aa4d3b6d4e3f0d9c39181445610a309b43f04f6f077b820d43dea6a3fcc5f93d296a2d0cc5d9e26fe0368ed0e78f05ebeb6d8de024e4b28310241eb8d9","ssdeep":"384:HCKUFfIMrEYLhEhz4gPPCCRJEeW1mhXUTT2v5UyS19YbUtdIi:HfUFfITYLW3CCR818eKx89YoIi","tlshash":"3162cf00d70720430acbaeaa392596425b5bfc1335d28693ef7ae77570233e68a4de5d","first_seen":"2026-03-02T20:46:12.375946Z","last_seen":"2026-03-17T18:08:50.570059Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww.anime4up.rest/cdn-cgi/rum?","fqdn":"ww.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ww.anime4up.rest/","date":"2026-03-02T20:45:30.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: ww.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww.anime4up.rest/\r\ncontent-type: application/json\r\nContent-Length: 1520\r\nOrigin: https://ww.anime4up.rest\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1520,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":368.2,\"startTime\":1772484330181.74,\"versions\":{\"fl\":\"2025.9.1\",\"js\":\"2024.6.1\",\"timings\":2},\"pageloadId\":\"37a4e0b1-c2c8-44a1-95cb-aff7da72b9fd\",\"location\":\"https://ww.anime4up.rest/\",\"nt\":\"navigate\",\"serverTimings\":[{\"name\":\"cfOrigin\",\"dur\":0,\"desc\":\"\"},{\"name\":\"cfEdge\",\"dur\":10,\"desc\":\"\"},{\"name\":\"cfExtPri\",\"dur\":0,\"desc\":\"\"},{\"name\":\"cfL4\",\"dur\":0,\"desc\":\"?proto=QUIC\u0026rtt=11711\u0026min_rtt=8744\u0026rtt_var=5796\u0026sent=12\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=4072\u0026recv_bytes=1203\u0026delivery_rate=267449\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=59021\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=160\u0026inflight_dur=48\u0026x=63\u0026mtc=none\"}],\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":254.38,\"domContentLoadedEventStart\":469.48,\"domContentLoadedEventEnd\":473.86,\"domComplete\":479.72,\"loadEventStart\":479.72,\"loadEventEnd\":479.98,\"type\":\"navigate\",\"redirectCount\":0,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"h3\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":145.28,\"domainLookupStart\":145.28,\"domainLookupEnd\":145.28,\"connectStart\":145.28,\"connectEnd\":145.28,\"secureConnectionStart\":145.28,\"requestStart\":147.36,\"responseStart\":168.3,\"responseEnd\":168.78,\"transferSize\":6952,\"encodedBodySize\":4646,\"decodedBodySize\":7298,\"name\":\"https://ww.anime4up.rest/\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":479.98},\"siteToken\":\"2fef01b7c21841c890f891afd54bfac4\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://ww.anime4up.rest\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6cG45RNzuYUiU7EofZFTfGeti5Cz3GlJlGLswGBp5gwprrg06Cdgojx37cONipXVMle8prCgAoavDPLgmmJsMip61eFzKQRDdVKuqq5aDj4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Mon, 02 Mar 2026 20:45:30 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d633edaac070d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T16:49:31.594606Z","times_seen":13339169,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ww.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ww.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww.anime4up.rest/","date":"2026-03-02T20:45:30.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 19:28:54 GMT","end":"Tue, 19 May 2026 20:28:50 GMT"},"fingerprint":{"sha1":"83:61:74:2B:F1:77:DF:F1:68:3A:D1:0B:F1:05:8B:A7:0C:B7:B3:C2","sha256":"AB:12:F8:E1:72:C8:68:10:80:3A:9F:9D:C6:84:76:A4:16:06:31:A9:10:4A:34:B0:5D:62:B4:80:3D:63:F3:C5"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:30 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-Tl0GTXQHFdIxDQjw' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nreferrer-policy: same-origin\r\ndocument-policy: js-profiling\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d633edbc938618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":209576,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"0edea16cdb14dd01c8d4c7bea42b7942","sha1":"1febe214e21528e8394c36945c4e9b528f0d6716","sha256":"a3f358090c0965bf95c50d1a8c04f8d81d4edcd43918625b2bed4f7268c5b5f9","sha512":"2be787a78420c9a861d5214eef402ef32a9e840c792b7b302f828f0b9bfaed69adfa51576732a1d48115e0111dce553b06a41c13c4579bffe2aea5224d72dd03","ssdeep":"1536:R0aKOb/J9kuPIniWNm0m6CTPNtXDv5MxmKeqj23oqiP3BJjosC3TwfVhdpO5B1s8:EOzJ9kmIfLCTP/vmxjUiJTd+s5pjxoMo","tlshash":"f1243a8bf7c93565e3537478101770c9b2675c84b42d986ae900acf038a577caeb6ebc","first_seen":"2026-03-02T20:46:12.377149Z","last_seen":"2026-03-02T20:46:12.377149Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2026/01/bx189275-eHsK0lNnFfXH-1-e1769374801182-270x165.jpg","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:34.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/bx189275-eHsK0lNnFfXH-1-e1769374801182-270x165.jpg HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14426\r\npriority: u=4,i=?0\r\ncf-ray: 9d633eefda8f0d38-ARN\r\nlast-modified: Sun, 25 Jan 2026 21:00:01 GMT\r\netag: \"69768451-385a\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\nage: 6605\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=aoO0woBpltq2bVyZ6OdEcf8r0nm6krA8jXaNdJuk4NYkPIZdH5u213nSYvbdD3QXKI0DvOsY0xczOlQG50O5PTldR3ZGfKgV9xrcfrvAt7%2FIPyw%2F3A2nWRzxjRTkY2WpwTvR\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=8733\u0026min_rtt=7635\u0026rtt_var=977\u0026sent=1747\u0026recv=208\u0026lost=0\u0026retrans=0\u0026sent_bytes=1965470\u0026recv_bytes=45331\u0026delivery_rate=38966505\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=1022555\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3895\u0026inflight_dur=496\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14426,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 270x165, components 3","md5":"32ec3d1cc3292b2bbca270d6cd99c734","sha1":"1c2af4994750bc6131e75b5df050f0bab54ce4cc","sha256":"3960a86bff4ba29c5ed523df294ae07d13a2418d02f0db94ccdb1b68d70f47ad","sha512":"7e481d1aa53fcaa60780dcefe3b7b11fbba5fd45ebce2e1d7aa535cebd5d618cd70ba0492e02a908a7fddc62f199aef7f558e0acf4df8a35deddffdc9862fe46","ssdeep":"384:HLazn1KKOpVcMg7IFyT4q1Ts1zGDg4uVJyXzLukUyu+ax:HLY1KKCVcjErqhWJ5FJx","tlshash":"7452d13830b391d6d9024d62449f48a95b4e53a5aba0a7e822f0c6f4e0b50fd2d956d2","first_seen":"2026-03-02T20:46:12.378367Z","last_seen":"2026-03-02T20:46:12.378367Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2026/01/tgfdsd-460x445.jpg","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:34.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/tgfdsd-460x445.jpg HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=lIvbaE7KNV1THN7PEc4uf3F2_P.NA5JGcqQXWaB.z.A-1772484334-1.2.1.1-axNFgh5QRSC03_L.5TAd2BRLnCbqVvb0RmCYqIPPdv9Vg88P0W2ky85eROKmpulpSbIPHAkHP3G1cbwHELqpc53Hc3PNwxcci7TqdtOKCzwpxDDNvGwwA_hR588.GRnCBOYUaa0zT861xSPVxjpHSY2QuQKQKCzb_ZIUMePsWtrlOvSQXYyQf6UcMC4fp02jQPP2I0GUufm7aDph15NKyvdL9VRBMNUuSYWnVFdiMwSD4IQtqkBJG.gR8XTAOSQ.; _ga_T9CZDRRQDP=GS2.1.s1772484334$o1$g0$t1772484334$j60$l0$h0; _ga=GA1.1.2109030791.1772484335\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 55434\r\npriority: u=4,i=?0\r\ncf-ray: 9d633ef54c5b0d38-ARN\r\nlast-modified: Fri, 16 Jan 2026 15:21:01 GMT\r\netag: \"696a575d-d88a\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=wgN15NmmzG%2FXtuutTn2LuBho%2FhPAdPWGeZPqVmg6e5LSQURSkK%2FAIwfzLOWpzufzOVnq1YZdmxuUQ%2BXZ2bzfS1B7jOpWplk9959Isnxp3goeWCLhZRfM4liQK4vh4AemhWuN\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=8851\u0026min_rtt=7635\u0026rtt_var=585\u0026sent=2399\u0026recv=241\u0026lost=86\u0026retrans=86\u0026sent_bytes=2711531\u0026recv_bytes=65285\u0026delivery_rate=38966505\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=1022555\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=4862\u0026inflight_dur=626\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55434,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 460x445, components 3","md5":"22cb16a248f351844a0c320c5fa014f5","sha1":"f6a96e44e1643a26691e134c07eb429d977d6881","sha256":"90573d47cd2d84448b502c616636135823d6c751586bd1557a43bd80d354cf59","sha512":"4d03cc96c647d7652fc3a8baed98b17f211261f84fbf9edd03cf040e185b481b64e1be62821e067c44213eae4a5734a82b9416a48d15295aa7e5035c26b2d38b","ssdeep":"1536:mEQiqRiKpKxvsiOz0AH2f8AIa5+OARS3emIagtUH9WS+Nm:RQiqRvKGiYz0Ia51ARSum7gtyWS+Nm","tlshash":"874302236758caa6a83a5025802e5f45518d1cc55d74d488edf8f2a4930f0daaeefea8","first_seen":"2026-01-29T21:37:19.6672Z","last_seen":"2026-03-02T20:46:12.37965Z","times_seen":3,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/g/ea2d291c0fdc/api.js?onload=MNurp8\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ww.anime4up.rest/","date":"2026-03-02T20:45:30.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 19:28:54 GMT","end":"Tue, 19 May 2026 20:28:50 GMT"},"fingerprint":{"sha1":"83:61:74:2B:F1:77:DF:F1:68:3A:D1:0B:F1:05:8B:A7:0C:B7:B3:C2","sha256":"AB:12:F8:E1:72:C8:68:10:80:3A:9F:9D:C6:84:76:A4:16:06:31:A9:10:4A:34:B0:5D:62:B4:80:3D:63:F3:C5"}}},"request":{"raw":"GET /turnstile/v0/g/ea2d291c0fdc/api.js?onload=MNurp8\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ww.anime4up.rest\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:30 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Thu, 26 Feb 2026 16:26:08 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: https://ww.anime4up.rest\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d633eda2e8795bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51125,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (51124)","md5":"b1bb037e4c3bba2a7fade0a7e3085e2e","sha1":"51e63090852f95448e189369f032fec53ce5d264","sha256":"e4c4cdba4fc50a031a1148b252e402d55bc9bb8e268500d9d3870fcbe0eb5714","sha512":"ff8a6bb6ebe30c4dfa36e308f9bd30a14ab7c25e2b955bbada3885923d3e4764782ecee55392e84ddcd0a55ca9f6bfca89aa94d9da002cd35ff2cfce174dbd9b","ssdeep":"768:GCBnK2seMK9iaD4ukeNqH/wLDsSTVGFdMs2bHLgPYjTgZ2fX7+REkm87P5GsSATG:82s7K9iaDLkeNtLzSdMzVTgsb","tlshash":"54332a583156387267d980e5717b63437325693af94cc890e823dd2536acecad233fba","first_seen":"2026-02-27T06:39:43.979641Z","last_seen":"2026-04-03T11:40:49.864376Z","times_seen":55745,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":29,"dns":1,"connect":8,"send":0,"wait":14,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2024/03/Ramadan-Logo-Anime4up.gif","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:33.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2024/03/Ramadan-Logo-Anime4up.gif HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:33 GMT\r\ncontent-type: image/gif\r\ncontent-length: 35942\r\npriority: u=4,i=?0\r\ncf-ray: 9d633eebf9190d38-ARN\r\nlast-modified: Wed, 20 Mar 2024 17:03:01 GMT\r\netag: \"65fb16c5-8c66\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\nage: 6611\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LLUAtDSVGwJnWRCdekr9Ll6XXfF7nS3aX%2F7SkRex%2BoEW40UlJfOoVZB45VrNP8ewG4Twxg4XwwVyaSB6zNAHa%2BA4GGXRkFx32yEDyFFNhWMzZxJjWLdgZvfDtZ77BOg5KzxU\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=8289\u0026min_rtt=7635\u0026rtt_var=845\u0026sent=201\u0026recv=80\u0026lost=0\u0026retrans=0\u0026sent_bytes=179999\u0026recv_bytes=22315\u0026delivery_rate=4697748\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=110907\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3274\u0026inflight_dur=284\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35942,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 234 x 70","md5":"2a9983d7119e9ef7ce8b98897061f09d","sha1":"2e48e8993cea0bd53912d03c4bf1805ed4f0f0fe","sha256":"894c4e36e7a9732f5d9f4ae09f1c26281fc46d939c831ee2523460dbbd1088a3","sha512":"8c25a69efd2624029fbccdd365ab6416d0303ace6f5a971e3a62305422292a197ef5bb892b2921e4ecc42578b6e895d54bb00e0b8bc82c2f83d57d87631e23d8","ssdeep":"768:yiWVPWLrExYmWVPWLrPIWVPWLr0VWVPWLryrWVPWLrkwJ8WVPWLruqvWVPWLrFWl:yi+PUpm+PUPI+PUg+PUyr+PUTm+PUB+b","tlshash":"99f27d44f978ff1ba6d3a31678242b5b63b01d6a0d368da6817b5c03945bcdf0ac2ce5","first_seen":"2026-03-02T20:46:12.381887Z","last_seen":"2026-03-02T20:46:12.381887Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2026/01/bx183660-B6o9cMfSfScX-1-e1768123835715-270x165.jpg","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:34.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/bx183660-B6o9cMfSfScX-1-e1768123835715-270x165.jpg HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13553\r\npriority: u=4,i=?0\r\ncf-ray: 9d633eefca790d38-ARN\r\nlast-modified: Sun, 11 Jan 2026 09:30:35 GMT\r\netag: \"69636dbb-34f1\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\nage: 6609\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3AgweO0KTu9PrYAxuDO9HPcwXjtmkP5UFWiCXTniTxcWA5QygNEJwHjqtgaPeOw5jkNwaPMYGdY3MWfViScPO%2BCG2lSMhNoywI22njHiVDrMjdLvsR%2FwyfTdDmA40NAhqCaO\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=8815\u0026min_rtt=7635\u0026rtt_var=1087\u0026sent=1655\u0026recv=207\u0026lost=0\u0026retrans=0\u0026sent_bytes=1860255\u0026recv_bytes=45287\u0026delivery_rate=38966505\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=1022555\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3885\u0026inflight_dur=486\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13553,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 270x165, components 3","md5":"854893125464bb17415f423b14f47c0d","sha1":"e2d93abbca981b034abeedc976fce2954ce18b16","sha256":"5018c9d5e5ebc1cbbf0c5f158baf9f86287b51debe623c2699684208c7c5d36e","sha512":"fc236f1873cd56ed6586d3592b0a37c22a80bc21a8ea15dac0ef314edcca98b9aed2174da5c56d277ea0585a3cbd80fc00b5e94a24d6db93bb77fd4a75949ead","ssdeep":"384:HPN5WlfPUaunNF80mSApa0k0Un+QbUefi6tdUCw:HP2TwF8Z7s1vfJjUt","tlshash":"b952c01c851ddaea6de61f688d43ab8daa5f43f275496b598c3ba420c841ceabb08140","first_seen":"2026-02-01T13:00:26.849662Z","last_seen":"2026-03-02T20:46:12.382888Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/themes/Anime4up-1/UI//Assets/fonts/DroidKufi-Regular.woff","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:34.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/themes/Anime4up-1/UI//Assets/fonts/DroidKufi-Regular.woff HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=lIvbaE7KNV1THN7PEc4uf3F2_P.NA5JGcqQXWaB.z.A-1772484334-1.2.1.1-axNFgh5QRSC03_L.5TAd2BRLnCbqVvb0RmCYqIPPdv9Vg88P0W2ky85eROKmpulpSbIPHAkHP3G1cbwHELqpc53Hc3PNwxcci7TqdtOKCzwpxDDNvGwwA_hR588.GRnCBOYUaa0zT861xSPVxjpHSY2QuQKQKCzb_ZIUMePsWtrlOvSQXYyQf6UcMC4fp02jQPP2I0GUufm7aDph15NKyvdL9VRBMNUuSYWnVFdiMwSD4IQtqkBJG.gR8XTAOSQ.\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:34 GMT\r\ncontent-type: font/woff\r\ncontent-length: 42584\r\npriority: u=4,i=?0\r\ncf-ray: 9d633ef11b000d38-ARN\r\nlast-modified: Wed, 22 Oct 2025 15:34:46 GMT\r\netag: \"68f8f996-a658\"\r\naccept-ranges: bytes\r\nage: 4467\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RYMyaPnMVQ0FckX6WmT8ZTe7M4gmevc3t8IX3p%2BMC16nVB0TkGkPguNBmeUjADb5zigN1yyGGWvUBWeitP3clDkxEKAd7Y%2FQmuGva7OgQtoHSJJbj44iC432Iox0nB5XqnQF\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=8749\u0026min_rtt=7635\u0026rtt_var=1210\u0026sent=1888\u0026recv=228\u0026lost=86\u0026retrans=86\u0026sent_bytes=2112925\u0026recv_bytes=59553\u0026delivery_rate=38966505\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=1022555\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=4092\u0026inflight_dur=541\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42584,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 42584, version 1.0","md5":"320a3a4d85d22526a0f1b047526229ae","sha1":"7485d80f305c8077d2e2406407c2d4a131254ea8","sha256":"68526dba32274a69305a387861ff572f8687365f306d9f345e69f33efef3ad56","sha512":"da87b3fa47244b6bc7ac6016c5724bd61edf09d8d5fc3ab5b486ce90cbb95e3576d5b587639d25667242664c78515f28c5dd81a4666f060eb755d012c87f6d4d","ssdeep":"768:tdMEbI12BpbchkE5no5g0u3dOjIh1JnYqFeu4ElzXmr7CA4mBEmU2MakCt+1L2l6:tdxb8jy5gd3wjMnYZlElzGXKF2MZIcK8","tlshash":"6013f171fb4ef211dff33669df6343a96922b979920c5f0d2fa6356e1383612190b980","first_seen":"2023-05-06T10:51:46Z","last_seen":"2026-04-04T06:33:33.102391Z","times_seen":124,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","date":"2026-03-02T20:45:30.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 19:28:54 GMT","end":"Tue, 19 May 2026 20:28:50 GMT"},"fingerprint":{"sha1":"83:61:74:2B:F1:77:DF:F1:68:3A:D1:0B:F1:05:8B:A7:0C:B7:B3:C2","sha256":"AB:12:F8:E1:72:C8:68:10:80:3A:9F:9D:C6:84:76:A4:16:06:31:A9:10:4A:34:B0:5D:62:B4:80:3D:63:F3:C5"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 86\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d633edc39f6618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit/color RGBA, non-interlaced","md5":"70c202196187ab3c11b4e094c20c6de1","sha1":"9c52b959e74aee9d79cbc9f35d1f9f65a3b8c863","sha256":"6255b9231d09ebe6aa1ac19ba46bdd81f3df58989c9ef2e11d6cd6e2e7b21643","sha512":"7e6168e40cce79239fc00a05381e1e95ca3534905d3fc1467973927f317b7f12b6f3e76960d5202c40046618b51e0895082e22338b1b9971038fa0ba158117e4","ssdeep":"","tlshash":"4ea022f3b2203c3eeb2a2333022e8030f83020b803828e0c000eec332a20208c0ca2c2","first_seen":"2025-05-13T14:11:45.873663Z","last_seen":"2026-04-03T11:40:49.866694Z","times_seen":265776,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww.anime4up.rest/","fqdn":"ww.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-02T20:45:33.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: ww.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww.anime4up.rest/?__cf_chl_tk=nUYjP4dEkdgcY62qkHeugl43pR5Gl1ggEn9Finom5io-1772484330-1.0.1.1-USchamq7loTixAvwLXV9rnVon6UP2cFNSwj1kdLQ2r0\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 3778\r\nOrigin: https://ww.anime4up.rest\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3778,"data":"cb9fe989d22d26c41eff705cc6124b89cf1235b631877e63ee92a985162dbc41=9emHSq3Mxyz9hGp4TtL6qyT4SpFZVGOl9VsPjKoQ2jk-1772484330-1.2.1.1-CVrcNV3f_DKke0WMWlmc70WLXnijPTwUzdh66C5Gh4E5Jqc9hb2rpFshPkQwmQ3Ar824ARd2V02JM7wwwyX9lg2LMeVmc8gDKEvgGQC0aOqR.74DtRWxTZIeyqRdjeghT5JMZaoco22T9KIwU_o3SVfdz5uB.7CHhak_01SMsjZCUgw3cy4Yxcc5lm6XNDXqopcIBNFl.unpMZCDcFE97KHRcFkhs6rGfJEdsc9AFifkfdxmCEpnfVvcnWtWSHw_85JjR8andtgJQz98AMUJhEWtCr13lRYN46Jx4cBFExVdXLzNeBU.b79wa24kFpU_oXYfIQVjWBVvcZAiaU78Shwmu0U3jzoaE_Dy9HRwDO8zwlg17VY0GNn_iA9j1474b_95UCtdxk5R5E6ynBapFGyAewX0tgkuM0cuut9M5UeCdH04BPeyddZ1AdgkhqvWjjgdm3Wy5a_r6k9oAZe2hsJjt.DixY__nPDLf1vGASHVQsSZqruxb6QLRxRhUQttk4cb8I.EkkcTGfRqKwiHTPVF7p0X2nuiUCV5voivbcfBhQ0m8OpwleIful9BWZiwZwaoJtJqjmLU_gQFtqWm2auk45XC4oW64_stjTBLFkqoe4FDVWaw4ZVB7A4QKWlkKA3W_pQWSzfw1zbBAtFLXRqug.ATLQqCMzgJnvAEDTl7KRWc4cW_M2ynVdgeBEsjCsVJaTfo_WNjfdjjPQtr9V.JcW5geKD5mU69VTTCK8M_zEV_CE1ySRejDORTmljRpyred44JJPnNHkWPXDz.Fa3xmV6fA789gC5GedmmOEfOPm4wzymqBUs0dcqN61RG1zMznMxP2066la9w20NHVENZk_oj_3xImTK2OypXVQXvFBYsj5RObTEAzQN2c96vznxq1VQe5yS_6wxZVEPUDosnHJOQNMFne3Vm463NW7vpTcDxsb_kLH5Dm2Sz.uP1Awr_hWr9deuz84ChG7tSzBiPO_.SOCad8z4C5U.hBqrXHNxgxDYrRoKaQlO6Yrty\u00262b9b6b7ea383812bf89c110230e058f9c58ed65a75459db550949e30e9466bce=OvAP5JIrY7RocZx7_r5Yk7_L6sEkxAIRXEROohZBccU-1772484330-1.2.1.1-SX9ek.EH856Rp9nx2brrUNKmM93QzFriHG4DGhY3LBd1bgGrnOjyO_xptthZ84nPG2SNO8rAUhBMF57s82aZrizb1zezpq07Mc2sXc8GA1mmGnlylGr1Hqyf6y_AygksyYgOFNXrViTbMC8qgrmjrGTfQncj_XXqoe8zRzcl7FLAf1fOZxKndRItxqjwxmzwopGPHRfF0kkBzKRNdt0UhA5mht7W7Eyo4MBNfeSMGu3Nd1qe49iLla3ASD8lYz1_OMTw8DeNEPG3r7yw7kjSV4zV5ukmB_nLaHnrwEN7jISsPDm9gAfzbEr81Kd2UvIrAJj8M87mH0mDfHbdJVi.9hd7qGyhAIgqda1BGwalboTJD5_usAgIxNG9k4LjEav0wb_qtFDWYcK7JNjdNoF4TzU1mrPQsYiDt3Xss156OkCUh6hMb7t.zu1B57kTnEkSz.Zo2JwUTqJutdaZTjBM17x_42O3YBSTY51x8DDXZOXsfNwHIsXoqlJDSoYJOwYFdfjwEmsrMIsXVq1sqF059zWrBp_U70CUFm4.wwmvluyrfi.doFrIj8O2rMiiY3208DT3NvA33kt4j3oQAO6UQotLhteOQambxTy5P4YsxuxIa0iY_GZWo0thQVG6KxEUDgWRG6GM9XkQPMNrOy.mYzY5rbEbwbk29lKtgGW2vdfQe2oUCE3ckwR8GYvEemlpit.t9I5QTtpck9bksrsOtEuiX4c2v2X8Otq8UjYdMz6cUPee4.pc0xYTLqv7a6PXU5tdQ6ZUmeUPXEAKnyO4Jxj8UBkmSQqGrlt.8j8WFS_6AbMxwFYOWz.tKUwZUxSsS2WH3Z03xQAZnkG77NX6ETEP2g7EG51dRmWIXnGwKE7GFR6vcIEUtSYp4w9ocJZVbeyAu_t4GwK_LORz.wNwTytYrcGnBwN5C0yLE7mnlSSR_9yjn1Ql6LhEbhiMHjaNW_eG4V1dMUt2UlS90jBxEZJy.OFiB5w942LlEda3OOlkiomGRhzRMkbvMlRga30_SI4o0X1AbL415kosksj69yLeJP_SzUyfnHxEFdWvwYB72Mbh2SxiewMDS4ndD1YHJDTK6rgun5ySKGVqICGTdwjpPuHm8EpLycwVMwDOhDQAwJmIxuFXHTvVQpJADwpFKE.oDNNLh9.biZ0lHJ9YYjyLf3jCRC3qWWsOMycIuGiKwSELi2zKfkBUZAhm5bJcm_C9C.6XKVQEtcfyFHyfRW6nK7Vmb32NWoxpg3yHOGuskQRf9JUSdu0R61p8D7xxmLmKWPfxLBm5hJEMsk7RLtmqeuUXv5LSmKq4Z9_iv.wGMkxSZZNFmZsoNJu8scARHc8Yc0EuMZZH48Vq_NgP8qf7uDkKm.q41V7KvnPepAbXJrezJtuicfpt7WKGluh7t819bPmfb1pWjpE22pk1NDVMz90QLPvFRmaJZ29tfV6jiQHms2yl2aJYzOXrmNSgsX0E4w_4MY1v96WLUrg9bPa6b0lTJBdFxlSYtB8daQ.nImRz85eKb9dQaqKUcOu.PKovvSeVlM0_XiFKKxiT3O2zSieY1oXIVf.0tfPcHA8Fq8tA_0XMZ4D3.kmUnw5q3bBbG3fTtJXzr71YVurTo8w6CSoWpsu4AncNtEFpv9VO_oTy443rOAj9wbAbpWHj.oQuv6CDNO8BTjUxyhCkkzY664.KFSB2iyA1vHgkkgSE6KqFgz6DdKzsw6LyfJQ6FLJx.PffrhXeyZK3B7ANzAvP9bCR35b.bU0xTo5iph0CphvnTcMYLo.DeXxmyhd5u0LiCyTLrETVMqlep0GhJPN3UODEOYz9GsrDMREgrWBLye93904jzM_kRYKGNVg.D19A5bMb2SyJTRkAb3FfEeT1Cq5r5D6TYuT5LWm.8JTt3Ls8mAAQeeV.nRPnjN.bPRfqy8vJwWsPwZlKd2d5PsR2wGENltl65hn2yKDgZ6qGVQ4Zx7OL_Wrdjpx4AT5dKHfB9P.sNcv0RvF79Pnvn3hYs8UFBqc_IdT2_7s.yl4JDcnHpDjajkywxcmsojfSRqd1jPzz_S90Q3GGxkm0Ndn6kWwTK4jCcTyaY8QcF.Ni_dVnWvO59Q_dC2ppzmHW2IGxrbvsk5tatUL7BsAgk4evFhQlgIhqo_f3pdgTxBSpDQu.zOjHrfbcjzG2nNH5\u0026c5c87a983b600b3302a84d8375c39e528abc9e9c5473974130b94ac5b65192b0=q9BJ6dsvOtRhLrZH9vhNd_rejKMytjjVPfbrNAmN1a8-1772484333-1.0.1.1-x9cbvwqG9cGB3rdxIdlhJ0AyMCvuC8u_yLr9WZn_HBEggh.qLaCs0lPRSNPvvqArrxQAQHX.w1b8DuhouzFk2DJeMiWSSfwZSzm8JVSE46rq6IRRBUC5ZTDfKSJfeXn9KHkAHgZ1fFjTKoRl4kD4kqbFnzFM3VMRhK.AEpCR5.TUZ23RP36JJltAUWpHkPc0"}},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Mon, 02 Mar 2026 20:45:33 GMT\r\ncontent-type: text/html\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfOrigin;dur=42,cfEdge;dur=12, cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=8595\u0026min_rtt=8002\u0026rtt_var=574\u0026sent=114\u0026recv=49\u0026lost=0\u0026retrans=0\u0026sent_bytes=103527\u0026recv_bytes=17889\u0026delivery_rate=4697748\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=110907\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3013\u0026inflight_dur=185\u0026x=63\u0026mtc=none\"\r\npriority: u=1,i=?0\r\ncf-ray: 9d633eea18580d38-ARN\r\nlocation: https://w1.anime4up.rest/\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5VTVOd7HNjfRcaGHmlknkwMYh4hUymmeioWhAKURVYF02ndYp7VxFP2CV0Ad7wQpzAfBrQRRKqojGAuNL7iPPs2wlaHiV4sq1sLmJlthoXRqH3NsERUqhJlgWhMNgbdqD1MS\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":367374,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T16:49:31.594606Z","times_seen":13339169,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-02T20:45:30Z","timestamp":1772484330,"ip_dst":{"addr":"172.67.201.154","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.28","port":43358,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO HUNTING Observed Unusual Host (ww.)","source":"{\"timestamp\":\"2026-03-02T20:45:30.323851+0000\",\"flow_id\":702162575961611,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.28\",\"src_port\":43358,\"dest_ip\":\"172.67.201.154\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2845065,\"rev\":1,\"signature\":\"ETPRO HUNTING Observed Unusual Host (ww.)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2020_10_21\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_10_21\"]}},\"http\":{\"hostname\":\"ww.anime4up.rest\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://ww.anime4up.rest/\",\"length\":167},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":1335,\"start\":\"2026-03-02T20:45:30.273931+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ww.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ww.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2026/01/bx189565-OHhadYSsd0Bg-1-e1767620124102-270x165.jpg","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:34.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/bx189565-OHhadYSsd0Bg-1-e1767620124102-270x165.jpg HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12250\r\npriority: u=4,i=?0\r\ncf-ray: 9d633eef9a5c0d38-ARN\r\nlast-modified: Mon, 05 Jan 2026 13:35:24 GMT\r\netag: \"695bbe1c-2fda\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\nage: 287\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2F4EpPhYhCuLb0QFBOmO0ZJuDhkWb5kzN13I45ZlksZMOOxkeJImY9u6arU2TK5p8j8bDVZFIoP%2F9V0vryCQ3rsFaMFT3QqZQaWvGxuPNrXMtmUHTSaqIUJitIHVD22mwt2tT\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=9773\u0026min_rtt=7635\u0026rtt_var=1558\u0026sent=1215\u0026recv=186\u0026lost=0\u0026retrans=0\u0026sent_bytes=1363292\u0026recv_bytes=35802\u0026delivery_rate=38966505\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=1022555\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3855\u0026inflight_dur=454\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12250,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 270x165, components 3","md5":"02bdcc340e8388d30e3fc90f06f1eac3","sha1":"f546e9a72389dc9df824efdb1c9f4469a7dfcf26","sha256":"165e97ccd0e2e6016627614cc3780abd690c9086640af1af78e7db56ab1f18df","sha512":"58aed04c43eca3a7ee41c48a331a53639f5aeb1ce77944820524c2f503603eb07e41c519ede8f07d2e40d509b7f39b2dd7f76ecca133df10bc9d3888788f3e0e","ssdeep":"192:/veHEnRGDE2rL/Fh0+zY5oVos4iIInRs+OFjXrfJTFAA2i1lHairZ:HUYkEW/+ios4cSpDFFAPql6M","tlshash":"6242d07e1f5358310caa0f6ffbb3d5966bd50b748e658007fb36c2355859cc9886828e","first_seen":"2026-03-02T20:46:12.386336Z","last_seen":"2026-03-17T18:08:50.584704Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww.anime4up.rest/wp-content/uploads/2025/10/Anime4up.png","fqdn":"ww.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:33.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/Anime4up.png HTTP/1.1\r\nHost: ww.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Mon, 02 Mar 2026 20:45:33 GMT\r\ncontent-type: text/html\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=NKvILKdn8R%2BA%2BFA2kv1i5eg9XCbAZGjw49Wdw4IK9aBmMS%2BUAPfil2m08ET%2BIHG1g%2FizqUFmdVsA47fITvNfeB6kfqd6lJZi9WlGY6qIRPvedFHVSLHXrw%2BK41gpfoT%2FegEs\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d633eebf91a0d38-ARN\r\nlocation: https://w1.anime4up.rest/wp-content/uploads/2025/10/Anime4up.png\r\nage: 924\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=8289\u0026min_rtt=7635\u0026rtt_var=845\u0026sent=215\u0026recv=80\u0026lost=0\u0026retrans=0\u0026sent_bytes=196658\u0026recv_bytes=22315\u0026delivery_rate=4697748\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=110907\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3275\u0026inflight_dur=284\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7538,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T16:49:31.594606Z","times_seen":13339169,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ww.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ww.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2026/01/dgdfg-e1767993350778.jpg","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:33.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/dgdfg-e1767993350778.jpg HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 319264\r\npriority: u=4,i=?0\r\ncf-ray: 9d633eed39750d38-ARN\r\nlast-modified: Fri, 09 Jan 2026 21:15:50 GMT\r\netag: \"69617006-4df20\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\nage: 1359\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ee24R1HzuTnJPGU9Te3CcPBJ60pcXTtP8nv9eez5v%2BecVgdbbgXgETWxHgmXToWySg7oEVwpC9sroUloAP4z203MM2gLu5BtF4ljhxM%2Fri6%2BfxluEKvSmkAvjhzVHK3DN5Ev\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=8455\u0026min_rtt=7635\u0026rtt_var=717\u0026sent=248\u0026recv=89\u0026lost=0\u0026retrans=0\u0026sent_bytes=227257\u0026recv_bytes=25974\u0026delivery_rate=4697748\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=110907\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3475\u0026inflight_dur=307\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":319264,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1920x794, components 3","md5":"429995d9e8ca8621b3b784a65c33734b","sha1":"f21b75f311b728013f8577f3cee6c4aa90b723a7","sha256":"3eda77c0b60bb39f4e63ce379d0a79be0d518bb4cda4261b0a856926b3c738ff","sha512":"ce77b7694d80e2cbd1652544e6bbfd3bc20cf2111f0bb5486919468622c0f039c54b67d57e84fcc8e2378e285eea251163cdabea08237defabf753389f57b8bd","ssdeep":"6144:18wgiiZ4Z7iDvKut8yXFhWHOvZ4Bk9lqjAzXA20Y8iRVhdB8uUR5l0GRlNj17RX:ywEA7iDvZtFniO9Gv20Y8YPj8DR30GRf","tlshash":"0764231fbe312442aed8aea5ac934ac20985df653bc2603ce751dfc63b8503b4593978","first_seen":"2026-01-29T21:37:19.633177Z","last_seen":"2026-03-02T20:46:12.38774Z","times_seen":3,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2026/01/yhdfg-1-e1768138671356-270x165.jpg","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:34.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/yhdfg-1-e1768138671356-270x165.jpg HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12318\r\npriority: u=4,i=?0\r\ncf-ray: 9d633eefca6b0d38-ARN\r\nlast-modified: Sun, 11 Jan 2026 13:37:51 GMT\r\netag: \"6963a7af-301e\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\nage: 283\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BcNCSyc7MedPAZt3wnEIFjt4mR6wmLBP4zEpLrGoL34nKyxaa%2BfsciDsBg%2F35tKebVDfGxUOULYomaRCIgC5AH3NmhUopHLfrxjaLlAjvNInn9%2FURGaUv0kSEzg%2FDRaWUhjv\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=8894\u0026min_rtt=7635\u0026rtt_var=1239\u0026sent=1391\u0026recv=203\u0026lost=0\u0026retrans=0\u0026sent_bytes=1552679\u0026recv_bytes=43513\u0026delivery_rate=38966505\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=1022555\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3879\u0026inflight_dur=481\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12318,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 270x165, components 3","md5":"57f4ddf44663da4a8fba2dd835652059","sha1":"5e05d2360441987802ce23849334ecfd63818d67","sha256":"e8d836d49bc116033fd622c74b300f5898bd1de87357c57a4ac7ff4e3da280f3","sha512":"a5f9bc6f8981282fa3cb1f4127af511399e498e8151ca08a271e03254b0a4e3936cd084ccd10d2722e5e88ce9897bd0d4254e642ee201c48918cb3c8bd81a341","ssdeep":"384:HgD+eNC9e9M0/QRXh0AckVbfrtKNNR4LcARFMgxVLx+d7KZg:HC+e8A/QRXh0ATrKN4VsgFg","tlshash":"9e42c0e4871604f2994e4e75878d14bd69cc6759798d02f24e72ead79e08ac0848ef4e","first_seen":"2026-03-02T20:46:12.38902Z","last_seen":"2026-03-17T18:08:50.534213Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.6626698818367409:1772482035:-GD1n3tx2_JMoaRsVqsS7MV-ZoMoJNR9sgahqTEgXiY/9d633eea887a0d38","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:34.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.6626698818367409:1772482035:-GD1n3tx2_JMoaRsVqsS7MV-ZoMoJNR9sgahqTEgXiY/9d633eea887a0d38 HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12147\r\nOrigin: https://w1.anime4up.rest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12147,"data":"ThcmZqy9tE7jjtkIjIBGyQVIlNIsICmNuemtrI0mXkt2k$u2gI+mTkmR$IBIaaIrla9IowtQBIEsSyKfGdcyXJGpcIVnnIIEbITgh0VIBoM8vNT-oE0MIBL9pD6H92NINqBh38N3NXrCn2ZmIrFo-yqGyIXG8YnZOcZvHmetlKlVM-+rDcArGcAKIEqG82JvuVIIFaG-QOYKMXQJRFVmI4geIJmtzCakI-$dE7z74Us1NIhVaZeaHIsmIjFeI3jBG86AZE6wI+n6Lp+VqHIInaBomeqII255eBqIFcmy2UBcqGSiZcLmIzF0msqbbwF3s3sqhCeIbpwcalH5IIrNlNDhFtKebKejKeIutKIY0D$eIcateV4qoCNeypsChxNfzGSZKpZF033hha+XFcS$hFrcqgeh$U3IcyRmmttCeFA-RItCFbZtzz-VMeozlJztkiQli1eiYmZMp69eyDbbm+IzfotKcNKQ$-dcr1chfz-JhAKtxb9DdFDhbFQ6UNRg$j4$9myq$enybqdaTC42cIIL7se-i$Aq5prKbl9kqKzFfzQIrwoACo$4$aBwr6fJubFCSofQxrQAF-RQt-Ed-6Kp10yslxAFKTl6EE8BHxr8Arzi2Pmt9TFkatOCJ$fyNuEdcYgxj46t6$C6r27KhF-0BDlXnOmSiXmYUKR5A6ao43Sv2h2YKnGtggVv38ermt4xwfI8widX4u-I6dMJDOpbMV+IxUXn70ddtE7zRykV$DspmcTXgs60ZKK-R0Cfb3oS+fwbMtybIyUGq0r0GMDrKemgqhH05w6oI3MKEIL797wArXyIbCXJ00njPDvyECE9eO9eaCNPKwrFbwHNKsqLMwymOTElgSCEeeL3q90ntkXM2Ncpgef8pgB3qVMtI2bGntNEICMNceM3zJ9GthEIOGNnCfm0c-etQPCzCNlZk4E9cw7R3h03NeNvZzfG$V91m0ybXKwNbbn0mykhIgbsMzCE+KkFF0LnyqHbyGwnkMrh7K0ylLLI4R$eB4FBoI5rgG9Ir1kg4rfy62GkgzrKJI$bKcFDTn8LkbQHkBKn9DIL1wcBgBNnhgRAFF$hjVbpElMBybINBc1xkQybBn3cH$CF791K9aHclBmKJsyKI01KenwtRC0kb0e093cbMD7kEn2GHP3h90u3b+EnocOM-bQrhYo9FknTtCcOCV3NoMUawkfzkycNnlgQfyjhzMt7InCOBu6D-y6MFBy68mIsItgzoNbVl9zwmgYMPPYy-3KDEcouy7a$eQZpFDT+wbDtlMMkUf8EI$L0$I-MOLgSftOp27IYklM8EyttBtngMb0NaNjXz9QBz-prMrZbbBAiStjYrhVlFnwvItBv25Sp2tNBewrBCZvgwOpnIt3PQCEk$J4E3NxAcCBe7nLi7CEcr7tMooJoIXfxrc3IS9cGMy7smP9NaIw7tQIwJLv5APhT8YRHk9GguwcrHtjY0UffRAuC0CkdRU39dHgBbd8aJqC3almkqL4PbtXFfBgIl$ZqAhxsvp87LhbbDvS0pHfSETJ6ZY1Hf8w7xDx5mnEzmIemGAFk9y-mwyaqeII5H7SYsbDUtKGy29XyFweom$I5j7yITwlIxy1t9hmyBXhok4SLIRDkNjC2Qphmaw4mITPhtcCqgmH5-ClCee1Bylr$ykNw6watTgg6Far9wmMOKjijmUTBvjlC6EJKhceBGzyF0wrfl0GEDGgNcncPyIG7rq7pFken+E+wXbjZhZmabfq1zOXAZKaq2csMNnh$N1pXr2EnaizwutpuHZaIN2-tGVI2IFIjIKZMflhyM3tzGByKQDBGNfGG8G-rdJFQATGyeHM-tkC$aGcItQuTcnb8MY0PCQ5RtDG1P+kVoXqIbqKcMaMmtX5Llg8ejqhtBgnlm+pnIyTMBVsB8emqDXqPIVmeTtoHzqVNmKDG3Zo06KeOeYVVIptg$wceH$fcdDdju3IGwLt47V5dB-9b-KpVRXmYcq9aNLXz+woh2ibQLn5TipKU-etcasEqlmFGHmv0NZ8plapn$Ir$07-7qmbHbzbKK4ZnbN9RDmQRObtL9K2C-L73XO28zcuy0Il-Lmbaw0KEJ$TKOeE6y0sF+TumfbwVE-lj-Qlk0NUjNVdPNZ+bm06GRdXFV$eCJ0qV-fGeIn61PpsQaboQCnjNnhlNSmP4$Mb8auS+IFyn6581Gud1lIAU2FgqDDiJbiqgzIqVCnp8L20spNYeltN3O7qVDUtRa9gO44P2yMxJdX+2kIwz+UaLnCoe02SZhmzFy5aeCqjKPi1BmXNoeGYpX77ONKG$j7a3njCrECBbOPGjuPI+1k50PK$Pp7ooBIiVbDN3cCegSldu0wEFFQhewdfI2Tr6dl-9qq2NctDaiZGzpgq56Yzfn91brjTiCmN-81p0dJ8dNu6Gaqpkkco46nwkmCHybT6kyM7vBkBfsQzlRfVgNN-mKL7Ln+cIeFioklie-UMEKwCCvNzJnjGDzwasOUp1KNZOr1iUZIm2+bEFk8BpSK7zVEQcmCqbNQ+PfIBRvGmt57LZ1cm51hyXVt6wdMzIDzOehwmPRHJjVIr93FuEw68ZheNeC2vqEK6FMn5gJV1TBdogrwCazItnbT4Q5gITc1NX7chI40TjUSpERKc$yeEounmkbV13OtwmAZ6TQ5iNbU7MdXt8Uw-EVKw3Egypo$40cUyUnji1osXK3mOhtBLfbAEIpt7MtUkt4pDc7GxVnP1HNfs1BpVxeNI-8qQyq9himOCqnbE0zNIwj2+rXIIfv$tdjudwqfjFqhG0UTshZyap6EhXEk1bUsbwqZ1Z8yI-Nn4GTmD2CsGtQo$I5FFmjNnr8LZGpRFOgh28r5ZvQPfUX2n2gCeqfEC6Sa3qV4uyfNrOcOevtIMgorwbUVr3QosVimJomD+MDT2MQrgkemPtRk4Kt9exD77p+PPhpe$fvTCX-E93MFGf$SP0ljvSFsvE-Aacq3qeM2l1rEy0Fr71CmgLIN7pe$eQthCAg9g-TiPluOKX9KZnFxBwvj8$Qg+z9+kS$RKJH9E0yZpbcEx1uQ8iMchHqMf8enT171vav+5COqhtnkE14pMQENsOQbqpOouzwmH4nH1efd4jjy9E6oLn2fCwU4VThemIf+006DAd1s0a1AB0ehaxiRkqN-azMPgTcdqT9gcKrqLcEaZeHbdo3zUnE7Ng+L8VNG2QYjDbxedyf1AgN106w-Pay6UGMafaxEGRpZResKN9UAbqNp-IsZ8mpTqpl3BShebDrbkEBkXyazbU9-OnoAXc146nlb1vgCTYLyOe4mwNexYVfbi7krLl4v7$$LvDtcVE3LfjLnsv7ipIQGFywcRQ2$lCE$uGlv8RCDCsOuwnf1SFE$9qIbw5GmQjMyIwHMFww02wIcyCrB-cfQvfc$tN1z8dU1qdl0Uq$zJ1LiMNPdYp$-jCAflpyqMbKykq5-aQAzCdlpEykMY0kt+q4VupstFwbifwhDuP7wFeUt$DQdcI05$3cIM3N6t$JbeiniRtF1ZMO7OrwdwUcZnel-u3I-IZjMrDR1rfGbg0qmQrr5Z$8zR3pMnwfQI-R3OIYiFQOmEVIbmE3iMy9rkIui7pVdop0rapa0keK70VNP+-9a+-PNct4$qC8IMI51ufZDde0J$7h3o$tmhZ3p$dw6wXhBafITsDKZmX$-b0rwfD6Tl3PzQy-5Fi6cH5XeidzUGQ0IvD$VNQMdqetm4q5ii3Zzh5Tt5DMNrbhrzfj-A-gMA6Di3Pv06MnJMdaJYzEpo$0taifQ76Fbf6+w8XBd7-eEyJETcnJ$c3$ZMIbwnp5NqX5d7DFXOiQZTzkfztg$h3wrrc1ezc6wcdsI8n8Xsp8GICk0aNbzmwaPgNFBC-jn8mU7OCKDqQhzSJOyPirTxQd6+Q+qhyY6v65exi1VozPQ9eMzQtfUEDfDnqMtkyq-g$-D7dqJa7gP2Z3VRtb3g-wn-dK7zUs1kQJJ4DPTlInUyEw-7JZ5hzj3A66f5Mp-t-M74QrUj-PrECqbybeZ36-$7doTHehbMIRUjDfenIeyHZYwE3HBQiFacI8ctqtQr17DfdoMBNk3$CDfO17Ddbh5FfGqBGdeOpMtBcn0ZdJfunP6neU$$yIBh5IBaMu6FmCBCEc3c7X5OZu-MtnXNNaNyJkpR6N3kbhzuMlUCXF5-TbIyyC$twj1C7V$hNk3OClekbyJuPUy6$cnvyZJN-mwU6htU1kMrwaeMnuTqbaNtIITMN71h0Ur-fw3y1EtrqNCkJBIP67TcCRnZ6K796yyvfGfZwnJkzONKC61OGrq+cgnQU7TrXH0VXanmDRNhCKCin21u0NXuXJzLMcwyNqmBiOrB-yI5doqyfSZI7iMbCAasZJJjcQPfDGZNf3n9q51pbhrV1oVR7epM7Pw5XP0qNgiA6$mvcVP0XMcnNHy-$q5AEMVh16TbiqE1VFiD6vDVZs1K6NPO0Hyrd0pNCsZCcIAeTMrrTIc07lwEIDcKey3wtxD5eFteZKZwUxTzni1IcI2gCk3JykqlXxcY-Y-KjqMRX+5BJZTy-LcUMLnMUfZTrGmE7XeabB$jtk5Tt6wh0EnFE4a2qQaJcmgL-m21G1JbdA$+Pod1ZRC$gKyhNE3dTPJgZfQyUr$oayTNGdQO53wR5NaRBbAQtL5NZRm$XdqLqfEG0INatKyuM9jIBdPktYd$jyinPQTKCfX0ZnzXD+wDqQJXiLmJ5jFeTRGVE6JM3V$N-BcFUR5VEQeKTPJ5Xj1I60rjQhI9qi6Fm0DRtOrPCENL19wGp+bYwtt$BvGMU9$EjO$yVqwvVowJ$A0l49-jz85xd8A1J-CKdwC5DmVbLM3v-MBbpE31B8nM3XM-M5JEE-JjD8AV04Z7VirG38NhIkDbyeZVPaMrwrjvbarP7VMwDqmrTqenIKye2ywJn7VdftIf$+V4Q5BCizwyBTDwt-gnqUzGZAaHIntqzzfwIREi0r--7Ftk3kFzqlAD0tQlUqrh4yTlrAdpEq4Pz$jPXxcnpsnIizAoGh2gMe$qN0ZjFLQ3-+fzLg4qBP5RdoAp510Z0GpRnPmN7R-t4YBBKM3pQrB33U6ErMKabQI8dqg-bl1aBtqRZnJarnypbkKmp75nzGgNFon8$lKcD0QOJv0tayA8M-t8fN7qqODsz+6crXwD$8KSDPKqE+K8BiZdAcJHCrpvd3cCc2FLmaPDJpakFcKaJtAPXT-5wBU$IEtJcgjrZ3wIn$DKCNNQ3QCOKnNKm1FHLTrE6YVT7GELmfmTZIAjwn7zXK2FG0MktQTPzXG1JjdrrIdI6ctNZZTUd7TrnjIQE+6+zsfONQ2hbkQS5XXQAE-+0DboGKTRGriRzvf8D-cn3VzI6AJEn02a-DKaGDZmF-6l6qrq4Kyk1Bydw5naMw2TTYJNP35yn+g+AOrz47bvaapxU6Cae+Ll0nFk$G$tXczPqpXZ6LiJmCUVn7iq2FNOfpwEmQdSAq7+ISIuZMTyp07mBKN50LMOmECAQqTbUv-zcEG+cIBuqTFHInT+cLz0ncKCZlUMN+TPD5JAF4-$6liLUD0147Ey0L40qPyv5H2B2Klhfa35gcF5wMGbNKbtq8ja3V$1JHC-fL$ApH3Qb-aYwfMBEAVFTsQv1RnDXG5+F$TEtDe$kTQKNbnljlDfTKrMAu0n$CzdM0n-5MUxTV-MBycfqRtRCHtbUpfZULLDqwbMab38kpd4wIFM3GBM3jDdJOA$IM0OalzBBI1Gyqz5I69XgIr7jk$vD$YN7Vao5H0jXqyBym6Bw8c9lOC0tCz4FyE8efasTOXRN3TIODApAcenVi2gg7TgKGKoFoFP0ZFnNErEIbUEjud7BN+mzKZngrjH1YwveYJVUsbvpicLZy6NjMiVf3Mrw0-0-EpnDdbyKYzBZinAGnarlEyE364dEu1-$kCMXKKnPg71AxZnQJ$K3Bfr79cfg0fpfEGmJHJETig$kZcn3hUdDJJsn-TofZUsjA0bchf6ZjCZqsZKcKNkEytiJwzb3Cm3mtK-5819Y7cSEZjjDUrhqOoj-8tyUxcNZoCXA8qhNEXuAHzs4qpx1KFcAqgjcDmtqz$qMb9CIPGN2t1ufPGziw9$92obr2Yr+3cDFN37FjC84mAoKGFCgP5PamL9jAbv2vAGQ0orDRXDJKK0-5IysFdE7mYctJKV$TT4GTEkFFKu+LFm1uYKj+eKoTL8gJzVq5qloJJNJLDR$Eyr6+PZgKD36dsBPdoCFcDbKLAHijj4zRyripVQeP0NrrlzFkfzQJ0LTFli1uMR1TemZdBoAiDKnPaO3OykBNkFyh$+cd-TGV4q0n+lttK4d9gvA7GnEZF$sZgogTGATlycDnMpnh-YPlnrOszVb1kNKMdLBg3awBbsX7n$jIsD4LlhXLD2BYLZ-nd3fGaYjTz2MNrEljISKeTGgN3tNdUj6pBKrsd84p-M7sbgDRQk3pDhqK9hQOIR2wwyrTjUj07boiYONHp74gBZ4glpLnOkr9rvBLY2brNqt8m0yyLvV8Np47YDp9Eq99LAU6y29wOwY+aw+AQNiozRwVna6jNPtj7HAZdkYDpiKkoU9TVRObwuKVsPaC4mSZKLM3E+KazCFNIVEgD6mybVbbV8M1TrivAu284KrO0Z9bEa3ai8QDnTV2bAKp+2kIgZBNT84X6spikJkbisJE3Zd0bc3N0smPNEshco0TX4ZHncioPNYPp6x7MxcVTsywwRtq64c0tBEo+jOkJUlAlw8UqnLnbQ9HG+q4j89lk-A6gCVCpz+bYQpcBmuEYEwVg4na2D61ebDuL59YKKLO6Kzyy3U$yUjRYqNobSp0M-NAB2Dn56jbDyOQOrL+I-lFNjrlHgXc0dEOmXBY6e4r13CS+mKG-GDCOUjkueLanAGuz12QpQpL0iOrOgr5BbyUDEStFzq56Q9yVu+GzqQ6g5PGQBrumMkKLVgHNzbZASFCJt26wbAxX8jbhyoH63VvV-oeTH3ifq7HbEMNF$sNLXpsTE7hl4q0i8m1aTOtBUCF4apccyYKK4AtINotQ8oEdNN71AoV+-G-yA+ALMz+MdpS9r6OPeLnOjG286pOCXsDvFP7c6nFbZL9UNtK+0FaeglDykHh8vMGvExGSAOy+0t4YOtk0L4byNj0N9m6mahL6iArxq724b76E8U+BIFj+U13rZjP8GDXX8-0eqYiz6TMIbwZ-hfm-1fCkCI1$te03vL5ik4sIet98F4D+BAzyrdvGa$pcbypToiadAfa38Cb7g58MUFkRZk6RH-6Rt$FKbJ68BPU0+8KI8n3PR5$kbo-qblyNXkzAOyR63XX9NJJeAnsGsGJz+YZdsZ6DnMMpn5l9qlUJtO7+r0lkfmrzr0JbwFy8FQKcaTRnGAsuvv4uIC0jrrp98xY18RRVcL3PqSEXaI8cfv7pSTenPcnyRVuhokJKuFGgVXhwpRMpQ8F0jvP+bIlGNBn4qepA9QKGaXtrVuHIZJnXKv1ksHmQb0XgezoPIhrFEch$N7R7L6tBebbLy9J6VmNhK8I8TmkyRtn+XkOXpDftV+Gw$R9aqI1nk3ilMoB2mq9wG+zhVmdcQkJrZC6dP06tqnb-+yg9tlFjjqbi4nAgX17-vyJmuIPNgpC17-KREpz32rXMBRvy6KOAVRnkC1INwC15ZVMmUMwtvy0mYREIG9zjtpcuyBwbeySNdKKwKE8mFi47rlKDCay9bneV$rreR0K-tmV9$+a6N5waNpm907gCjqhyqrk4peVjI4mJIKzzyNvFt3zMScMI3btqmkIML$MeMql9cYcNqNe69eYerczZ1CiD7bNeblcOBCq3thBKjE9$7sN5i1oee0ef+j$Enrm$DcVIxtmBqcFatFMxbTaBJmlr$oJKLeOKPtNlCK7c6QIS1Tmnm-mMzkyuCKVjCb7pIwIKwjKzTalNA0SHhhEKp2mQnwazjjwR8aEyNtipgRmkEK9m-IqKTRnlw$eTgw5zBaTtBwDKz9n8Mft-8nefcP$TlVD7jMmk9-ZupnCba-eZNNYchM1yYtfkXwThVjNkMtIKOaB9$G6Q-qC0UKwefkcVr10e5StmeqeOz7MCT9UKHMOFaV-9mKquElc5KYKeawh5httc5R36tQhXKzK0cHNOqcHmkhYMtb3PncNhgVy-eKwGMG+DnCmMukMe8ntyeVMD0ee7c4CCEmCNvyB$Vj94cN70Fj5Bm7HyQGnGaw7oDwhK45B9yEDcSw0hmA5$iDOem52kKIfklDMiD10nkr6lT2BC0ro0z-P-n$pJaw39wq-IPNcV$t4CQ+-ewcx3j9XNyM4-etmRrGREj3m5N6gKdKBlE7yo03MckjE9RBRzs9v$Few8gerPtjuoytw2-CcVIIgqeDbwSE+oyDio5cQgeUEVirZKCqCHKcXC72yH55m2IpkQNpE3jrFC8INcCe3DNFC479bp2ehp6Zl3GtlH2IcL2rcjsK4IwRb93LMar3IqBqZkL+nnXEtbg7-P4C$VPEhyd5gD$cJ601M5c90QDrh89CEtlmvqPDuc+97kbr0S0tMYjEAcPG1ygDf-8cbksjdtlhI9Ds$+q7bZUzH0crMeK5I1aCCnynIZI0R7cw9MH4eeINKtowIMKupUmUq99rfINRV716ENfhlKNely4fIQhw8pEmwapDee+b3ngfI1c9Kbwwco8ncCwy8yVIikd3$g6Eq-9wMgmVXraQ0mVDj$ErGqnNtjIKuxELN$RN5r+Vl0d-emXqVmy6myy0GcIIh4abE0aGgGQA32yiDTvPDy$tcCmFbUKgjKdPgZlbscCoR2uVILws6LmNXh3alkHYPKN21LcvEhKiNQJNTQyuQyJ8UwCeZnagMQd9PAmYVcomym2kvcfKvIgeGecmm8nutoqJtVjCg08PmmtK70TEIIIgXKB-3kNByGOdRed3wr4NdKGN+4rIAcdNy8Ga2HaPQ39mZM-t9mSqrDZhGUt$hxGM-Je+9fMIK7+y6opSABcl$6CEP7yBJywqjCvIS1SsJCLj7nIdTIe6mJe0gNUiny9zAmHNTXUTsrt+mQOCm3dTKQPdDwhbvj9EEVeh+Iwad9ZLS6RCby5-vK2-2zro5My009cz2nQE7t4zU1xh8wt4XGI$g00vQ+-nnnO7t6dKMx9$XV3w79D004kqorSZdVE8QNs6F-Az6RrIMhe0drjYB$dRmmxcBKqFzSnc-q5we$cTjOBI9MrGNBRhQNkw78MSGtoMeU9zKCfNAV3czYtQOzrGacmRonknEBgtgcf9umebV7Mh3Ey+Ib9NOz$shGwZ$yPDE3tOnt7htL0MIzKwEnEIprVy-mvK2w7b647bI3mZwEgrtqHa3edInk0FjHCOCpwvcVwelO67MGrik2UEOzgSfKLQiygajv72VIKy8iqKo$9ezjDwy1eVcN8B-XgNEq2-pK-wzl9NDItO-aDvmGm7Cp+a6wcuzgnB9w3j3-y5IxmpSjoij53yE6b9wvCs7V$YtXo3q9CC6fka0iFm48TBp73VQxkKuoSXBzKIkyyiju36I+nvTsNM0FDc9D2lUTuKd-y6qb0h4UXzyDDAo39mwZgw7Z4iPD2$r2VD7zwpi3GNzT-7qDBh0GJ8z8H-X8auR2iiI$9ABOkITM1yJoN1OeCeT8g107uOnCeOUEXQX0Jo24rH9+Dnms-8u24NFIyM7cPwvuFmbOYN7j54IA-D8d1sxTNIcM7oVIeypa7K-peYu1Ae8eI2dvnD1uktwOsIFxZJ-8uZNotmC5jM-ychLj2eCHpwPD-8ut9qxBUE85DKL9LjwesXEmpEyqHU81M97yKJLIGKO9uM0LaJQ$S+jubZQc+f$tAyVjojUXqcIel2-mCOyCn2UcK$xgPClGlMlcK4qINBCnHG1ncjgDd5JojE$ecSI6c6nmBarON3cLePqgY-KqUIpxTEJP5PkMqS2Vgt3MfKjClKSPT3coqhZ3CpmYHbeL9bOwPh7qqhC955q2nxC-9HMpittpcZXCezhybXTtbQoOuTtgBAEq8JPc68V8U-c$FtJGZMPO96kyZnar7yLCbt5KZ$Fa$s7fIv9Y1Jrnhq2uECX9zgYKCJfEyLjNQyeKcjlPZa7$CjEObQiAzeTfCYxXBp06BzeTRarqwFFiISmfidEXz8QBkLePhN1l+z42JotCahCUbVz2-X8BOoeoaa8-4oO64QJ4-paVjeoPePJQL-LIuzABleynyPyXcU$XBoJrBe+glhStDuzF5yzU-8uwcxIIbjG-iDZrheJu+aVpK6Zmpcbtulp5jqbIkm8ES2JoCMpkneKikMYKqj2$IiFygtRKZgUBC1egmIO9QCZmuw9n3GTtjCcz4Mt4q0IHnQ1+tbGi3+JoK8OZIfijmek4K7ngxq37Vq10OmBbIPJ4cE59nYM2n2-KXMO5PZeeK9guOSZN5Yy2cuwqpVUy2prc8Bv$tNJngH390Octc7xQq7rNjnJMS$zPP5JCbvIYo0FwkytLCQQFcuJqulzl48PDZhraF8$BQnns+zSjGFMQY9Ude25-ymkYwZM$yepqACzXcTVjrnpK6wdjj-PYZX6yMFvcCI+1elFS$2FduYj89IQ2Kty-juFl4upEtUfp-7p69MBlQ2Zpn$$uTIVwnPjRGtF2cBl5TJP48qdL2pEFu1cfaZbaizdu9Q4p14dpr-RuSlmdzUZYg7Fy6c-M49BFqPgLMd9zR+eBftP5L6my-Mp0XGsmLLguuEOdokIJ$9ck0o-AaeFgGzX-7pylA4zVNY--cSdLI0CyhKTpf-nC7lFHP224PYn7pi8$BITiYJU-pIL8hSeF4dLZLLpkt1SeFLIpVFrdkt1+0y2mbyZKTJuOylyLmP75NTntuS9jKwPgLjC8FRdJmgTerFzd7lhM0cKpp$ZMhJ7y4pegvbbsoroRvF7cespjZbdst8+eljhPT9OCPuYMs2br3PFDCyRU5Y$3Nb5FCpbqvlmD4$pbsPTtqqabD2bpfLOjt5T2eFj6Jln0DtFA0VCqUpj0DEDrmV+lEI6r+ZCl9-V9gA5VqpldEzgD+bjwdOneTBrLDlmAwdOnkCMrLDeMAjdMZ$T3Q$iByF9dynKTyFMGooFjtoZaDJRA-EC2Sz8qw4qrKgOl4npsF9a8P8KERKsp4noudQ4ZkjFAJgs-kQ-UleF4-1jw7Tb-Koo2j-6rFVaw-gV+lFFU$wGaFl2L9pjRpfF5aO-4ZtDKpp4lq4r-ag+1G1J$ypaXP5gbDCl1vnQ4o-dTlagONjbLI3hUpJc7hqVtsDq1fVG-ZDV8Zn9AQymte4ytPI2$11ffEGg17Lmfm+c8$n12EceIbwCeyhEb45PHbvDB1nkGMp1yXeHIMxrSaFZuJ7V8hOyPv$NT6C1041Z6uZJr2H6w5KdmeyvbqG$UwVO1Xn4azQt87icMI$IIIXVKRPc6IEkoMMNycy3KBwsFyI3daOeU1aKE$EHtezFe4N7wV0rgyVtZgiIO1yhNiA6etebwbaZTeIIGamnIEjXqIeeXy+mA$9eZBb4IM+ft7bOqrETJ3cmfm6edzypBjzvmo+4kDJVmCVIvITIUBmIy0yy3wIIzQC1-vBIL0pFqQCjyEy6cG2HwPIyGezvBmb2S3pLgd1RRL+pIKeTiLD79RVw12mITi9RL+tteX9jy7U9RTkEI+INmrd1rv2+YRprGe306cITIGhpXlf2uUzcgmH$okB52m70v4+G2L8KeN3q0cbwtOamr0T6yAsxIyQslqQ36IIyll$t$Ga1Ey7IInU9IUFk7TRHmPIt-rUAHbJ0Zeql1mXe3sdjyccyy99X4XKrltueaKpC7YmSRQGcc4$T8Yu7Segmaebk0AJ0Nw5g-lqRjI6lbcfgDyigN929Mh5FMdwbwLlS3phCltrwdSUfpNBIb47kv9+6jIfowtGUXoccadYkBkN4yJIJSmN5MGlI67Ky6+e$oXbG7Z79RbS$IGInQNm70Rse7Ef73pI9qbqbwknofPTXXrb5ccKGk8KzTc$DIseVw3FIktkykr2SBIc-+w73w1mQ7vF8FBeowI1MDMFFvln5ZkNgmIIDZXFwne0V4DvrQE5L1uKvE+fH4gY5jGUNv6+TKorncr8VJIIIAMKlII"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: qxPvt4YTMA3GBtQHNS/DcQ==$zxpReevIA5LmzbHSCv8h0g==\r\nset-cookie: cf_clearance=lIvbaE7KNV1THN7PEc4uf3F2_P.NA5JGcqQXWaB.z.A-1772484334-1.2.1.1-axNFgh5QRSC03_L.5TAd2BRLnCbqVvb0RmCYqIPPdv9Vg88P0W2ky85eROKmpulpSbIPHAkHP3G1cbwHELqpc53Hc3PNwxcci7TqdtOKCzwpxDDNvGwwA_hR588.GRnCBOYUaa0zT861xSPVxjpHSY2QuQKQKCzb_ZIUMePsWtrlOvSQXYyQf6UcMC4fp02jQPP2I0GUufm7aDph15NKyvdL9VRBMNUuSYWnVFdiMwSD4IQtqkBJG.gR8XTAOSQ.; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=anime4up.rest; Expires=Tue, 02 Mar 2027 20:45:34 GMT\r\ntiming-allow-origin: https://w1.anime4up.rest\r\ndate: Mon, 02 Mar 2026 20:45:34 GMT\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d633ef0aad90d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T16:49:31.594606Z","times_seen":13339169,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2026/01/dgstr-460x445.jpg","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:34.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/dgstr-460x445.jpg HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=lIvbaE7KNV1THN7PEc4uf3F2_P.NA5JGcqQXWaB.z.A-1772484334-1.2.1.1-axNFgh5QRSC03_L.5TAd2BRLnCbqVvb0RmCYqIPPdv9Vg88P0W2ky85eROKmpulpSbIPHAkHP3G1cbwHELqpc53Hc3PNwxcci7TqdtOKCzwpxDDNvGwwA_hR588.GRnCBOYUaa0zT861xSPVxjpHSY2QuQKQKCzb_ZIUMePsWtrlOvSQXYyQf6UcMC4fp02jQPP2I0GUufm7aDph15NKyvdL9VRBMNUuSYWnVFdiMwSD4IQtqkBJG.gR8XTAOSQ.; _ga_T9CZDRRQDP=GS2.1.s1772484334$o1$g0$t1772484334$j60$l0$h0; _ga=GA1.1.2109030791.1772484335\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 65777\r\npriority: u=4,i=?0\r\ncf-ray: 9d633ef54c5a0d38-ARN\r\nlast-modified: Wed, 14 Jan 2026 17:14:10 GMT\r\netag: \"6967cee2-100f1\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=MsWQAi7BP%2Baowe%2Fk7pBqdxKciVJpCLb5UF9fFrrQteGk0bRNqjcZhQRzvtnrmWlsvKgbajzIyYzmEqdP036krBB8I%2FmWCbwdBk%2FQbumq%2FRXPYI5V6jYCMhKCYD2jrC7BoCF1\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=8851\u0026min_rtt=7635\u0026rtt_var=585\u0026sent=2399\u0026recv=241\u0026lost=86\u0026retrans=86\u0026sent_bytes=2711531\u0026recv_bytes=65285\u0026delivery_rate=38966505\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=1022555\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=4862\u0026inflight_dur=626\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65777,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 460x445, components 3","md5":"1c6d981f13405865e258032041db915c","sha1":"fd9a967c78ef9d87f23319a1740513b4a752a348","sha256":"1bbeb858d65aaf9af66b84e9cea8daae6b2c1a05a0c1e3f99a2706f4f3c43bd3","sha512":"80511da2484959dea2fb52fdb482e2527cecdc034d935d79e558eabd242e6f17a0b073fea330875d32b6712c5b275717c44ac10fc1ce93e09172b7ae1c6da5f3","ssdeep":"1536:mwqQ55QWFx2YyJgT8wKUyP5+ZkRWNpOZs7GdDTJgqjbs9Q/0GgxA0uG:Kk5Fx2Y0rPP5+ZkRWNpOZs7iDTJX706U","tlshash":"e853024dc09b324eee181e1dd446cd63cdee96e20718e2fb206cd66531dc4a4a7c6ea9","first_seen":"2026-01-29T21:37:19.680899Z","last_seen":"2026-03-02T20:46:12.390159Z","times_seen":3,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:33.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:29:28 GMT","end":"Mon, 18 May 2026 15:29:15 GMT"},"fingerprint":{"sha1":"8B:A9:51:50:78:B2:5E:75:31:54:23:BC:80:D6:CA:53:34:E5:CD:8F","sha256":"AF:D9:FB:4F:B0:E1:BD:80:DF:22:93:A7:4A:99:5B:50:0A:BE:47:59:37:98:C6:BF:C5:DF:8D:8F:F0:8D:FD:23"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://w1.anime4up.rest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:33 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 19 Feb 2026 17:45:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9d633eec2d3e56f6-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-04T16:48:48.416818Z","times_seen":330217,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/themes/Anime4up-1/UI//Assets/fonts/NeoSansArabic-Bold.woff2","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:33.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/themes/Anime4up-1/UI//Assets/fonts/NeoSansArabic-Bold.woff2 HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 50976\r\npriority: u=4,i=?0\r\ncf-ray: 9d633eed497c0d38-ARN\r\nlast-modified: Wed, 22 Oct 2025 15:34:46 GMT\r\netag: \"68f8f996-c720\"\r\naccept-ranges: bytes\r\nage: 4466\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tBZSsaT5%2Bpk6SDF1qZbILDeWcc0wnFzslEk0qxNAVogbShVjHDMkiRhzeAtMrfpvkbgAFnhMEwFZsHfypxATflE5egRdmAZxhOwfwa5aBALuOxoqUldix08kBks1eoakWGaT\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=8455\u0026min_rtt=7635\u0026rtt_var=717\u0026sent=326\u0026recv=90\u0026lost=0\u0026retrans=0\u0026sent_bytes=320857\u0026recv_bytes=26578\u0026delivery_rate=4697748\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=110907\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3483\u0026inflight_dur=316\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50976,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50976, version 1.0","md5":"be878e4bf4722b71bd2eea41e5966bd3","sha1":"4c7b428f6ddc0e89f48173b2a1537bbbff54e736","sha256":"0e541db506bcf5df72fbe40611d3df71b871c31e6e74e18d1d22bec2ab4b07ab","sha512":"dbf89f3bbc100145409801e7aaa4ff6cf8d06fcf6f821cf4faa1590a2468f13488f74684e7b39b42cb64d9ef47f273d39da4d4d652912667da042adb7c0473ca","ssdeep":"1536:rOSMPYhrM6QRkI711Mb4sjAZRvRxV/fP2Hb:rS6bI7APjAj7p2Hb","tlshash":"1533f1a91bc42cd880d9972b9177f47198c9be26d1f792645c1bc077d029bbb89e3016","first_seen":"2023-05-06T10:51:46Z","last_seen":"2026-04-04T06:33:33.097545Z","times_seen":121,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww.anime4up.rest/favicon.ico","fqdn":"ww.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww.anime4up.rest/","date":"2026-03-02T20:45:30.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ww.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww.anime4up.rest/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ndate: Mon, 02 Mar 2026 20:45:30 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BDN4bVArL05iqKlw00332UDfkw%2Bmf7SfOMwtaRwS2Y9OErWgt3YxDL%2BFX4R5bGB9Cr%2FO7ZyMtge8%2FF1ENKdjmLCXO2glLcE9KgLrO3Ib1%2Fb6Vz7qanEVWz4UtphQkHmek3Uj\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncontent-encoding: br\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"9d633ed9ebda0d38\", cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=9100\u0026min_rtt=8002\u0026rtt_var=839\u0026sent=73\u0026recv=28\u0026lost=0\u0026retrans=0\u0026sent_bytes=72873\u0026recv_bytes=2655\u0026delivery_rate=4697748\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=110907\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=381\u0026inflight_dur=119\u0026x=63\u0026mtc=none\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncf-ray: 9d633ed9ebda0d38-ARN\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6424,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (6424), with no line terminators","md5":"c458d3d247664350302cf63576e28c14","sha1":"3cb50ba8f5e2b950e6f1509ba5e07e0ba53336b9","sha256":"9a2558c4523b6dc6379197c07e3777bfda810f3833f7064da71f14c3225a64f9","sha512":"856c84d92df9ab9432dea7d599b49c85acf719b739070f38917e601d17005c0edf6546ed4f732b495154ad404c5560a97561f1ec2f2d1437e365216badfcc1b0","ssdeep":"96:PNybXZtIEb0EFW87IV8WHeih6DQyvWigZRsiO40tGGbM5zpNKCLYzueh86dmw:PNadBmzH3wkyv5gZDtUGXpLEyYAw","tlshash":"24d15ca76a536037d77b0bf9907731206702a251e7828297d593e81cdadff93c46a284","first_seen":"2026-03-02T20:46:12.392849Z","last_seen":"2026-03-02T20:46:12.392849Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ww.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ww.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2025/09/AAAABfjFlp2knrovoWG6xA8-iLLO-4bb86YMqJWGhtNWKCdwcuTkYfrLxLi-Rd83YMp4KpzpBvv3_32kFtMclVF8rKCh2v9CZ9DVLc4S-1.jpg","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:33.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/AAAABfjFlp2knrovoWG6xA8-iLLO-4bb86YMqJWGhtNWKCdwcuTkYfrLxLi-Rd83YMp4KpzpBvv3_32kFtMclVF8rKCh2v9CZ9DVLc4S-1.jpg HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 329584\r\npriority: u=4,i=?0\r\ncf-ray: 9d633eed39770d38-ARN\r\nlast-modified: Thu, 25 Sep 2025 17:58:13 GMT\r\netag: \"68d582b5-50770\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\nage: 1359\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=57EwMEA6Sv%2BQf1h2EDeC9pGxU7zgr3X23s4gzqJk0kck7aBQq46PaEZV0U7F5dYpw5MmcLnXCEFEtazIjgUIj8%2FJO77N%2BnyQjzqiNvZ0qRH%2FntkYXSF1WuriwnlBmJMHg1pX\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=8455\u0026min_rtt=7635\u0026rtt_var=717\u0026sent=262\u0026recv=89\u0026lost=0\u0026retrans=0\u0026sent_bytes=244057\u0026recv_bytes=25974\u0026delivery_rate=4697748\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=110907\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3475\u0026inflight_dur=308\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":329584,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1960x1034, components 3","md5":"ff859cc16dd2aea0531713aaa0bf3365","sha1":"80fcbcaba11fad34fa66d781783f6028ebf398da","sha256":"d6c2be2143fe91d587129720f3015b561ab194e5be5b7dac58315d5e25d038aa","sha512":"527bf20a377dc4a0419d4db771c5a58347730038daba101535027cdaaae52601f0a437f018e829c81d9594c830229b758b3cfa1abd5c706b6d0504b84397fb4a","ssdeep":"6144:hqTuDWNEwDfLu5rcJMRoom4i/0PaGxCX+Bl48b4414WF/S0:wTJewzKCkoom4ItXIb4naX","tlshash":"16642328520c3b90d0fa13376e57576f401178ff11f35baba756c6204a10bc9ade8bea","first_seen":"2025-11-09T19:08:54.979182Z","last_seen":"2026-03-02T20:46:12.393878Z","times_seen":8,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/themes/Anime4up-1/UI//Assets/fonts/NeoSansArabic.woff2","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:33.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/themes/Anime4up-1/UI//Assets/fonts/NeoSansArabic.woff2 HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 52992\r\npriority: u=4,i=?0\r\ncf-ray: 9d633eed59800d38-ARN\r\nlast-modified: Wed, 22 Oct 2025 15:34:46 GMT\r\netag: \"68f8f996-cf00\"\r\naccept-ranges: bytes\r\nage: 4466\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hYiRhlX45nRFFMlgsqLhb%2BGrIPUPO2TbC%2FISW2GGNj7U532zucv4OWsWC6XoemLM6T74TDzBDhNEzugtKslSIkqeffNHbEm6DLS7Ab5Wo5NSoeM3WjPC2L95f3bdZ%2BlaiaOx\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=8279\u0026min_rtt=7635\u0026rtt_var=319\u0026sent=449\u0026recv=121\u0026lost=0\u0026retrans=0\u0026sent_bytes=467764\u0026recv_bytes=28023\u0026delivery_rate=8991538\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=134907\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3493\u0026inflight_dur=326\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52992,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 52992, version 1.0","md5":"965aa3f7ac96fb202926d00766736eaa","sha1":"18de72f5f6567d227291ca3a7c169fb7a7e6501e","sha256":"7bbb7c3b85ecedfef9911559a225f1df7d2c5b27b36b0dd00e3348bbc764f190","sha512":"1b8863789bd65ee7dbfa69957655e5b244c31b148748c033703c0a29d4e6ab9f56d626f357fb8f71469bc7b3979d28a77ce087e94e6057a46f4b0851752fe0f5","ssdeep":"1536:xSyqQLPm6g7g1ZpMv/ii3F0QUwKTg/olH:xSyq0PNg7g1ZpMvZV0QBoN","tlshash":"9533015fcd27d0fec711477c18306b446e94d54c59f49ad2db8bbca0a8e2f6112ea24e","first_seen":"2023-05-06T10:51:46Z","last_seen":"2026-04-04T06:33:33.087873Z","times_seen":72,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"site-assets.fontawesome.com/releases/v5.15.4/webfonts/fa-light-300.woff2","fqdn":"site-assets.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:33.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 21:43:48 GMT","end":"Sun, 17 May 2026 22:43:44 GMT"},"fingerprint":{"sha1":"68:2C:9A:93:3E:79:C4:A9:4F:7C:67:91:C5:DD:D4:80:FF:AA:F6:D3","sha256":"23:30:F3:82:6A:12:7D:FC:FD:2B:DC:77:90:BA:22:FA:FE:28:51:07:4A:5F:54:D2:37:CA:F0:99:12:97:71:6F"}}},"request":{"raw":"GET /releases/v5.15.4/webfonts/fa-light-300.woff2 HTTP/1.1\r\nHost: site-assets.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://w1.anime4up.rest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://site-assets.fontawesome.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 184204\r\ncf-ray: 9d633eee7e451525-OSL\r\nx-amz-id-2: ZuT+DR6Em+JxuQsynls7JLH6DNUPxsD+13KHrpQGDgInujOClGzUga3L8UXGcT5KBv4/WaYL6C0=\r\nx-amz-request-id: E2DT9Z66Y9R3NMM5\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Mon, 07 Feb 2022 19:58:46 GMT\r\netag: \"b33449667ce61388905a97b13f01ea16\"\r\ncache-control: public, max-age=31556926\r\naccept-ranges: bytes\r\nage: 4756812\r\nexpires: Wed, 03 Mar 2027 02:34:19 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":184204,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 184204, version 331.-31196","md5":"b33449667ce61388905a97b13f01ea16","sha1":"7ae2739ef4b0ab9336551a6abbbddb8fcfe1dddb","sha256":"1ddc6ae069ea7aedb68a92d53a12933a5a326f28c714869b99f335377dcce217","sha512":"84e5403ee949a1831e6767b16a0405156d5045a33b557f1feea94fe65b0752462c4d6429e443e2f2dacdc3f8f44e31b510a587ba48698f82f732b91b5371405c","ssdeep":"3072:Xkp/F+gqP+UhcYgfm69mi5S7vRrYa3nvQFD46ImDTtSpFMc:UpF+gqP+T6i4lYa3vKkQTojMc","tlshash":"c5041201fc7b8f5ecb24bb11b17fe2145db992d0166674c8712ad633d4a03f91a0a2ee","first_seen":"2023-04-11T08:48:54Z","last_seen":"2026-04-04T07:48:01.99538Z","times_seen":3950,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":50,"dns":3,"connect":1,"send":0,"wait":17,"receive":6,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2019/03/Anime4up-Icon-1.png","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:33.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2019/03/Anime4up-Icon-1.png HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 7706\r\npriority: u=6,i=?0\r\ncf-ray: 9d633eef6a4d0d38-ARN\r\nlast-modified: Sun, 06 Dec 2020 20:56:36 GMT\r\netag: \"5fcd4584-1e1a\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\nage: 6612\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=da%2B5Kg1UUqDSjyVkMZfM9rfBIERtOguhyzuPTaph9W3XpUArZC5KXCnZcrMWAzvL1QgWzOYsIB453Dx0wvTLLXFujiTj8hdpiw5qILV7UBQ0LQm1xNFYtFQDpY%2Br1j8HLubT\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=9715\u0026min_rtt=7635\u0026rtt_var=2278\u0026sent=1118\u0026recv=180\u0026lost=0\u0026retrans=0\u0026sent_bytes=1253283\u0026recv_bytes=33395\u0026delivery_rate=38966505\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=1022555\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3825\u0026inflight_dur=440\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7706,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 16-bit/color RGBA, non-interlaced","md5":"a83e0534ede7f8bc24142faea25c0acd","sha1":"e31f17bbdbded2d77df80abda01fddcbca632079","sha256":"95bee61c1b00015ea693ec738c3a701986a1b7c6dc021e89878b4f1ef68adb4f","sha512":"928a207533d48561f386cb525513708c68feb8fe9115b12eb5a18cbbb569c92a3b95c1fcaf7bc72046693273153b428a7bce30a11797de29de09c78ca356a3b3","ssdeep":"192:DCH5uWxsV66n5BGHeZce7NioBQ9l0AggQI4heSH6:OH5lxsVl5BGHHycoBSmA1QI4Yb","tlshash":"5bf19e2ab528bf97ba4731432001f6ac1b965f70607797c48b42b676ecfcc039a1a447","first_seen":"2024-01-27T08:43:33Z","last_seen":"2026-03-02T20:46:12.3959Z","times_seen":28,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2026/01/bx166521-PNf7tRAlJJI6-1-e1767618763795-270x165.jpg","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:34.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/bx166521-PNf7tRAlJJI6-1-e1767618763795-270x165.jpg HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7135\r\npriority: u=4,i=?0\r\ncf-ray: 9d633eefaa5e0d38-ARN\r\nlast-modified: Mon, 05 Jan 2026 13:12:43 GMT\r\netag: \"695bb8cb-1bdf\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\nage: 287\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bupzLNNyFK50nUIqsYs2ulharhKO1UCQEKFr1sweNY8zDPE6WUW94TtSktNj5JiteTIKrpakj2qc5hHZBdu5JxS9GAbqmXnbHHYHCKlqsIQgvNcVv5y53ttNy%2Bh69YwmLlh1\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=9773\u0026min_rtt=7635\u0026rtt_var=1558\u0026sent=1228\u0026recv=187\u0026lost=0\u0026retrans=0\u0026sent_bytes=1376673\u0026recv_bytes=36381\u0026delivery_rate=38966505\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=1022555\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3859\u0026inflight_dur=457\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7135,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 270x165, components 3","md5":"b2acfa054c66c121f8b0949849098cf1","sha1":"4191a11009247bb1360092015767f85ddd7fdae8","sha256":"d0e02db3a82ce8be03189d2dc94aaf02ff4dac50715a91fcc97c0ca0b3e91100","sha512":"9d090a9b77f0fc00e2f855e4f88ca7b281278b34cca7c076855a22fcc68e798f4bd14f5346bbd0e4455f878f0901bb7214206000b375b6d4fe11d65e764d3a53","ssdeep":"96:/vEBRTltWNBmSWLH+DjxudX1WaygGXXFdaSJezJr6DvqduL47R8BYuypWu:/vmTl2BmjLM8XCFd1e1oBC8BYXD","tlshash":"79e19ed60b4086694c498e568c9c18b2b19aab77f981457edf39c815c1b48c6f24d6bc","first_seen":"2026-03-02T20:46:12.39671Z","last_seen":"2026-03-17T18:08:50.548545Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2025/10/Anime4up.png","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:33.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/Anime4up.png HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://w1.anime4up.rest/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 7538\r\npriority: u=4,i=?0\r\ncf-ray: 9d633eec49290d38-ARN\r\nlast-modified: Tue, 14 Oct 2025 14:20:27 GMT\r\netag: \"68ee5c2b-1d72\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\nage: 6611\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=KSHRMwfAJLTjKdGq7RvSeESeSXWQmH3q9C7v77Vi5Eu%2BlmQsArRoHOfGjx3rfdT4R0KgbzGEPikLNgQDNsNq3gdpyXC0%2FJqz2PVV9HxqoOT8LghZV2whotvS7mm3nyWd2oTs\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=8314\u0026min_rtt=7635\u0026rtt_var=582\u0026sent=235\u0026recv=83\u0026lost=0\u0026retrans=0\u0026sent_bytes=218606\u0026recv_bytes=22955\u0026delivery_rate=4697748\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=110907\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3320\u0026inflight_dur=296\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7538,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 234 x 70, 8-bit/color RGBA, non-interlaced","md5":"d6d63712850f5231515d72d13f974f3e","sha1":"d4885d18c6dafc40e3c8103f675295022a1e9a9e","sha256":"03a1acaab8f668d8927fe180a70e135df0e962f3b6fc9fc4dee7a8fa91dc0345","sha512":"a0d9df7785f44bd25a891fb0bb6a9cea3df947632a86c2225436825c9b3b1e4d4ce5b1cc3f39c705632ec5a3785843c0a42f72a988b8b29aabf9a754eb5c011c","ssdeep":"192:i0tBKnYUTCxawtirz5isq34f+lHtNkzBYW14qr9iP:v3KYUO0wtirt6U+tt+lx+qr0P","tlshash":"adf1afd6ec721d5d4c1706d4d7e0d25becef00e9879d9a272dd8f3c244570e9244079a","first_seen":"2025-11-09T19:08:54.909749Z","last_seen":"2026-03-02T20:46:12.397521Z","times_seen":11,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"site-assets.fontawesome.com/releases/v5.15.4/webfonts/fa-brands-400.woff2","fqdn":"site-assets.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:33.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 21:43:48 GMT","end":"Sun, 17 May 2026 22:43:44 GMT"},"fingerprint":{"sha1":"68:2C:9A:93:3E:79:C4:A9:4F:7C:67:91:C5:DD:D4:80:FF:AA:F6:D3","sha256":"23:30:F3:82:6A:12:7D:FC:FD:2B:DC:77:90:BA:22:FA:FE:28:51:07:4A:5F:54:D2:37:CA:F0:99:12:97:71:6F"}}},"request":{"raw":"GET /releases/v5.15.4/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: site-assets.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://w1.anime4up.rest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://site-assets.fontawesome.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 76728\r\ncf-ray: 9d633eee7e3e1525-OSL\r\nx-amz-id-2: bk/i/eMBf9wsxCoYOgVT2JIoVCAr+T3D5G3WQBIKTahqCvsg+d55OPUSxfFFTkBhQZLL3U+lYm+y+k0pDCPMgA==\r\nx-amz-request-id: XGMVK0ADGAGP68RY\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Mon, 07 Feb 2022 19:58:46 GMT\r\netag: \"f4120760fb40152d1bdb109103063c13\"\r\ncache-control: public, max-age=31556926\r\naccept-ranges: bytes\r\nage: 7262830\r\nexpires: Wed, 03 Mar 2027 02:34:19 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":76728,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 76728, version 331.-31196","md5":"f4120760fb40152d1bdb109103063c13","sha1":"5947214a429024e9dd14bb5c3a1bf007f35ea81d","sha256":"39c658ef377f9ec31442c5343a15bdfc4c4653bcca74bc7d6fe4b3e736a60aa4","sha512":"bfde57a0a863b9ec68119d43f8c16a43ea6d4187effc80609c5f357f9ade3f88845b97d4dc390b9e6281d49cbdfa7881bae30f863051cdac224e036d2f53e5cb","ssdeep":"1536:QlPYSKCwhv0xtI8BwQujyLpf/jYX4S6mWmgQwP/WJKkoP5iRO8hQ:Ql3BuWLp3jVZBr11eOv","tlshash":"b47312d1457fb8d8c5d3c8334f8af1c835f46a8bcb3c65d2b5698192e902eacd5ad422","first_seen":"2023-04-07T09:42:03Z","last_seen":"2026-04-04T08:31:09.89182Z","times_seen":4227,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":52,"dns":3,"connect":1,"send":0,"wait":24,"receive":2,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:33.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js? HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ndate: Mon, 02 Mar 2026 20:45:33 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9d633eef2a330d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26237,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (26237), with no line terminators","md5":"28823087469fc100e19982c41ef71022","sha1":"9bfc030b31629e0b8dddb475ee9b38d1aa8a1169","sha256":"c6c728d1cd143f10016aa3421587a6bdbf50b2a73e443dbe39dacc1779d84dbc","sha512":"92044be1f49776b496561484f2f7781ac1e809def6f23256d69d6254de6620008ed6cd118b419b2f5eb2209e20ea0a3b15cb3373ec571ab3c7955f4fbc149d60","ssdeep":"384:KQ7aLmr2WkFEo4c+Xv73ucrvVyIjOioqrS9IPkmPoAPu:T2WVo4c+zJj9k9WQAW","tlshash":"1ac2c98738d9b278a3a5f0b3186773ce22b9bd48205c5816c310afa878b57795737d6c","first_seen":"2026-03-02T20:39:19.937282Z","last_seen":"2026-03-02T20:46:12.398792Z","times_seen":2,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2026/01/YFFGF-1-e1768141481719-270x165.jpg","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:34.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/YFFGF-1-e1768141481719-270x165.jpg HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14985\r\npriority: u=4,i=?0\r\ncf-ray: 9d633eefca6c0d38-ARN\r\nlast-modified: Sun, 11 Jan 2026 14:24:41 GMT\r\netag: \"6963b2a9-3a89\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\nage: 282\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TY7ghUFoj%2BP6v6bZ8AFB%2B1h5qXqGbepeqC3nZuoPThDrqj7e2CoHiMFI2nYyA2SulFlp6A6xuCh0zN48DEZFCwa%2FWR2TZNPR3GvosJILzsnaN5baN3QRBYYENo93%2Fievial1\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=8815\u0026min_rtt=7635\u0026rtt_var=1087\u0026sent=1417\u0026recv=205\u0026lost=0\u0026retrans=0\u0026sent_bytes=1580735\u0026recv_bytes=44140\u0026delivery_rate=38966505\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=1022555\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3882\u0026inflight_dur=482\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14985,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 270x165, components 3","md5":"c0f1247cbde22ca6a25f19d7f8e6d8d6","sha1":"d9f99a8f091d8be71d30a41e08c651ad99f8b0b4","sha256":"c762f321d49f572e7116015eae0931a7708b24634a168147846caca3bf4b8990","sha512":"b79791f4733ae0d9c770646cf734de35a0b4e11e70f587bd541aa3048b9332aed43c7cc965e0f1f88b984f64318513a2b429eec499f8186a78815334f8c38a56","ssdeep":"384:HS5cr214sTtz/ZmcyJSOQ0tR8azJt1Fu+dChxn8FULKFh8dhpr5:HSqr214CtTUcKSxKlHw8FUE8d1","tlshash":"9d62c09645222a641c579d324bd789f2b00825a5b56e8f2f74f6c2384bf42d603fc49e","first_seen":"2026-03-02T20:46:12.399544Z","last_seen":"2026-03-17T18:08:50.497814Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2026/01/gfsdgdfg-1-e1768045318525-270x165.jpg","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:34.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/gfsdgdfg-1-e1768045318525-270x165.jpg HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13528\r\npriority: u=4,i=?0\r\ncf-ray: 9d633eefca770d38-ARN\r\nlast-modified: Sat, 10 Jan 2026 11:41:58 GMT\r\netag: \"69623b06-34d8\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\nage: 280\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xMvXtDrxhFMWe9h%2BsL%2FcawiFLgBr5%2Fn8C8NP%2FjbaamDH333uvWWFnahrmIn7BsutKHOmzNpSurqeXurTdILv0qWRyVNXsPUtHfPymkK30ZKc7P2bgUEXInd12TIoMbAx5OYx\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=8815\u0026min_rtt=7635\u0026rtt_var=1087\u0026sent=1668\u0026recv=207\u0026lost=0\u0026retrans=0\u0026sent_bytes=1874954\u0026recv_bytes=45287\u0026delivery_rate=38966505\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=1022555\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3887\u0026inflight_dur=487\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13528,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 270x165, components 3","md5":"d91c872a27fc878a513037efa836aaa9","sha1":"aa8494c8c81fd66647e496bb532583299288feb0","sha256":"a5935d939f2389d9e8f1ca82d5343fabd5564175daaec9f8063d267a6f08743d","sha512":"ce1d21deab62cd3dde5e7c83c4e5f3da334543bb79f00e0bb1f8410b9491a6f73be256f15a284d3bae299a840708a6ab5750b994e8507d6736ebe055c89f9241","ssdeep":"384:Hv6pYuvan1bwGjxR3FMYQ1/qxFBqoshygOdJCbbZJe:HSpYuvo1bfDQkrDsQpuq","tlshash":"0b52d0eba98cb5d52ecdfd8320c56a6f4955a003377e437a513cc66f04e80ce25588ca","first_seen":"2026-02-01T13:00:26.904422Z","last_seen":"2026-03-02T20:46:12.40039Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2026/01/yrtyhfg-1-e1768049278251-270x165.jpg","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:34.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/yrtyhfg-1-e1768049278251-270x165.jpg HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16548\r\npriority: u=4,i=?0\r\ncf-ray: 9d633eefda920d38-ARN\r\nlast-modified: Sat, 10 Jan 2026 12:47:58 GMT\r\netag: \"69624a7e-40a4\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\nage: 6605\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UX%2FUPvkggn6uaZXwNNmlJZXU9b2vcl9nEJZiuSYxIfUjyzk7SE2yOdo%2BS45q8LEyuF13xB3Vj2FRzZSaJJWSpQgD6O7PnLW2WlJE%2B5UQshGEeMRNOJ3sGo3%2B4dBlsFBUKueS\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=8733\u0026min_rtt=7635\u0026rtt_var=977\u0026sent=1723\u0026recv=208\u0026lost=0\u0026retrans=0\u0026sent_bytes=1938273\u0026recv_bytes=45331\u0026delivery_rate=38966505\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=1022555\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3893\u0026inflight_dur=492\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16548,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 270x165, components 3","md5":"0c85ba2815175226bc8b3ca9a9d8ac3e","sha1":"e08ad3d78fca821390e0eb40f10efb051f08404e","sha256":"2a9e39b8f95dad79471b3a92f1dabda670633f2dbbb946dfb4cbc6555e25c5f4","sha512":"7c1279c5d233d1dc723e1dbd26419b1ccb54bd345b825b11b285caf5bc8fdcf3b7961080b0dcdb51be3c3c7b5800eb4cb52d1c1e54d2f0fc3796d921d771b8ec","ssdeep":"384:H83zSyRG7WShk/v+r4o/yiJaal6fyQkhiPhoeweMbh7qCyf+0:H8RGSSQv+rdqi0al6McPholHbtmz","tlshash":"8b72d09b5a80034e9b478de20d26797887ef5dbcb545321aecf2d8ba44398c8b7c5914","first_seen":"2026-02-01T13:00:26.851355Z","last_seen":"2026-03-02T20:46:12.401456Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2026/01/tryfjgdfgdf-460x445.png","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:34.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/tryfjgdfgdf-460x445.png HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=lIvbaE7KNV1THN7PEc4uf3F2_P.NA5JGcqQXWaB.z.A-1772484334-1.2.1.1-axNFgh5QRSC03_L.5TAd2BRLnCbqVvb0RmCYqIPPdv9Vg88P0W2ky85eROKmpulpSbIPHAkHP3G1cbwHELqpc53Hc3PNwxcci7TqdtOKCzwpxDDNvGwwA_hR588.GRnCBOYUaa0zT861xSPVxjpHSY2QuQKQKCzb_ZIUMePsWtrlOvSQXYyQf6UcMC4fp02jQPP2I0GUufm7aDph15NKyvdL9VRBMNUuSYWnVFdiMwSD4IQtqkBJG.gR8XTAOSQ.; _ga_T9CZDRRQDP=GS2.1.s1772484334$o1$g0$t1772484334$j60$l0$h0; _ga=GA1.1.2109030791.1772484335\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 409742\r\npriority: u=4,i=?0\r\ncf-ray: 9d633ef53c540d38-ARN\r\nlast-modified: Fri, 09 Jan 2026 12:26:49 GMT\r\netag: \"6960f409-6408e\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\nage: 288\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Oviio7wFy6V6mLHQ%2FbjjaJUjZ06fKzY9K85cHRTA3KQGhj44jlpfxex65x2nVTXbZJi%2B3A0wCjT4OqQFYtpWw0fRO51tRPZJ3VWVxgW4gkdFcEx4vvGP4joxQXg31B%2Bpa4EP\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=8698\u0026min_rtt=7635\u0026rtt_var=995\u0026sent=1982\u0026recv=237\u0026lost=86\u0026retrans=86\u0026sent_bytes=2214565\u0026recv_bytes=65093\u0026delivery_rate=38966505\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=1022555\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=4768\u0026inflight_dur=594\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":409742,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 460 x 445, 8-bit/color RGBA, non-interlaced","md5":"3fa723f28ae354f111ac0163448c1abe","sha1":"5a9c0d583f5a2f7d314b7ba6df0e79bc5308022c","sha256":"9fcf2d2fffc4ac82c6b2ba3a563e760fffc84095ca6cb7653b935e09df1deab5","sha512":"69ca7a5bbd8d05a376be7031893f027bf6fda88fa9f341eef24f1c6786969e9f65f234c9941029595d3982574dd4f8ba8310b478d0416323891edcd1526c1a06","ssdeep":"12288:Qs5AMg5t2cNnsTxtGfKx2YRRe/cYwYPdRRHH7u:J58bNmYaze/cFYFRo","tlshash":"ad94234cdaee6c2582fdf015d70e1e05be5b132592b1afee39a962ce66c70058cce305","first_seen":"2026-01-29T21:37:19.680033Z","last_seen":"2026-03-02T20:46:12.402498Z","times_seen":3,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2026/01/HDFGRG-460x445.jpg","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:34.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/HDFGRG-460x445.jpg HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=lIvbaE7KNV1THN7PEc4uf3F2_P.NA5JGcqQXWaB.z.A-1772484334-1.2.1.1-axNFgh5QRSC03_L.5TAd2BRLnCbqVvb0RmCYqIPPdv9Vg88P0W2ky85eROKmpulpSbIPHAkHP3G1cbwHELqpc53Hc3PNwxcci7TqdtOKCzwpxDDNvGwwA_hR588.GRnCBOYUaa0zT861xSPVxjpHSY2QuQKQKCzb_ZIUMePsWtrlOvSQXYyQf6UcMC4fp02jQPP2I0GUufm7aDph15NKyvdL9VRBMNUuSYWnVFdiMwSD4IQtqkBJG.gR8XTAOSQ.; _ga_T9CZDRRQDP=GS2.1.s1772484334$o1$g0$t1772484334$j60$l0$h0; _ga=GA1.1.2109030791.1772484335\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 72897\r\npriority: u=4,i=?0\r\ncf-ray: 9d633ef54c580d38-ARN\r\nlast-modified: Thu, 08 Jan 2026 14:21:37 GMT\r\netag: \"695fbd71-11cc1\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5QU4tqWbLvnA5E5VQjZtrG0Hk6oR3bOoTe4UiX7PDZIa8LryKZuK6EUNRFdAGMHA8JsSBffa3rk3JPnXmtjZlU0hhpu9jI35UKrkUwziopTKwnLg%2FPV5RGgIzo2nAuKZleLI\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=8851\u0026min_rtt=7635\u0026rtt_var=585\u0026sent=2335\u0026recv=241\u0026lost=86\u0026retrans=86\u0026sent_bytes=2635958\u0026recv_bytes=65285\u0026delivery_rate=38966505\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=1022555\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=4859\u0026inflight_dur=626\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72897,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 460x445, components 3","md5":"0edd6f99dd4489c92e9e5177cc0e7f1c","sha1":"ad7bd9c6bee169b087d367f4ee2ab66626f97808","sha256":"062b7db2bebfd9b95d56d5cdf459d329069a30870358c25c2f2845d4d1c62616","sha512":"4884f3a660ddd75ef8ed511092a6eb552ab0fda68738e99d0faefeefa213ea9ac577292c3da590fc0a6e1fb995c0ae26ba698eb6f4fb6890e5429b020ddc4fe2","ssdeep":"1536:mgULTqVAELY2SkAzdH/FmOJYrfhRY8R2Glxw:lRVAEUfkApFQrJRxRzxw","tlshash":"2d63121dcf78a5c4430a3ad67465b245a3bbf1a5f10bbf85059246742c2c2fcd6e8c9a","first_seen":"2026-01-29T21:37:19.653464Z","last_seen":"2026-03-02T20:46:12.403578Z","times_seen":3,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2026/01/Ashampoo_Snap_2026.01.16_22h04m55s_013_.png","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:33.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/Ashampoo_Snap_2026.01.16_22h04m55s_013_.png HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 221551\r\npriority: u=4,i=?0\r\ncf-ray: 9d633eed39740d38-ARN\r\nlast-modified: Fri, 16 Jan 2026 22:07:51 GMT\r\netag: \"696ab6b7-3616f\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\nage: 1359\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sKffvxZd2wP4rxFwLrV7Bk6Zv1qG5McvquOy%2B497gywaDoMg0m7rtTp4hkGAMMdtXES9PTRu7rwxFgfNE0evZmDxRRnkvvjyA4Sfj81JH7v4lqEPfx4Gm21XPazJeXj4fvyh\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=8455\u0026min_rtt=7635\u0026rtt_var=717\u0026sent=262\u0026recv=89\u0026lost=0\u0026retrans=0\u0026sent_bytes=244057\u0026recv_bytes=25974\u0026delivery_rate=4697748\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=110907\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3475\u0026inflight_dur=308\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221551,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1279 x 426, 8-bit colormap, non-interlaced","md5":"d5d7801c0e6cb69816b147216d9bb85d","sha1":"75818957bf0a6f58e8fb15cb84cfb6d423049f43","sha256":"33e344a12d067d4438a29697687c484d124506f63e97134500c83865f597d4f9","sha512":"62d8ece00f0de661993e076a4bec240fe6dd6c43fe0d06b34e6908619c13f71b15523d754dfaf43632bf5eabac55a063ec28f2e03dc377c572402c8ca8910941","ssdeep":"6144:9ESBUDaePUl3rpaGh+zaNZN5dO4s5OIuaVPHAonqa:9ESePUlazWjA4sEIu4PHJ","tlshash":"792413bd63be8319f8ff07bd59164408e508a0e784cd7821b257668350531dee8bea6f","first_seen":"2026-01-29T21:37:19.672011Z","last_seen":"2026-03-02T20:46:12.404627Z","times_seen":3,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/themes/Anime4up-1/UI//Assets/fonts/DroidKufi-Regular.woff2","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:33.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/themes/Anime4up-1/UI//Assets/fonts/DroidKufi-Regular.woff2 HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Mon, 02 Mar 2026 20:45:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=HrrzmsNbEc5V64wEouGMiFV7apwXIj8AiGJJxXxqzaSiz4ILFtA4c%2BrHJCdE0sKJu%2BTF5OXNt9Gz3daFFw4QnJGnNcwVBoggYDg%2F0Ufc3vmKNi7q0p9pKff9Uud3KCXQe7YH\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d633eed497b0d38-ARN\r\nx-powered-by: PHP/8.3.23\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nx-redirect-by: WordPress\r\nlocation: https://w1.anime4up.rest/wp-content/themes/Anime4up-1/UI/Assets/fonts/DroidKufi-Regular.woff2\r\ncf-cache-status: BYPASS\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=10228\u0026min_rtt=7635\u0026rtt_var=3349\u0026sent=1091\u0026recv=172\u0026lost=0\u0026retrans=0\u0026sent_bytes=1230693\u0026recv_bytes=30519\u0026delivery_rate=38966505\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=1022555\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3578\u0026inflight_dur=373\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.23","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":240179,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T16:49:31.594606Z","times_seen":13339169,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2025/10/bx196553-n0cZ0oOOOkYF-1-e1759690940877-270x165.jpg","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:34.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/bx196553-n0cZ0oOOOkYF-1-e1759690940877-270x165.jpg HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14693\r\npriority: u=4,i=?0\r\ncf-ray: 9d633eefda800d38-ARN\r\nlast-modified: Sun, 05 Oct 2025 19:02:20 GMT\r\netag: \"68e2c0bc-3965\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\nage: 6605\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CernME8coJ4xsaNlQ5bsbldqdHux2i9IyXqqHgGwFe5Bip6W9Z6TFccFvHPEnky0e1ES955XUPVd2B9JnHvbybqq%2B14JIRBVp5xSImUrQGr%2B55UGjP50KxnlCbqDwkGyFUnj\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=8733\u0026min_rtt=7635\u0026rtt_var=977\u0026sent=1695\u0026recv=208\u0026lost=0\u0026retrans=0\u0026sent_bytes=1905939\u0026recv_bytes=45331\u0026delivery_rate=38966505\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=1022555\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3888\u0026inflight_dur=489\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14693,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 270x165, components 3","md5":"6cc9c10d8309dacd5691ccbe8d18db2a","sha1":"1a1cd461bc0e8bee6cbe9277d0fb3e865bf00b23","sha256":"e83ffac063657f9646f2f0a93e9adec3e28a8e4fbc36989a488279d284b47ecb","sha512":"afd817f4bd71c3ba98bc1425dcfcbe76911594c287f8b4970a096f7bad92ec4b27709a82c69806a8e7795f68107f403af92680a1ad72081066ac5300edd096d3","ssdeep":"192:/vy0gQm8KGI7NxAmLQveIbSKldtEoP8mb5C7Ze/wF8voUcFfG0VNxCou3XAyD/d9:HyZQm1422Ll1LC7m2ZUd8Nx3ut/dnY2","tlshash":"8862cf4ac5765812052d4c1e08773d0c766daf267a02d71aba72e3375621fee8bd0d4b","first_seen":"2025-11-09T19:08:54.969468Z","last_seen":"2026-03-02T20:46:12.405775Z","times_seen":5,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ww.anime4up.rest/","date":"2026-03-02T20:45:30.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:29:28 GMT","end":"Mon, 18 May 2026 15:29:15 GMT"},"fingerprint":{"sha1":"8B:A9:51:50:78:B2:5E:75:31:54:23:BC:80:D6:CA:53:34:E5:CD:8F","sha256":"AF:D9:FB:4F:B0:E1:BD:80:DF:22:93:A7:4A:99:5B:50:0A:BE:47:59:37:98:C6:BF:C5:DF:8D:8F:F0:8D:FD:23"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ww.anime4up.rest\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:30 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 19 Feb 2026 17:45:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9d633ed98def56f6-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-04T16:48:48.416818Z","times_seen":330217,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":31,"dns":1,"connect":8,"send":0,"wait":20,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2025/10/bx188388-aXx9fsnvezBf-1-e1759698281535-270x165.jpg","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:34.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/bx188388-aXx9fsnvezBf-1-e1759698281535-270x165.jpg HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13465\r\npriority: u=4,i=?0\r\ncf-ray: 9d633eefca670d38-ARN\r\nlast-modified: Sun, 05 Oct 2025 21:04:41 GMT\r\netag: \"68e2dd69-3499\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\nage: 1151\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=INjVnNiYggN0l5MbNpCIAs4C0Y67koM6pyvZ7L%2F3DI3NC6pvgl20FXUDwpr6SmLSQazhk2utv1KfIvIIXuJBdrOuN9thMICB1ZLo3gXQMod9DEg6%2BpYbNZNASX14jNoWEBp3\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=8894\u0026min_rtt=7635\u0026rtt_var=1239\u0026sent=1404\u0026recv=204\u0026lost=0\u0026retrans=0\u0026sent_bytes=1566131\u0026recv_bytes=44092\u0026delivery_rate=38966505\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=1022555\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3881\u0026inflight_dur=481\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13465,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 270x165, components 3","md5":"4afdb5723a82ffb7d599f14fce62d8f1","sha1":"46388b7ab1dab9448f82b92a319dcf3d5bbace1b","sha256":"48dde7174efb8455f43a5a5303d28e253570087c03f95c69303be33e20bb19f0","sha512":"cc9b27ac3ac5e7bb13b358cae1951d74b70cb9ddff618122987881779c34d1044ad9061c97b83ceaae382befc2dc1bc507891b77fbd2958a1ec4712b6818acc3","ssdeep":"384:HWLVaV0j1aSH0mfNwPFyuz9Iukspqhf+X:HWLVaV0Z0S6FviukZho","tlshash":"1152b022d3c24645bddcaeae95ea1076bbc40bb15726ac4b5d37ece2d0a60cb3644f44","first_seen":"2025-11-09T19:08:54.999604Z","last_seen":"2026-03-02T20:46:12.406755Z","times_seen":5,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"site-assets.fontawesome.com/releases/v5.15.4/css/all.css","fqdn":"site-assets.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:33.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 21:43:48 GMT","end":"Sun, 17 May 2026 22:43:44 GMT"},"fingerprint":{"sha1":"68:2C:9A:93:3E:79:C4:A9:4F:7C:67:91:C5:DD:D4:80:FF:AA:F6:D3","sha256":"23:30:F3:82:6A:12:7D:FC:FD:2B:DC:77:90:BA:22:FA:FE:28:51:07:4A:5F:54:D2:37:CA:F0:99:12:97:71:6F"}}},"request":{"raw":"GET /releases/v5.15.4/css/all.css HTTP/1.1\r\nHost: site-assets.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:33 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\nx-amz-id-2: HnvLwZLSMP+JBhDthZFAgeqNRmKkuCtIoaL9lqEeS7JvZRsjP7e47sfgnJxRpl4jxL1qU0k8SindnFI14VZNEugasDCeFLM2\r\nx-amz-request-id: 15J6E1MSXSWQ2RGB\r\nlast-modified: Mon, 07 Feb 2022 19:57:26 GMT\r\netag: W/\"21f9f9f41222c9f2acec907529ea35a1\"\r\ncache-control: public, max-age=31556926\r\nage: 1713907\r\nexpires: Wed, 03 Mar 2027 02:34:19 GMT\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9d633eec6b4735a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":174294,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65393)","md5":"21f9f9f41222c9f2acec907529ea35a1","sha1":"418719c07b53e2ca55ae8bf8406ab8cdd67ce0ee","sha256":"89b2462070a1a639c693794bc1d8d9131e6eb9274fc7fb0fb854943e58940a22","sha512":"c3795141e8d768b1357931d352c571d7d6560f0b1a8faf515d7a630d444cd96bb8db46721dad2cc4bc37e9d9474a25aa372cd5c3e4610361d9b3368bd1d127af","ssdeep":"1536:lwv1E8SIZlJ/Zg9ADlnIZ+mqXf5dWGFIibJbiC8IYiy6BFAXq6Y18GMF63kAmhOG:g1E1IZ3/g2ln++1flbqMAXHR","tlshash":"cb046fb4d41e01da7726c60fab01b27a99f6f738d5410e4ae0cb4d1e1de2b9811c9bed","first_seen":"2023-04-10T17:33:19Z","last_seen":"2026-04-04T16:30:31.817638Z","times_seen":2235,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":60,"dns":20,"connect":1,"send":0,"wait":17,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.3.4/assets/owl.carousel.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:33.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/OwlCarousel2/2.3.4/assets/owl.carousel.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 845\r\ncf-ray: 9d633eec583f49cd-ARN\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03cf0-d17\"\r\nlast-modified: Mon, 04 May 2020 16:04:00 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 921226\r\nexpires: Sat, 20 Feb 2027 20:45:33 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tOUOAPs903jd7%2F6BV2RG3IS%2FWLTYq2yDdH2p2grTxqrd14f5g8ZDjStfQVYyMnurJ83nE2bMX6R%2FZ4KG%2BANkaRjUX9H9TdkcRs6Qj%2Bdva%2FjOTJ6we4kVCRJP1v8O4I9AtvBgWZk7\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3351,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3184)","md5":"b2752a850d44f50036628eeaef3bfcfa","sha1":"fba46353cf90450ef3d362a123f1e7af3e8c561e","sha256":"521410e1fc44780061e09adc980275fb5ea277fd5d9e538454214ec4379ff4bc","sha512":"b52dd2e6a1b40658674113b2257bcd8de10ce14a4c5c7ad07d31a66d0d602a67a50b195210151ac614418ff1054f3a5b3f84554aba448a46e6749a1b0af844de","ssdeep":"","tlshash":"9161bbe5314a225f480f83121dd81e86393dcc52d8660a5a92bbd71447dae6d213ffcf","first_seen":"2023-04-05T13:49:19Z","last_seen":"2026-04-04T16:45:14.08594Z","times_seen":30339,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":51,"dns":1,"connect":11,"send":0,"wait":32,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2019/03/Anime4up-Icon-1.png","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:33.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2019/03/Anime4up-Icon-1.png HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 7706\r\npriority: u=6,i=?0\r\ncf-ray: 9d633eef6a4a0d38-ARN\r\nlast-modified: Sun, 06 Dec 2020 20:56:36 GMT\r\netag: \"5fcd4584-1e1a\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\nage: 6612\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tPnP0cznjTk91Rp39%2BPtIJx3TuvOA6WLDPyTIT6Jfzznz9d%2F%2Fwiwr8L8YQJsmyW0ZRYiShMwmJIkVNQvzzzs6tyKJKBwP7P6her6yF3wyMOWG9ek0pllnjgM8JeDT1MwQo4%2F\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=9715\u0026min_rtt=7635\u0026rtt_var=2278\u0026sent=1110\u0026recv=180\u0026lost=0\u0026retrans=0\u0026sent_bytes=1244584\u0026recv_bytes=33395\u0026delivery_rate=38966505\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=1022555\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3823\u0026inflight_dur=440\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7706,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 16-bit/color RGBA, non-interlaced","md5":"a83e0534ede7f8bc24142faea25c0acd","sha1":"e31f17bbdbded2d77df80abda01fddcbca632079","sha256":"95bee61c1b00015ea693ec738c3a701986a1b7c6dc021e89878b4f1ef68adb4f","sha512":"928a207533d48561f386cb525513708c68feb8fe9115b12eb5a18cbbb569c92a3b95c1fcaf7bc72046693273153b428a7bce30a11797de29de09c78ca356a3b3","ssdeep":"192:DCH5uWxsV66n5BGHeZce7NioBQ9l0AggQI4heSH6:OH5lxsVl5BGHHycoBSmA1QI4Yb","tlshash":"5bf19e2ab528bf97ba4731432001f6ac1b965f70607797c48b42b676ecfcc039a1a447","first_seen":"2024-01-27T08:43:33Z","last_seen":"2026-03-02T20:46:12.3959Z","times_seen":28,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww.anime4up.rest/","fqdn":"ww.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-02T20:45:30.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ww.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Mon, 02 Mar 2026 20:45:30 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=iqbeuvmdOh6E0gqtdhUm9n9VTpk%2FwUk1%2FAoVV9udvIQBopiD%2BMkmKf%2F0W%2BstDcIOIVaQ4GRP2%2BmiAlmi%2FIExHPjwW4J%2BcP6Ki3XFoKf4%2BRJ5xC0ff2GTOfTQA0lrkuejFvCR\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\ncf-ray: 9d633ed76c76dd2c-ARN\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: chlray;desc=\"9d633ed76c76dd2c\", cfOrigin;dur=0,cfEdge;dur=12, cfL4;desc=\"?proto=TCP\u0026rtt=7753\u0026min_rtt=7638\u0026rtt_var=1282\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3276\u0026recv_bytes=1255\u0026delivery_rate=563131\u0026cwnd=54\u0026unsent_bytes=0\u0026cid=cf80360f29d24d70\u0026ts=41\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":8280,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (8265)","md5":"b23c2b11be2a128ca98a32d6d5699172","sha1":"fdfe00c76ea57752a7cb08f48db2bffdbc551386","sha256":"00c139f8fd16a4eef142b08354076547dbe019ca03592920f999f808f1587bba","sha512":"30365a182722dd30e6fb4fb95c36f8e02b1a825d6d5196c5dab0753ec5a8d3d080266dd364d5ad77a6027d1bdcd98e5bad30d9c7fec7062fb950224706e82e31","ssdeep":"192:PNadBmf9eMbYD1bVOu1epSEhqqOwdP2BrYyVT0z6:0qJYH2sEwwC9T1","tlshash":"95028ef27952403ee33e47fba0b7f3d00320b5d6b60172a1b2d9e60c4aedd2781659a5","first_seen":"2026-03-02T20:46:12.408849Z","last_seen":"2026-03-02T20:46:12.408849Z","times_seen":1,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":87,"dns":48,"connect":8,"send":0,"wait":21,"receive":0,"ssl":29},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-02T20:45:30Z","timestamp":1772484330,"ip_dst":{"addr":"172.67.201.154","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.28","port":43358,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO HUNTING Observed Unusual Host (ww.)","source":"{\"timestamp\":\"2026-03-02T20:45:30.323851+0000\",\"flow_id\":702162575961611,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.28\",\"src_port\":43358,\"dest_ip\":\"172.67.201.154\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2845065,\"rev\":1,\"signature\":\"ETPRO HUNTING Observed Unusual Host (ww.)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2020_10_21\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_10_21\"]}},\"http\":{\"hostname\":\"ww.anime4up.rest\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://ww.anime4up.rest/\",\"length\":167},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":1335,\"start\":\"2026-03-02T20:45:30.273931+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ww.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ww.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww.anime4up.rest/","fqdn":"ww.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-02T20:45:30.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ww.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ndate: Mon, 02 Mar 2026 20:45:30 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=1,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tsU%2Fr%2FxQmsiotoXkfAOTYTplSDDQV%2BpAWvqUFODoFcqX8NJvBcIMjLi0M2Ki3lmSKLX6Mq6gH2HE66EWddbHGyfNFkR2iZRV8GUYL1k23T4J6erICfPFf3KXU8jMUjJr%2Fp1J\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncontent-encoding: br\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"9d633ed88b820d38\", cfOrigin;dur=0,cfEdge;dur=10, cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=11711\u0026min_rtt=8744\u0026rtt_var=5796\u0026sent=12\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=4072\u0026recv_bytes=1203\u0026delivery_rate=267449\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=59021\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=160\u0026inflight_dur=48\u0026x=63\u0026mtc=none\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncf-ray: 9d633ed88b820d38-ARN\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":7298,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (7283)","md5":"b76c032f088c7c3d79bb8853afab89fa","sha1":"fc5ed71a1d8476c2396bc9770b3c636dd2a21c06","sha256":"261b0bda185e0fc8c515ae9193e539424f8fb8d286c52d203be3b4d0e1264d26","sha512":"b4b2e780d4f044cd2bfd05ae7044748752712df258a253f6fcc04a05a2da35e3dbd4951e5793e6ea7c8c63fa98530a8512223eb34bc6591c3e4e05122e70fd11","ssdeep":"96:PNybXZtIEb0EFW87IVhe8sz8OTQ9lTWoGzIhvpJcGvdfuUj0bIAq6JgWPTUYzueZ:PNadBmmNfzIhvcGlDorqITPT9yNT0zB","tlshash":"e6e17cf32912103ffa3f17d795b7f2089324a263e3056199e181d85c86eae4fc03e695","first_seen":"2026-03-02T20:46:12.409694Z","last_seen":"2026-03-02T20:46:12.409694Z","times_seen":1,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-02T20:45:30Z","timestamp":1772484330,"ip_dst":{"addr":"172.67.201.154","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.28","port":43358,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO HUNTING Observed Unusual Host (ww.)","source":"{\"timestamp\":\"2026-03-02T20:45:30.323851+0000\",\"flow_id\":702162575961611,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.28\",\"src_port\":43358,\"dest_ip\":\"172.67.201.154\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2845065,\"rev\":1,\"signature\":\"ETPRO HUNTING Observed Unusual Host (ww.)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2020_10_21\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_10_21\"]}},\"http\":{\"hostname\":\"ww.anime4up.rest\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://ww.anime4up.rest/\",\"length\":167},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":1335,\"start\":\"2026-03-02T20:45:30.273931+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ww.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ww.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/themes/Anime4up-1/UI/Assets/fonts/DroidKufi-Regular.woff2","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:33.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/themes/Anime4up-1/UI/Assets/fonts/DroidKufi-Regular.woff2 HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://w1.anime4up.rest/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 02 Mar 2026 20:45:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0njH9rEW%2FFbh1YwIp5Ql8vYUjf4jq68OgOmk3Q1Z2C%2BSYJK4QS1jKvgq%2FqC2UsaUROJMqEa%2B73mssf3Psx%2BO4KG3yFX%2B2KCkYiXejY8WgfiXXV3K0T9M1Vyy%2FFO7NzwjlTTw\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nx-powered-by: PHP/8.3.23\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\ncf-ray: 9d633eeeca130d38-ARN\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=9624\u0026min_rtt=7635\u0026rtt_var=1465\u0026sent=1236\u0026recv=189\u0026lost=0\u0026retrans=0\u0026sent_bytes=1384793\u0026recv_bytes=37006\u0026delivery_rate=38966505\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=1022555\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3864\u0026inflight_dur=463\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.23","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:27.0","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"W3 Total Cache","description":"W3 Total Cache (W3TC) improves the SEO and increases website performance and reducing load times by leveraging features like content delivery network (CDN) integration and the latest best practices.","website":"https://www.w3-edge.com/wordpress-plugins/w3-total-cache","common_platform_enumeration":"","icon":"W3 Total Cache.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]}],"data":{"size":240179,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"5a048a5dda38872b7401e78982ce8752","sha1":"cf61e2a47818d676f245a44e39a61c0789afe46b","sha256":"48238cfbdd250362f697d96f1ea0d7e20cb363a69d6f3f1fb5adb47eb28c32a8","sha512":"cec4d5898589c7293bce9f33a1426332ed77f5f0198e4aa3e566b677cc6611b0e6a92b8c18c015a382b1fec9ece0c68e142102ab2e1240f6fb378228a925fe2c","ssdeep":"3072:5pJXxxgs1Q9VgnFztazcIXY8LWZ99bw1cvufGovTEt5Tl5jc+DAXmJMWqT:1nM8xw1BTEt5Tl54T","tlshash":"03341880f1441c5e1357bba87375a6d7ee8b0015a98f499ef0e9381443cdb7a79b22f8","first_seen":"2026-03-02T20:46:12.410629Z","last_seen":"2026-03-02T20:46:12.410629Z","times_seen":1,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2026/01/YFFGF-460x445.jpg","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:34.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/YFFGF-460x445.jpg HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=lIvbaE7KNV1THN7PEc4uf3F2_P.NA5JGcqQXWaB.z.A-1772484334-1.2.1.1-axNFgh5QRSC03_L.5TAd2BRLnCbqVvb0RmCYqIPPdv9Vg88P0W2ky85eROKmpulpSbIPHAkHP3G1cbwHELqpc53Hc3PNwxcci7TqdtOKCzwpxDDNvGwwA_hR588.GRnCBOYUaa0zT861xSPVxjpHSY2QuQKQKCzb_ZIUMePsWtrlOvSQXYyQf6UcMC4fp02jQPP2I0GUufm7aDph15NKyvdL9VRBMNUuSYWnVFdiMwSD4IQtqkBJG.gR8XTAOSQ.; _ga_T9CZDRRQDP=GS2.1.s1772484334$o1$g0$t1772484334$j60$l0$h0; _ga=GA1.1.2109030791.1772484335\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 54320\r\npriority: u=4,i=?0\r\ncf-ray: 9d633ef53c560d38-ARN\r\nlast-modified: Sun, 11 Jan 2026 14:20:49 GMT\r\netag: \"6963b1c1-d430\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\nage: 288\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Ei3oDRhwG0uRKuQ5NofpOrX%2B3jIY4yodjSMFVOcQ%2BZ4WO8Eswe6YAXA0t%2FNYZcuaD58P6NKUuB1RWXkMWwd9K2vBW7wbJCMhk1QhpmtQQxZPl4mFXrza7Lh9R6599WAfUMBX\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=8698\u0026min_rtt=7635\u0026rtt_var=995\u0026sent=1934\u0026recv=237\u0026lost=86\u0026retrans=86\u0026sent_bytes=2158055\u0026recv_bytes=65093\u0026delivery_rate=38966505\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=1022555\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=4762\u0026inflight_dur=580\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54320,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 460x445, components 3","md5":"bf1fbbe013e579a041b78f3db23a246a","sha1":"56f3ce8785668de0c97e20c3715b80b360f0827f","sha256":"09a85a2361360a5d3a2056b0fd9f65f5d26dc38d8084e8554fe230b794260ed2","sha512":"b3d88c7caa6747402979ef24394889a1b60e4c473f997b11ea95f92ad871d9c1f539f53ee8348ec46af5bc86203f9d97efc90a2db32e03ecc1c38a35a251ac8f","ssdeep":"1536:m/J43VncvHbFLB0BDRgz/+fqZm6oP4d1Rxilrgnor:0qncv7Fl0BDRG474TRY+A","tlshash":"293302b0cf02cd9a82e935e015eb69aeeae77a5cf8d65f8ce074b1c6df524d05068431","first_seen":"2026-01-29T21:37:19.677964Z","last_seen":"2026-03-02T20:46:12.411411Z","times_seen":3,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww.anime4up.rest/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9d633ed88b820d38","fqdn":"ww.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ww.anime4up.rest/","date":"2026-03-02T20:45:30.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9d633ed88b820d38 HTTP/1.1\r\nHost: ww.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww.anime4up.rest/?__cf_chl_rt_tk=nUYjP4dEkdgcY62qkHeugl43pR5Gl1ggEn9Finom5io-1772484330-1.0.1.1-USchamq7loTixAvwLXV9rnVon6UP2cFNSwj1kdLQ2r0\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: br\r\ndate: Mon, 02 Mar 2026 20:45:30 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9d633ed94bad0d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162591,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8c34350331a354a35b101a8cc9801a67","sha1":"298b1c429c730ed6f50f1e5088f421d163b2e77f","sha256":"d5c2bff467fabd83cb8a9670cbc0b2e467861f00c377f14ae6e9708d897b8ca6","sha512":"a29ba65b539b3a525aba5a36b600f95bf5ae4d0f3f995a1611b12678980cdb5026e9e0c1e7fa50a0e8000bc86ea80ba909d2b6736bba8cafae0499a3a4ec22c1","ssdeep":"3072:U2vHEnrwlI1Jf/TpAbZBSOqylq4tiXqsPk5pi69:jvHEnrwlI1JzpAbfSOqyU4tSqsPk5pf9","tlshash":"d7f30a8ebbd5752a1227a078001339caa2f56c442418bd6ff600a9f53de875d7b739bc","first_seen":"2026-03-02T20:46:12.412517Z","last_seen":"2026-03-02T20:46:12.412517Z","times_seen":1,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ww.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ww.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-T9CZDRRQDP","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:33.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:44 GMT","end":"Mon, 27 Apr 2026 08:36:43 GMT"},"fingerprint":{"sha1":"60:4D:15:F0:37:85:71:03:3A:5F:40:31:C7:D1:01:D3:83:25:3A:02","sha256":"67:C0:9E:02:17:D8:19:0D:DC:84:B7:81:9F:AA:72:31:D5:26:0D:A6:E0:AB:41:AD:C9:26:05:57:7C:19:35:3A"}}},"request":{"raw":"GET /gtag/js?id=G-T9CZDRRQDP HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 02 Mar 2026 20:45:33 GMT\r\nexpires: Mon, 02 Mar 2026 20:45:33 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 135957\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":393338,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5882)","md5":"e1fc38b4cc6fec8d05dbc4a0ae365c6d","sha1":"9b23f4d5061dd3ec70823c29742c154f2fd9e6ed","sha256":"3d2f307d431bd373022a8c507b3d4caeed9087ff09a5a325ce0472df18dda134","sha512":"a681602d0903ee7a0792f7cf140d479b16554e64ca8f99647a64158d8ffacaca78a6953813bb67edf6c2c7814c2d8b416ecaeb713e53c51a44f4251c97c93dad","ssdeep":"6144:C7OOW4p05W+MMZH9CyF8QyZbTxRMlKEmxoBJ7eTAIH:Iffp05W+MMZQ+87xov61","tlshash":"d2842acdb3d6702253a7b478403f018bb17a68a2f48cc899f18ad8d56e7469a4137f7d","first_seen":"2026-03-02T20:46:12.413386Z","last_seen":"2026-03-02T20:46:12.413386Z","times_seen":1,"resource_available":true,"data":null}},"time_used":648,"timings":{"blocked":256,"dns":1,"connect":27,"send":0,"wait":61,"receive":75,"ssl":224},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.3.4/assets/owl.theme.default.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:33.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/OwlCarousel2/2.3.4/assets/owl.theme.default.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 331\r\ncf-ray: 9d633eec583549cd-ARN\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03cf0-3f5\"\r\nlast-modified: Mon, 04 May 2020 16:04:00 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 261893\r\nexpires: Sat, 20 Feb 2027 20:45:33 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RdxvsC0Llj4wHDHn8okK9HNc85aJ8Hog2beOs0dm7RskPLRoUCHn6eg2SmhNyTKhWqfzO0B9fZA%2FEUF%2FXH2Y1iNp77Nlvy3eIYyzGEet7lkIBtwfkDKYGcI%2BAn71%2FiZMrYwzEesA\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1013,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (846)","md5":"594b81805a98b267e47c70a8fad30d9f","sha1":"684d84ec40b305ca14efc88c91f12972cb6342b4","sha256":"924b0dc630d1c5dff9fa31aead9509775b1d476bfe0a5ac2977b2f11205a26ac","sha512":"b0c5ed30d2f5cd1ce894760a12e8ccd80a822d447d1760b8ff4e5c75bc638cb491bcc40872210f090668fbe9e4ee0a3706d4ae2bd91f6bfb3e6b87f88b9a4b93","ssdeep":"","tlshash":"4d11abc5f189221d301781904aa842cb6b1e687e529d0ef5f8ee8160c22dd053a6fbf9","first_seen":"2023-04-05T06:03:14Z","last_seen":"2026-04-04T16:45:14.105916Z","times_seen":18444,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":45,"dns":1,"connect":10,"send":0,"wait":19,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"site-assets.fontawesome.com/releases/v5.15.4/webfonts/fa-regular-400.woff2","fqdn":"site-assets.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:33.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 21:43:48 GMT","end":"Sun, 17 May 2026 22:43:44 GMT"},"fingerprint":{"sha1":"68:2C:9A:93:3E:79:C4:A9:4F:7C:67:91:C5:DD:D4:80:FF:AA:F6:D3","sha256":"23:30:F3:82:6A:12:7D:FC:FD:2B:DC:77:90:BA:22:FA:FE:28:51:07:4A:5F:54:D2:37:CA:F0:99:12:97:71:6F"}}},"request":{"raw":"GET /releases/v5.15.4/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: site-assets.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://w1.anime4up.rest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://site-assets.fontawesome.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 168824\r\ncf-ray: 9d633eee4d731525-OSL\r\nx-amz-id-2: /AarNL2a+OFV45cmlJ2TXnqrp2f9YIrwK5etGO0isEI24ThY8WZSfcVJKaWwpaP9sx2GAPsnyRk=\r\nx-amz-request-id: XGMVP36JM7CP193Y\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Mon, 07 Feb 2022 19:58:46 GMT\r\netag: \"a3d7d331957546ae10ad69bb44b83a04\"\r\ncache-control: public, max-age=31556926\r\naccept-ranges: bytes\r\nage: 3253744\r\nexpires: Wed, 03 Mar 2027 02:34:19 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168824,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 168824, version 331.-31196","md5":"a3d7d331957546ae10ad69bb44b83a04","sha1":"d1a227a182628c48649912e8bcd9251113e9c783","sha256":"3bbb0df89b8dbe8001e8c24de4e2d1693f94997b29f007a7bda22a9802832768","sha512":"614c9697605efd52116765e6f53792304c536aa9953fd9309ba4912476d016be360dad69dacf8d14e5de19f73c8619a37f3a380e3ac84fa0d17058d89246f0e2","ssdeep":"3072:N4geYVqJbc9ydAQpiOlqADfSVjExEGii5BqDW9:zeR4yuQc4agXiCBim","tlshash":"1df312c32fc565663613692df728f3c136464437973e06f5eb662a82196c2284ca93ef","first_seen":"2023-04-07T09:42:03Z","last_seen":"2026-04-04T16:36:19.439068Z","times_seen":8468,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":36,"dns":0,"connect":3,"send":0,"wait":17,"receive":5,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2026/01/bx197731-6E0qjPFaNjC6-1-e1767553145153-270x165.jpg","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:34.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/bx197731-6E0qjPFaNjC6-1-e1767553145153-270x165.jpg HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14743\r\npriority: u=4,i=?0\r\ncf-ray: 9d633eefaa630d38-ARN\r\nlast-modified: Sun, 04 Jan 2026 18:59:05 GMT\r\netag: \"695ab879-3997\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\nage: 1152\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=aSA21IAolS5pQs%2Fi1lsUMuD6F8i%2FBAveD5QBViPW2vqkVm9YGE38iuGM%2BhwDydpeMh8N%2F%2Bj1BFLLI%2FWCjMFcGJiO5vP1TQ%2BcagEC%2Fubootg8SYTaS4qoibKtHexo6cqFQull\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=9624\u0026min_rtt=7635\u0026rtt_var=1465\u0026sent=1267\u0026recv=189\u0026lost=0\u0026retrans=0\u0026sent_bytes=1416998\u0026recv_bytes=37006\u0026delivery_rate=38966505\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=1022555\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3865\u0026inflight_dur=467\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14743,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 270x165, components 3","md5":"e40b2cfecfde7118fee61e620eb8b1fa","sha1":"1672631c7b2ee563e54e36de60b587a10c99670b","sha256":"a35305829c4fb9dd14cb90d6f095f1b65dce0a2d3b300b0e373685d8caaf5c48","sha512":"e704bde4deea87aaa9629e95bd9c4cf7d760bc973a8e60b732111364cf433e2008521873b623b5e38ae392002a9e7a23fd608edf9815b9b930ea14c4dcebf17e","ssdeep":"384:HV8TFacZ0Rc1oUVY2WkgXx2spLzW8FQhbAvSTpSzhGLZ:HV8aA0RLCT4Xx2s87hyiShyZ","tlshash":"4462c0a5d4e745605f664c760b8c558ae637d6878e4034b64f31e04cbe4acf84f0b2bc","first_seen":"2026-03-02T20:46:12.415496Z","last_seen":"2026-03-17T18:08:50.569147Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww.anime4up.rest/cdn-cgi/challenge-platform/h/g/flow/ov1/1273280295:1772482035:8zTOrcdhPOzz3BkTGmkcxE8M89tX5Z2Y9lG7x3MfI8o/9d633ed88b820d38/LFYGbZzoQtsYluhmRGoqbDlDuLc5p8M8UvTgefbhpME-1772484330-1.2.1.1-xKlmsKdVIQlfNZGxUl3_V8I3uHOp3Dj2fl8PRCZiqcwDhDIWaL_VHVfClHxIHiOM","fqdn":"ww.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ww.anime4up.rest/","date":"2026-03-02T20:45:30.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1273280295:1772482035:8zTOrcdhPOzz3BkTGmkcxE8M89tX5Z2Y9lG7x3MfI8o/9d633ed88b820d38/LFYGbZzoQtsYluhmRGoqbDlDuLc5p8M8UvTgefbhpME-1772484330-1.2.1.1-xKlmsKdVIQlfNZGxUl3_V8I3uHOp3Dj2fl8PRCZiqcwDhDIWaL_VHVfClHxIHiOM HTTP/1.1\r\nHost: ww.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww.anime4up.rest/\r\ncf-chl: LFYGbZzoQtsYluhmRGoqbDlDuLc5p8M8UvTgefbhpME-1772484330-1.2.1.1-xKlmsKdVIQlfNZGxUl3_V8I3uHOp3Dj2fl8PRCZiqcwDhDIWaL_VHVfClHxIHiOM\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2220\r\nOrigin: https://ww.anime4up.rest\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2220,"data":"mOI-pt4qG02zRmXoRU0E-u2tca659vdQH4heHR5atRRsVaXFuWRsCe+i9zhHKaAOlfvhFbKX6c1tZ6yEx1nZZ$SKaiCIkva1tPej5yAr+jADNmayJITTNX-DVq4XwVG-gKqpfh793miN5JSUYC9hPSDmQl4JIWPmQ4nD3N8ms5Myz+bqT2JpA30ZmyEBXy4iH$9uTglSq5+tfgMK+WDrhyiAKC-s7kHRbgsJKrsOMw--xBH88u5-UrqQ3iRkSINbpKOjl1h9w0WiwIXsDt-s7FmPUWp-z3gNUkyAGiV5BRtGmZFQ5z-WaH0MFc1TSiDGKVFA3j77jYj59EZtn2ov4R8bTwIW89d130PWfb8XfGx4hTvlXUcANTPbxoOA7Iop7htrbkYCGZ7Suafz8O2sE-jNr3CpIhFBOTFUWWchyAMHXomawOj1w5lhnhXPTKB6gWJ15jEbUJcmK8Bsh1quNIcZmfHGvT+4XYV-aoaPns8MdCxadZ5foeKU1TM-EU6Q3-859oZugZoyDaD3hOO7$-3r-KxjJFYrD$eWYEe6IT6JrQlP6u3ABXYBw8Woq9tKkB5dMOX8EVJ2pD9hfTQb7NHeC4Wo8oy8SdnQVMxJxeyylCeW5oyDwBnK1O4WjFg-oUv8TR$JrDBHH14+C1T8k916fGfSxxBZaUuC8EZAsPXdnoPopHJNR6uBlpbqdppE4vWTsUM4h3ogq2Ixhs9sGc+voSVmAfg7x7cFfyUzD-et6B8IhOahacIMBQ3pVbMtA9ODQCOab8JVdY3zHbdQBJPwbo+vsTNTo02X$51Ytu0D+ff-wzYDFff0VUpZlI6p-0CTiTOOI8b5siq$YtbCwY1kEhWwDWYiE0HZH6A--arMqkRNc7IBbo0HD+Ty$z98V4nxxJFgYrt1C-xHiSm2$cjx7w6hjqMXu-ZprQ0sH1901PWSYUMOv-HxfXKtxpYDhbw$Fzqe98XDZd$ZryTZYI+cTcWUN3-$21-tHRsEZEts1DoagJEfga1V77oQ68V9AYJp9fPPNhC2$ewUTyTwd7YDOQk-H+FiQI92Xrku8Fi8hm$JJXHiNpviR$0V7wxd2WY04Oz8lTdcMBk8d7YTmU$mfUCQ1D8KPV7PqstrOID2inDersCmtqZP9IVZdZpu09AOSQfnNzQGRJK2XrRz+xoat$B+kesY5ujYXIvl3SJTGCdP148Pvqpy6YhNXf9miS3vJpNBHr$FiOiKhd0OxFbUH-d5N+A2VPQ46YpPSRh6iQ6XrWkOXQfRMNuYot-YrT-yiJwjIsuRyUZIGbAHIjGowYTKnHfJQhGH90qIYNo5X-aYb08Stoj1tvOhHavx4IdDStQ+ammU-3P$3cjPheHCZtUOMirhDbmGS$yb52zn1BfUPu9I9-rXUOJeG5YexHGYcAw30$PP9E0F-iX+RRp5W1nCq2ZQX$gSqdBvxmW-IRP$F2ViXoWJHSmOft$J23ak4ppfhTmCqYDNSdGfjRr-WNBfzXMe6FKP0pueJloPmt2XNvtT1m4MoOrfiFqhcsv$HKlXqBdDtPQZMlc16UFoVkEmp1RQF-7HBunbxKyOczEYSrj1t$VuEy3hYSUukUuWfp-vzSMOux1O0hJAjqGI$QQcTZx0tey8TgHmx5mcTmlB8yo+kyiio8wCdsgkdDWiq$r0Hx1GADBhdBg9-UG35QssI3WW2vocn7IeZA4ngd9TfK+D5ris0whXuomc3a-0+wt9DUVlihVQY8XH7uF+oShdbwREK7frjQMaD90-Zw0ddqJTD-eKCq5Y$2eNpT$5ne1Y59KJn6VsD+Oxkqvtbls1sA0IPqyB0vx+FV0bhBqAkmHYEfP1xh7HkYTNk6+aASx2$jk9M8$sfuQy$8MNw8Q5Vu$B9VTF0CmDDM+FVNboHuhn+JY6cXEwMCeyzAba0xtXNqYPGN8o+HID9iKgNjt9dqhA0ms+79FHE4VT9bXvvg0HnaG3QnufJrUHT9Z7vCIX+PTqgszWYv2FU46ZYI0Ui+N5DDG3560QGTQiP9F4B+BNd+RY3G-u6HmseP$eDZ9EIo2Q+wyUcBtgUZZHBFYJoMsWIAABw9qmTTbHsje+KnI-Yr4xj483doDcN+vrp0Wr-O38J8r+94UEApd14Ig8HFfAYuEfpXiYXj1J3GsHgcat3WAtujkmZRoqXu+sRvIVV4B7lmRaPCAz6gSTxhl6TJPzvj$Nd60C2+Ct"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: xNNO9upTM8W6eY4B1+SBKg0k/2aMiGeUCdmvVvNDX+E=$GQZ/h+ZMY3hBaaAjdGPQHw==\r\ntiming-allow-origin: https://ww.anime4up.rest\r\ncontent-encoding: br\r\ndate: Mon, 02 Mar 2026 20:45:30 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9d633edb1c1c0d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17664,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (17664), with no line terminators","md5":"7401f2ca4c06e9df34ff70a5ff76ddd6","sha1":"1a8fea1eacf6c1dc24e9b7046babd1efd3608645","sha256":"c1ed2964cd7559ec6bbb29a990a80c6545276e81121ca983c81554eb19b652ad","sha512":"b6f2312e97ce87256158717b83edecfd951e8440c1d89e5cec863bb0c25788ce1e93d47ff719e564e0a8946d587ba3cbb408cf158fd1d1172b91137bcf8e49ba","ssdeep":"384:AXD4yAQ0qYhg3+Dehmsna2EjbjQU1jWoz1:AXDJwqP+DehNaJLnjWo5","tlshash":"7982d029eb4c138a296f9c5200e91e1f40fa0416bf828590d985ba72f6fb9174ddddcb","first_seen":"2026-03-02T20:46:12.416295Z","last_seen":"2026-03-02T20:46:12.416295Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ww.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ww.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/9d633edbc938618c/1772484331274/ac31e43238214fbeb1ec867c7048068098d920b7ea2a5ebc5f5cac571adc47f5/NiHGqPDgiBBDfry","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","date":"2026-03-02T20:45:31.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 19:28:54 GMT","end":"Tue, 19 May 2026 20:28:50 GMT"},"fingerprint":{"sha1":"83:61:74:2B:F1:77:DF:F1:68:3A:D1:0B:F1:05:8B:A7:0C:B7:B3:C2","sha256":"AB:12:F8:E1:72:C8:68:10:80:3A:9F:9D:C6:84:76:A4:16:06:31:A9:10:4A:34:B0:5D:62:B4:80:3D:63:F3:C5"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/pat/9d633edbc938618c/1772484331274/ac31e43238214fbeb1ec867c7048068098d920b7ea2a5ebc5f5cac571adc47f5/NiHGqPDgiBBDfry HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\ndate: Mon, 02 Mar 2026 20:45:31 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 1\r\nwww-authenticate: PrivateToken challenge=\"AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20grDHkMjghT76x7IZ8cEgGgJjZILfqKl68X1ysVxrcR_UAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEA3NMTXv00WSVlro8i9BRZZPitm_0-xhxE-tBTmgn12CEsQ5M7s9B9U1cXKLBacVn0eB32xX5fCEPLOlk9XXHWx6y2e0QNFMSSWWXPNzXVFTeTYP1MCp1i3Sge0J6mjnnKOLCQEcbcwccjnO0qU7VTQlFqPHN_tmbmR9ulCGA1CjVAFfxxCgeT_K7abOkYUFYGSp2OeGeI4QHKYaO5o984QiExTnMFRpmFu6NX8NcfMZDAFNSX9p96fxU3fD5XO_1EvXJaMwe2ZfIaRnH_7H105dNYK5Ia4oKMzIrPjh9VkTnFJ7U9FeSINA0eUuZHFJJEsSrOl0P760AK2t18Ej9OfwIDAQAB\", max-age=20, PrivateToken challenge=\"AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tIKwx5DI4IU--seyGfHBIBoCY2SC36ipevF9crFca3Ef1ABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAithAiDSqdMuukb5n4ykpMs1xTm5jYdAzupmLmiZRbfP-Hx2OblKjCDl26Wf1xN4YcIU11bTwJmZDx4jPraIRX9UquLXXe32xSVa4ZXDZjAzPunNWKKq0dkOqtWeG5g_Lb0bppmuPQ8W3OWHYrJy3e3r5UyZBAr53FkdMfUsqvlCpIabPG0Iggq28so-0qKJlIDlj889jcYOFUZklzz7TGI4wzZ6j5Y7iIygUZ-tVd2qKX7WU_X1x_98yDJVIoHkhyiF0du_MO8YQFsp5sgcH-VQXWw3K3QbeUIMH8Ao1ioapGehoQ6h_ae3a5uP7FFloTnfHywrBT3mNkRyp6vDCcwIDAQAB\", max-age=20, PrivateToken challenge=\"AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIKwx5DI4IU--seyGfHBIBoCY2SC36ipevF9crFca3Ef1ABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAurd5jqWNtW3e4PfFcg6xBy2nWrxzkKm7ENy5hwvbxv3HYTpGU1Zgm5UeQFthDCsvvpT-InFatXJLzax9hX6xevXReh9TtnB9wRjYMHXSYede6fAksmGeJvzz6dj2bZOOJ3nEsHENyC3IVTgLPgutZWoDoFLeFj1i3AuNRWEKqbWR5lLlwHb6kdjVANoIB5C2xLqj8F44MuJN95Ltc7gwELrtxEPHdTYq1VWcy2UgoWG8LtLwxb8kHEQQsEjYQSZyF4w6YXBFNZJlKuUiBsGCJaIb5MZvT9juVpOGW3jlL8WqYFnEV5rSdkxHN9Jkr6J7XZO0PPbwP_Zl7NvXPNpQ9wIDAQAB\", max-age=20\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d633ee0bb9f618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"ff44570aca8241914870afbc310cdb85","sha1":"58668e7669fd564d99db5d581fcdb6a5618440b5","sha256":"6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5","sha512":"3c266c0035de59eab2a0dd31b3dcb4a9dd157b310289e5db9ab4f8c2fddb7433466d48f25da7ad735a1cb8f2935aa612ad1f62f0efcece3933ba9979082e2304","ssdeep":"","tlshash":"c700000000000003c00000300000003000000000000000000003000000000000000000","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T16:48:48.417751Z","times_seen":400191,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/9d633edbc938618c/1772484331275/N8ADrF_2Ct-TH-u","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","date":"2026-03-02T20:45:32.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 19:28:54 GMT","end":"Tue, 19 May 2026 20:28:50 GMT"},"fingerprint":{"sha1":"83:61:74:2B:F1:77:DF:F1:68:3A:D1:0B:F1:05:8B:A7:0C:B7:B3:C2","sha256":"AB:12:F8:E1:72:C8:68:10:80:3A:9F:9D:C6:84:76:A4:16:06:31:A9:10:4A:34:B0:5D:62:B4:80:3D:63:F3:C5"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/d/9d633edbc938618c/1772484331275/N8ADrF_2Ct-TH-u HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/f/ov2/av0/rch/iyg86/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 449\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d633ee63e36618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":449,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 76, 8-bit/color RGBA, non-interlaced","md5":"a5f5d7d4b8b6ac1d0c387933204cfd60","sha1":"ee9c8c9bb2ef2ec65a81fb422a621d049ce7a7ea","sha256":"12ef402311cb4f8290117079594da6eab0f73ef6d62488038b129490a75594da","sha512":"551997616547d5ed81bdb49ddcb5a48d19df5a78f92384322c02359688a6b4448e4dde8476904ab6a30239410bf958327808b678c26561e9fa8d37f2589de880","ssdeep":"","tlshash":"8df05e41b6485479979c5770ff91430dc5285774c4544dfce27e9c620337e7472805c2","first_seen":"2025-05-14T19:46:21.687479Z","last_seen":"2026-04-03T04:57:04.436412Z","times_seen":120,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww.anime4up.rest/cdn-cgi/challenge-platform/h/g/flow/ov1/1273280295:1772482035:8zTOrcdhPOzz3BkTGmkcxE8M89tX5Z2Y9lG7x3MfI8o/9d633ed88b820d38/LFYGbZzoQtsYluhmRGoqbDlDuLc5p8M8UvTgefbhpME-1772484330-1.2.1.1-xKlmsKdVIQlfNZGxUl3_V8I3uHOp3Dj2fl8PRCZiqcwDhDIWaL_VHVfClHxIHiOM","fqdn":"ww.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ww.anime4up.rest/","date":"2026-03-02T20:45:33.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1273280295:1772482035:8zTOrcdhPOzz3BkTGmkcxE8M89tX5Z2Y9lG7x3MfI8o/9d633ed88b820d38/LFYGbZzoQtsYluhmRGoqbDlDuLc5p8M8UvTgefbhpME-1772484330-1.2.1.1-xKlmsKdVIQlfNZGxUl3_V8I3uHOp3Dj2fl8PRCZiqcwDhDIWaL_VHVfClHxIHiOM HTTP/1.1\r\nHost: ww.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww.anime4up.rest/\r\ncf-chl: LFYGbZzoQtsYluhmRGoqbDlDuLc5p8M8UvTgefbhpME-1772484330-1.2.1.1-xKlmsKdVIQlfNZGxUl3_V8I3uHOp3Dj2fl8PRCZiqcwDhDIWaL_VHVfClHxIHiOM\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4471\r\nOrigin: https://ww.anime4up.rest\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4471,"data":"mOI-pt4qG02zRmXoRU0E-u2tca659vdQH4heHR5atRRsVaXFuWRsCe+i9zhHKaAOlfvhFbKX6c1tZ6yEx1nZZ$SKaiCIkva1tPej5yAr+jADNmayJITTNX-DVq4XwVG-gKqpfh793miN5JSUYC9hPSDmQl4JIWPmQ4nD3N8ms5MWZ0SI9g8mfttJNNdijlj0$C9$3+OZfe7RfrgtARDQSqUmulQDuqt2o6qgav$TyN4ESXJ1O1EZCSHXFQGfJt-8Y-wa+Hs2MHzycMm+FIavgSIFYvpgqlGF5BywlQxl4HbR9T$25I+bTDnzncbw2J+d-zOAW0Y-yASNw8YDmH+fYF3qY$PCCXfXomtPly-vDQgUj$8siQxQY67CjBeG5A7Da4k5FG+6G1zl8PrAX82y8E+ccS5OnCCwc3JC5XornbFkhs8IMbGVvXnaAJDzlaFxV2dZqu43X$VbItlrOXE7pPj4$g9fbOAtmGuu+Gxbnz573FERNn33-4cwaSVDokrKV1OSdZadeMOXriq0tDZjJU3py+38sXPywz7+gBPoHqXAw2E1BpUhUD5HyrOz$PnUH257Z2whvUrzyUaoDHgtRllemgRQpDkhfX$dXTqojWTp6+XeyMnNSX43QHy$2KcOoQosmSRBxDeVNmqFMbS5l4IA+Oqp1zt$epwui6PCksi-rAt1Onz2XHUMERp3RnUC7vj$OxzbYM8lbKNVbdNZPI2Wkn1T2RCi6$Pj98e6BW3sUgOdS8oduwv3iJ+KpTrTD4-6NeI$Xe41u4levvr6jttiQaBmhh-dsCy2doeRsy38E6wyvVjW2kTbjNUOrQKDy7zMFdJSntAgAjRADvRSl2UAsB9S0yflgCT2J09wZhGBObcdKkcChZVh5r2Wub+UPAasCBBte9d1GPhe37NUgFPCJPokTohcZBoryuGQfeDOQ4zJk2Qew4+Qn$Izh-fdTB8$jXAfylJ1$osZP4ZPR+QO1+xIh3TplrcxDTP3hZZR2ZBcxeiblyrcxhnPPzRv6l7VWFv4eBcNTTc2vF2yUhS1WD--fvx6xae+R3yf8Sxl6eTmvDnWVKR6TB3hl0zi5v5suXX6dOWCU2bMBgIMEzMFZjki4b3934oMfPQ-9erMhBB1qNVtGuSpx86veD6U0M$gr3N1EajxcVzRohXZQw8Xn386PyzKgcqTCC0omy-jJl5EdKn3Y-ZoBUvMvqTIvxIO$MDvtjmsN6w-BdlBkSuuN26UJ7K4h2mAX6x+-cl-xIjOvV1hA$ymzCGBJS$UWSPREH69svpbnb8W-BNHWUvkBM7yb1Ca25d2aCyV0vl7YlopOj6YRwnBEBlg-B5m$AGukUbyJMeAiONXUEvMpdf4-r7fStM$AInErB2ymKEjMcakhr4uc3m2XvZ9dbrvkKIh+WInjTNZzmH$ppzyZg5Ppj0W75hfyOMOR1wk5KyqEW2xxmZio7Nz8K4A+avoW4D7YleY-mGhvFd$W3lq46TOc0t-emkpDyExbQ1XOPXjKmVHN385dd5wFhHePQT+yBhGGWBeJHeQwTn52yGQY1me89FNJAxymz7EOFFrUkjhxsK10PrryHD2sZm2XHHBOdCvqKfo4h5Ov6gE2W+GSww6w1J9IG$m-+yrnUgGpuVgrGkseSOIls9i9gr4TyaZPrH$7ooN+l28obNTdhnXqC09J+GmU2JAHKTKDB5VfKT4uzCRdkhQ5jZmsoICz1qGSV1hTu71uci5k0CyMTNKcBUlR+bS4Xe1-PAj4yhsrMIOGQ-C8gUFXkPoG3DCwv-9EAXnpC0wN8Xzm51+UQQEkvfDNQMoytxcbYV8NqVa5lyPa4Y-r9ng6ilCgMNAWW$SdoC51A1c4nRmoRHjFRriGCgbfYqBs9OzKpHkTS8nCEbFUWWPa18qQSgkhe0ZSOp2TOMRX-fzx80YyECOdxzPrv2awUs9TyMfuklN2mvwW7fFjTVZP6PSPHhnfD+y7wfjpA6zk7XRQ908EASvGB$ZYEY5RWwEweK6Nb8wJguSNaZbhAnhQrr1m$RPbnEomuj+64AjKTHubPJs-A0Q$1DXpD8NO2l0DXi37+cJ44mkPtOMmeJ9$$4IjUq4YJgAlYs3Xzfxeo$SmUxkZu6tjNsfN8nk8J+n3JWSKJppfpIJNgdYZE84zqIt0aD9$izimSQ4U3RYpS2DKcJ7H4iXxb3mdtMxgYtDud6kRVzCvbkHKZ4c5BxSnJVXPaIn8+xsen1-9R1+Syq$d4Gl9lzX-qZnxpt$8kz$AVVYSgx$M2PGGCU6kQORoqatSYHCimrWo+G+RcN4x92jmb0YeH8ph4wMhbBDTeG1rgPmHYjA2+ctykvVtKd$Nyb4PC7cYcJRwNkwSVCHdh27ezZ0RAug3uhJRjcgREz1P-qiJCzhulsorORAMwzZusVDeSd7KHubspX+vmM8cj5YEH4Na-STjKK6AcbTiRw5o73QABq3his0y0F8WQOSw66MvEsd+SuIOVYD6fiKNFsIhrD5dkJu85kh-2gTTN0e6OZrP85RP1rZ1bRax7jTsVcP8$bF7onAq++Ntf0eCHznSGqgMdcS-OidbUEbAkioM41PIlje+AxVM0h19idnTF5Yv+2dhFyBlsF9FXvUEiRQKjoaH9FsztRxB6NulYWacK0cGtN6RnKrJZluSD5ODq7Me2qcNCdqQ08lcZWBOH8Hd2UvG3rG5Ohhip2DwaVPVCHX3gWKHCyGGO+TS64zRzpzDuDJAlrvZyvC2xKB$0$o$HhSAc0nd4ta+7$vSKiSPahn3$-vlQFwN-7yH7MBviyYIJPKwCZ9xtxugMhiC4bwGrm29kXI38JIQshFS$phE7DETYmC1YfZcO9jYUtEatibIKU-FxATU$ewxvy8ne$Wm9KZF8NghExNOnGRIaBliesHgFow-w7tlNkERzyA6hQIYnvq1WDi-9fEF7ZnbICKweM-+twT8-Qc8iA3OwdpnjrmnNvKWCWI98$xc$OhmWsYNQx4p01Z-Q3vTW$0nsr4IFyxTQoEb+Z9iae3S-fRKch2rMhbA0Equ46Hhg6t6o7Ffz0UdRfIj8O50CuNUKHmZMnwMz0RCDkB3YKAmvsFRtPKpYEBb1NacToH0lPXppQ0TjFstRcxeCT0EWYWSjS4RwjPtTV5UiF$+F5gV5P6e1pHh2il9DVqE9$qzNPStAXaSGCqFsT3W3fowQclgvbGHukfDJHO5v8JcVm2$io0kSctVEECmAfodTwKhKuMxXw8XYhsi8HbQmfehXtQhcKg+HrDl9mxoh4Iahkbrzo9QKRVH5uZrRPzG2tuJ67m8oI13bP94b2z7g2HhhUn0zNbdznbV5pq-YPhCdQyHJltJoUXlz2DUJNOFmvnWz4X3Yj1DXsnmE0pjJM3IOng6fzxtZRjQqpEOp01xqrcbmhad2bGXt1UU09SkBr8MUyRAIzc1-SHGRwfEOafNzOoVs0r2Jj3WTGwKgBe8wt4pBNsjahvaqYAgDWmgnVTVA9m4UDWTu8$jT1WuN90dT$Kj+rJNX+e-eDpZBf$KdfRMBUMI0o-j6YH0loSrlXWcwi+hWQJPcEu3xe6aEwhyM9YeyDTuz0o-JRPiMsfYNeCI4HKuWG5HIBY6$xbEov8abjh8Ex2Sodt9dmkHuMZAHNOqYe3-0n03swxqQJGvM9ElSyXNd2XViXakhrosPhXd0za0MHF+osHhGhfm7pfMSeQoRBMSdKJ2CgQRpGd9YT7AwU$pRnEzpcb42rvYGOo491835mjrt52PHc5OGOVF4NhnDMXhXl0QSZJ+Hc4YtwxPwgH7Ae1EIyMuT$BKzR0jpJYFfv4WX7brNaU6-U3XJ+UMdR5HeHu7kqekBm+9cSkxlmUE69zTPCqATcFI6-XIv4a-Mik8G7mMTkVmRc$92zqnp9NXe3hFcuA4DqB7xEJhGFOVCqrDAx6ywdbsdDuHc6l9jma1DtxRvXSro0yXUimFZ3RUkEZ05D$rCC-6jpk-yDYwO8i4nW+rxYcobKExqkzwWvFymWofDr3I-yFfA6XaVfrXm9F05nPCYxPjFFA59hnzhcuCM1wsWx43e7TZuR$855AaDgqBb4zKrarEaXlOsuldN6a84BkPZOZNq$FO-GI+1olIwhfuywrs-Pn60BPuWyAP2sQWW8iOE$ccJFyR0KhKBglM$nYR5nKIQt3qHYzOZcGa5FD3+35SwCBxh8n5dC4Hi3c-lM62qq+tcFu4HhpKowStAUKkVN9OafkOQcUOXYf6ljvd0NjnQp7BAnee-opRJRiwl--Uwkkl2Vqdn0s953u9-IIgEMldyUJfCGKWVGboiodbAkDIB$6MUbieldwpvfBHNzDge9S-ppydNv4dx7Oq7jjj65RbtXg6KrfOTM89-aYGyGSlA2DgWkdBkGAnUOFC9hD5kEE71us8m0f8hecsGZ04Bp8HPBt9vAHzyC7q6wlI00lkFoS8DGrBuKeKIb"}},"response":{"raw":"HTTP/3 200 OK\r\nset-cookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=anime4up.rest; Expires=Tue, 02 Mar 2027 20:45:33 GMT\r\ncf-chl-out-s: msXMjNM4wp0tqbt0LGN10cCz1u403NkYZoR6wCttkTgpqXeDJXF6svSj6DwvKO69c85OlpL7IitVTpS1ZB2LJZrOJO4DR3qOFt7LyfMMqDXMsLhrkOJxXzHcOZb1w4eoC1x0vV4HIx0oyZTvszvWDPFrq2TKt+bXs9bC7yqLf9VnE2uxw54uICRe0t7ngtPMrUjoeeyS/EWzfsTJ4RODYC+iGfmj2ebG//QvMbD1ZEKaMjyY5o/xUGySqzxpOWi5X+JxGFbKc8sQomYNxNnjYPkqg2JkWb4SjQrJzWVOSPa54jbhQEX6KCpE5m5+WM+rbaB2/D4CXst35gf6R7Ks7zHQ8gw7yJm6qXY7Axb7yJFhWboZGleKs7tNiSbeRo6G0X5Z0OqxWv/ljgaooDaFkSLSiuWsknkokwB2h0eXWuvRdEi4YtBr8BGBOJCUMaqjAbWWEx6mUe0+BidMDSAH+re30gBvL4rbbFs7e1pjZNSpu72jEzxt+KNEGYm7J+/R$HavdNn3kZWys3HxakgTyMg==\r\ncf-chl-out: i7M96nyajkb5L5rdSR3PMarPVRD2kTEz3i7tZWlp/NsYQzrtO+VGC9qVoVlZx1Jiuqn2r231B22UObxdHGOX37CeaHtrELL1/XXLFF02BHSYFLhv/nDNHxoWITklVJU81jEAKPwZZcqF7CUbUz0A5A==$oSHCUt1G2/ECXJE6s6Jpbw==\r\ncontent-type: text/html; charset=UTF-8\r\ntiming-allow-origin: https://ww.anime4up.rest\r\ncontent-encoding: br\r\ndate: Mon, 02 Mar 2026 20:45:33 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9d633ee9983a0d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4088,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (4088), with no line terminators","md5":"ee481272fd8c65ef0d17435dd97d1c0e","sha1":"c0afade54e696473727f0bc2c9d7de1a20fb6d30","sha256":"aeba38205296cef2596810551b3e84a848bc288873a10c5af45f110f42040cec","sha512":"0e11a2dbef188e0258052b1ed852b64ea6d4e4c006b8d6a181800d0197ebb706ceaba03f965a2ae4d9390a3959a252f2665e3b74ff8113ae95ec49b2677a0797","ssdeep":"","tlshash":"d4816e57bb38633d2c8fda52d62bf467e4d5f42a641103cb627ac134b45d618f21cd41","first_seen":"2026-03-02T20:46:12.418076Z","last_seen":"2026-03-02T20:46:12.418076Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ww.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ww.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-02T20:45:33.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:33 GMT\r\ncontent-type: text/html\r\npriority: u=1,i=?0\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfOrigin;dur=100,cfEdge;dur=18, cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=8527\u0026min_rtt=8002\u0026rtt_var=566\u0026sent=117\u0026recv=51\u0026lost=0\u0026retrans=0\u0026sent_bytes=105052\u0026recv_bytes=18482\u0026delivery_rate=4697748\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=110907\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3154\u0026inflight_dur=194\u0026x=63\u0026mtc=none\"\r\ncontent-encoding: br\r\nlast-modified: Mon, 02 Mar 2026 20:18:02 GMT\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncf-ray: 9d633eea887a0d38-ARN\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jJ4mZaH1ObThGHKCYP1nTjJ68qZnNWaI7abdbcbSFDVKBx8MNucd325zjZvQLaIjpqhVMJcZxbVHzGBsHHu2DM3mTXsuXGpcMNvPIwF8X9Eo7goMPCUX4BlUayHRAlXV62qO\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"W3 Total Cache","description":"W3 Total Cache (W3TC) improves the SEO and increases website performance and reducing load times by leveraging features like content delivery network (CDN) integration and the latest best practices.","website":"https://www.w3-edge.com/wordpress-plugins/w3-total-cache","common_platform_enumeration":"","icon":"W3 Total Cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Yoast SEO:27.0","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":367374,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"7d5ee8ee8680364b18ab22c80433b42e","sha1":"1651debd874fe5faa66ad7af8895519c7e9884e7","sha256":"d8ae749cf9d5bec04ae8cb965222d647b84f3fe7282eefcad9086d537e0e6f3f","sha512":"66ddf39e7146038872176f2d81eb04bb3b8ebab4aa71ca60e304b36368c01657164ab1cbf17848e1e2c06556dc5729dc313d4c150ff55b6afbbebe490f13dd71","ssdeep":"3072:5pJXxxgsTHQ3/z0jVgnFztazcIXY8LWZ99bw1cvufGovTEt5Tl5jc+DAXmJMWqDD:bYz0CnM8xw1BTEt5Tl54DD","tlshash":"aa74d990a189082f0333d6886674679def874007e98f5949f1dd3a564feef22a9532fc","first_seen":"2026-03-02T20:46:12.418892Z","last_seen":"2026-03-02T20:46:12.418892Z","times_seen":1,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":132,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2026/01/bx176370-hz2H4TUeyGgt-1-e1768235526767-270x165.png","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:34.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/bx176370-hz2H4TUeyGgt-1-e1768235526767-270x165.png HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 97896\r\npriority: u=4,i=?0\r\ncf-ray: 9d633eef9a590d38-ARN\r\nlast-modified: Mon, 12 Jan 2026 16:32:06 GMT\r\netag: \"69652206-17e68\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\nage: 6611\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6UhYk9dADZNm5fL9zB6Wrreip6fXEXTavtVSiai%2BlqBYyTOSgxhHqnwIN4owL%2FpviY9r%2BYeTlQfblrbm3r4ZCrpxQy%2BCU1kprJrcudkxjq4R1LmtdROoYi%2Bcx9kc%2FLzwtjRA\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=9773\u0026min_rtt=7635\u0026rtt_var=1558\u0026sent=1129\u0026recv=185\u0026lost=0\u0026retrans=0\u0026sent_bytes=1262062\u0026recv_bytes=35223\u0026delivery_rate=38966505\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=1022555\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3852\u0026inflight_dur=454\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97896,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 270 x 165, 8-bit/color RGBA, non-interlaced","md5":"8488fd46fc97de4d154d893739f3bd07","sha1":"a6017799ec6d8281aade9ccf03d28de803585d37","sha256":"20b837f0595a3dae2710c47dcba0df4b9df204d8119536a14443b6c0beb2ccc3","sha512":"bc640cbfb41a50fe6876af63fc76ba53bfb53b9cf28c5bc08f332935d394248d37ba693d24fedff1e4ee47b1c57e4e925c3f0209600b537f265585fff7a649c8","ssdeep":"1536:YXybnZigEovX+uOHubB/Hyze4CHRv2L8kzH1kLS8ew83Z1f+wzJKtPMA7Mvnxaet:KKnZigB4Ayze4ZT3frzJKtPB4vnLn","tlshash":"20a312d4fdc4a214332553192a16926270e073d522362aa2e29b94d71b3398cbd77feb","first_seen":"2026-03-02T20:46:12.419669Z","last_seen":"2026-03-17T18:08:50.487497Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2026/01/bx177385-TBpvkGdF28R7-1-e1767553301695-270x165.png","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:34.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/bx177385-TBpvkGdF28R7-1-e1767553301695-270x165.png HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 71911\r\npriority: u=4,i=?0\r\ncf-ray: 9d633eefca690d38-ARN\r\nlast-modified: Sun, 04 Jan 2026 19:01:42 GMT\r\netag: \"695ab916-118e7\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\nage: 1150\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=taLG7C0L3p%2FD35%2BlycD0JN2bpMzoM5RQwRYopQiOz9xv9aJUYf8wUuPxk5rGnezZYYNa%2FeQXj0G3cNKeALscsX%2Fb3HXIPfNGdX0zII9En7TSAsFrnR79zq69nI5Edvg6uweW\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=8815\u0026min_rtt=7635\u0026rtt_var=1087\u0026sent=1557\u0026recv=206\u0026lost=0\u0026retrans=0\u0026sent_bytes=1744841\u0026recv_bytes=44719\u0026delivery_rate=38966505\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=1022555\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3884\u0026inflight_dur=485\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71911,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 270 x 165, 8-bit/color RGBA, non-interlaced","md5":"5788f5c7559c54e5dd60f205da8f959a","sha1":"ca59bfb4fe68bb80a3eaced5172593dd0d531ead","sha256":"add0336a9fab1d368a8d9bb82ee2553eeb6a70585297863508bfd1e763ec2f6f","sha512":"9eba5e786295c5570ced09ea64a75a5dd44d97cc7041ce05b892cd768be28a5896dc4997a782c3bb0cc6abdbcbb028c2e3f8caa57162df98126d851f7b6b1e65","ssdeep":"1536:xMdutcbMgZo3cF6NbYbjraMhFMfM+QWrpnnAkh0NYHty6+dTtdPV:yRosl1FMfM+Q8pnJ0NYHL+zFV","tlshash":"066301ea878f2ddc99aa3773b06e8168f7c8ea4f8ecc8a45d0d0cd1cdc6721655850e4","first_seen":"2026-03-02T20:46:12.420483Z","last_seen":"2026-03-17T18:08:50.568159Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2026/01/bx185993-BecPUaWfZJgR-1-e1767552943146-270x165.png","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:34.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/bx185993-BecPUaWfZJgR-1-e1767552943146-270x165.png HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 102193\r\npriority: u=4,i=?0\r\ncf-ray: 9d633eefca6a0d38-ARN\r\nlast-modified: Sun, 04 Jan 2026 18:55:43 GMT\r\netag: \"695ab7af-18f31\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\nage: 283\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XkcTeTJfLY3R1zxlMqucXJp5sgGslYXlv2Ah4ctJpJWCbHy0F%2FWL%2BukQI5fsMLj8EEElsbrsIsBFOtbEJ1rUrGkz1wMz2KM3x443KZj2bfOgIAymSbTToykK6e1XEILtsbxE\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=8894\u0026min_rtt=7635\u0026rtt_var=1239\u0026sent=1301\u0026recv=202\u0026lost=0\u0026retrans=0\u0026sent_bytes=1447028\u0026recv_bytes=42934\u0026delivery_rate=38966505\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=1022555\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3879\u0026inflight_dur=477\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102193,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 270 x 165, 8-bit/color RGBA, non-interlaced","md5":"75c751de35e967351b2414c90a21ef3b","sha1":"0de1a24f449eb9972d2a75ebcf2d59c1509658f0","sha256":"1a56a961c6c402ad2ff921c88ad2e1fb798e785b2c8cbb0c3a1654c5af74f9b3","sha512":"fadad2c0576834fb76d88a9feb19e159f84199bd5cfc2aad5f27ef21e7b35272d8f454725d6079957eac65f5e1e92aa899088d987d4c03cecd7a9554a508a8f7","ssdeep":"3072:kysOoXkGNEMc+snZFDIJMg4oR8yHvkqnLD9kzgxXmxbyfMro:kpXkGSmwFDIJMy8AvHxk0wFro","tlshash":"02a312ec7fc5393cd6930e0a5a3669428aebbfcc0669a470fc4eb4901d9d56c714db22","first_seen":"2026-03-02T20:46:12.42124Z","last_seen":"2026-03-17T18:08:50.508873Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ww.anime4up.rest/","fqdn":"ww.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-02T20:45:30.273Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ww.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Mon, 02 Mar 2026 20:45:30 GMT\r\nContent-Type: text/html\r\nContent-Length: 167\r\nConnection: keep-alive\r\nCache-Control: max-age=3600\r\nExpires: Mon, 02 Mar 2026 21:45:30 GMT\r\nLocation: https://ww.anime4up.rest/\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yqypnYVtpvlYl9BfmdGm9ShHElatPyK4y3TsJKl3txcluIvdXLi7vLJP3vFL1HvudTG3FklUcIsGl9YXc5ztUy7yt%2Bk2OkRwSxboY4LW8fad1%2B77FWYFJhVPaXn5%2Fif%2FC84l\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nServer: cloudflare\r\nCF-RAY: 9d633ed83d264435-ARN\r\nalt-svc: h2=\":443\"; ma=60\r\nServer-Timing: cfOrigin;dur=0,cfEdge;dur=33, cfL4;desc=\"?proto=TCP\u0026rtt=7726\u0026min_rtt=7726\u0026rtt_var=3863\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=401\u0026delivery_rate=0\u0026cwnd=50\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7298,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T16:49:31.594606Z","times_seen":13339169,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":8,"dns":1,"connect":8,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-02T20:45:30Z","timestamp":1772484330,"ip_dst":{"addr":"172.67.201.154","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.28","port":43358,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ETPRO HUNTING Observed Unusual Host (ww.)","source":"{\"timestamp\":\"2026-03-02T20:45:30.323851+0000\",\"flow_id\":702162575961611,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.28\",\"src_port\":43358,\"dest_ip\":\"172.67.201.154\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2845065,\"rev\":1,\"signature\":\"ETPRO HUNTING Observed Unusual Host (ww.)\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2020_10_21\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_10_21\"]}},\"http\":{\"hostname\":\"ww.anime4up.rest\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":301,\"redirect\":\"https://ww.anime4up.rest/\",\"length\":167},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":673,\"bytes_toclient\":1335,\"start\":\"2026-03-02T20:45:30.273931+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ww.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ww.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww.anime4up.rest/favicon.ico","fqdn":"ww.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww.anime4up.rest/","date":"2026-03-02T20:45:30.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ww.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww.anime4up.rest/?__cf_chl_rt_tk=nUYjP4dEkdgcY62qkHeugl43pR5Gl1ggEn9Finom5io-1772484330-1.0.1.1-USchamq7loTixAvwLXV9rnVon6UP2cFNSwj1kdLQ2r0\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 Forbidden\r\ndate: Mon, 02 Mar 2026 20:45:30 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2FytTUJ2oNlJDt3MdBMWPQjA%2Fr8Kpj6N3RG7le1hQ9MW0FZ%2BOxIUWzmyQ2Gnrp6hhLR3Rx1AS40B9Zqxhz%2FT1r%2B0B405no4XLHSjiqCz5j%2B9DoDJsFi3iIeiFlXMdnNhGRh7c\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncontent-encoding: br\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"9d633eda8bfb0d38\", cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=9052\u0026min_rtt=8002\u0026rtt_var=725\u0026sent=81\u0026recv=30\u0026lost=0\u0026retrans=0\u0026sent_bytes=78727\u0026recv_bytes=3075\u0026delivery_rate=4697748\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=110907\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=479\u0026inflight_dur=128\u0026x=63\u0026mtc=none\"\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncf-ray: 9d633eda8bfb0d38-ARN\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6552,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (6552), with no line terminators","md5":"53b88261d7c4a9ba6a567845099f6da8","sha1":"eba257afa9328fd3640396f03ca6b2d3a2497d47","sha256":"53faf11eedf7cd4476a5f7dfce117856757a9c90a927b3f3fb7df46dc275e991","sha512":"c781b596acf559f7d1834b016957685ff2280eecf9d6415e9093ac5b25c6ff97768eec8088180dc1944a705451b7fc3ada55458f60d0a7569a7314fc02e7ecd0","ssdeep":"96:PNybXZtIEb0EFW87IV2LxXuhtbcfrH/BWPNz2aCFTA3uab4R2Jply9rfyXQpYzua:PNadBm2tMcJW8aCFTA+h2Jply9r/eyJw","tlshash":"5bd15dea9743601be3aa2ff390ab7254a314d9e8d3105099f1b6d90c89e9f47c11d1ba","first_seen":"2026-03-02T20:46:12.422276Z","last_seen":"2026-03-02T20:46:12.422276Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ww.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"ww.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2026/01/bx192507-SCmImUlUnpAD-1-e1768120692513-270x165.jpg","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:34.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/bx192507-SCmImUlUnpAD-1-e1768120692513-270x165.jpg HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9665\r\npriority: u=4,i=?0\r\ncf-ray: 9d633eefba640d38-ARN\r\nlast-modified: Sun, 11 Jan 2026 08:38:12 GMT\r\netag: \"69636174-25c1\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\nage: 1151\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Xv3YVHWJIxFafdU7u05cjOAm6rjaZVuMvPtf%2FmIvxGjUi7kv1tCezBDR1%2BvXPT4Tf323ZuC0r5a4vkjVgkjn%2FFO%2BdHkq95LVFOgEBqCqJFKch%2B6QfWSd4%2FxWoSoLC5eUMjdi\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=9381\u0026min_rtt=7635\u0026rtt_var=1255\u0026sent=1289\u0026recv=196\u0026lost=0\u0026retrans=0\u0026sent_bytes=1436258\u0026recv_bytes=40505\u0026delivery_rate=38966505\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=1022555\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3872\u0026inflight_dur=470\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9665,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 270x165, components 3","md5":"3f6739ce18f764d18281429439780233","sha1":"197cd68ccd41771276be0bf87662590ac44d4d66","sha256":"165069ce6ebb4c4977fef64e09827f2a56b7c93546f3e066d43ce8bed250390b","sha512":"0af8b4927d37e36b9e0b3299b35fee5db713bfb06e633c94f4497e344a218c959f73c5f61de0f7aeb5a45b6f10fbc76db213a8f892e2ccd70ba066ee13941e06","ssdeep":"192:/vaWeJgPBiUr0h6RwcJEPowBzP9z41UKuiOLmdOeZmNTMy86Gz:HaFgplRMXFdmgVc","tlshash":"de12ae3742679f4d68840dbba91b524e2e4e2db137b6a60ca671c76013e41e0b65c7ec","first_seen":"2026-02-01T13:00:26.89634Z","last_seen":"2026-03-02T20:46:12.42317Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2026/01/bx184951-s8Lg2muPBhdX-1-e1768122734597-270x165.jpg","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:34.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/bx184951-s8Lg2muPBhdX-1-e1768122734597-270x165.jpg HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15291\r\npriority: u=4,i=?0\r\ncf-ray: 9d633eefda7e0d38-ARN\r\nlast-modified: Sun, 11 Jan 2026 09:12:14 GMT\r\netag: \"6963696e-3bbb\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\nage: 6609\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=NKUiANxv6qSrS75WtPNkjml%2BDBlGhlnyLtCeswI6Q4OPUFMvNxONLd4G0cdrz0phv9thwC71wzQDobwdav%2B5ApTYooWrDCyVvkPqDf5biytVwCyDlXKNIeRHElWE%2FJGt6a%2Fr\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=8733\u0026min_rtt=7635\u0026rtt_var=977\u0026sent=1709\u0026recv=208\u0026lost=0\u0026retrans=0\u0026sent_bytes=1921805\u0026recv_bytes=45331\u0026delivery_rate=38966505\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=1022555\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3890\u0026inflight_dur=490\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15291,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 270x165, components 3","md5":"f8815320e7f5ef360be3870f2637f513","sha1":"6af232d80a4976f6d59cf06fdb7ec39a7ec62d6c","sha256":"264c492a97290a835f03ef7ff457e0a0123a18354280133d4a94b559abbf9b53","sha512":"254e0c9d4abfe92ebf491ecf2085886261f74ad602206ad9ed109c153a643384dd49c9fef4325ba898c3364eba333c43e3701e88e596effad4ee09db82b5c818","ssdeep":"384:HgN+pHOIMuE4sbc0xMJHxSazCwvXs4ZeqJSLgXZ:HgN+pHwukxx6Rhzo4QwSLS","tlshash":"0562df668a8f67886e130f0908580d5ed0e9bcbbd6b494700275d6c1bc9c7df7caa64e","first_seen":"2026-02-01T13:00:26.881605Z","last_seen":"2026-03-02T20:46:12.424237Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"site-assets.fontawesome.com/releases/v5.15.4/webfonts/fa-solid-900.woff2","fqdn":"site-assets.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:33.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 21:43:48 GMT","end":"Sun, 17 May 2026 22:43:44 GMT"},"fingerprint":{"sha1":"68:2C:9A:93:3E:79:C4:A9:4F:7C:67:91:C5:DD:D4:80:FF:AA:F6:D3","sha256":"23:30:F3:82:6A:12:7D:FC:FD:2B:DC:77:90:BA:22:FA:FE:28:51:07:4A:5F:54:D2:37:CA:F0:99:12:97:71:6F"}}},"request":{"raw":"GET /releases/v5.15.4/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: site-assets.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://w1.anime4up.rest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://site-assets.fontawesome.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 137104\r\ncf-ray: 9d633eee4d2d1525-OSL\r\nx-amz-id-2: 3lpx5bQiIS/2Yotg+StMXx/MpEGpgWByx4eUdSbZ1uvpmDyRqhR6lp6HIij/lU8WakyqY5kyLzw=\r\nx-amz-request-id: 5M6VQWNX1ZNFNBYZ\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Mon, 07 Feb 2022 19:58:47 GMT\r\netag: \"dbf1fc91f1beec2915123257ea4d58ef\"\r\ncache-control: public, max-age=31556926\r\naccept-ranges: bytes\r\nage: 3376318\r\nexpires: Wed, 03 Mar 2027 02:34:19 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137104,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 137104, version 331.-31196","md5":"dbf1fc91f1beec2915123257ea4d58ef","sha1":"d2a6d5d31334f6d0831f1c17d26e23fe0aa6a8db","sha256":"8d4d29042c23b5fcbed3af690421776de0f8ad3d308d66e24a9d80bcc8ccb522","sha512":"72e9ccb5ce2d88aac739b513b95dfb7667cf80b617510aafeb2c72345c7cdc3459b7002c4a46afd967afc1e3cab091e078ea9cb6437550b4c7990009799128a2","ssdeep":"3072:6uGMxS/+gbEUbwrT4pZT630r3OhDkLWJZYa3se4YuOzf7ThRvu3jzJ8Va1I:9AmAZ230r3rLOSa3YOzf7NdYz6WI","tlshash":"d4d312268b70b42d28c791b85f30768b56d866c34fe151688cbade541b7ff8c836436e","first_seen":"2023-04-07T09:42:03Z","last_seen":"2026-04-04T16:36:19.379763Z","times_seen":8968,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":29,"dns":1,"connect":1,"send":0,"wait":19,"receive":5,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:33.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\ndate: Mon, 02 Mar 2026 20:45:33 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9d633eeeba0e0d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26237,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T16:49:31.594606Z","times_seen":13339169,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"w1.anime4up.rest/wp-content/uploads/2026/01/bx195322-hqBf19mBtM5K-1-e1767619136741-270x165.jpg","fqdn":"w1.anime4up.rest","domain":"anime4up.rest","tld":"rest"},"ip":{"addr":"172.67.201.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://w1.anime4up.rest/","date":"2026-03-02T20:45:34.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anime4up.rest","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 23:49:17 GMT","end":"Sun, 05 Apr 2026 00:48:00 GMT"},"fingerprint":{"sha1":"E3:CB:D5:B5:F1:7E:48:74:6A:E7:B1:88:B6:64:E3:D8:B7:B8:5F:22","sha256":"BF:09:D2:F2:0B:CA:1E:5E:24:80:20:44:DA:40:2C:B4:61:E4:90:8A:EF:25:3C:D8:07:2D:3F:CD:7F:2E:2A:14"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/bx195322-hqBf19mBtM5K-1-e1767619136741-270x165.jpg HTTP/1.1\r\nHost: w1.anime4up.rest\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://w1.anime4up.rest/\r\nCookie: cf_clearance=2qRCMMYUnvSfTwm1XIl8CKwKTgKAJpbRsBgMap41LNI-1772484333-1.2.1.1-edvNX1L4hFf9iPARyQT1s6TIYf_q3TRLYJ0uT5ZY78RjJEcT2xm6E5PE479XTFo.I0VIX9uS_20C2.CD9e7P4TT9IgfnKJOgRsuNTFnsWb5HXBH.60qyKQqBjnkHS11wG.8FyCYN.rMfIp_PbvXT50oSLMNbPCIjMKthttatpzkaTWc4yd6EmKkuQssX7dHbf4E4VRRnNL3miolZtxiPO4ifiHERvPLs0AgTcPBu8BU\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 20:45:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17627\r\npriority: u=4,i=?0\r\ncf-ray: 9d633eefaa610d38-ARN\r\nlast-modified: Mon, 05 Jan 2026 13:18:56 GMT\r\netag: \"695bba40-44db\"\r\nvary: Accept, Accept-Encoding\r\naccept-ranges: bytes\r\nage: 5227\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LoSqypR1Xw4yi7%2Fqcz6YH1M0iqRgkqw9oIO6I1aOmoT%2FTGNoYUjf7o20%2F9lKevynHNlJy2lKq2rbkkRb7dJtG4v2RiB1axJfKusRdKv4zybu5kuVgOpXjsU%2BPAqDDnM4R25O\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=9624\u0026min_rtt=7635\u0026rtt_var=1465\u0026sent=1242\u0026recv=189\u0026lost=0\u0026retrans=0\u0026sent_bytes=1389798\u0026recv_bytes=37006\u0026delivery_rate=38966505\u0026ipace=7143113\u0026icwnd=55200\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=1022555\u0026unsent_bytes=0\u0026cid=75b6453f04947edb\u0026ts=3865\u0026inflight_dur=466\u0026x=63\u0026mtc=none\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17627,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 270x165, components 3","md5":"ce2956afc63601e15436efda79ffd3eb","sha1":"6d118b6db2bf7c37418d1abd2f3327a0f4e08e57","sha256":"407ada6cc13c4d5bb94a8fe17457d11b5825adc043807cc6eccb1a9f426f617b","sha512":"62c55934b430939b97a3994ba6e96a87e159fcb02e5756c75f111a485fea1e4c079a30c271534d6f4be93d7fd10d669d0840a465f018cd31243a0d5e4a7983f9","ssdeep":"384:HzzO7ffv69ZmK4kYH0ZI6ARlypKALvzN+mYu9/JHAzWGEeMrjze7:Hzaz2kpVHvypKI7YmNhHAzHeza","tlshash":"e082e069df235385e3f34f9a184d8024d21eb94598387926e8b3cf19b7d53f1950ed08","first_seen":"2026-03-02T20:46:12.42578Z","last_seen":"2026-03-17T18:08:50.516945Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"w1.anime4up.rest","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
