{"report_id":"10c31f26-eef3-48db-a91a-5150ad2e3c03","version":6,"status":"done","tags":[],"date":"2026-05-10T06:35:17Z","url":{"schema":"http","addr":"sso--en-uphold-help.typedream.app/","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"title":"Uphold Login | Sign In@","dom":{"size":1626326,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"4f1134a780f53c4644b631f4a3343589","sha1":"3de5578967e31c118588ba13179a245ad6ab9626","sha256":"bdb70c91d30c1e7754d2beb293fa55c8e993fb30fddaa5a450f72eee0ce2d9f0","sha512":"2297f273f6e0a90b2fdd8184564012619f9f079424bfb3911a5284a5110ccd8361cd3d1e833ee8864ce6d19a1a798f85dc0b8e948810c3e1568b86c9238ce21c","ssdeep":"6144:Ao++I4+rcvJ8hZC/86XYyVzcC5fci4kCCYsExbAlRad:AoA4+AvCHCk6IyVwA54RTNb2Rad","tlshash":"4b75732637079900d2fb8ea320cf3e05740465397b7641afda1a0ee5d9ed16bc39978b","dom_hash":"domhash19fc452c89c1fbf08ceeba2b7f6d520c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"sso--en-uphold-help.typedream.app/","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-14T06:35:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-10","alert":"Phishing Block","trigger":"sso--en-uphold-help.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"sso--en-uphold-help.typedream.app","ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-01-22","domain_rank":0,"first_seen":"2026-04-24T13:36:11.899092Z","last_seen":"2026-04-24T13:36:11.899092Z","alert_count":75,"request_count":25,"received_data":2726903,"sent_data":12382,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-03T22:20:33.622142Z","alert_count":0,"request_count":42,"received_data":2049816,"sent_data":21730,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-05-03T22:34:13.116124Z","alert_count":0,"request_count":1,"received_data":4726,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"image.typedream.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2010-09-06","domain_rank":5846499,"first_seen":"2023-04-25T23:04:41Z","last_seen":"2026-05-02T14:28:09.394128Z","alert_count":0,"request_count":5,"received_data":157762,"sent_data":3156,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/pages/_app-33e558e3d4978b67.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"12c9c9707958c1c793e297fc0664f1b8","sha1":"5362c806471e3bf0652486b661f36b09709f8152","sha256":"ce7fe28337b6ead6b17634c8a4f2fa399cd307d5e847c9da0d0417af6c138adb","sha512":"0a0e24880f9404a04cee10b9feab846c23b47031f6c9bc3125dfb710416691bf41c9b4439f1e40f6f2c6e688f5d1a1411b9ab158dd4f588753f03cc40a27cb46","ssdeep":"","tlshash":"573165af31c178a8176f6cf4507b7aadf7bf2a0519c5a444d46288d85430edd4232f8c","size":1809,"data":"","first_seen":"2024-06-18T13:53:23Z","last_seen":"2026-07-27T12:26:01.028779Z","times_seen":1892,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/2507-dc4b031a429b363f.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aae80b9f942c1e983bdb299d041ee1e1","sha1":"175a09fa820396f804dd1295835e189dd4db44c2","sha256":"3f492a05bc09c311eea94ecbcaee6e632a149bd20e488aede8fd9d1cf37e3c1d","sha512":"37497488c529eb13eb486eac472c5020445cc96bd26e3bb4a60ceada6d93e0c7510d5c9fc0748cf38fbbdaf75e3a97d51d6a8e5c8059f1a8c4a813063c9bf80d","ssdeep":"768:HOjuQfjzwPphM+G6SBpKnOSSwPUtW4VepNuh1EiKA11s0zS:HvQMKsOdtW4VeC51pS","tlshash":"08230ac87292f45146e365e1407f114ba53c2cb5f84ca8a0f696f9e07eb4d8a40b7fb9","size":48592,"data":"","first_seen":"2024-06-18T13:53:23Z","last_seen":"2026-07-27T12:26:00.94374Z","times_seen":1875,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/7671-0804d750c53cce45.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fe1b6abd11f9dc97cee0f36dccc51a6","sha1":"72cfa8233f0d2f92fefb4309f878d5827df89018","sha256":"66d3385b97fac4ebc7c80d23782e81526ec33c0271a7d639148edf9f8885d4b3","sha512":"d510aa899a0f877dda178066f8c88db76fcafcae6ed70391237855f3a3c19d702a3247a34591b585a68ef421b0a632d20295aa68d72635fd5a8c2454199ee329","ssdeep":"384:rtDzol/I0or+xZTI/lkBXwDXJMo1WzfPpJMzxtwlrVtQZdgY0wEAMp0z:ZAu+xAJ1upWU/0z","tlshash":"68a2c798b5d178a8f92bd8a1d07f504cf7af185446064db2d2f899a990f43f82363f9c","size":21529,"data":"","first_seen":"2024-06-18T13:53:23Z","last_seen":"2026-07-27T12:26:00.975412Z","times_seen":1874,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/5738.66eb8b6673c6b4d3.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e427c8bde03898ebd6e6aa0aff7d6417","sha1":"0901d2986c4873cca3fd1d4e4675013ca8ec99d1","sha256":"a7280da336d8bc5ee22b6067ebaa02bf025072e9d07758baf2f4602c795dc5f4","sha512":"272b439f93bbeb496ea784f16d3b028c42e148413160ff16c3b3e06dad4fe58ccf6003f7e9ba0319a3f2d7fadd37548e3497d8448a9f0e263172e18791a3b3d6","ssdeep":"1536:WzAlGaP6yq53tiz+pMMsPw/yj8NUjxNzdL2l8ZjIATdoKaXFHsESvtBG:RwDNyxDVxIATdoyQ","tlshash":"ff83a54df5a17a9cf93fac84b17f900db21f3a48ca0d0db0e5b9681424a45a87663fdd","size":85733,"data":"","first_seen":"2024-06-18T13:53:24Z","last_seen":"2026-07-27T12:26:01.028014Z","times_seen":1858,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/RmLvO3wx2Hiw9uk46mMkM/_ssgManifest.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bc570811630ee710017f274280f7545","sha1":"1b4a5a70c7a203b804308ac40fda25c88d5cbb34","sha256":"634f1bdd6642e4de4d0b2d8c1e0c5b8fe915e2b30d0641b5a1855d0902e6d56a","sha512":"fe2281e5e7d383c52be462d747ed31b25426cd38451c34a0a85c22d103988098ba631fb94cbac4e698bf800e187827a75d4a03a790c639971da301493f9e087c","ssdeep":"","tlshash":"fdd09292412fbc189a32cd0e2db2bfda4f50b997c9ac514bcdb4908bc1b8a005f20978","size":256,"data":"","first_seen":"2023-04-16T07:16:19Z","last_seen":"2026-07-27T12:26:00.95119Z","times_seen":1896,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/RmLvO3wx2Hiw9uk46mMkM/_buildManifest.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dbe85b1fefe2deccb9a59be23f92f9c5","sha1":"80272cafcc60a27a85c47f025c4e4fda105797a3","sha256":"26c027e3f5745c91590f4c03079020e58cfadcf2212f728527d1a91b0d03b368","sha512":"48e3dbba2c0f57351b8c419a587759d46d84bbe66017f10e8abc15c1eb06039240eeaddd8cc66ae3119cfc687a03d1ed27156a0d69e3ef9df068adb3780aecaf","ssdeep":"","tlshash":"5e4178171056f81d0ef4ecda781b73eadf81fa3681748689debc4c7c4a8051257ba439","size":2171,"data":"","first_seen":"2024-06-18T13:53:24Z","last_seen":"2026-07-27T12:26:00.968251Z","times_seen":1869,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/8910-f25a89f1ea64fe64.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff1246fadffd52297eb1e16856f2b106","sha1":"c11a781ae10a31ab15df0da1b11d48dfd1975a97","sha256":"1c71bb6ffee7e4067855058d9c6d2c080aed12b827990ea636a6c60b1c1162e9","sha512":"2cd16f9a635249de90f96652fe4babc3922fbaf62d29cd1826c23a74eeb7eb22582c6fe2fb65e4c16d9bf799114b2cff435ea6e17eb2cf27220b5afc25ce4b5c","ssdeep":"384:alJC1TBoB5PEJhcwR3eSATwToTN6Ip2moCz54Gas4Pj/md1u3A9js8KEM:alJC1TLfc6OSwA4N6Ip2moCz5PdqDmdu","tlshash":"7aa23b66f2a5bcebd75b48f430eb850df21f3949950d4920b27ad44920d3ac5e163f6c","size":21949,"data":"","first_seen":"2024-06-18T13:53:23Z","last_seen":"2026-07-27T12:26:01.045873Z","times_seen":1852,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/main-3ae0ab5644307684.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf280b45858b101d4eaabf622ec3b852","sha1":"aef300caec6a6277213d6ffa4256869466c3ef41","sha256":"c7b5dd94081b60844217464260c70ad0ced2313ed69e05493a94dfe3fa70c13a","sha512":"3947abf56fda7f7b4da4ca8c823af5e4e07d882a4b9eacd9b382828036b57edcbf0d7ef6534622075c7cd27bcb51eb4da3d21ef2789d9f9882fb996562413e79","ssdeep":"1536:CBzN4XklMObes5rLX/A6UB1/pPm4JV3Ih/u6Hzr133y2OOEw2encs36ePlFrNaN5:23e75rJeh/uyy2dDq87rNaNRb","tlshash":"55b31ab8b3e2f89206c64594443b0046f37e1d7e106eb485f3aadcd779a1d4d90b2fa9","size":115671,"data":"","first_seen":"2024-06-18T13:53:24Z","last_seen":"2026-07-27T12:26:01.051972Z","times_seen":1891,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/framework-0a892af99d0986b4.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37379900a5dca2001aceef7668b0b1df","sha1":"b81b417b168b072d26b3086302c5f5f7322933fb","sha256":"cecdbcd15f470ac05366f8b4d03e8b6a0da3d9d655c96080eaa3393611e4a046","sha512":"563d4d4a6338be8ed9939a8a450fbef7e6b6cedc33abf4084b6ed850a8de5ba5d35cc55abe83142187602f64f13fd483afc85ba250b8ae6a9eb785e9e14b9964","ssdeep":"1536:MkhivZ276oX6KRWhWL/hP/Og8qxDrKDx4pAOloPzZs8oEQbN:MkhiB27buWL/VOgd6x4pbos8oEQ","tlshash":"dcd3e7e87992f6629fb341e7009f1857733d251b680c4960a250fda939bc42ea17bfcd","size":141065,"data":"","first_seen":"2023-10-17T08:52:11Z","last_seen":"2026-07-27T12:26:00.964806Z","times_seen":1904,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/webpack-0ec95126fdf2b774.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb5ee0aa2ad883aa08fa2be28398421f","sha1":"60b76362366bdd68ba94fae9a378123f5f2f5156","sha256":"562846f03fffa8619f79c3b2656fda2dc98019c62fd0dfc9ab3125af1a0124ab","sha512":"d2722f7f45be33f7b7f29b3e2c0481d6a1a1792db2834e328335cd6e6e8aeb0246269fe0a3d69621cdb08375c87a23110201da6070f375191a219c9da6e13ad7","ssdeep":"192:lU6PAa9NRRQdYpqpmOZ0ys7E7FIG2ZiaDxfM5XzP5e:lU6J1Rq1zZ0hE7FWDJM5XzP8","tlshash":"ba0274c93794f96736e268d0c42b7235b11fc433781b6890fa25ecd8a8e4959833aa75","size":8480,"data":"","first_seen":"2024-06-18T13:53:23Z","last_seen":"2026-07-27T12:26:00.937044Z","times_seen":2235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/4455.84efc5b141b2eed6.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8dd62f6031957d9f470f837eb8c8b86e","sha1":"276b2a20343d7744f23877f7ffb8f375c2908067","sha256":"6b551f0184e44f7d5a04c2c52f20e0bf1f8509a45b791c03a82118958b8e8bd1","sha512":"69f64a485cbdbb2024e30ccfba8f0d9e95726c5dbed3cba3403d9238d3eb3d15957b1716449224ad31216ec9c73c3b564de74c200701761dd3441b0b8b575c6c","ssdeep":"1536:uYjEp5J1uTu6WtWuBZp/HZDFXdI2/hIyXn7HMbPMbDITq0id/tbKRbG2Rd:mp5TolErxp6d","tlshash":"7c730ac971d2f0a5875f10ad402f100ef37f6ea9280d8450e776d9d178786a8a2a7fdd","size":77681,"data":"","first_seen":"2024-06-18T13:53:24Z","last_seen":"2026-07-27T12:26:01.043793Z","times_seen":1858,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/5635-06a46e488a7b390c.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3149b3854d9551d3f7b1d89603c6c537","sha1":"a4f6ac24d5a0c424dd7e95353c78cb0b7494163c","sha256":"caa66494a056f92f01d9d8ba80ec55360a6d10256fa7983c70d902ee8f29cc86","sha512":"45f4acbe667b18d9c09fa5ff69acde23d9ead7483cc81a7436d53ad62b54f17a908d813f2d6f0142f911dcd7db96510f9eee26ff7ef0099295e928cfb62662db","ssdeep":"1536:Vprt3xdi92o1TML5J3nnb5oALn5h3/5ivW6MIO:Nxd6G5Fp9","tlshash":"be6308e6326274b4c3bf419bc07f4519733e5b84114d0444f2b58e9d3868e99a2bbfae","size":72088,"data":"","first_seen":"2024-06-18T13:53:24Z","last_seen":"2026-07-27T12:26:00.940135Z","times_seen":1858,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/pages/%5BslugOrDomain%5D/%5B%5B...path%5D%5D-582132f6fc6ac233.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"530c33afdcb3a38fe6b4bf932533d697","sha1":"2310b6b8770ef6d5cdd10a1a4bfec9b5e8e606da","sha256":"b93c2d87287796e6706cf5aa121fcab7da11376b1bbcb6af60c5f5214bfce6d8","sha512":"8706c8246a34f16b6ee2b0146548d790136265ed15fdfd7694f375331c7d3ba85a7879591786b0bb3c9359596235544509d78fe14b50435b2a0dfb21800bc626","ssdeep":"96:PARCduJg5bZAWouRj6XOnGRj0RIP+v8iXOZ/Pqc5ixEuGuECU9Vr:Y4uJcbFRjMTRj0R/v82PRECU9B","tlshash":"9a0254addf53d8a68a76d9fac47bc03ac12d33136284d40099474fd0a8493cf72a5e39","size":8763,"data":"","first_seen":"2024-06-18T13:53:23Z","last_seen":"2026-07-27T12:26:01.029635Z","times_seen":1875,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/296-922081e09b0e9db4.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ead7659d6fa74ebb6c47276c62c780d2","sha1":"5172e48d6096fbed741abef35dc3124887c198fd","sha256":"69e2c33e91c6d7f2114111c8d265e7a128f5dff0b27862ca31aae4f863763263","sha512":"5fd7a7450eb86b08d4db7cc33bcaa1332a165d7893ddf4eb9674a4b176baf46bb4a64c4b09e166015dd31c3c81311bf274c39d372bb42efc4792fc5e0601b4bc","ssdeep":"","tlshash":"70110e7cee9aee164a3aacecc0b74471922c7731144ce0f4a5970f8561d974e33239ad","size":1000,"data":"","first_seen":"2025-04-07T11:04:54.153119Z","last_seen":"2026-05-23T14:27:39.20339Z","times_seen":126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/8070-b455d31b248b2b1a.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"509984b6dfe6f408454562cbc1c92763","sha1":"569dd93db827ab508adb1b731e684daefa9b17e6","sha256":"98971530458778abeb5749a04d3d3b833ae0df8e4b7375960b00b9e23af6a836","sha512":"5c765f54d6762e7d08eff3773bdbbff7a97ba7caceb43611f63d62e34bb65f8361551ae7cd9d624217e58bf284af685deed79c9bf443f01b6cfdcd79f736eeae","ssdeep":"384:trYebhuEXOoHQJmBSfmvTtSjfHjghVS6s+IgC0fQ1Pt3IhJDYiswMEG2T/sQwiJf:tlbZXOowABSfmvTojfHjghVS6s+IgC0/","tlshash":"d57293cdf5c6f03292277572803f100ff37e5996685c8480a362e4d2b97a99dc267fa9","size":16422,"data":"","first_seen":"2024-06-18T13:53:23Z","last_seen":"2026-07-27T12:26:00.983578Z","times_seen":1874,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/196-427c2c804712681b.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb92b9c9c50888a2388c857bddbfa082","sha1":"ec4cff58ab9efd04c550c8eb31bebd1664040898","sha256":"692777e7ad9b771b114f347bf5ab60afa6e9b2127afbbbb9a9dd6c3d4bc5af43","sha512":"fe0a2d1428b5afc518783e67549e4dc53eb4d39774949593e26bc139e6865acb5ddee2ae6ea6d0c600eca597b1cea191f5e90abe88e6cb04c7e44c7e3565d205","ssdeep":"192:5SWbcltLPGo1ZaX5u5aHZFEM05j3VVt5vAjo0ke4htyj+gMLcBQWvTsV0X4JuLjI:IltdOzLSWjzQWAiCbK7XbuyRI","tlshash":"5252c8c47bd2f0b283f71a62807f110bf2797aa4240c9404b3b6e5e92c7055b9a67f79","size":13799,"data":"","first_seen":"2024-06-18T13:53:23Z","last_seen":"2026-07-27T12:26:00.967117Z","times_seen":1875,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/9236-19170b52f82f2dfd.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"87c5a0693cdfb54e4e115f1e5c99affa","sha1":"49da349e632e669fd2414f83eec7cef3e2b4fe53","sha256":"e10c4f44750138fc8e842389996b44c1ba994209064a84edaa85b7f46f003656","sha512":"e63253b3de49442b09e0d56f3f7edd04b96647f007eeaa2fde4fdaccc9f2d64a950321e03e4b9d630ed53d604537b737aa309daf3c6d454917f6433dc8f23072","ssdeep":"1536:MT7y0v91ppoCygBIllSb5KIoPsFWeUaeHV1j8R4peFdZtFuU1vpL95ZzblXi:MT7tv91ppoZ0reHV1j8R4AFdZtFtJDbg","tlshash":"8883198a71d1f0a303d761e540af180ff27a192e681c94a8f7f0d8d5a8b964d9363f6d","size":85088,"data":"","first_seen":"2024-06-18T13:53:24Z","last_seen":"2026-07-27T12:26:00.977015Z","times_seen":1873,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/8bd53eb9-a30f8ab05608ac81.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ccce60995693b818544d5035d27f350","sha1":"e6dd171b6bcb892cde56dd7c9fa8f3ff8a0c061b","sha256":"7ab8fba833efce4a850c58ab12d4674cc1c3b41304a6f5840ba78afd7b6dd323","sha512":"fa1f9d7afd01187e8547827b1aaa58b63c039dcc58380dad4af88f34f93e964dfa26acc36eaf9ff8c23b5b6ce3907487cb4c54fdd1023d62f883f1c982f47807","ssdeep":"1536:cmf6T/QInaf6FWdjqnv52bBVUGE4BK1AcE:lJIawWdjqn27UGDBaAF","tlshash":"45732a90b665ab9a8cf0204dc87e630ff0755e059851f971e36bfa527018ac3f0d7ba6","size":73932,"data":"","first_seen":"2024-06-18T13:53:24Z","last_seen":"2026-07-27T12:26:01.044933Z","times_seen":1876,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/quicklink/2.3.0/quicklink.umd.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9bf2c039e22db3d0962eb567cbe5954d","sha1":"aba5fb4f67d18157d929b5375e42cf965c29f2a1","sha256":"caf2503883621fd7d67a61e7d2f080e65b07589687b3afd998efb516dd384af3","sha512":"18016e9380cc1cd781aa1551a373a492a1c801203a18ba2cdafc44de73a7b3eaac0c7382009aef3e62e7409b6fbc5d9caad4beb1b1fac3414dca6addca64f0a7","ssdeep":"","tlshash":"4171c79e36a2b17312a71132b23fa50b7277541a249e90116109aced3c36b5dd713fce","size":3712,"data":"","first_seen":"2023-03-13T09:16:20Z","last_seen":"2026-07-27T12:26:00.963831Z","times_seen":2117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/5738.66eb8b6673c6b4d3.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:53.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 05:39:11 GMT","end":"Sun, 28 Jun 2026 06:37:32 GMT"},"fingerprint":{"sha1":"FE:4E:BC:0A:08:3C:EC:A1:DF:19:9F:03:B4:53:3B:21:5D:77:23:00","sha256":"74:FB:9C:5B:AD:5C:20:A2:1D:22:F5:8C:48:02:48:5D:FF:B6:F6:E1:C1:25:9B:01:9A:AB:FD:AA:E9:FC:90:1C"}}},"request":{"raw":"GET /_next/static/chunks/5738.66eb8b6673c6b4d3.js HTTP/1.1\r\nHost: sso--en-uphold-help.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-td-version: 0.116.0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Jun 2024 04:00:17 GMT\r\netag: W/\"14ee5-18febb45c68\"\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sun, 10 May 2026 06:34:53 GMT\r\nserver: cloudflare\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 504192\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MVfelEF2iFeYjVa2LgY4B3CD%2BQUtEB0By0epCvW96ueB2v7330MFDAtJG1ZcIyR8z6UFXTxCoalDpd9Ig3EHarWBxsECXRciJfWtnImKa5%2BJzwdMJKw0wkyhsgxLyOYSrn33zErSLcmrGKghALer7X3Y4sE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96ebb22f3ab4f4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85733,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e427c8bde03898ebd6e6aa0aff7d6417","sha1":"0901d2986c4873cca3fd1d4e4675013ca8ec99d1","sha256":"a7280da336d8bc5ee22b6067ebaa02bf025072e9d07758baf2f4602c795dc5f4","sha512":"272b439f93bbeb496ea784f16d3b028c42e148413160ff16c3b3e06dad4fe58ccf6003f7e9ba0319a3f2d7fadd37548e3497d8448a9f0e263172e18791a3b3d6","ssdeep":"1536:WzAlGaP6yq53tiz+pMMsPw/yj8NUjxNzdL2l8ZjIATdoKaXFHsESvtBG:RwDNyxDVxIATdoyQ","tlshash":"ff83a54df5a17a9cf93fac84b17f900db21f3a48ca0d0db0e5b9681424a45a87663fdd","first_seen":"2024-06-18T13:53:24Z","last_seen":"2026-07-27T12:26:01.028014Z","times_seen":1858,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-10","alert":"Phishing Block","trigger":"sso--en-uphold-help.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Saira:100,200,300,regular,500,600,700,800,900,100italic,200italic,300italic,italic,500italic,600italic,700italic,800italic,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Saira:100,200,300,regular,500,600,700,800,900,100italic,200italic,300italic,italic,500italic,600italic,700italic,800italic,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24003,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"85ab80abe30dd8daffcbcc8700367214","sha1":"f69f1bee965e50de592f9101044cd9672252caac","sha256":"b46fca6eca7be7b8f997cd33e5f9dddd5a7a2039d7cdc77bdfa5b4c801ae857d","sha512":"7eb20f64fc2b969c3d6512843f68ac7693e1eee7e7d1cc530c40904567e94836e80d0237788c3984e0eb56437faa1364829ca0b21f347d69fe7017ef9ff84def","ssdeep":"384:c83f3K3F8Ad28ZAT8CD08TuB80xC8Nkf8mXA8XSNJhWfPyZszOd7:PPK7hW4","tlshash":"a4b297a1082e9144ea574cc227db7e35ae8eb1647050d5797ffd18d8acaec326335b4c","first_seen":"2025-11-20T09:37:02.387132Z","last_seen":"2026-07-26T12:06:24.722013Z","times_seen":130,"resource_available":false,"data":null}},"time_used":576,"timings":{"blocked":240,"dns":7,"connect":26,"send":0,"wait":54,"receive":0,"ssl":216},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Khmer:regular\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Khmer:regular\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":444,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"495832224ff05b777d50ae45291f1962","sha1":"d88d85a046cff4b969232fa11e5c9c0a94bac499","sha256":"dbfd3e455d684e1ed1fce06bab3d1b14e68740314d96cfaff08aaee9a8b1313d","sha512":"5beb2a6a8ce773ccc7efa979cca9663883fd53ac46295372d44aef72a6af42e45ebb540af2ce14fad7336d5c1fdff2c5778f9efff00f9fb56b9c273936142b0f","ssdeep":"","tlshash":"06f05c8104666904e7931cc111ce7d36de0e50501445a4248afd18e4ac95c5213a271c","first_seen":"2025-09-18T19:21:51.833913Z","last_seen":"2026-07-27T12:26:00.999519Z","times_seen":825,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":190,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/css/596516fd51c0b901.css","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 05:39:11 GMT","end":"Sun, 28 Jun 2026 06:37:32 GMT"},"fingerprint":{"sha1":"FE:4E:BC:0A:08:3C:EC:A1:DF:19:9F:03:B4:53:3B:21:5D:77:23:00","sha256":"74:FB:9C:5B:AD:5C:20:A2:1D:22:F5:8C:48:02:48:5D:FF:B6:F6:E1:C1:25:9B:01:9A:AB:FD:AA:E9:FC:90:1C"}}},"request":{"raw":"GET /_next/static/css/596516fd51c0b901.css HTTP/1.1\r\nHost: sso--en-uphold-help.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-td-version: 0.116.0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Jun 2024 04:00:17 GMT\r\netag: W/\"59d-18febb45c68\"\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\nserver: cloudflare\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 1\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s3NBJjsvRtBn9WvBL%2BjEsoa3HrOxi9POsCIqGL689Hi6xPvYYP4GujQEcLXXaXMzvdMJcec3U%2BWGR8MrXMYZloXYi1pTUSCZFZJXqiBuCdCXv39gS%2BelLW02B7%2BGakL%2ByAqcckT8w0eimN5eA4HmSE0%2FhgA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96ebba4825b4f4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1437,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1437), with no line terminators","md5":"ec5fadad76a05d45df7a7a396d27fee4","sha1":"1682233068ac60c2e273d578ec58ace509ddef92","sha256":"fe5675af2ec653e89cca1110ab50505b5a5799c5e79132217d5dc4808437124d","sha512":"57bae25464761abf3a0133f45c4a791c18709e328faa16de3d360c39856aae9feaec3727acae66603ac153224edc5a65f2abffa7c2c145cbedb8f81817fd10f7","ssdeep":"","tlshash":"f021f5137e1d0235e12bc9b8aa41aadd3111766b998fb65eec82f03ccd528611835f18","first_seen":"2023-10-22T06:28:42Z","last_seen":"2026-07-27T12:26:00.950476Z","times_seen":1865,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-10","alert":"Phishing Block","trigger":"sso--en-uphold-help.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/quicklink/2.3.0/quicklink.umd.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:56.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/quicklink/2.3.0/quicklink.umd.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 10 May 2026 06:34:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1423\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"62edb112-58f\"\r\nlast-modified: Sat, 06 Aug 2022 00:08:50 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 6181850\r\nexpires: Fri, 30 Apr 2027 06:34:56 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zss15YiNttG%2F8rtr27BVLFDpm%2B3rDBYC7rbwBT2hpfM6piVajm7ZDYUzX00G44VgpdjkqwOuEz3JoUWdElkQmG6SlTGXbLCGEfd1Bf%2FbdBONkADUCrYyRjsI0cKW09B9%2Bm3EeYBc\"}]}\r\ncf-ray: 9f96ebc50aa0568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3712,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3711)","md5":"9bf2c039e22db3d0962eb567cbe5954d","sha1":"aba5fb4f67d18157d929b5375e42cf965c29f2a1","sha256":"caf2503883621fd7d67a61e7d2f080e65b07589687b3afd998efb516dd384af3","sha512":"18016e9380cc1cd781aa1551a373a492a1c801203a18ba2cdafc44de73a7b3eaac0c7382009aef3e62e7409b6fbc5d9caad4beb1b1fac3414dca6addca64f0a7","ssdeep":"","tlshash":"4171c79e36a2b17312a71132b23fa50b7277541a249e90116109aced3c36b5dd713fce","first_seen":"2023-03-13T09:16:20Z","last_seen":"2026-07-27T12:26:00.963831Z","times_seen":2117,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":26,"dns":7,"connect":1,"send":0,"wait":8,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Quicksand:300,regular,500,600,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Quicksand:300,regular,500,600,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6255,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c7365f08324a60bb4b6f1da00d3b92ef","sha1":"eeb03e220b2f2bc037fb8fb89da03da35cf86a64","sha256":"fe217c2de98a4d6bcfced2a09ddec2509373a338a37def5601c33ed111231c1a","sha512":"8c919634c8fe6c5c3f8226f3182897e3940378cb9d9261a0f906fedb0c25f5ad42bfdfb3cc4ae77b52c13c6c712e6a44742dac877fc770f402771b27b7f8b1e7","ssdeep":"96:cqO1aPpO1arJc+uuO1aLNDqOEaPpOEarJc+uuOEaLNDqOXaPpOXarJc+uuOXaLN5:cAPfvPVNPmvWVOPFv1VrPcvMVEPjvTK","tlshash":"c4d1afe1447fb510db871dc122ce7e32ae4ea1547061c9799ffd1c88ac9ac26339572d","first_seen":"2025-09-02T21:26:18.885538Z","last_seen":"2026-07-27T12:26:01.03632Z","times_seen":3274,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":201,"dns":0,"connect":23,"send":0,"wait":34,"receive":0,"ssl":218},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=NTR:regular\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=NTR:regular\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":688,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a02c7f76b293f3dce8b88c6a68569e68","sha1":"c273bf1c7ec6226a81ec6182c321d57a250e2470","sha256":"05c25e51ee88bbb37024fd19c9658ca9a8aeb2fc7ba857acfeabe2d7f9045be1","sha512":"cfa033b152b3d32f13b3af32b8d5b5a1c667aacb7f86da4fb36fcde4f5efccd4f3ba5a201e920aae62de3cc3d8f82d157142dc2125545c2e90122d04edcafb47","ssdeep":"","tlshash":"76017b80041ba500fa531cc212cf7e35dd0f60156440da799efb08c4aca2c224351f2d","first_seen":"2025-09-14T00:39:27.355662Z","last_seen":"2026-07-27T12:26:01.031334Z","times_seen":839,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":189,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Bree%20Serif:regular\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Bree%20Serif:regular\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":856,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"be400658d274d47f8e187a1222ec9cf8","sha1":"4014e7740f963430dcd3958e6e3b567eafb1824d","sha256":"b9a5e47255bca3da7be381fe3b7e05678acd3cfc35c83a73f31905be61756054","sha512":"885e959b415e50ef4daf4c080d762029ee4b7c92010a79b98c140c99ff9880878757d3487d5402a50b9729b976f18f4de2bea44bd12b8a81802ea3bfcab09a15","ssdeep":"","tlshash":"80111281085b9a00df530dc522cf3e37ee1ea2611445f936abfe18c8bc56d15531270d","first_seen":"2025-09-05T06:16:08.012823Z","last_seen":"2026-07-27T00:16:08.116407Z","times_seen":899,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":186,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Actor:regular\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Actor:regular\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":397,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"596e9d92ef6a22ae6ac1e9c5950a8239","sha1":"787c59ab92d8facf2367b7e86050c2f7cbba5ac3","sha256":"46122f8f6ff674988cd67ebb5491742568086ad25752d9ad2e4453de215d4a9c","sha512":"513760c65e2f1a8bd0ad79b87009f89f563c38a843ca4ac6495a441f9c15c34e1bc05eafa9802518d793a64165f56eaa52ce1a3b6fdfdfebe4227823518b60d1","ssdeep":"","tlshash":"12e068c10826a500ea930dc512ce7e36ee1fa0956441ea64aafa18e8fc96c665362b1c","first_seen":"2025-09-14T00:39:27.368404Z","last_seen":"2026-07-27T12:26:01.050377Z","times_seen":727,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":136,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/8bd53eb9-a30f8ab05608ac81.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:53.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 05:39:11 GMT","end":"Sun, 28 Jun 2026 06:37:32 GMT"},"fingerprint":{"sha1":"FE:4E:BC:0A:08:3C:EC:A1:DF:19:9F:03:B4:53:3B:21:5D:77:23:00","sha256":"74:FB:9C:5B:AD:5C:20:A2:1D:22:F5:8C:48:02:48:5D:FF:B6:F6:E1:C1:25:9B:01:9A:AB:FD:AA:E9:FC:90:1C"}}},"request":{"raw":"GET /_next/static/chunks/8bd53eb9-a30f8ab05608ac81.js HTTP/1.1\r\nHost: sso--en-uphold-help.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-td-version: 0.116.0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Jun 2024 04:00:17 GMT\r\netag: W/\"120cc-18febb45c68\"\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sun, 10 May 2026 06:34:53 GMT\r\nserver: cloudflare\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xQLrO7ggn9Yvc%2B9aPIX0fETzZ3lQ3lI2sJ01HuKonNz%2BI3uLvlIIv%2BxkHd27OVPAFZ5ShVzyhxm%2Fk10YK1sRmH%2FvTOju4KKJYBve3IylNDQHw3NnHquEyXo7FS7JAu29ej99qplWNZQEnHhES18Gx4Q6fsY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96ebb24f43b4f4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":73932,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7ccce60995693b818544d5035d27f350","sha1":"e6dd171b6bcb892cde56dd7c9fa8f3ff8a0c061b","sha256":"7ab8fba833efce4a850c58ab12d4674cc1c3b41304a6f5840ba78afd7b6dd323","sha512":"fa1f9d7afd01187e8547827b1aaa58b63c039dcc58380dad4af88f34f93e964dfa26acc36eaf9ff8c23b5b6ce3907487cb4c54fdd1023d62f883f1c982f47807","ssdeep":"1536:cmf6T/QInaf6FWdjqnv52bBVUGE4BK1AcE:lJIawWdjqn27UGDBaAF","tlshash":"45732a90b665ab9a8cf0204dc87e630ff0755e059851f971e36bfa527018ac3f0d7ba6","first_seen":"2024-06-18T13:53:24Z","last_seen":"2026-07-27T12:26:01.044933Z","times_seen":1876,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-10","alert":"Phishing Block","trigger":"sso--en-uphold-help.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/296-922081e09b0e9db4.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:53.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 05:39:11 GMT","end":"Sun, 28 Jun 2026 06:37:32 GMT"},"fingerprint":{"sha1":"FE:4E:BC:0A:08:3C:EC:A1:DF:19:9F:03:B4:53:3B:21:5D:77:23:00","sha256":"74:FB:9C:5B:AD:5C:20:A2:1D:22:F5:8C:48:02:48:5D:FF:B6:F6:E1:C1:25:9B:01:9A:AB:FD:AA:E9:FC:90:1C"}}},"request":{"raw":"GET /_next/static/chunks/296-922081e09b0e9db4.js HTTP/1.1\r\nHost: sso--en-uphold-help.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-td-version: 0.116.0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Jun 2024 04:00:17 GMT\r\netag: W/\"74d7-18febb45c68\"\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sun, 10 May 2026 06:34:53 GMT\r\nserver: cloudflare\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=efA5uzxxQcZ81TJxGKih0KvGEgUvFTpFMPHUL17MdCtdfs1MpGCtdJawk2tPcMItEBvCEqwzIzUbRTr%2FePfPYFzKfVKALBGEW9Em%2BNOABODaBVaH176F52%2B485CWzfnvJffoAGGmKrNgMh%2BC7lJ7hTaDxU4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96ebb25f49b4f4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29911,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (29911), with no line terminators","md5":"3c840fe00800b82591d4105a3fe07afb","sha1":"b5ace3b590c748c418d0fe80b2349a07afad60f2","sha256":"8a3787ca800a549c5b96f91bc505450fe931d365cf9db2428911162130ed79c9","sha512":"5e93c7de0750c7ad05026e2bb9dda4f26fc153bc024728439871a449b4e8c8dab81a2d7e0532375c65e5290cd752980bb8c5b3e87d386cd67f5d4d2ed71bb278","ssdeep":"384:3vo2rG2sQO8cJ3nKikqL5eaSz2XkX5wt61EAsVhELDtnOy5pcXP+:3gCsQNccqUaSLVBLOP+","tlshash":"8dd2f69df6e1f51446bac898e0fb9122f23d76062064c270f5e7ca4550a5b06f1b3bba","first_seen":"2024-06-18T13:53:23Z","last_seen":"2026-07-27T12:26:01.053077Z","times_seen":1858,"resource_available":true,"data":null}},"time_used":690,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":689,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-10","alert":"Phishing Block","trigger":"sso--en-uphold-help.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.typedream.com/cdn-cgi/image/width=750,format=auto,fit=scale-down,quality=100/https://api.typedream.com/v0/document/public/aef74bf0-9ef8-4e10-9b33-7c78d546f7fe/2yx8yPhtpzt7fCzaaxXnQZSZ2QG_uphold_image.png","fqdn":"image.typedream.com","domain":"typedream.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.117Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/image/width=750,format=auto,fit=scale-down,quality=100/https://api.typedream.com/v0/document/public/aef74bf0-9ef8-4e10-9b33-7c78d546f7fe/2yx8yPhtpzt7fCzaaxXnQZSZ2QG_uphold_image.png HTTP/1.1\r\nHost: image.typedream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T03:22:25.989663Z","times_seen":17572886,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":9,"connect":2,"send":0,"wait":0,"receive":0,"ssl":-1},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Work%20Sans:100,200,300,regular,500,600,700,800,900,100italic,200italic,300italic,italic,500italic,600italic,700italic,800italic,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Work%20Sans:100,200,300,regular,500,600,700,800,900,100italic,200italic,300italic,italic,500italic,600italic,700italic,800italic,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22545,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"90b5370af6eeb2a9734ac6d72fa2f01a","sha1":"15af301ac413b32b236b9ae893a7e18a16060f97","sha256":"66c8d0076560061497275ec0fc85f01d3db6a620c2ceeab863dd94de3b784876","sha512":"31e28779f83e2dae62ef6b9a742d16fea803cd0ae2599b628c2c459be399c65d907db0b316e7f307cd326011d25ab98ef60c4370919873eb913323c649d695f9","ssdeep":"384:cm3L3O3smePBm9EamwdHmf6AmSLFmRQumUZ7mD203p6jH6tQ7uRv:ZL+wp6s","tlshash":"c6a2de51047aa154da431dd673df3e36ae9ea1907044c578affe2888ecaec2a637570c","first_seen":"2025-09-11T21:51:50.383584Z","last_seen":"2026-07-27T19:03:10.040746Z","times_seen":1674,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montaga:regular\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Montaga:regular\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":404,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"de4895cc9613022cebdc37e19a2d4928","sha1":"ebba8907321bfcafab2936e365e78ae300f2b756","sha256":"f1b9e10f7b32f209bdaf96e666191ab5a8845cbb42d416fadf5b5c14d93e25c7","sha512":"3caf30e013febd9d3752970a036b994bc90758ede3b9deb56e9b0340bd5af0bcc52dadf4c5d7e5cfaa20e26029ac3109556e0a42733b2a1723b42aa8b5150eff","ssdeep":"","tlshash":"eee068814826a500e7a31cc112df7a32ee0ea1902440d975eafa28d8bccac625393f2c","first_seen":"2025-09-11T02:36:25.561081Z","last_seen":"2026-07-25T09:24:33.15654Z","times_seen":54,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":81,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Caveat:regular,500,600,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Caveat:regular,500,600,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5724,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"012b3b80922184cde425092b1b19b485","sha1":"f69395d55e57ecce755321d95ffcbbfb9160bbd9","sha256":"6324c22f4591435c00b2e59efbf8b628ee68786efe59b1ab510d780bface7773","sha512":"11cb886260d00b67a8273f8e332ca28eb00bc4615c79cd586bb93984ed76d5f9d99a27c1c125e47b55ac42bb34edb9571031685267b4f0012064af76be488398","ssdeep":"96:OOEaR+OEa5FZXOEaCJc+uVOEaUNlOXaR+OXa5FZXOXaCJc+uVOXaUNlOxMaR+Ox/:pRZyKjqRqhKcHRHIKFgRgPKmX","tlshash":"4bc19081041bd400eb830dc263ef7e36de4e619664449d75affe28e8acaad27435072d","first_seen":"2025-09-05T04:53:42.922036Z","last_seen":"2026-07-27T12:26:00.971999Z","times_seen":772,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":86,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/pages/%5BslugOrDomain%5D/%5B%5B...path%5D%5D-582132f6fc6ac233.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:53.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 05:39:11 GMT","end":"Sun, 28 Jun 2026 06:37:32 GMT"},"fingerprint":{"sha1":"FE:4E:BC:0A:08:3C:EC:A1:DF:19:9F:03:B4:53:3B:21:5D:77:23:00","sha256":"74:FB:9C:5B:AD:5C:20:A2:1D:22:F5:8C:48:02:48:5D:FF:B6:F6:E1:C1:25:9B:01:9A:AB:FD:AA:E9:FC:90:1C"}}},"request":{"raw":"GET /_next/static/chunks/pages/%5BslugOrDomain%5D/%5B%5B...path%5D%5D-582132f6fc6ac233.js HTTP/1.1\r\nHost: sso--en-uphold-help.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-td-version: 0.116.0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Jun 2024 04:00:17 GMT\r\netag: W/\"223b-18febb45c68\"\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sun, 10 May 2026 06:34:53 GMT\r\nserver: cloudflare\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b4r3IdiOUMx3NqyBpQET5go%2BweNY2oKdMqC4GBO6dRNBcygXFoFB6g0H3UMbXk1%2BtIYhJMkH0RoI9s51eI%2FDk4cLZslV6xdIbhMKMew3CgHZYc6quj%2FoIxWBK9HHVcBR6JAVKN7IcpSzodZC8O91aDEu3T8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96ebb26f4bb4f4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":8763,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8763), with no line terminators","md5":"530c33afdcb3a38fe6b4bf932533d697","sha1":"2310b6b8770ef6d5cdd10a1a4bfec9b5e8e606da","sha256":"b93c2d87287796e6706cf5aa121fcab7da11376b1bbcb6af60c5f5214bfce6d8","sha512":"8706c8246a34f16b6ee2b0146548d790136265ed15fdfd7694f375331c7d3ba85a7879591786b0bb3c9359596235544509d78fe14b50435b2a0dfb21800bc626","ssdeep":"96:PARCduJg5bZAWouRj6XOnGRj0RIP+v8iXOZ/Pqc5ixEuGuECU9Vr:Y4uJcbFRjMTRj0R/v82PRECU9B","tlshash":"9a0254addf53d8a68a76d9fac47bc03ac12d33136284d40099474fd0a8493cf72a5e39","first_seen":"2024-06-18T13:53:23Z","last_seen":"2026-07-27T12:26:01.029635Z","times_seen":1875,"resource_available":true,"data":null}},"time_used":682,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":682,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-10","alert":"Phishing Block","trigger":"sso--en-uphold-help.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/cf-fonts/s/inter/5.0.16/latin/400/normal.woff2","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 05:39:11 GMT","end":"Sun, 28 Jun 2026 06:37:32 GMT"},"fingerprint":{"sha1":"FE:4E:BC:0A:08:3C:EC:A1:DF:19:9F:03:B4:53:3B:21:5D:77:23:00","sha256":"74:FB:9C:5B:AD:5C:20:A2:1D:22:F5:8C:48:02:48:5D:FF:B6:F6:E1:C1:25:9B:01:9A:AB:FD:AA:E9:FC:90:1C"}}},"request":{"raw":"GET /cf-fonts/s/inter/5.0.16/latin/400/normal.woff2 HTTP/1.1\r\nHost: sso--en-uphold-help.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncontent-length: 23664\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i0u3oh6PIaF6ZHob8ZmFbXsAosP%2FI%2Bpz2%2Fo3TpXSfa%2BxiG%2BsY8IfD9u%2BCDh3kMS%2B2vmTFbZj4GMp%2FEwnSonI%2FopHK027Fg84yKEIbE%2Bq%2BfhJMUPRcSPmssxlYceYTtAnwaKeF3EsUERRoF9UO77TxWc7hac%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f96ebb7df93b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23664,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23664, version 1.0","md5":"da03732a27e16543f09d6a6a62b0cdd4","sha1":"68f645c6b6ff12e25c54b13d4ed119e631dcbb26","sha256":"8909904ab6c872eb994093482a88a28eca2cd95912d7b6fecd72103b0dc07edc","sha512":"8f8a1b22d7fedc8a5c0b75a237932fa00b71d25b1c13d1ec6f9c31fbeceba5d7e1a728a06fc3c2abd803337617394f91d2cc08e9798417b73e3587da3b9d882e","ssdeep":"384:LDIByvvcpxzNfjZ7amidC7gcUH6rpfmzO59sT+m+WFg5ivhjpaBNSS6X:LMBYabZ7aXvaVfSCWSogoSSSi","tlshash":"fdb2e0e97b5be3e2e077c67d41bbdf94e64c2860435e4b830e24be14e2d24fe6484416","first_seen":"2025-05-30T09:01:41.826892Z","last_seen":"2026-07-28T03:30:40.996649Z","times_seen":16481,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-10","alert":"Phishing Block","trigger":"sso--en-uphold-help.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=DM%20Serif%20Text:regular,italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=DM%20Serif%20Text:regular,italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1753,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a473f0ae2f8a5b95c5f898064b2eed4b","sha1":"a149c040f0849a916c39e52721eaac8e2064a95a","sha256":"591d0f2d454cf101c7b368c8b1f81ee0884434a388a33db5f4aff172b9dca3da","sha512":"7b3fabe099ff163857ae4653d46ccf20905c8f46a39bfa428b0e00f4c8baaecbe3e4d21ba54c79fd724e23b2db39c9c4299d1fcc78b3fd123a28489abc7288cb","ssdeep":"","tlshash":"1331cc920827e200eb935ec162ea7d33ef1e62516444e638aafd1c88fc9fd564351b8d","first_seen":"2025-09-02T21:26:18.838489Z","last_seen":"2026-07-27T00:16:08.071603Z","times_seen":738,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":188,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Cinzel:regular,500,600,700,800,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Cinzel:regular,500,600,700,800,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4986,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1f5a908eb8ff05f90d7b1776c7e009da","sha1":"2f625a075ee6174ae5f48cacb8190b0beb1125e5","sha256":"6112cc6cfad9cdd0314fdd8f1181c3eb937514ceb48a15e72a67de3c52d5a59b","sha512":"d7095e2483c8145ddd9e41a567ee60fd4be111c4b4fb84ec8037910663eba201ef0deae83bb13ac7936055037ac07120e32bbeea2d50af5b0723b7398b830431","ssdeep":"96:mOEaYJc+uaOEa9NTOXaYJc+uaOXa9NTOxMaYJc+uaOxMa9NTOpaYJc+uaOpa9NTQ:xcMzcT2cWVc1Qcw3cX8","tlshash":"00a1eec2082ba100db931dc126de7e33ef1e225168448838affe18d8bc9ad264356b1d","first_seen":"2025-09-10T23:55:05.645403Z","last_seen":"2026-07-27T12:26:01.009841Z","times_seen":1093,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.typedream.com/cdn-cgi/image/width=750,format=auto,fit=scale-down,quality=100/https://api.typedream.com/v0/document/public/aef74bf0-9ef8-4e10-9b33-7c78d546f7fe/2yx8yPhtpzt7fCzaaxXnQZSZ2QG_uphold_image.png","fqdn":"image.typedream.com","domain":"typedream.com","tld":"com"},"ip":{"addr":"104.18.15.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Apr 2026 02:14:48 GMT","end":"Thu, 16 Jul 2026 03:14:43 GMT"},"fingerprint":{"sha1":"D9:50:D8:55:85:1F:96:77:8C:44:04:22:F4:6A:3A:98:7A:A4:1F:AF","sha256":"39:CD:94:F4:63:76:73:81:84:B2:43:2C:65:29:EB:35:50:A2:86:46:A5:59:82:75:36:8F:A9:33:70:D7:17:5B"}}},"request":{"raw":"GET /cdn-cgi/image/width=750,format=auto,fit=scale-down,quality=100/https://api.typedream.com/v0/document/public/aef74bf0-9ef8-4e10-9b33-7c78d546f7fe/2yx8yPhtpzt7fCzaaxXnQZSZ2QG_uphold_image.png HTTP/1.1\r\nHost: image.typedream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncontent-type: image/avif\r\ncontent-length: 153686\r\ncf-ray: 9f96ebb9ea0856ca-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1863\r\ncache-control: max-age=691200\r\netag: \"cf8ijqCpYop0BMRLhOCSJkRaDktLT1jwBrkTS34BwVDQ:b0de570d74e4b47787d83354a729231d\"\r\nlast-modified: Tue, 24 Jun 2025 11:38:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nvary: Accept\r\ncf-resized: internal=ok/h q=0 n=30+63 c=0+0 v=2026.4.7 l=153686 f=false wv=2026.4.0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153686,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"df92e613c1ed673359267ade5261f643","sha1":"ebedca36a96daa1a12534b177857fe28cb55f28c","sha256":"759a631d803b67cced16dbba2d5a04a4a137be0b8d0341492f5b15341ed98a6d","sha512":"4957ea4f0c7f329bb1716dc81fa0e84cfe1b3d8cbd596dfa92e1c0583fc03ea52d7547e4994daf3c8baad4fde157be9717613e1a6b037196e7aa250736836428","ssdeep":"3072:i1YE2Gj5i2SHXPk7RXqDn08Ctms2u95/Nr8s1j/Lz9/X1Sn1GMcMLTL9i:jGjI24XAqDn08Cl2iX8s1j/6n1GMcIi","tlshash":"89e322e764bc2bd1ceed963389489f79ee0641bd2388cb234b5c6808b1ca5d354fd925","first_seen":"2026-04-09T14:50:21.665805Z","last_seen":"2026-05-10T06:35:24.049993Z","times_seen":6,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.typedream.com/cdn-cgi/image/width=144,height=144,quality=100,fit=crop/https://api.typedream.com/v0/document/public/aef74bf0-9ef8-4e10-9b33-7c78d546f7fe/2yx8oZ1YFEtBwVNYi9XImA2hQMr_uphold_.jpg","fqdn":"image.typedream.com","domain":"typedream.com","tld":"com"},"ip":{"addr":"104.18.15.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:56.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Apr 2026 02:14:48 GMT","end":"Thu, 16 Jul 2026 03:14:43 GMT"},"fingerprint":{"sha1":"D9:50:D8:55:85:1F:96:77:8C:44:04:22:F4:6A:3A:98:7A:A4:1F:AF","sha256":"39:CD:94:F4:63:76:73:81:84:B2:43:2C:65:29:EB:35:50:A2:86:46:A5:59:82:75:36:8F:A9:33:70:D7:17:5B"}}},"request":{"raw":"GET /cdn-cgi/image/width=144,height=144,quality=100,fit=crop/https://api.typedream.com/v0/document/public/aef74bf0-9ef8-4e10-9b33-7c78d546f7fe/2yx8oZ1YFEtBwVNYi9XImA2hQMr_uphold_.jpg HTTP/1.1\r\nHost: image.typedream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 10 May 2026 06:34:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 891\r\ncf-ray: 9f96ebc4a8f7a0f0-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=691200\r\netag: \"cfABqmkSQnfvdyjBOsYzM7CW65XST-thVkRNs3BmgsDQ:5fd672e8b42e8a572cc05bc7c7b0b442\"\r\nlast-modified: Tue, 24 Jun 2025 11:37:19 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nvary: Accept\r\nx-content-type-options: nosniff\r\ncf-resized: internal=ok/h q=0 n=532+0 c=0+0 v=2026.4.7 l=891 f=false c2=0 wv=2026.4.0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\npriority: u=4,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":891,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 32x32, components 3","md5":"5fd672e8b42e8a572cc05bc7c7b0b442","sha1":"0606c55781a153b6fd9a40009cd47e6487543014","sha256":"d1b575b4c9f4a8de2c06904d44d6e0b300babf9ee6c355c26d3a472de1ae4a7b","sha512":"598b831868b7266bf2107130d5a03222ec142b59432186cbe835c8815f187ba7ffcaaaf57b37cde5b87a629aa2bea25cb242aa4b5d5cadaeb6c616b8c694a45d","ssdeep":"","tlshash":"4e11861a7a039370e823f1bf5e2651a3f3dfc95178a0330e2d7580b2c2604c9e48c64c","first_seen":"2025-12-06T04:21:03.383326Z","last_seen":"2026-06-19T02:27:13.399677Z","times_seen":11,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/9236-19170b52f82f2dfd.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:53.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 05:39:11 GMT","end":"Sun, 28 Jun 2026 06:37:32 GMT"},"fingerprint":{"sha1":"FE:4E:BC:0A:08:3C:EC:A1:DF:19:9F:03:B4:53:3B:21:5D:77:23:00","sha256":"74:FB:9C:5B:AD:5C:20:A2:1D:22:F5:8C:48:02:48:5D:FF:B6:F6:E1:C1:25:9B:01:9A:AB:FD:AA:E9:FC:90:1C"}}},"request":{"raw":"GET /_next/static/chunks/9236-19170b52f82f2dfd.js HTTP/1.1\r\nHost: sso--en-uphold-help.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-td-version: 0.116.0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Jun 2024 04:00:17 GMT\r\netag: W/\"14c60-18febb45c68\"\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sun, 10 May 2026 06:34:53 GMT\r\nserver: cloudflare\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0%2BesmM4nG7%2FEHqkqeDYXEGCRUQFYKalw0IbhR%2Fk36s8p3Dw8K9LETIqQYtDlO0dLhM%2BMyAGRrUjm%2Bkj%2F5UkgsZzsBc%2BRs5Xs45Wi2AbjNMXRjbancA6iOh5EvNGbXpiexjs4HScQsI6wO9cTXmAiGamfuCM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96ebb24f45b4f4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85088,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (35458)","md5":"87c5a0693cdfb54e4e115f1e5c99affa","sha1":"49da349e632e669fd2414f83eec7cef3e2b4fe53","sha256":"e10c4f44750138fc8e842389996b44c1ba994209064a84edaa85b7f46f003656","sha512":"e63253b3de49442b09e0d56f3f7edd04b96647f007eeaa2fde4fdaccc9f2d64a950321e03e4b9d630ed53d604537b737aa309daf3c6d454917f6433dc8f23072","ssdeep":"1536:MT7y0v91ppoCygBIllSb5KIoPsFWeUaeHV1j8R4peFdZtFuU1vpL95ZzblXi:MT7tv91ppoZ0reHV1j8R4AFdZtFtJDbg","tlshash":"8883198a71d1f0a303d761e540af180ff27a192e681c94a8f7f0d8d5a8b964d9363f6d","first_seen":"2024-06-18T13:53:24Z","last_seen":"2026-07-27T12:26:00.977015Z","times_seen":1873,"resource_available":true,"data":null}},"time_used":701,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":680,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-10","alert":"Phishing Block","trigger":"sso--en-uphold-help.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Poppins:100,100italic,200,200italic,300,300italic,regular,italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Poppins:100,100italic,200,200italic,300,300italic,regular,italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21659,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"17ded04af7b0636d4f8c934291f09ac8","sha1":"d7766b8a83cf1d92c52f7a94654999e4b033365e","sha256":"54985fb48cc0470e63eaaf30034b348ed6bd73cac3f6a759bc1a1c19387af7e7","sha512":"ce25e5ca2afca5d262b17c8d5c5667cccaebce41eacc6afb16f5cd89a838bfd3192564f9a28b450646f2a2fd76414c462f095065c3a45ca72ce31df9c257748d","ssdeep":"384:H3w3s3VR9xqWSUq+DnLami0A0BNBOi/mkX:XEA3mkX","tlshash":"5fa27ad1087be114ab871cc122cf6d36ee0ea254b850e9786bfd1cd8ad97c654371b2d","first_seen":"2025-09-17T03:38:53.893526Z","last_seen":"2026-07-28T02:25:57.695756Z","times_seen":48780,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":169,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Questrial:regular\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Questrial:regular\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a980962c3c92098504d247c20a77ed00","sha1":"a8f680036dedec4d5a519a9c451fd98a7687c0a4","sha256":"87e2a61522f33564a3e68d11cd8345cc2215fd8622bd2a25467e4b8798b629eb","sha512":"60f513ae31ba95f9faca6d223e432ce3570bb2ad6065202c2f6f87a013851f79daeaf1ae47d87ee591734384b1cad66011a64891f9334c67485fd613f3189a31","ssdeep":"","tlshash":"d121ce920466d500da830cc523de7f32ae8e6152b454d43dbffe1888dceae255375b0d","first_seen":"2025-09-12T03:46:25.586758Z","last_seen":"2026-07-27T12:26:00.994408Z","times_seen":1703,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Playfair%20Display:regular,500,600,700,800,900,italic,500italic,600italic,700italic,800italic,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Playfair%20Display:regular,500,600,700,800,900,italic,500italic,600italic,700italic,800italic,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19734,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1eb9240d7f74f3827dcce4a328d39e22","sha1":"2e570a706fd48c9c68f62a3a560ed01015c26193","sha256":"f36247c80cd0de94f14a7484ed408a9b2fcb8c6b7e524d286d18745b89f8ebda","sha512":"2ea4c89d649185d0ffc91d36b1d259b1f28e102712268ed473bf6f769b8a522643d500e6c23cd5b7d4cc721e2f4f9f29ce67974b3f28a4d56017c2185105f60b","ssdeep":"384:JJq2SMq2qq2+q2cJP2SMP2qP2+P2cJ02SM02q02+02cJp2SMp2qp2+p2cJ+2SM+8:2XaKHS/vMRkUBcZJGbueLWTDJaOw/0vH","tlshash":"7392cea20567a2109a474cc227cfbf269d6e71607081977caffe1dcc6c9fd269264b0d","first_seen":"2025-09-12T09:49:51.475296Z","last_seen":"2026-07-27T23:14:48.182336Z","times_seen":3146,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/webpack-0ec95126fdf2b774.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:53.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 05:39:11 GMT","end":"Sun, 28 Jun 2026 06:37:32 GMT"},"fingerprint":{"sha1":"FE:4E:BC:0A:08:3C:EC:A1:DF:19:9F:03:B4:53:3B:21:5D:77:23:00","sha256":"74:FB:9C:5B:AD:5C:20:A2:1D:22:F5:8C:48:02:48:5D:FF:B6:F6:E1:C1:25:9B:01:9A:AB:FD:AA:E9:FC:90:1C"}}},"request":{"raw":"GET /_next/static/chunks/webpack-0ec95126fdf2b774.js HTTP/1.1\r\nHost: sso--en-uphold-help.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-td-version: 0.116.0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Jun 2024 04:00:17 GMT\r\netag: W/\"2120-18febb45c68\"\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sun, 10 May 2026 06:34:53 GMT\r\nserver: cloudflare\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qjEuPtWSlW%2BFSj2t3CtLA1luK1R7dbVx2zYNo4hUgoogN%2FctHvWv1cm2UHPjz6Soge%2B9EjqyuPGplyC%2BYCOWADg4fBo05AA7NDzrmf5XLYcDz4fSI2qokv%2BBUpnScwI5u5hXg5DG7fbUhy7TNtgO%2BGE1m8s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96ebb22f3cb4f4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8480,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8480), with no line terminators","md5":"eb5ee0aa2ad883aa08fa2be28398421f","sha1":"60b76362366bdd68ba94fae9a378123f5f2f5156","sha256":"562846f03fffa8619f79c3b2656fda2dc98019c62fd0dfc9ab3125af1a0124ab","sha512":"d2722f7f45be33f7b7f29b3e2c0481d6a1a1792db2834e328335cd6e6e8aeb0246269fe0a3d69621cdb08375c87a23110201da6070f375191a219c9da6e13ad7","ssdeep":"192:lU6PAa9NRRQdYpqpmOZ0ys7E7FIG2ZiaDxfM5XzP5e:lU6J1Rq1zZ0hE7FWDJM5XzP8","tlshash":"ba0274c93794f96736e268d0c42b7235b11fc433781b6890fa25ecd8a8e4959833aa75","first_seen":"2024-06-18T13:53:23Z","last_seen":"2026-07-27T12:26:00.937044Z","times_seen":2235,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-10","alert":"Phishing Block","trigger":"sso--en-uphold-help.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Space%20Mono:regular,italic,700,700italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Space%20Mono:regular,italic,700,700italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5072,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e8cb8d519c83bd8c0e1b1d864ff47727","sha1":"c8d6f63ca9cf6acbfe02dbb0d6ee245e56590ccd","sha256":"f269daa49062089bfb0d7cd26aa1c8b78bbf005b966fde90b10a0c649a8b8929","sha512":"2695df96f727b60611bce59ec3c003ca1b754a188095e5d82c1865ff21aac89d8fe7f957cc24a3b3210ec9b2dfb073b98b731b0dfbb161ba18472966f23ca25d","ssdeep":"96:cCYgEaQYgEaqJc+uOYgEafkNDCYgpaPYgpaDJc+uOYgpadNDCOEalOEatJc+uOOc:cXOxOCAOfcXrArXArLV6FY7sbBxx","tlshash":"f9a11292003f9100da570cc177cf7e36ed9eb158b081d4396ffe18a9ae9ac226324b1d","first_seen":"2025-06-25T23:33:44.021866Z","last_seen":"2026-07-27T12:26:00.962664Z","times_seen":2039,"resource_available":false,"data":null}},"time_used":1184,"timings":{"blocked":552,"dns":3,"connect":25,"send":0,"wait":31,"receive":0,"ssl":569},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Inter%20Tight:100,200,300,regular,500,600,700,800,900,100italic,200italic,300italic,italic,500italic,600italic,700italic,800italic,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Inter%20Tight:100,200,300,regular,500,600,700,800,900,100italic,200italic,300italic,italic,500italic,600italic,700italic,800italic,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44739,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"01fa9ec0682b8df448e71242eda385b7","sha1":"30feb21b31f894888fcaef55b8946af8a3ca4266","sha256":"dfb5a2f7231b4b73b091107e814ccba822ae96e32eab0e77748dac1323d70a12","sha512":"b19a47a1a4da9a13ef393a489efd1464392da05f831f66178de70f1b18aa53f26b7ae92b787a2c27d915c6206c64b06a65d573e4c7d7f8c7f2fe6f38cd1c2047","ssdeep":"384:r3Cb3G3u36A3P3L343bXrtAs8ZIb0owAxFqlbdlrAu27WbKaWAT3E7brHZAQ4VcR:rc2eNfLtNLSWiD7","tlshash":"c613bda5001b99209b871dd363df7e23ae8e61687081c6795bfd08dcacdad27027cb4d","first_seen":"2025-09-17T06:31:13.18375Z","last_seen":"2026-07-27T12:26:00.953761Z","times_seen":1365,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":171,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=AR%20One%20Sans:regular,500,600,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=AR%20One%20Sans:regular,500,600,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5352,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7bc9b157fd7730e94326c605c764fa24","sha1":"e32539211ebea9cfce1cfb5cec9aa986781460a5","sha256":"41aeb8e6a741a2ad4ceb3eeb647f4140ef214b31d92a6c7c0a475968757888e6","sha512":"f960df7438e03cc3c2b54b07839b773dbbc3ecfb6703e1ec4636bff9bde9ee8064fc24f6f467678cb3fee6634a01e59ca4030eb8ba01f59df6b8a6d697f52ae1","ssdeep":"96:cbOEarzkOEaErJc+unOEaBONDbOXarzkOXaErJc+unOXaBONDbOxMarzkOxMaErn:c8rzLEvjBaDrzkEvcBaGrztEvFBalrz4","tlshash":"75b1cb80142aa6149e430dc622cd7d369edfa0606454913a6ffd0c88fd9bc6d2371b5e","first_seen":"2025-09-17T18:45:20.088541Z","last_seen":"2026-07-27T12:26:00.938737Z","times_seen":826,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":174,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Noto%20Serif%20SC:200,300,regular,500,600,700,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Noto%20Serif%20SC:200,300,regular,500,600,700,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":789082,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (934)","md5":"cb0bb5320a90f94f3ee4395f2bc87d1b","sha1":"6608d83a7ff49c1b5787f29683bf7a8a1b068e9d","sha256":"cc50042a6b69931f3fb64d2fa320bd23e274f5416ba8331c5941af675a9d094b","sha512":"c546432c15ec5dc6f268dc534728d76da7c87c822d5cc36434fa02ad5e56a33b6f84293d90b0924797569365ac2a2e0ddaa70cbb88886d0e972246909ff7d6b1","ssdeep":"6144:HnJ8C0IYBDAtuLDbdsoYOeprwTep5PhsWU08pbYh+n5RDI3uVd:HINW70bH","tlshash":"7ef40fa1460785dffda72ca391ded424bea964bcf881883c52f549d36c0a14ed1cbb8d","first_seen":"2026-01-10T20:35:18.78991Z","last_seen":"2026-07-27T00:16:08.124007Z","times_seen":217,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":166,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Cinzel%20Decorative:regular,700,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Cinzel%20Decorative:regular,700,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2725,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e80a61b1f8b8d76ac15b64b98d6f719f","sha1":"b6a4ca95c9c4f13e90af68a6f7e82c2a4dbabeb1","sha256":"89a9aefa37776b64e98febca4278afdd3013314e6f8e42e0ab19d0af7531e300","sha512":"724d1e6d3e2d90666a4113369746e7bc28868abb8a5fc2d81c77b36131fbd11af88b8fa5d3a2e2d6db2d553a07658eaab1570e5d69b71231af819e94b6157c08","ssdeep":"","tlshash":"d051ddc1056fe804ea970cc012e9be32ef6e61a9240589356aff14c8ec5fc65a35a71e","first_seen":"2025-09-09T20:49:46.282795Z","last_seen":"2026-07-26T23:41:56.738056Z","times_seen":475,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-10T06:34:52.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 05:39:11 GMT","end":"Sun, 28 Jun 2026 06:37:32 GMT"},"fingerprint":{"sha1":"FE:4E:BC:0A:08:3C:EC:A1:DF:19:9F:03:B4:53:3B:21:5D:77:23:00","sha256":"74:FB:9C:5B:AD:5C:20:A2:1D:22:F5:8C:48:02:48:5D:FF:B6:F6:E1:C1:25:9B:01:9A:AB:FD:AA:E9:FC:90:1C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sso--en-uphold-help.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 10 May 2026 06:34:52 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-td-version: 0.116.0\r\nx-middleware-rewrite: /sso--en-uphold-help\r\nx-nextjs-cache: STALE\r\nx-powered-by: Next.js\r\ncache-control: s-maxage=120, stale-while-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7qvo6W1qYxa2%2BVf1hnTkE2oaJ4jcn5SzcvtA8Bp0WxvP4Dom5C5NOWn7o5abCc1YJ3cN7etmr2pebyZ%2BfvK64dYTQdrWs1S82OrRsNMU%2FyjupUwlvKfLhK644Q3DHu%2F%2BUN%2B5eneFvxkn8%2Bji%2FwM%2FNPK%2BwFA%3D\"}]}\r\nserver: cloudflare\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9f96ebae98bc4c11-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1626067,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"8bd73be742056db71e6dc4bd7c812aa7","sha1":"14d42f0feed7927e2e7780c091db5e05b8ec381a","sha256":"90480616c57bb95e44a52f8c37a070fb084e6a4dbd2cbf33bee5a2db20ac13f8","sha512":"643465f6b28ff24f934f0a6fd61ff5523d4ae375ec06b839e941a93c9450188e6adbbf2cf8df509dea7e17bf406bcb87b4fa943fc3d64ffedf74618da81e7fb6","ssdeep":"3072:hGoz6am6nhI+uIpzIygcrVdJ2Tpe2ZBRhEdZ7Mb7gfzrY5HBu4iGQpwRC/Rv:wo++I4+rcvJ8hZC/86XYyVzcC5v","tlshash":"4d25632137079900d2fb8ea320cf3e057410652d7b76416fda5a0ee9d6ed1abc39978b","first_seen":"2026-05-10T06:35:24.061797Z","last_seen":"2026-05-10T06:35:24.061797Z","times_seen":1,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":31,"dns":1,"connect":2,"send":0,"wait":243,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-10","alert":"Phishing Block","trigger":"sso--en-uphold-help.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/framework-0a892af99d0986b4.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:53.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 05:39:11 GMT","end":"Sun, 28 Jun 2026 06:37:32 GMT"},"fingerprint":{"sha1":"FE:4E:BC:0A:08:3C:EC:A1:DF:19:9F:03:B4:53:3B:21:5D:77:23:00","sha256":"74:FB:9C:5B:AD:5C:20:A2:1D:22:F5:8C:48:02:48:5D:FF:B6:F6:E1:C1:25:9B:01:9A:AB:FD:AA:E9:FC:90:1C"}}},"request":{"raw":"GET /_next/static/chunks/framework-0a892af99d0986b4.js HTTP/1.1\r\nHost: sso--en-uphold-help.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-td-version: 0.116.0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Jun 2024 04:00:17 GMT\r\netag: W/\"22709-18febb45c68\"\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sun, 10 May 2026 06:34:53 GMT\r\nserver: cloudflare\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sSE89qOzh3bYOgbn8bhxjIng6d%2BHRhIYeYFteMtouO2If3GjSHFr6rEW2K9o8EU7fZHm9Xrw%2BYt9B1PT17TFpQEBiFSl6HI0H2qYbRr%2BnyaQWnQBrIqGeklaIKBqzr1P2wv%2Blswbq3b%2BbEoHzJIMutPCVeM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96ebb22f3db4f4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141065,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65200)","md5":"37379900a5dca2001aceef7668b0b1df","sha1":"b81b417b168b072d26b3086302c5f5f7322933fb","sha256":"cecdbcd15f470ac05366f8b4d03e8b6a0da3d9d655c96080eaa3393611e4a046","sha512":"563d4d4a6338be8ed9939a8a450fbef7e6b6cedc33abf4084b6ed850a8de5ba5d35cc55abe83142187602f64f13fd483afc85ba250b8ae6a9eb785e9e14b9964","ssdeep":"1536:MkhivZ276oX6KRWhWL/hP/Og8qxDrKDx4pAOloPzZs8oEQbN:MkhiB27buWL/VOgd6x4pbos8oEQ","tlshash":"dcd3e7e87992f6629fb341e7009f1857733d251b680c4960a250fda939bc42ea17bfcd","first_seen":"2023-10-17T08:52:11Z","last_seen":"2026-07-27T12:26:00.964806Z","times_seen":1904,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-10","alert":"Phishing Block","trigger":"sso--en-uphold-help.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=DM%20Sans:100,200,300,regular,500,600,700,800,900,100italic,200italic,300italic,italic,500italic,600italic,700italic,800italic,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=DM%20Sans:100,200,300,regular,500,600,700,800,900,100italic,200italic,300italic,italic,500italic,600italic,700italic,800italic,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16011,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b04faee409fd041155c812e09ce605a1","sha1":"a22e984531db308203778012be91dc46f0b71290","sha256":"f9baa8a687c60ed56f99deb613244739ae50f55d523a2ee32da69212eaade02b","sha512":"98a52da0282a48d8df0ea88719b2f3bf4f6c3804119e506b35e77467162d244d3cc09928a444938c854d8def9a244da4cc7acbc5b28adaf9ea3f12bfced0c0a7","ssdeep":"192:M3pQV3pkAQVAknQVnkOQVOkNQVNkEQVEkrQVrkCQVCkxQVxhpwYp+KwR+5wi+Ewd:M3i3SDTQkxtOmP3849RK7vMkGkis+cy3","tlshash":"4572df81042ba154eb972dc426de7d32ef1fa1906454a874affe1888fc9ac2e5371b4c","first_seen":"2025-09-12T09:49:51.439096Z","last_seen":"2026-07-27T19:40:54.742625Z","times_seen":2199,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":86,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Jost:100,200,300,regular,500,600,700,800,900,100italic,200italic,300italic,italic,500italic,600italic,700italic,800italic,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Jost:100,200,300,regular,500,600,700,800,900,100italic,200italic,300italic,italic,500italic,600italic,700italic,800italic,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19872,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"417a725d05247c81bfb274de199a1d74","sha1":"8fd6e617a5808e8db9cfd314fe02f707ac67304c","sha256":"94b3021f71b626720609128909c8ade32a8271f2f30473ea5ab62bf6716251ef","sha512":"d5675e5a6bf5044691b246a3f396e5d82ff2ad34eee49cc68015bb85cd8a3bf1fca9dabb268bea1bb2f77be8c341ced5feb9cfac7a58e69263e842c6be0ac940","ssdeep":"384:JX3b3l3pXI0AXlfnXCm+XnJtXE4EXRT7XuqCXjNRu2mc+/ApqDMb:d7Rs2mc","tlshash":"9692ac91042be500eb931dc277cfbe379e0fa1556844da798efd18d8ec9adaa426070d","first_seen":"2025-09-11T00:45:43.959144Z","last_seen":"2026-07-27T20:02:18.834438Z","times_seen":2442,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Manrope:200,300,regular,500,600,700,800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Manrope:200,300,regular,500,600,700,800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15008,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0ad4e9cc8948899d25eb47a31cace209","sha1":"c8a2ded69bfa8d2f4293fd3324009b36b4050256","sha256":"73ef72e9f525460bf321f3797f3c6d37aa65ea44ff78062c406fca0d98a55fc8","sha512":"1467da169a56c9e04d571063cfb541534f96920a0645641209b6e0dfcb36ce1313811515479a11731e59d2344622478ed1602dadf4531184524e611cddc867d7","ssdeep":"192:BJRKV3II8XDJi5V3PP8wiJDEV3WW89RJ8rV3118+4JlOV3MM8b/JGNV3TT80uJH0:bMEmkwU+ME02EQJ","tlshash":"7962a9900027e804eb470cd677ce7e39ad4e61567491c5ba5bfe1cd8adebd222320b5e","first_seen":"2025-09-05T04:53:42.941084Z","last_seen":"2026-07-27T16:53:23.96951Z","times_seen":3761,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.typedream.com/cdn-cgi/image/width=144,height=144,quality=100,fit=crop/https://api.typedream.com/v0/document/public/aef74bf0-9ef8-4e10-9b33-7c78d546f7fe/2yx8oZ1YFEtBwVNYi9XImA2hQMr_uphold_.jpg","fqdn":"image.typedream.com","domain":"typedream.com","tld":"com"},"ip":{"addr":"104.18.15.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:56.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Apr 2026 02:14:48 GMT","end":"Thu, 16 Jul 2026 03:14:43 GMT"},"fingerprint":{"sha1":"D9:50:D8:55:85:1F:96:77:8C:44:04:22:F4:6A:3A:98:7A:A4:1F:AF","sha256":"39:CD:94:F4:63:76:73:81:84:B2:43:2C:65:29:EB:35:50:A2:86:46:A5:59:82:75:36:8F:A9:33:70:D7:17:5B"}}},"request":{"raw":"GET /cdn-cgi/image/width=144,height=144,quality=100,fit=crop/https://api.typedream.com/v0/document/public/aef74bf0-9ef8-4e10-9b33-7c78d546f7fe/2yx8oZ1YFEtBwVNYi9XImA2hQMr_uphold_.jpg HTTP/1.1\r\nHost: image.typedream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 10 May 2026 06:34:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 891\r\ncf-ray: 9f96ebc4a8fca0f0-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: max-age=691200\r\netag: \"cfABqmkSQnfvdyjBOsYzM7CW65XST-thVkRNs3BmgsDQ:5fd672e8b42e8a572cc05bc7c7b0b442\"\r\nlast-modified: Tue, 24 Jun 2025 11:37:19 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nvary: Accept\r\nx-content-type-options: nosniff\r\ncf-resized: internal=ok/h q=0 n=532+0 c=0+0 v=2026.4.7 l=891 f=false c2=0 wv=2026.4.0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\npriority: u=4,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":891,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 32x32, components 3","md5":"5fd672e8b42e8a572cc05bc7c7b0b442","sha1":"0606c55781a153b6fd9a40009cd47e6487543014","sha256":"d1b575b4c9f4a8de2c06904d44d6e0b300babf9ee6c355c26d3a472de1ae4a7b","sha512":"598b831868b7266bf2107130d5a03222ec142b59432186cbe835c8815f187ba7ffcaaaf57b37cde5b87a629aa2bea25cb242aa4b5d5cadaeb6c616b8c694a45d","ssdeep":"","tlshash":"4e11861a7a039370e823f1bf5e2651a3f3dfc95178a0330e2d7580b2c2604c9e48c64c","first_seen":"2025-12-06T04:21:03.383326Z","last_seen":"2026-06-19T02:27:13.399677Z","times_seen":11,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Glass%20Antiqua:regular\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Glass%20Antiqua:regular\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":876,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ec911690380254328f0c5ee9d4c08f8b","sha1":"4d72c25c5216889007fe2bbbd904d121d2338dcc","sha256":"5778713c85b1857311536ff6b3f9010c5e299ee9ed9ce6c4aa082a7497623bef","sha512":"ad1ad7b1e8d0e69899e135d9640f5664fb7449f41d747701a3a3374d2ab908a40073d78faec12c40dfbab7ef600883784d9e912cb3cbb8dcaf4223a0b63441b9","ssdeep":"","tlshash":"fd11c091047ea50497431dc5268d7f37af1e21409400d9389afe14887cabc659391b1d","first_seen":"2025-09-21T21:20:12.545476Z","last_seen":"2026-07-27T00:16:08.097136Z","times_seen":70,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Mada:200,300,regular,500,600,700,800,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Mada:200,300,regular,500,600,700,800,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13600,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"1d7edcb564e3481248c0cdefc7e6833f","sha1":"54ddf394cde480f7b738f211d496a038d5cab80b","sha256":"d0a60e8d7ea724b72d49df4903c6b2e99aa1246309907751e15ea96fec94d847","sha512":"281eb2e9266f22d3fe0b1f806fd2630522f9a13cab05c2e813e295e4d2a7437b3b87f11aa3b04e28fbd3dbeb2c86d97ada717b8bbe1e1f23d799649c66558498","ssdeep":"384:jil7yNilEpoilhMPilqjailf+Ril4lcilFYzile/K:K/SpsLel9","tlshash":"0a52c0f4081e5180bb871dc1638dbe23de0ea1a56084c96c9bfd178fac9bc56736574c","first_seen":"2025-09-30T18:35:12.971139Z","last_seen":"2026-05-10T06:35:24.066748Z","times_seen":8,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/css/596516fd51c0b901.css","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:53.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 05:39:11 GMT","end":"Sun, 28 Jun 2026 06:37:32 GMT"},"fingerprint":{"sha1":"FE:4E:BC:0A:08:3C:EC:A1:DF:19:9F:03:B4:53:3B:21:5D:77:23:00","sha256":"74:FB:9C:5B:AD:5C:20:A2:1D:22:F5:8C:48:02:48:5D:FF:B6:F6:E1:C1:25:9B:01:9A:AB:FD:AA:E9:FC:90:1C"}}},"request":{"raw":"GET /_next/static/css/596516fd51c0b901.css HTTP/1.1\r\nHost: sso--en-uphold-help.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-td-version: 0.116.0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Jun 2024 04:00:17 GMT\r\netag: W/\"59d-18febb45c68\"\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sun, 10 May 2026 06:34:53 GMT\r\nserver: cloudflare\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M26L2NpNHZMmg%2FJWjtZNswLU06qRapilQPbuFQ6WKJ069swseIxX3hUMaXT8MvcImkRKxMgCX%2FpV1hRM11EKThifim2cDMSKAUCbHhxs7LlkrtIZU%2B4%2BEfVXJ0t3tjbY4r5UXLBNSYG7%2Bo%2BNTOzYNUutXAU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96ebb21f33b4f4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1437,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1437), with no line terminators","md5":"ec5fadad76a05d45df7a7a396d27fee4","sha1":"1682233068ac60c2e273d578ec58ace509ddef92","sha256":"fe5675af2ec653e89cca1110ab50505b5a5799c5e79132217d5dc4808437124d","sha512":"57bae25464761abf3a0133f45c4a791c18709e328faa16de3d360c39856aae9feaec3727acae66603ac153224edc5a65f2abffa7c2c145cbedb8f81817fd10f7","ssdeep":"","tlshash":"f021f5137e1d0235e12bc9b8aa41aadd3111766b998fb65eec82f03ccd528611835f18","first_seen":"2023-10-22T06:28:42Z","last_seen":"2026-07-27T12:26:00.950476Z","times_seen":1865,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-10","alert":"Phishing Block","trigger":"sso--en-uphold-help.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/8070-b455d31b248b2b1a.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:53.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 05:39:11 GMT","end":"Sun, 28 Jun 2026 06:37:32 GMT"},"fingerprint":{"sha1":"FE:4E:BC:0A:08:3C:EC:A1:DF:19:9F:03:B4:53:3B:21:5D:77:23:00","sha256":"74:FB:9C:5B:AD:5C:20:A2:1D:22:F5:8C:48:02:48:5D:FF:B6:F6:E1:C1:25:9B:01:9A:AB:FD:AA:E9:FC:90:1C"}}},"request":{"raw":"GET /_next/static/chunks/8070-b455d31b248b2b1a.js HTTP/1.1\r\nHost: sso--en-uphold-help.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-td-version: 0.116.0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Jun 2024 04:00:17 GMT\r\netag: W/\"4026-18febb45c68\"\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sun, 10 May 2026 06:34:53 GMT\r\nserver: cloudflare\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LSvBcgHI9QBwe58z7zZM4MDHnZnGC59lldPmFoKjRj3i60CbgqIlPdkxf%2B3Q4kCh4zDlCsMxemcIE7g5iM2PCUudnA8qOoqkzPnCENz%2B7bUlaQj2vS%2B%2BzBj7GFyIBOBjyq8314djk%2FRHm6vuXZ2QOZMDflE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96ebb21f34b4f4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16422,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (16422), with no line terminators","md5":"509984b6dfe6f408454562cbc1c92763","sha1":"569dd93db827ab508adb1b731e684daefa9b17e6","sha256":"98971530458778abeb5749a04d3d3b833ae0df8e4b7375960b00b9e23af6a836","sha512":"5c765f54d6762e7d08eff3773bdbbff7a97ba7caceb43611f63d62e34bb65f8361551ae7cd9d624217e58bf284af685deed79c9bf443f01b6cfdcd79f736eeae","ssdeep":"384:trYebhuEXOoHQJmBSfmvTtSjfHjghVS6s+IgC0fQ1Pt3IhJDYiswMEG2T/sQwiJf:tlbZXOowABSfmvTojfHjghVS6s+IgC0/","tlshash":"d57293cdf5c6f03292277572803f100ff37e5996685c8480a362e4d2b97a99dc267fa9","first_seen":"2024-06-18T13:53:23Z","last_seen":"2026-07-27T12:26:00.983578Z","times_seen":1874,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-10","alert":"Phishing Block","trigger":"sso--en-uphold-help.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/pages/_app-33e558e3d4978b67.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:53.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 05:39:11 GMT","end":"Sun, 28 Jun 2026 06:37:32 GMT"},"fingerprint":{"sha1":"FE:4E:BC:0A:08:3C:EC:A1:DF:19:9F:03:B4:53:3B:21:5D:77:23:00","sha256":"74:FB:9C:5B:AD:5C:20:A2:1D:22:F5:8C:48:02:48:5D:FF:B6:F6:E1:C1:25:9B:01:9A:AB:FD:AA:E9:FC:90:1C"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-33e558e3d4978b67.js HTTP/1.1\r\nHost: sso--en-uphold-help.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-td-version: 0.116.0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Jun 2024 04:00:17 GMT\r\netag: W/\"711-18febb45c68\"\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sun, 10 May 2026 06:34:53 GMT\r\nserver: cloudflare\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PjlHZP6BJj5iCtdJ4uDOjr0bCBnAnBtZye27rOEEvKnvzGbweIdS%2BuRIs%2BRa5gezT62y2AHmqbi3i%2BsuLND7mHMDll3ZLD11EWV02f3q9YcLM7Ygm6Ct%2BN7ydw574pRKTrTAk1QpsMbJmo5Kh11hLYw0iGE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96ebb23f41b4f4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T03:22:25.989663Z","times_seen":17572886,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-10","alert":"Phishing Block","trigger":"sso--en-uphold-help.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Barrio:regular\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Barrio:regular\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":831,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"cef3ecf6bf65b9ebab72e41ecc98918c","sha1":"39955e82e409fd63d7c39cdf80c901c9fc247d03","sha256":"5252cbe64cb664ae2dc74eadf6b07980341a88704181515249d3fef3fa525828","sha512":"9ad52caaa427046d9a7af000e5a6c8dcdc2fcdf6d77a58106f7069f5f60b8158e941acdd2d6968400bd91c05ce626b403ae7dbab3aa59b26d0fee7ba627c2507","ssdeep":"","tlshash":"5401f1d2082be500db970cc126ce7e32ee1e61516884e975affe34c8bd66c564312b0e","first_seen":"2025-09-15T13:43:39.037888Z","last_seen":"2026-07-15T22:52:41.644908Z","times_seen":26,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Anonymous%20Pro:regular,italic,700,700italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Anonymous%20Pro:regular,italic,700,700italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6106,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"fb596bb1f341e8ea80e9618e1ed4da9f","sha1":"ff1e2fd3b008bc48bb0ef1ffc84dc7e588cb96fe","sha256":"0232b31a0635fa737174ff85bffa77116b31678e290832323392cbf31a28f1f6","sha512":"b868edeef3778e51b2f853223fc23f6b2995ad50fa6565fb966e7c728f9c76256e854e698af4558a54869656ef280d6903e8e4b89c3ee05aa4fd5fb4a08cf200","ssdeep":"96:JyYgEaEDNFZxYgEaED4cYgEaEDrJc+u/YgEaED4NMyYgpaE/FZxYgpaEDcYgpaEu:JnOCkOC4lOCvBOCVnrNrclrkBrAFOQzX","tlshash":"1ac1bcd1001e9544db53acc627df7e3bad0e9165a04189fa8bfe14d8bcdac2213a874c","first_seen":"2025-10-14T02:33:05.258744Z","last_seen":"2026-07-27T08:39:42.600632Z","times_seen":175,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Libre%20Caslon%20Text:regular,italic,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Libre%20Caslon%20Text:regular,italic,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2710,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b352f5d9256da2828552d9a08099e2cd","sha1":"cf4debf4b5c6a9bcd42a167211251a4d23776e21","sha256":"3a86a2ed5fc8048fc026644cf183077d6466a88cf887a1a38d3c24c58dc2ff42","sha512":"e4e10f60711273fec8b24f57aa8deb014397aa48e1a6557c8dc23f7aecf69b6c6e76dd2ac2ba72a9756b16963e2302a04dfbae576dd2a587703f8aa025f03f0d","ssdeep":"","tlshash":"9551dd92086fe600eb970dc262ce7d37ef0ea150b405e979aafd0998eddec558351b1c","first_seen":"2025-04-07T11:04:54.147923Z","last_seen":"2026-07-27T12:26:00.992268Z","times_seen":1917,"resource_available":false,"data":null}},"time_used":1232,"timings":{"blocked":592,"dns":2,"connect":23,"send":0,"wait":31,"receive":0,"ssl":577},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:100,200,300,regular,500,600,700,800,900,100italic,200italic,300italic,italic,500italic,600italic,700italic,800italic,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Montserrat:100,200,300,regular,500,600,700,800,900,100italic,200italic,300italic,italic,500italic,600italic,700italic,800italic,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34812,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"76e3e3043c43750b4048643e10e5a17b","sha1":"2dae7be8964bb1302e040a78d80621749d6053d8","sha256":"8657d26f0c60d5b2f909f2745b6a2d8df7efad9b3de73c0d33171c6214df8c05","sha512":"16dd77ebf3efd8897bd62ff43852e13251ea57f1661acd3a9650858986215f7a817ee902f5403b937a602154ee8203b85dd682c06629932fd18de0c44c2148ee","ssdeep":"384:A3Cw37F3Y3I3wHwcFFB5YwNFu+GNw+Fr/PWw/FkEUrwAFRd9cwxFqqKRwyF3rz6l:0Zds8FdCWQp","tlshash":"46f2af911057e500ea472cc523cf7e26de4e666674a4c5797ffd2ca8adeac221324b2c","first_seen":"2025-09-05T02:49:53.621529Z","last_seen":"2026-07-28T02:08:16.829616Z","times_seen":13497,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":140,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=ADLaM%20Display:regular\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=ADLaM%20Display:regular\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1231,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"33a12f8c03b8f0581c750108badf9f30","sha1":"7757be907c07cab4a52476a4d1dde1586c720f12","sha256":"df6b2f97381d9190767133407e51bc7061b200b46eadbbb11d7fc1c9e8bf574b","sha512":"8357d9115fc7fc2622ce7d82f6ee77e92dd7f94031eb8eca9921d59965a4dde1d227a9607e3a9bc9e0b70c989358c2591a7985b4d317d513c1742f833227481f","ssdeep":"","tlshash":"b721b691041b9400eb036dca63cebf27de1f50a17441f639aefa24dc9c9bc1553a2b4e","first_seen":"2025-04-11T10:54:24.733407Z","last_seen":"2026-07-27T12:26:00.941739Z","times_seen":1214,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":163,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Belleza:regular\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Belleza:regular\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":838,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7e5fe4a0887e5fca8baae10fbb4b6ff3","sha1":"6322bade6e6783668e050e0e11e9dfd8c5d76c08","sha256":"b69f20924b6e10f60f8fde1b007a4a685b8dcd590d95a9095fef8bff20fa9e6d","sha512":"f0d6b1858f91a65370fa099fe25f9ee86f7c9be699a510070b72db8c1d3c0aa3fd2c6332e57dd520fe1761df5f156b9ba871763274635de795e0fedb049577ed","ssdeep":"","tlshash":"d201f18208779a40eb870cc512ce7e36ff0e71516848e8b49ffd1898bc9bc56635170e","first_seen":"2025-09-05T06:16:07.9995Z","last_seen":"2026-07-27T12:26:01.049546Z","times_seen":491,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":138,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Abhaya%20Libre:regular,500,600,700,800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Abhaya%20Libre:regular,500,600,700,800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6003,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"32a71a5bd3f3cc88d48986338ff28578","sha1":"505330714929e408bca5e8243b48cc251c58b51f","sha256":"c5a74ef60d6e11646935f47f4fc2dfa31ffb6714e6b546a9a922a793f9fe318f","sha512":"123987a62e27fbe361407e85ed2aba013d46a56886d66f2f4dbbfb3b805a35bf552abf8b59d7f2eec1435bf55356eca00d00c6df224895a509c13b8d6e7fee35","ssdeep":"96:IkOEaCukOEaCKJc+uOkOEaCUNlkOXaqArkOXaqMStJc+uOkOXaqONlkOxMaq4rkk:ILCuLCijLC4kqArkqMSFjkqqtq4rtq/w","tlshash":"99c1f1d1846b9500bb931cc0a2cefe3aed0e71597840c8357bfa19c8acebc66636575d","first_seen":"2025-09-17T06:31:13.146101Z","last_seen":"2026-07-27T12:26:00.945505Z","times_seen":1013,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Aldrich:regular\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Aldrich:regular\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":404,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b6fbdb419aeeb73c07dbfea13b35373e","sha1":"5e1b299ce7f6aa367a55e50c733bcde327281752","sha256":"64cbc12203cc84fc40e52091d3f407c3b4c098f9bc6134757a84f0a54846afdd","sha512":"b7cc6a8050559ad4b27a599d408f645bc4497618b34c7bce64842882a940471c234a14e8e2bd800d6138ecc34a7f8ad536ce4f5f84bb74d75618a42db532cb35","ssdeep":"","tlshash":"31e06181082ba600e7931cc512ce7a31de0fa05074459924dbfb18d4fd97d565356b1c","first_seen":"2025-06-06T10:59:08.928482Z","last_seen":"2026-07-27T12:26:01.040906Z","times_seen":502,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Damion:regular\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Damion:regular\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":831,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e2742cd1adaf3a3848f129c796f2e5a9","sha1":"364f46054455b36cb90271ae326422fe9229b45f","sha256":"47a591813dce9e42584c689761be4ddfaa21b221fdbf1e918d20d4481c5d18db","sha512":"7dcd3693cff2f991db5279010302f066b6e11f783fa7f461512784221439880bf8c8f44889cf9e890f7e36de56ce16cf45bc5791ebe28495fdbbf8059ef19aca","ssdeep":"","tlshash":"9601ab82086ba510eb830cc112cdbd32ee2e2250644599257ffe18d8bc9ad569356b0d","first_seen":"2025-04-08T12:11:26.621835Z","last_seen":"2026-07-27T00:16:08.084044Z","times_seen":419,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/4455.84efc5b141b2eed6.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:53.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 05:39:11 GMT","end":"Sun, 28 Jun 2026 06:37:32 GMT"},"fingerprint":{"sha1":"FE:4E:BC:0A:08:3C:EC:A1:DF:19:9F:03:B4:53:3B:21:5D:77:23:00","sha256":"74:FB:9C:5B:AD:5C:20:A2:1D:22:F5:8C:48:02:48:5D:FF:B6:F6:E1:C1:25:9B:01:9A:AB:FD:AA:E9:FC:90:1C"}}},"request":{"raw":"GET /_next/static/chunks/4455.84efc5b141b2eed6.js HTTP/1.1\r\nHost: sso--en-uphold-help.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-td-version: 0.116.0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Jun 2024 04:00:17 GMT\r\netag: W/\"12f71-18febb45c68\"\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sun, 10 May 2026 06:34:53 GMT\r\nserver: cloudflare\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RVxFAg%2BWBHMLcNCdApr8muU7MSmFOtXPXQfJQEjX7sdtXn%2Fq%2FfyDhGwLC3e%2B1tOfn1fLfbsZM1ilc0FrTwa2UM%2BYTDKlTd9d%2BA4fOVIXYM0DaKrHIkr%2BJnh%2FpgpKqhk69VOMukdtTR94hxPOkEoccolK3Ek%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96ebb21f38b4f4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":77681,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8dd62f6031957d9f470f837eb8c8b86e","sha1":"276b2a20343d7744f23877f7ffb8f375c2908067","sha256":"6b551f0184e44f7d5a04c2c52f20e0bf1f8509a45b791c03a82118958b8e8bd1","sha512":"69f64a485cbdbb2024e30ccfba8f0d9e95726c5dbed3cba3403d9238d3eb3d15957b1716449224ad31216ec9c73c3b564de74c200701761dd3441b0b8b575c6c","ssdeep":"1536:uYjEp5J1uTu6WtWuBZp/HZDFXdI2/hIyXn7HMbPMbDITq0id/tbKRbG2Rd:mp5TolErxp6d","tlshash":"7c730ac971d2f0a5875f10ad402f100ef37f6ea9280d8450e776d9d178786a8a2a7fdd","first_seen":"2024-06-18T13:53:24Z","last_seen":"2026-07-27T12:26:01.043793Z","times_seen":1858,"resource_available":true,"data":null}},"time_used":692,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":682,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-10","alert":"Phishing Block","trigger":"sso--en-uphold-help.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/main-3ae0ab5644307684.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:53.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 05:39:11 GMT","end":"Sun, 28 Jun 2026 06:37:32 GMT"},"fingerprint":{"sha1":"FE:4E:BC:0A:08:3C:EC:A1:DF:19:9F:03:B4:53:3B:21:5D:77:23:00","sha256":"74:FB:9C:5B:AD:5C:20:A2:1D:22:F5:8C:48:02:48:5D:FF:B6:F6:E1:C1:25:9B:01:9A:AB:FD:AA:E9:FC:90:1C"}}},"request":{"raw":"GET /_next/static/chunks/main-3ae0ab5644307684.js HTTP/1.1\r\nHost: sso--en-uphold-help.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-td-version: 0.116.0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Jun 2024 04:00:17 GMT\r\netag: W/\"1c3d7-18febb45c68\"\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sun, 10 May 2026 06:34:53 GMT\r\nserver: cloudflare\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YYsF6vYFWaNOPHSJwYX6mt4FClv5wKHJepFcMSfaaLlqBaVScOyJTe8hN91%2FEuXnoIByg%2B3EaRj7IfH0SAhopPaGZOgX6LbfC2n1X9WegkzGfgDamcpdh47ThzB8fVc132sCjQoC3o4XOlpvTQFrpAO0y9E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96ebb22f3eb4f4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":115671,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cf280b45858b101d4eaabf622ec3b852","sha1":"aef300caec6a6277213d6ffa4256869466c3ef41","sha256":"c7b5dd94081b60844217464260c70ad0ced2313ed69e05493a94dfe3fa70c13a","sha512":"3947abf56fda7f7b4da4ca8c823af5e4e07d882a4b9eacd9b382828036b57edcbf0d7ef6534622075c7cd27bcb51eb4da3d21ef2789d9f9882fb996562413e79","ssdeep":"1536:CBzN4XklMObes5rLX/A6UB1/pPm4JV3Ih/u6Hzr133y2OOEw2encs36ePlFrNaN5:23e75rJeh/uyy2dDq87rNaNRb","tlshash":"55b31ab8b3e2f89206c64594443b0046f37e1d7e106eb485f3aadcd779a1d4d90b2fa9","first_seen":"2024-06-18T13:53:24Z","last_seen":"2026-07-27T12:26:01.051972Z","times_seen":1891,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-10","alert":"Phishing Block","trigger":"sso--en-uphold-help.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Bodoni%20Moda:regular,500,600,700,800,900,italic,500italic,600italic,700italic,800italic,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Bodoni%20Moda:regular,500,600,700,800,900,italic,500italic,600italic,700italic,800italic,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45948,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"b2efff9e8037b3e19ba47058299b26af","sha1":"936f577f30fd396543017d73116d92bb25556d35","sha256":"7d89aefe58301c62a93ff710bd17ceb7bcc92785cdf437fac85ecb54e71b0580","sha512":"51e663ca9321f24a16cba7fbc8ee3256fa6c64d57e8d65b34d3d1acaff3af75689c0473f91fa6e573261c4f1898ac66f12de33c117a30608187f9e5204b47a59","ssdeep":"384:uJicqYE8vCitqYE/k/iSqYEudIiDqYExadiwqYEwbmixqYET8DIHqY26DtHqY7A4:KBsIHTSSNNg0jyDd4wlLqun5L","tlshash":"542354a104575104979315e212ccae79ef0f8382b640913577fd8b87ffcece662a922e","first_seen":"2025-09-17T06:31:13.15529Z","last_seen":"2026-07-27T12:26:01.036984Z","times_seen":763,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":88,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/data/RmLvO3wx2Hiw9uk46mMkM/index.json?slugOrDomain=sso--en-uphold-help","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 05:39:11 GMT","end":"Sun, 28 Jun 2026 06:37:32 GMT"},"fingerprint":{"sha1":"FE:4E:BC:0A:08:3C:EC:A1:DF:19:9F:03:B4:53:3B:21:5D:77:23:00","sha256":"74:FB:9C:5B:AD:5C:20:A2:1D:22:F5:8C:48:02:48:5D:FF:B6:F6:E1:C1:25:9B:01:9A:AB:FD:AA:E9:FC:90:1C"}}},"request":{"raw":"HEAD /_next/data/RmLvO3wx2Hiw9uk46mMkM/index.json?slugOrDomain=sso--en-uphold-help HTTP/1.1\r\nHost: sso--en-uphold-help.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nx-nextjs-data: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-nextjs-rewrite: /sso--en-uphold-help?slugOrDomain=sso--en-uphold-help\r\nx-td-version: 0.116.0\r\nx-middleware-rewrite: /sso--en-uphold-help?slugOrDomain=sso--en-uphold-help\r\nx-nextjs-matched-path: /[slugOrDomain]/[[...path]]\r\nx-nextjs-cache: HIT\r\ncache-control: s-maxage=120, stale-while-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nx-cloud-trace-context: 921544141858c46cc8e2c89577ffeb20\r\npriority: u=4,i=?0\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\nserver: cloudflare\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\netag: W/\"x1wka1xf3w10tg\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BFa4KrOG2QHSzeKBdi2%2Blljbd%2Fr4%2Fn04zCZ4j2w90aoGVCmSpGg1Gy87rAetGQMpCq%2FEvZ%2BWhNTERdjkAMe6%2BP7vKgwh6xR2%2FuQBfVCPNTBIqCNcbSYbVTHQZ2fLSWDJno5otYu7782bBZJDmNh9Eg%2Fqr00%3D\"}]}\r\ncf-ray: 9f96ebb88812b4f4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T03:22:25.989663Z","times_seen":17572886,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-10","alert":"Phishing Block","trigger":"sso--en-uphold-help.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/RmLvO3wx2Hiw9uk46mMkM/_ssgManifest.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:53.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 05:39:11 GMT","end":"Sun, 28 Jun 2026 06:37:32 GMT"},"fingerprint":{"sha1":"FE:4E:BC:0A:08:3C:EC:A1:DF:19:9F:03:B4:53:3B:21:5D:77:23:00","sha256":"74:FB:9C:5B:AD:5C:20:A2:1D:22:F5:8C:48:02:48:5D:FF:B6:F6:E1:C1:25:9B:01:9A:AB:FD:AA:E9:FC:90:1C"}}},"request":{"raw":"GET /_next/static/RmLvO3wx2Hiw9uk46mMkM/_ssgManifest.js HTTP/1.1\r\nHost: sso--en-uphold-help.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-td-version: 0.116.0\r\ncache-control: public, max-age=31536000, immutable\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 06 Jun 2024 04:00:49 GMT\r\netag: W/\"100-18febb4d968\"\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-cloud-trace-context: ecb05dfd585c0033e1a1ce3e4c4d4cab\r\ndate: Sun, 10 May 2026 06:34:53 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HRpOt91R7ubb0%2FL8nO2owr18ZBOPco%2BkkIv6MrV9gpaehODoOkK0higWcARBxUYi3sU1Xcnhm2Q6RlAL4AoHfeXmw1wMP6ua39qyWzdv0wmK0xmv2nViIseLh3%2BHi4oJFuYofUiu8IIF6xOYukFirLzRRbk%3D\"}]}\r\ncf-ray: 9f96ebb26f4db4f4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":256,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"7bc570811630ee710017f274280f7545","sha1":"1b4a5a70c7a203b804308ac40fda25c88d5cbb34","sha256":"634f1bdd6642e4de4d0b2d8c1e0c5b8fe915e2b30d0641b5a1855d0902e6d56a","sha512":"fe2281e5e7d383c52be462d747ed31b25426cd38451c34a0a85c22d103988098ba631fb94cbac4e698bf800e187827a75d4a03a790c639971da301493f9e087c","ssdeep":"","tlshash":"fdd09292412fbc189a32cd0e2db2bfda4f50b997c9ac514bcdb4908bc1b8a005f20978","first_seen":"2023-04-16T07:16:19Z","last_seen":"2026-07-27T12:26:00.95119Z","times_seen":1896,"resource_available":true,"data":null}},"time_used":683,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":682,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-10","alert":"Phishing Block","trigger":"sso--en-uphold-help.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Gravitas%20One:regular\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Gravitas%20One:regular\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":419,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0d5e4971f2cd8ae0d450377fd2aafcd9","sha1":"414faaae2554907dc544daaed4f896ab90448643","sha256":"d1fb4047aec1ad94bc711e7e84674fb0e87affd9e53a413c6edd88b2533b6b4c","sha512":"048f8967653bd668f38ff1076de74ec4c5b3a02634d8ebbcabec443c9097d6a59244ad911491834a087c656027d30fcf986ab151368bb1df7c8c6783d06586d0","ssdeep":"","tlshash":"42e061810c36aa00db631cc112cebe72ff0fa1955484d9349bfa1cd8bc92c665396b2d","first_seen":"2025-09-14T12:40:31.184033Z","last_seen":"2026-07-27T00:16:08.1005Z","times_seen":283,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":146,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Creepster:regular\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Creepster:regular\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":410,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b117979ab37274c8a165f1a17ea4fd05","sha1":"e8702ef626f731cba96d19d041b7a0fe8dbcbae3","sha256":"1774c117b80456fbf52456d752cddccb53b78d3b21ffdd2d2c13c23afcd623d9","sha512":"6956db6b2637c68bfdb9dd413cc8553d5ec3f42e31d7e40626716f7f49c3c7de5317d08e033a3ab9ce5f24673f058c940ec26c32102f10481d697aca3157ba58","ssdeep":"","tlshash":"d2e0ab410836a600da533dc2129ebd32ae1ea0502404e864a6fa04e4bc43d165313b0c","first_seen":"2025-04-08T21:01:17.287914Z","last_seen":"2026-07-27T00:16:08.129588Z","times_seen":723,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Space%20Grotesk:300,regular,500,600,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Space%20Grotesk:300,regular,500,600,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6440,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ce031a04376db7d13f496b3cd42e8687","sha1":"c29967f2dba3209eb1ddd705efc453202aea6313","sha256":"a398f675a83adcd0ae07d2d75620a4d45150483e6539adbffa1338c82386dcfa","sha512":"9f828cd6e800fa54605d039600666007cd2e2511e72b99f182cdb2788409a5a06dd5574deea4899a0d3d209e7290b71fbb219d16aeb24fcd7624323196b10817","ssdeep":"96:cNQO1aHQO1aGJc+uhQO1afNDNQOEaHQOEaGJc+uhQOEafNDNQOXaHQOXaGJc+uhI:ccGGDZx/GiZC4GRZfRG4ZYiG/W","tlshash":"4dd1ff9200679500eb635cc226cebe32be8fa1556050da396ffe2498ed9fc311311b2d","first_seen":"2025-09-05T05:32:32.043488Z","last_seen":"2026-07-27T20:10:33.278568Z","times_seen":3064,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":87,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Barriecito:regular\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Barriecito:regular\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1261,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"071f4e32ff42d026f9bc2f5829edcfd7","sha1":"4f7cfff4faa404aedab322371b018de89d73d0b7","sha256":"83a27a641f7e0f509a3581bcf4ec8ab9df27d83df961665ff34f310d0bec7766","sha512":"988a33bad5f2702e2264742bc2b4670277a70a0bdfd0a071b747c7a2ce457abbf7ea9acf1455b3f80bfee01f759c2775ea5a4bf41217ab55058eb14d1dcf7056","ssdeep":"","tlshash":"7621cd500066a100df970cc663ce7e32ee9ea155a485d53abffe2c88dc5bc66532470d","first_seen":"2025-09-15T13:43:39.043308Z","last_seen":"2026-07-15T22:52:41.672318Z","times_seen":33,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/css/2c4304c2e59a8b18.css","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:53.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 05:39:11 GMT","end":"Sun, 28 Jun 2026 06:37:32 GMT"},"fingerprint":{"sha1":"FE:4E:BC:0A:08:3C:EC:A1:DF:19:9F:03:B4:53:3B:21:5D:77:23:00","sha256":"74:FB:9C:5B:AD:5C:20:A2:1D:22:F5:8C:48:02:48:5D:FF:B6:F6:E1:C1:25:9B:01:9A:AB:FD:AA:E9:FC:90:1C"}}},"request":{"raw":"GET /_next/static/css/2c4304c2e59a8b18.css HTTP/1.1\r\nHost: sso--en-uphold-help.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-td-version: 0.116.0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Jun 2024 04:00:17 GMT\r\netag: W/\"31c73-18febb45c68\"\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sun, 10 May 2026 06:34:53 GMT\r\nserver: cloudflare\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=62NGc0JaDJAW6xUjcN7S%2FNmMXQ7TnX8g0ZCHwdtSkRzNA7%2FEE0W8b8JhWL%2F6sscO6%2BeztXPQRwiZcq4YEZFvLrTIvb1oDk%2FqkEEqZU4EQfeu9kXlxM0GVUH9xdrNWnHQQbROZFKyvjLK3xPF1h%2BmLWtU7bU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96ebb21f32b4f4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":203891,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"56235757ca46b2ed5b14f680e42de3fe","sha1":"10da8219239489fd8def3bfdd9f27fe2c0aa08fb","sha256":"66fd8b809e0a5cbbc7e5df84cd57c07a30c3607f988836d21748dbb9763eeb11","sha512":"4b868bd9e097da329f78d765d0dd54b13d108c5d70d257aa187ea3c3f074f0350146bd0701d48e9583aea3b59115e8318772dd72b8185506aba9bbb177233a89","ssdeep":"768:qlZ446djfM85NInCWhBYcOvY4kUUuxyORquSIjPYqSLwIH7FSHkArVCrdIRyiEfX:JFpWhBwk8RQLjbEWrdd9fw3xmPP","tlshash":"fa14b9a3e9402d6fa913882e14d0b76c331e5484d72317bab557f1e08a8a7db1977b0f","first_seen":"2024-06-18T13:53:27Z","last_seen":"2026-07-27T12:26:00.974269Z","times_seen":1809,"resource_available":false,"data":null}},"time_used":709,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":690,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-10","alert":"Phishing Block","trigger":"sso--en-uphold-help.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/8910-f25a89f1ea64fe64.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:53.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 05:39:11 GMT","end":"Sun, 28 Jun 2026 06:37:32 GMT"},"fingerprint":{"sha1":"FE:4E:BC:0A:08:3C:EC:A1:DF:19:9F:03:B4:53:3B:21:5D:77:23:00","sha256":"74:FB:9C:5B:AD:5C:20:A2:1D:22:F5:8C:48:02:48:5D:FF:B6:F6:E1:C1:25:9B:01:9A:AB:FD:AA:E9:FC:90:1C"}}},"request":{"raw":"GET /_next/static/chunks/8910-f25a89f1ea64fe64.js HTTP/1.1\r\nHost: sso--en-uphold-help.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-td-version: 0.116.0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Jun 2024 04:00:17 GMT\r\netag: W/\"55bd-18febb45c68\"\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sun, 10 May 2026 06:34:53 GMT\r\nserver: cloudflare\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hD2jBWGEN9i4zMIPbiX8r3Dyg6Q67OHbzPrLwoSC6ie%2F2ZTKjBAyd2mJkGWs2vlDRh2YKce0%2FyWyitgtM8Zk4Oyl6FlyEV3h5gJVWA1AUBIPLak2bn%2BU815ZFVcSWcZG990aV4%2F0BN8ciz8iXqNTMnF7Dhs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96ebb25f48b4f4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21949,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (21949), with no line terminators","md5":"ff1246fadffd52297eb1e16856f2b106","sha1":"c11a781ae10a31ab15df0da1b11d48dfd1975a97","sha256":"1c71bb6ffee7e4067855058d9c6d2c080aed12b827990ea636a6c60b1c1162e9","sha512":"2cd16f9a635249de90f96652fe4babc3922fbaf62d29cd1826c23a74eeb7eb22582c6fe2fb65e4c16d9bf799114b2cff435ea6e17eb2cf27220b5afc25ce4b5c","ssdeep":"384:alJC1TBoB5PEJhcwR3eSATwToTN6Ip2moCz54Gas4Pj/md1u3A9js8KEM:alJC1TLfc6OSwA4N6Ip2moCz5PdqDmdu","tlshash":"7aa23b66f2a5bcebd75b48f430eb850df21f3949950d4920b27ad44920d3ac5e163f6c","first_seen":"2024-06-18T13:53:23Z","last_seen":"2026-07-27T12:26:01.045873Z","times_seen":1852,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-10","alert":"Phishing Block","trigger":"sso--en-uphold-help.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Albert%20Sans:100,200,300,regular,500,600,700,800,900,100italic,200italic,300italic,italic,500italic,600italic,700italic,800italic,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Albert%20Sans:100,200,300,regular,500,600,700,800,900,100italic,200italic,300italic,italic,500italic,600italic,700italic,800italic,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:55 GMT\r\ndate: Sun, 10 May 2026 06:34:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15543,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a8025e00860973ce0c0d94c04c344543","sha1":"93531e23300ffc594e5c9444cd8b6efffee5bd20","sha256":"4f21d5bd3eedc9336c5663ec810d23d5db42fff08a2e930ee0dac85fa4fbafeb","sha512":"5a0ac6bea00bc005c8045dd6c783b743745afeee99af12903a1499c83def7eb84ea403fb05f2397011b71daf621b5bec573da239d96584d57c2f28bf2103f9d5","ssdeep":"192:j3puG3pEAuGAEnuGnEOuGOENuGNEEuGEEruGrECuGCExuGxBpgXpjggcgHxguCgZ:j3H3eMZhE2v7SQ9FYqjfX8t","tlshash":"73621281046ba910db971dc626cebd37ee1fa160a8448d3d9bfe14c8fc56d2a637170d","first_seen":"2025-09-15T02:15:15.229179Z","last_seen":"2026-07-27T00:16:08.137391Z","times_seen":695,"resource_available":false,"data":null}},"time_used":2011,"timings":{"blocked":971,"dns":7,"connect":21,"send":0,"wait":32,"receive":0,"ssl":977},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Inter:100,200,300,regular,500,600,700,800,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Inter:100,200,300,regular,500,600,700,800,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22743,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"03d386d3d51356518f1c932bd7d1f021","sha1":"f20bdaa14bb1dba0ae6b28e1c455976bcc6e0081","sha256":"e833d17f31411e640714d4c41bd3d264b7c2b48b4740ce7ea6d7988f50e58d69","sha512":"dcbd99af933cbe40c84ba846643ac9e9e5b070e391a04d2d608a0f89f470b31aea8bee06ba7048fb2e7140eaeb75ce1c990d32444736469826bee4c96ffb2dc5","ssdeep":"192:WpNmp9pKpO3tp3pxYp5NnWjO3GAxRKNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NP:WLmXoKtZIB1OKYXuM0p2+g7GQK","tlshash":"d5a28992002ba400ab971dc233cf7f3aaece10856085d1b96ffd0dc59cead66436876d","first_seen":"2025-09-10T18:54:49.359958Z","last_seen":"2026-07-28T00:58:43.788846Z","times_seen":8919,"resource_available":true,"data":null}},"time_used":671,"timings":{"blocked":295,"dns":4,"connect":21,"send":0,"wait":64,"receive":0,"ssl":265},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/7671-0804d750c53cce45.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:53.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 05:39:11 GMT","end":"Sun, 28 Jun 2026 06:37:32 GMT"},"fingerprint":{"sha1":"FE:4E:BC:0A:08:3C:EC:A1:DF:19:9F:03:B4:53:3B:21:5D:77:23:00","sha256":"74:FB:9C:5B:AD:5C:20:A2:1D:22:F5:8C:48:02:48:5D:FF:B6:F6:E1:C1:25:9B:01:9A:AB:FD:AA:E9:FC:90:1C"}}},"request":{"raw":"GET /_next/static/chunks/7671-0804d750c53cce45.js HTTP/1.1\r\nHost: sso--en-uphold-help.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-td-version: 0.116.0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Jun 2024 04:00:17 GMT\r\netag: W/\"5419-18febb45c68\"\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sun, 10 May 2026 06:34:53 GMT\r\nserver: cloudflare\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3EC6IgIgScPGr4DeCANC%2FPAlUy%2Be7zZf39CnzYCgAlovn1547hs2p10YwqswWHZmw%2BGZik5gHzyCQSfFalKRSvl1qgdZ0n3eI4Su2Vk%2Blg9p1yU9jmIpatBcyO%2Bp8NxGU4De6DLTRZysC%2BMlhfaUVHJpZpU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96ebb21f39b4f4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21529,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (21529), with no line terminators","md5":"4fe1b6abd11f9dc97cee0f36dccc51a6","sha1":"72cfa8233f0d2f92fefb4309f878d5827df89018","sha256":"66d3385b97fac4ebc7c80d23782e81526ec33c0271a7d639148edf9f8885d4b3","sha512":"d510aa899a0f877dda178066f8c88db76fcafcae6ed70391237855f3a3c19d702a3247a34591b585a68ef421b0a632d20295aa68d72635fd5a8c2454199ee329","ssdeep":"384:rtDzol/I0or+xZTI/lkBXwDXJMo1WzfPpJMzxtwlrVtQZdgY0wEAMp0z:ZAu+xAJ1upWU/0z","tlshash":"68a2c798b5d178a8f92bd8a1d07f504cf7af185446064db2d2f899a990f43f82363f9c","first_seen":"2024-06-18T13:53:23Z","last_seen":"2026-07-27T12:26:00.975412Z","times_seen":1874,"resource_available":true,"data":null}},"time_used":681,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":680,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-10","alert":"Phishing Block","trigger":"sso--en-uphold-help.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/196-427c2c804712681b.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:53.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 05:39:11 GMT","end":"Sun, 28 Jun 2026 06:37:32 GMT"},"fingerprint":{"sha1":"FE:4E:BC:0A:08:3C:EC:A1:DF:19:9F:03:B4:53:3B:21:5D:77:23:00","sha256":"74:FB:9C:5B:AD:5C:20:A2:1D:22:F5:8C:48:02:48:5D:FF:B6:F6:E1:C1:25:9B:01:9A:AB:FD:AA:E9:FC:90:1C"}}},"request":{"raw":"GET /_next/static/chunks/196-427c2c804712681b.js HTTP/1.1\r\nHost: sso--en-uphold-help.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-td-version: 0.116.0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Jun 2024 04:00:17 GMT\r\netag: W/\"35e7-18febb45c68\"\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sun, 10 May 2026 06:34:53 GMT\r\nserver: cloudflare\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5n1XQSjvEOZb1pIUz%2FydJ5Z%2Fzw%2BytDl0%2BKCkhuI8IyjrzGoUsaXTai9X%2FVDd18vuDx3Hl6XnS26JTA6D9clDHNoz2FFMZ9w1FldysmUf7JnUb0qgZeUv3s9NjcgmTavR5oEjNrVxwfcFajR8c0iXOfZiMak%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96ebb25f47b4f4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":13799,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (13799), with no line terminators","md5":"eb92b9c9c50888a2388c857bddbfa082","sha1":"ec4cff58ab9efd04c550c8eb31bebd1664040898","sha256":"692777e7ad9b771b114f347bf5ab60afa6e9b2127afbbbb9a9dd6c3d4bc5af43","sha512":"fe0a2d1428b5afc518783e67549e4dc53eb4d39774949593e26bc139e6865acb5ddee2ae6ea6d0c600eca597b1cea191f5e90abe88e6cb04c7e44c7e3565d205","ssdeep":"192:5SWbcltLPGo1ZaX5u5aHZFEM05j3VVt5vAjo0ke4htyj+gMLcBQWvTsV0X4JuLjI:IltdOzLSWjzQWAiCbK7XbuyRI","tlshash":"5252c8c47bd2f0b283f71a62807f110bf2797aa4240c9404b3b6e5e92c7055b9a67f79","first_seen":"2024-06-18T13:53:23Z","last_seen":"2026-07-27T12:26:00.967117Z","times_seen":1875,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-10","alert":"Phishing Block","trigger":"sso--en-uphold-help.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/RmLvO3wx2Hiw9uk46mMkM/_buildManifest.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:53.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 05:39:11 GMT","end":"Sun, 28 Jun 2026 06:37:32 GMT"},"fingerprint":{"sha1":"FE:4E:BC:0A:08:3C:EC:A1:DF:19:9F:03:B4:53:3B:21:5D:77:23:00","sha256":"74:FB:9C:5B:AD:5C:20:A2:1D:22:F5:8C:48:02:48:5D:FF:B6:F6:E1:C1:25:9B:01:9A:AB:FD:AA:E9:FC:90:1C"}}},"request":{"raw":"GET /_next/static/RmLvO3wx2Hiw9uk46mMkM/_buildManifest.js HTTP/1.1\r\nHost: sso--en-uphold-help.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-td-version: 0.116.0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Jun 2024 04:00:17 GMT\r\netag: W/\"87b-18febb45c68\"\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sun, 10 May 2026 06:34:53 GMT\r\nserver: cloudflare\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JnU0ZcCX67bfifD%2F9BFO49%2BFWQc0jFNJUCtqFSn7ual2MMmj3gKxAxUqkF2iohIOdA6XTbhC%2BQigeWQe5Z6PSVO6GhxJvwQvuU6iUha1kvizSoWk2n%2FfypjfnCZ6pYx%2FR3Qm0GeHCjiTlGvtjRhunabaF8c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96ebb26f4cb4f4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2171,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (2171), with no line terminators","md5":"dbe85b1fefe2deccb9a59be23f92f9c5","sha1":"80272cafcc60a27a85c47f025c4e4fda105797a3","sha256":"26c027e3f5745c91590f4c03079020e58cfadcf2212f728527d1a91b0d03b368","sha512":"48e3dbba2c0f57351b8c419a587759d46d84bbe66017f10e8abc15c1eb06039240eeaddd8cc66ae3119cfc687a03d1ed27156a0d69e3ef9df068adb3780aecaf","ssdeep":"","tlshash":"5e4178171056f81d0ef4ecda781b73eadf81fa3681748689debc4c7c4a8051257ba439","first_seen":"2024-06-18T13:53:24Z","last_seen":"2026-07-27T12:26:00.968251Z","times_seen":1869,"resource_available":true,"data":null}},"time_used":680,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":680,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-10","alert":"Phishing Block","trigger":"sso--en-uphold-help.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=DM%20Serif%20Display:regular,italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=DM%20Serif%20Display:regular,italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1793,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"07d43e3c1867f25dd8d273b540bbed46","sha1":"6da055e126bd00f5b1c046922f3877965a4560a2","sha256":"3035e77954403a44ed450c1cbd2fde8b72accfa7af875dc966bfd2b1cfd71547","sha512":"31a02cb271b4648d9a06cbf90799820dfa89693d12d273742bbbcfe7a3325ad07ab0f42068d73b4a722fb4327f3b26f081cd447f8a05c39a57d958308d9bfc0d","ssdeep":"","tlshash":"cb31c291082baa00d7532ec212debf23ef1f62505444fa68affd18d87c5bd569311b4c","first_seen":"2025-09-12T09:49:51.490325Z","last_seen":"2026-07-27T07:55:49.924604Z","times_seen":3156,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":185,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/5635-06a46e488a7b390c.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:53.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 05:39:11 GMT","end":"Sun, 28 Jun 2026 06:37:32 GMT"},"fingerprint":{"sha1":"FE:4E:BC:0A:08:3C:EC:A1:DF:19:9F:03:B4:53:3B:21:5D:77:23:00","sha256":"74:FB:9C:5B:AD:5C:20:A2:1D:22:F5:8C:48:02:48:5D:FF:B6:F6:E1:C1:25:9B:01:9A:AB:FD:AA:E9:FC:90:1C"}}},"request":{"raw":"GET /_next/static/chunks/5635-06a46e488a7b390c.js HTTP/1.1\r\nHost: sso--en-uphold-help.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-td-version: 0.116.0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Jun 2024 04:00:17 GMT\r\netag: W/\"11998-18febb45c68\"\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sun, 10 May 2026 06:34:53 GMT\r\nserver: cloudflare\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x3rCU999GPHOzXau8j9rps2DjYqLc09yawxPtoR6wsXZF2rnfwS1bFaQHM3QVj5%2BIZIqoNH3uUCrsZdiWMp1HGwqMXMFDD%2FqRApKCIHiWyrl4efD3OVSgRxLjjgoKnlv4rilYq%2F1A19SSgkg%2FD60TBYJ5E0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96ebb21f37b4f4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":72088,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"3149b3854d9551d3f7b1d89603c6c537","sha1":"a4f6ac24d5a0c424dd7e95353c78cb0b7494163c","sha256":"caa66494a056f92f01d9d8ba80ec55360a6d10256fa7983c70d902ee8f29cc86","sha512":"45f4acbe667b18d9c09fa5ff69acde23d9ead7483cc81a7436d53ad62b54f17a908d813f2d6f0142f911dcd7db96510f9eee26ff7ef0099295e928cfb62662db","ssdeep":"1536:Vprt3xdi92o1TML5J3nnb5oALn5h3/5ivW6MIO:Nxd6G5Fp9","tlshash":"be6308e6326274b4c3bf419bc07f4519733e5b84114d0444f2b58e9d3868e99a2bbfae","first_seen":"2024-06-18T13:53:24Z","last_seen":"2026-07-27T12:26:00.940135Z","times_seen":1858,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-10","alert":"Phishing Block","trigger":"sso--en-uphold-help.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/_next/static/chunks/2507-dc4b031a429b363f.js","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:53.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 05:39:11 GMT","end":"Sun, 28 Jun 2026 06:37:32 GMT"},"fingerprint":{"sha1":"FE:4E:BC:0A:08:3C:EC:A1:DF:19:9F:03:B4:53:3B:21:5D:77:23:00","sha256":"74:FB:9C:5B:AD:5C:20:A2:1D:22:F5:8C:48:02:48:5D:FF:B6:F6:E1:C1:25:9B:01:9A:AB:FD:AA:E9:FC:90:1C"}}},"request":{"raw":"GET /_next/static/chunks/2507-dc4b031a429b363f.js HTTP/1.1\r\nHost: sso--en-uphold-help.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-td-version: 0.116.0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Jun 2024 04:00:17 GMT\r\netag: W/\"bdd0-18febb45c68\"\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sun, 10 May 2026 06:34:53 GMT\r\nserver: cloudflare\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QuRW2yig82bPqCy1wueJlqdz%2FoKSPVy8POyyRydUtQ4ies%2FVOi%2FU37s%2BBiZzLljSeStc3nE8UHbEMNSpZcfbr7Ds3WAA13Zfqc6YANFHtmYxBYLEZFiWlgQDMuRlllA8IehnH0e32ziFE6%2Fv2csbhUWa7R8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f96ebb25f46b4f4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":48592,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (35385)","md5":"aae80b9f942c1e983bdb299d041ee1e1","sha1":"175a09fa820396f804dd1295835e189dd4db44c2","sha256":"3f492a05bc09c311eea94ecbcaee6e632a149bd20e488aede8fd9d1cf37e3c1d","sha512":"37497488c529eb13eb486eac472c5020445cc96bd26e3bb4a60ceada6d93e0c7510d5c9fc0748cf38fbbdaf75e3a97d51d6a8e5c8059f1a8c4a813063c9bf80d","ssdeep":"768:HOjuQfjzwPphM+G6SBpKnOSSwPUtW4VepNuh1EiKA11s0zS:HvQMKsOdtW4VeC51pS","tlshash":"08230ac87292f45146e365e1407f114ba53c2cb5f84ca8a0f696f9e07eb4d8a40b7fb9","first_seen":"2024-06-18T13:53:23Z","last_seen":"2026-07-27T12:26:00.94374Z","times_seen":1875,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-10","alert":"Phishing Block","trigger":"sso--en-uphold-help.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sso--en-uphold-help.typedream.app/cf-fonts/s/inter/5.0.16/latin/500/normal.woff2","fqdn":"sso--en-uphold-help.typedream.app","domain":"sso--en-uphold-help.typedream.app","tld":"typedream.app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 05:39:11 GMT","end":"Sun, 28 Jun 2026 06:37:32 GMT"},"fingerprint":{"sha1":"FE:4E:BC:0A:08:3C:EC:A1:DF:19:9F:03:B4:53:3B:21:5D:77:23:00","sha256":"74:FB:9C:5B:AD:5C:20:A2:1D:22:F5:8C:48:02:48:5D:FF:B6:F6:E1:C1:25:9B:01:9A:AB:FD:AA:E9:FC:90:1C"}}},"request":{"raw":"GET /cf-fonts/s/inter/5.0.16/latin/500/normal.woff2 HTTP/1.1\r\nHost: sso--en-uphold-help.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncontent-length: 24272\r\ncontent-type: font/woff2\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2bRXSqj6F9xW9PtZ%2B7VjCc0qtz5O0xuL7%2BMqntp%2BvQBMbo5dYiib2e30PzS%2BLP9P6h%2B%2B4ZZmklxsgi627Fu%2Bqk2xFS%2F5FD0Ex6nCgbjH1kzZTnXm5fwzkvS4eazeGlTtiBx0S9O5AqLm4p2zHkR%2BKxRs0m0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f96ebb7ef94b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24272,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24272, version 1.0","md5":"51205681a1ba304816fc629e8989256b","sha1":"6b66c741bf8bc3ce248af04b2051a648a38391d6","sha256":"f3779f1efccc4bdcdf9c0a02ab95bf6bd092ed09c48c08cedc725889edd1d19f","sha512":"06a0f1bb5df53f0f01a69fcde97dac63e6cf382bdc38ac84cde4021c8f38f8998c525b564c24fc9caa47fa7253a1b8eb1f50093b9d6b858ac59f358d08285ac8","ssdeep":"384:G+N/IC1hZek0x7rvoWFOdMoldqrE4Fc8BGW8CqKiLIPGFpLDK12JBoB/cYGnIYz+:GpAhodx7DXOdMcsZF38M58p212JBoiYp","tlshash":"f3b2e02211fa659d906a131e29fd782b77bb373d3940cc8aa86f49cd9dc675308c5cd8","first_seen":"2025-06-02T05:01:52.622319Z","last_seen":"2026-07-28T03:30:41.012299Z","times_seen":5370,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-10","alert":"Phishing Block","trigger":"sso--en-uphold-help.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"sso--en-uphold-help.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.typedream.com/cdn-cgi/image/width=750,format=auto,fit=scale-down,quality=100/https://api.typedream.com/v0/document/public/aef74bf0-9ef8-4e10-9b33-7c78d546f7fe/2yx8yPhtpzt7fCzaaxXnQZSZ2QG_uphold_image.png","fqdn":"image.typedream.com","domain":"typedream.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Apr 2026 02:14:48 GMT","end":"Thu, 16 Jul 2026 03:14:43 GMT"},"fingerprint":{"sha1":"D9:50:D8:55:85:1F:96:77:8C:44:04:22:F4:6A:3A:98:7A:A4:1F:AF","sha256":"39:CD:94:F4:63:76:73:81:84:B2:43:2C:65:29:EB:35:50:A2:86:46:A5:59:82:75:36:8F:A9:33:70:D7:17:5B"}}},"request":{"raw":"GET /cdn-cgi/image/width=750,format=auto,fit=scale-down,quality=100/https://api.typedream.com/v0/document/public/aef74bf0-9ef8-4e10-9b33-7c78d546f7fe/2yx8yPhtpzt7fCzaaxXnQZSZ2QG_uphold_image.png HTTP/1.1\r\nHost: image.typedream.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T03:22:25.989663Z","times_seen":17572886,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":24,"dns":2,"connect":1,"send":0,"wait":0,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Noto%20Sans%20KR:100,200,300,regular,500,600,700,800,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sso--en-uphold-help.typedream.app/","date":"2026-05-10T06:34:54.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css?family=Noto%20Sans%20KR:100,200,300,regular,500,600,700,800,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sso--en-uphold-help.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 10 May 2026 06:34:54 GMT\r\ndate: Sun, 10 May 2026 06:34:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":849645,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1146)","md5":"13a865a45e9354452afbcff40f93713e","sha1":"e2d4bb2d02ef7fceed7a626e5301675add3a4388","sha256":"596ab431e85b05f9a3cb0da42ef620393f3cb2e9fc0f14eb92de274dc112726c","sha512":"74568bb46726038e96ad2713028a5ce94e481b794b5bdb93daf793d3779c96ddb12ee58700161c1f8cb8e9981e9a3f1917c3d406797aa789693c3eb3ab3e3684","ssdeep":"3072:iuycGCA35nfOCeM0wmyCIZ/NRyKi2yWQGi4z9TrOKeQIEK6igFzpNaCa6GaE2SQW:iui510I/7ye9xIUzHGR","tlshash":"f70552754617cdfafed74cd662cea5227f6c28797900c4bc96f44886ac1a01ad18bf8c","first_seen":"2026-01-10T20:35:18.725095Z","last_seen":"2026-07-25T17:04:35.44014Z","times_seen":259,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}