{"report_id":"1548be37-8fda-4dff-bd94-56bf32ca74ff","version":0,"status":"done","tags":[],"date":"2026-06-16T13:09:57Z","url":{"schema":"https","addr":"upholdvip.im/","fqdn":"upholdvip.im","domain":"upholdvip.im","tld":"im"},"ip":{"addr":"172.67.174.122","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"upholdvip.im/#/landing","fqdn":"upholdvip.im","domain":"upholdvip.im","tld":"im"},"title":"Uphold","dom":{"size":38274,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (35650)","md5":"4993311bf166e4b8a1e88e24863902fb","sha1":"6094dbe097b1c5fd49d8a5a49101a2761b2e2b84","sha256":"83af0081cec7a186568259ec7a9a4ff6c6d6ae30354981314ff5210a45684840","sha512":"914f20b06bfa5546a81a78077d881bb330bd63894571616345f6e752d54f53be84769ab11fe9e73bcd454041e1113b1c1dee7e373b5838d87cf14e7e5e5b25ec","ssdeep":"768:139eApJvz+P5Y8FLZRYWLA7rxLsHpa2/N5t+0eEKIG4e0+0eEKIG4elwixFttdZF:1Jvz+P5/5lv+0eEKIG4e0+0eEKIG4elp","tlshash":"7b038518a2111c6f5273e5e0e1a17f9e22f7f30fc70d456062a891646fdbdaeb732066","dom_hash":"domhashe905662728c1032d0f672266dbea0358","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"upholdvip.im/","fqdn":"upholdvip.im","domain":"upholdvip.im","tld":"im"},"ip":{"addr":"172.67.174.122","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-21T13:09:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"upholdvip.im","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"upholdvip.im","ip":{"addr":"172.67.174.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-16T07:10:57.154443Z","last_seen":"2026-06-16T07:10:57.154443Z","alert_count":10,"request_count":10,"received_data":628517,"sent_data":4591,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-14T22:19:01.724334Z","alert_count":0,"request_count":7,"received_data":352215,"sent_data":3988,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-06-14T22:45:09.968061Z","alert_count":0,"request_count":12,"received_data":13210,"sent_data":6966,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-14T22:22:05.140579Z","alert_count":0,"request_count":4,"received_data":51861,"sent_data":2196,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"encrypted-tbn0.gstatic.com","ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-31T02:32:18Z","last_seen":"2026-06-11T08:08:23.162204Z","alert_count":0,"request_count":1,"received_data":5840,"sent_data":591,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"upholdvip.im/h5/assets/js/vendor-vue-CmgJETlJ.js","fqdn":"upholdvip.im","domain":"upholdvip.im","tld":"im"},"ip":{"addr":"172.67.174.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ef3889b977315fc496d8cc99e1cb026","sha1":"5b94b12106cf3b0f5770a9b950f8c35c0805661f","sha256":"85caedc731db8b1585d022c4777a916a0a1bc6d037401013e935d27a04f00400","sha512":"3b3be276b4d2119a26e058b1f92b21675484cdd1bba4c2158adbf5d0dde3155a9d2f63efa493f9343ade16242f09acd3ba4ab4f8eb07395809ad4e8bba83a449","ssdeep":"1536:sTNLdzluIFxx6Qwz6Wc7NXd+y/LDOu0KHwJKL3Yp/iXPuxkgnAcsh:qNTlxx7Qc7n+kLF0AwJI32/nx/sh","tlshash":"c8b328e93286b46253f609e1007b0402f3791c89384d88d4b16deedb3d7745a81abf7e","size":112618,"data":"","first_seen":"2026-06-16T07:11:01.609262Z","last_seen":"2026-06-16T13:14:20.157366Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upholdvip.im/h5/assets/js/vendor-utils-BwYsbWOI.js","fqdn":"upholdvip.im","domain":"upholdvip.im","tld":"im"},"ip":{"addr":"172.67.174.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"79fbeded4e0578c7241c3c555f3e78bb","sha1":"6adc6badcba1243abf6ffc11fd7f8f201e354c20","sha256":"3aebe1f3366ce825234adffe977a098639798f2c7786926bba501646cb55a98e","sha512":"8f3f689b9e04c3186c34a4ba44a76282ab6543d652f8a11282205f941e67e20e702c6428cd75866d00edb746af2d007a14e4dd30bcef26ba7d53286384b4632c","ssdeep":"3072:7p+LpT0BkFjuNikHzlk0gCfHBNVmCuOGlgkXJATloT2xB:7p+LtUkFgi5KGbT4B","tlshash":"c0b34ad97292706753eb61e8007b050af2bd9c15740c84a8f688dde73cb994a91bbf3d","size":117790,"data":"","first_seen":"2026-06-16T07:11:01.615428Z","last_seen":"2026-06-16T13:14:20.15912Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upholdvip.im/","fqdn":"upholdvip.im","domain":"upholdvip.im","tld":"im"},"ip":{"addr":"172.67.174.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d765120de18bd9f4269047a647836727","sha1":"2b3cf646a2cbed78bf80e7290cb1e518babec429","sha256":"ed7b519acb095ac621634f9953e1bea04fdb01d888fd3d09b326e53d97a5e059","sha512":"117544b015d3d219dcf00ed13842c3cf190a2135787d325a8334df1aee278d64875dc88e1ba97894888e4ce9b2ba0f3126078a49e1a553826cf031ebcb9c98ff","ssdeep":"","tlshash":"31e0927c38b2907507a7a05c327fd7803d753a277046aa62756c83880ff2aa04135bdd","size":394,"data":"","first_seen":"2026-06-16T07:11:01.630471Z","last_seen":"2026-06-16T13:14:20.175349Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upholdvip.im/h5/assets/js/Index-DyHuBvDA.js","fqdn":"upholdvip.im","domain":"upholdvip.im","tld":"im"},"ip":{"addr":"172.67.174.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5cb4337793727286f74765bd077a3b4f","sha1":"5832923a0f7b4f8b183057fdd5f6a6c6d353d77b","sha256":"232f3b0c43e3e927c91680f93cf117d28c710d32906d6e161ccc43a22240a060","sha512":"801160352d78d505fc710d33dd4b9c71b421a960d2fb00b8c572e64a264631ac94967e2a8eb8de49887c65653a90d28eba4266639eb6b221075e358f90b9d85d","ssdeep":"384:EGdELpsBrk80LEQ8/1OG3ejCYG3glooc9hF3xzjjMb/LoqOjT/o3GYio/UV8vJbi:EGdELWBIQhYaglUzF3xzjILoqO/o3GBh","tlshash":"44b2b320e2114b3ea0a361f5b5d4394821a4bfdadb054da375bcc5352bd2dfa372e226","size":24251,"data":"","first_seen":"2026-06-16T07:11:01.613422Z","last_seen":"2026-06-16T13:14:20.162838Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upholdvip.im/h5/assets/js/vendor-motion-BhATS8gs.js","fqdn":"upholdvip.im","domain":"upholdvip.im","tld":"im"},"ip":{"addr":"172.67.174.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f8048afb18e7d2e9ec68ed8982951060","sha1":"797915ba69fc36c529de06e6375d7fb17ffde74a","sha256":"074e55184d6ab821e181fdfdfae725cb5db6425cf1456d3b5063b5e80a3942b4","sha512":"bf89a121f6c8eea74bfba36b68e1d29d2805889d19f6c93c8f12f1c4379dacb89af19456256d9de1ab18166aa1bbded7029aa6640ae3556cda1936aeff001cf4","ssdeep":"768:W9hk/RI0JH6JPnABFBqa0kqrm4yuL4UT9VdC0MkXEYspQ3j25SugWHN9DovXJYR7:+QfZIISugWHDkPuCBWTx/","tlshash":"62f2e9c8b1d2b03293bb45d180bf4506f33e5d90784ad4d4f1ad98aa796311987abf3e","size":35396,"data":"","first_seen":"2026-06-16T07:11:01.618945Z","last_seen":"2026-06-16T13:14:20.149848Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upholdvip.im/h5/assets/js/index-Dtpesm23.js","fqdn":"upholdvip.im","domain":"upholdvip.im","tld":"im"},"ip":{"addr":"172.67.174.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5350230cc37b580dd2adde81daee4db3","sha1":"57ee6b5d71b3c73fda952113e9ce43e6a6f2b1f4","sha256":"5cf93c02cc308c29f68c20cb6f732de00bac57521300aa96cfa0218c31cf6843","sha512":"533c2169f8907d2c008bf665fdb23a2f3a0fc075f731f26449cff8b03c5e7f51bd3e94e2fbac15517de7e8c73420c8b09ce4d8435d9c544dc44be2b5a7b17abc","ssdeep":"6144:xn39SAdro+zHftd8Y4r1LiB41cmto+UqtPkmTjR4xs3xa4CK0zN:xn3FVHftd8Y4r1LiB41cmto+UqtPtjOp","tlshash":"00245c3f628eaaac34628b41744f324400d46fc5ff86d0e54bed492522f4e47e9a6ef5","size":225358,"data":"","first_seen":"2026-06-16T07:11:01.617546Z","last_seen":"2026-06-16T13:14:20.142306Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"upholdvip.im/h5/assets/js/index-Dtpesm23.js","fqdn":"upholdvip.im","domain":"upholdvip.im","tld":"im"},"ip":{"addr":"172.67.174.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:25.485Z","timestamp":1781615365485,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upholdvip.im","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 14:33:00 GMT","end":"Sat, 12 Sep 2026 15:21:04 GMT"},"fingerprint":{"sha1":"01:77:C7:56:E3:3F:6B:02:53:B7:D5:3A:FC:AC:BA:41:45:70:17:F1","sha256":"42:3C:B6:EC:E4:1F:77:59:43:E8:BC:FA:17:63:F3:98:99:2C:1E:AD:96:79:8E:D2:CF:D8:A7:4D:9D:63:32:59"}}},"request":{"raw":"GET /h5/assets/js/index-Dtpesm23.js HTTP/1.1\r\nHost: upholdvip.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upholdvip.im/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 13:09:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 31 May 2026 18:04:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1c7834-3704e\"\r\nexpires: Thu, 16 Jul 2026 07:10:24 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nage: 21541\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Os8dkdvSBQjAs37Otk6pP%2BnMzBj435WbFOMBDunoP3gILStiUMQmWJ8%2BgFNRsbXJ8d5m0uYq7Y%2BO6VCBzPOu4Pjw2E9nUraFFHfgknt%2FcvgNiXhXC1apb9kdnNlABA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0ca0c824a8a56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":225358,"size_decoded":70029,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (45370)","md5":"5350230cc37b580dd2adde81daee4db3","sha1":"57ee6b5d71b3c73fda952113e9ce43e6a6f2b1f4","sha256":"5cf93c02cc308c29f68c20cb6f732de00bac57521300aa96cfa0218c31cf6843","sha512":"533c2169f8907d2c008bf665fdb23a2f3a0fc075f731f26449cff8b03c5e7f51bd3e94e2fbac15517de7e8c73420c8b09ce4d8435d9c544dc44be2b5a7b17abc","ssdeep":"6144:xn39SAdro+zHftd8Y4r1LiB41cmto+UqtPkmTjR4xs3xa4CK0zN:xn3FVHftd8Y4r1LiB41cmto+UqtPtjOp","tlshash":"00245c3f628eaaac34628b41744f324400d46fc5ff86d0e54bed492522f4e47e9a6ef5","first_seen":"2026-06-16T07:11:01.617546Z","last_seen":"2026-06-16T13:14:20.142306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"upholdvip.im","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upholdvip.im/api/v1/content/platform","fqdn":"upholdvip.im","domain":"upholdvip.im","tld":"im"},"ip":{"addr":"172.67.174.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:25.896Z","timestamp":1781615365896,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upholdvip.im","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 14:33:00 GMT","end":"Sat, 12 Sep 2026 15:21:04 GMT"},"fingerprint":{"sha1":"01:77:C7:56:E3:3F:6B:02:53:B7:D5:3A:FC:AC:BA:41:45:70:17:F1","sha256":"42:3C:B6:EC:E4:1F:77:59:43:E8:BC:FA:17:63:F3:98:99:2C:1E:AD:96:79:8E:D2:CF:D8:A7:4D:9D:63:32:59"}}},"request":{"raw":"GET /api/v1/content/platform HTTP/1.1\r\nHost: upholdvip.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upholdvip.im/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Tue, 16 Jun 2026 13:09:26 GMT\r\nx-ratelimit-limit: 300\r\nx-ratelimit-remaining: 299\r\naccess-control-allow-origin: https://uphold.im\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m7A6a3%2FdQ9bcCL9gVxaHHPqOXk9bmtRajVDe%2Bsi%2BHDqHk4OeEF5fMMLIZwSPaUoVsuFT%2BoJ35nJ3yv8cId8T0XWOIz3VJi3S6Ro5VE9b%2BU07ZXbA7TpK%2FsVpeJ6kWqg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0ca0c84daa556a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":273,"size_decoded":1009,"mime_type":"application/json","magic":"JSON text data","md5":"712584d8608aa1c17cf857347055d005","sha1":"d64acd1fcea1961daab73b81126e39c0666a65f7","sha256":"fa4aeac3430f68372a763fc911b7ed861479dc79ba7669f6142d0def5fd34912","sha512":"3f33e21e9eacbe3cf157bace62843e22d108c66e6e48d34989385cd1c1736b5d1e1edb6329cb0daa70ed6c1432bcb2b0ece58c06fd7b552e5ea5e42597bff992","ssdeep":"","tlshash":"0fd0c2510b3adc56ab7214c55aee0068c7e486c28a068bae50499cac8364568b356b35","first_seen":"2026-06-16T07:11:01.62022Z","last_seen":"2026-06-16T13:14:20.143899Z","times_seen":2,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":521,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"upholdvip.im","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:26.104Z","timestamp":1781615366104,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://upholdvip.im\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 11 Jun 2026 01:47:01 GMT\r\nexpires: Fri, 11 Jun 2027 01:47:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 472945\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-13T11:17:56.345809Z","times_seen":233417,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upholdvip.im/","fqdn":"upholdvip.im","domain":"upholdvip.im","tld":"im"},"ip":{"addr":"172.67.174.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-16T13:09:24.319Z","timestamp":1781615364319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upholdvip.im","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 14:33:00 GMT","end":"Sat, 12 Sep 2026 15:21:04 GMT"},"fingerprint":{"sha1":"01:77:C7:56:E3:3F:6B:02:53:B7:D5:3A:FC:AC:BA:41:45:70:17:F1","sha256":"42:3C:B6:EC:E4:1F:77:59:43:E8:BC:FA:17:63:F3:98:99:2C:1E:AD:96:79:8E:D2:CF:D8:A7:4D:9D:63:32:59"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: upholdvip.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 13:09:24 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 31 May 2026 18:04:34 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vHOKGd%2FLRzy7bUeQqD7kQSGBpjjeuI7qE1DSHDWHiroq3a6wEzAchmCuiAKyVKrmwIUV8YENNf7%2Fle6z8yULAFx%2ByeSr%2B1UoL%2BKEHCGFiQ2ARxsEgJHsa5cU%2FnHib2I%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\ncf-ray: a0ca0c7b6a4b56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2295,"size_decoded":1704,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, CR, LF line terminators","md5":"b9fba77268e0b053b0e6a9c4ce28b698","sha1":"75b2ef82017cf7ea7dd8c1e2f060aef8d99577d2","sha256":"02058f9e10c68c0d88f3ac56f7ce2209232f651581a5b97f45aa34d70e619392","sha512":"82ba2bdbad9d16f86c0859eb116bb3a26ea8708ce4d5aa4dc17b177e99ee93e57286b9c0b89e83a3ad20b1095eb979e409fb92d50b6687686c7732d9c7ad32b1","ssdeep":"","tlshash":"fa41b6253090840a523183147ab4f648f9aafa2f5645edb078ed216e8fb07d08573f2c","first_seen":"2026-06-16T07:11:01.616776Z","last_seen":"2026-06-16T13:14:20.147639Z","times_seen":2,"resource_available":true,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":46,"connect":16,"send":0,"wait":512,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"upholdvip.im","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upholdvip.im/h5/assets/js/vendor-motion-BhATS8gs.js","fqdn":"upholdvip.im","domain":"upholdvip.im","tld":"im"},"ip":{"addr":"172.67.174.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:25.490Z","timestamp":1781615365490,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upholdvip.im","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 14:33:00 GMT","end":"Sat, 12 Sep 2026 15:21:04 GMT"},"fingerprint":{"sha1":"01:77:C7:56:E3:3F:6B:02:53:B7:D5:3A:FC:AC:BA:41:45:70:17:F1","sha256":"42:3C:B6:EC:E4:1F:77:59:43:E8:BC:FA:17:63:F3:98:99:2C:1E:AD:96:79:8E:D2:CF:D8:A7:4D:9D:63:32:59"}}},"request":{"raw":"GET /h5/assets/js/vendor-motion-BhATS8gs.js HTTP/1.1\r\nHost: upholdvip.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upholdvip.im/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 13:09:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 31 May 2026 18:04:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1c7834-8a44\"\r\nexpires: Thu, 16 Jul 2026 07:10:24 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nage: 21541\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tfooUSk05cN2qVZe5GoNElL6rHoAl3tbZ12rnRvJBYtRD31ZpnD6MNlzfAZ%2BJ2ymMRi8dmf9Pyq4a90ANZqpZ4QegmSyRScc9T0HoDY0Bwxwp4URJ%2FdEXtT4z23O%2FtQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0ca0c825a8c56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35396,"size_decoded":14423,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35316)","md5":"f8048afb18e7d2e9ec68ed8982951060","sha1":"797915ba69fc36c529de06e6375d7fb17ffde74a","sha256":"074e55184d6ab821e181fdfdfae725cb5db6425cf1456d3b5063b5e80a3942b4","sha512":"bf89a121f6c8eea74bfba36b68e1d29d2805889d19f6c93c8f12f1c4379dacb89af19456256d9de1ab18166aa1bbded7029aa6640ae3556cda1936aeff001cf4","ssdeep":"768:W9hk/RI0JH6JPnABFBqa0kqrm4yuL4UT9VdC0MkXEYspQ3j25SugWHN9DovXJYR7:+QfZIISugWHDkPuCBWTx/","tlshash":"62f2e9c8b1d2b03293bb45d180bf4506f33e5d90784ad4d4f1ad98aa796311987abf3e","first_seen":"2026-06-16T07:11:01.618945Z","last_seen":"2026-06-16T13:14:20.149848Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"upholdvip.im","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/spothq/cryptocurrency-icons@trunk/32/color/btc.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:26.039Z","timestamp":1781615366039,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /gh/spothq/cryptocurrency-icons@trunk/32/color/btc.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upholdvip.im/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Tue, 16 Jun 2026 13:09:35 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 62\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"3e-tzY6KtxJvhNrsV7rw/IUffhCtbc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230054-FRA\r\nx-cache: MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=5,i\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qZwfhtTqIxGvNNvt%2BrSYfKpbF15nEPu%2BviQWKvtztKUwmTYlSDWD62Waw9lFMXpGAAnqsp9Y%2B83hy0D6YDYU3hSeDSD7ukR11xuLqnr7mkqurWxu8JIwcYknbxUnMYv%2BxXQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0ca0caf0977dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62,"size_decoded":1104,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"330aaf8d87a09c7d261c683abf86d722","sha1":"b7363a2adc49be136bb15eebc3f2147df842b5b7","sha256":"8ec8178cdb4a1bcb0114c6f0e3a268a104ad4f68c07eccb1b740de751b8db8d4","sha512":"9ddb30a67f0d3ccf6bd261b76b38b4aabc2297321fcece1f23d3fd3ad11ef5727c66ea883106cb0aa25dbe7d57a0875b42db3718140b4440dafb24b9872e4f5a","ssdeep":"","tlshash":"17a022a30022c0a2cbf2c08f2028c2b0802c00882222b020a20ab30a08bc000a282bf3","first_seen":"2026-06-16T07:11:01.611533Z","last_seen":"2026-06-16T13:14:20.152761Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9683,"timings":{"blocked":-1,"dns":2,"connect":2,"send":0,"wait":3074,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1pL7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:26.114Z","timestamp":1781615366114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1pL7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://upholdvip.im\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18940\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 14 Jun 2026 15:35:17 GMT\r\nexpires: Mon, 14 Jun 2027 15:35:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 164049\r\nlast-modified: Tue, 09 Sep 2025 18:33:46 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":18940,"size_decoded":19753,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18940, version 1.0","md5":"5c8b2708e9cd88a6c9e2172fd1a09d80","sha1":"f8da9a4c7fe5fbb441e8e1e2587f8e7e8e25bf8b","sha256":"20fc1e117a255531a9f1bfc780fa9827a22820f8e07560b155323dff5fd908f2","sha512":"d56292486b6274e3d0d5a00cfa19573469ac4d4173fbdc786cdede8d9e18b8eecba8aa647a115b32770feea0ac2d59c54092642863d4cc2ea725560435c6b780","ssdeep":"384:B5OeSmylzizCljGvu0333XLJyBo9/fsItLbLvAsik1LJ57o:BTylizClUpH9mo1UIt/Lykpno","tlshash":"3c82e0a7f1a24589d84b87c02098e7546967b70821d6acea411be4d90bdbf5e20ad32e","first_seen":"2025-09-12T00:27:30.877732Z","last_seen":"2026-07-13T10:15:05.479909Z","times_seen":2822,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Material+Symbols+Outlined:wght,FILL@100..700,0..1\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:25.484Z","timestamp":1781615365484,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Material+Symbols+Outlined:wght,FILL@100..700,0..1\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upholdvip.im/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 16 Jun 2026 13:09:25 GMT\r\ndate: Tue, 16 Jun 2026 13:09:25 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":684,"size_decoded":1079,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8723b2b2e249460a1a7fd04ae021a2d0","sha1":"e4edf871297d2b7872c914c5f9e1fcd5b8364c8d","sha256":"4d9f17bbff73e0b13008ae58961b373591e3b909b2266e9f8a5eafbe78411d66","sha512":"24d01645be3d3a49d0e95192c0a5d55eb047c66871234b3cd59f7677e471402f778274e763a6e60731f696b9214982d56ba289bdcc3e67f939659ed8a4e5ad2e","ssdeep":"","tlshash":"df0199987a569805a5150c43334f7f221e29491f284ac9feaf410d0c9efe8770349b0f","first_seen":"2026-06-12T06:20:13.160509Z","last_seen":"2026-06-17T16:47:51.948128Z","times_seen":128,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":47,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/spothq/cryptocurrency-icons@trunk/32/color/sol.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:26.043Z","timestamp":1781615366043,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /gh/spothq/cryptocurrency-icons@trunk/32/color/sol.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upholdvip.im/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Tue, 16 Jun 2026 13:09:32 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 62\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"3e-tzY6KtxJvhNrsV7rw/IUffhCtbc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230152-FRA, cache-bma-essb1270047-BMA\r\nx-cache: MISS, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ifZVXUf%2Fpv5EmfWJtBcUT2qKiqIt6K0AX5Xbs719ZFhd5vn0eYuFqvk4Da0AenXxzfrtI%2Frprqa7rDcb3wk4fzw%2BrTxSGPyz5WfexNCoetJh%2FfNJXHaKD1cq2cSxyTnz%2Bgo%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a0ca0c872e1256bd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62,"size_decoded":1117,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"330aaf8d87a09c7d261c683abf86d722","sha1":"b7363a2adc49be136bb15eebc3f2147df842b5b7","sha256":"8ec8178cdb4a1bcb0114c6f0e3a268a104ad4f68c07eccb1b740de751b8db8d4","sha512":"9ddb30a67f0d3ccf6bd261b76b38b4aabc2297321fcece1f23d3fd3ad11ef5727c66ea883106cb0aa25dbe7d57a0875b42db3718140b4440dafb24b9872e4f5a","ssdeep":"","tlshash":"17a022a30022c0a2cbf2c08f2028c2b0802c00882222b020a20ab30a08bc000a282bf3","first_seen":"2026-06-16T07:11:01.611533Z","last_seen":"2026-06-16T13:14:20.152761Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6081,"timings":{"blocked":-1,"dns":0,"connect":3,"send":0,"wait":5857,"receive":0,"ssl":220},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/spothq/cryptocurrency-icons@trunk/32/color/dot.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:26.132Z","timestamp":1781615366132,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /gh/spothq/cryptocurrency-icons@trunk/32/color/dot.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upholdvip.im/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Tue, 16 Jun 2026 13:09:30 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 62\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"3e-tzY6KtxJvhNrsV7rw/IUffhCtbc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230191-FRA, cache-ber1080026-BER\r\nx-cache: MISS, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SUbwbgaZWN5CVk9gDbTL131WKssLRr1UcYrzrtaS637q5o4OCWcYTTJfwdhp6VMG0MkWl5jNKHD6NGSB4JOzjhTqKc7z1cRF42u0FDJxKRoChNLgnY7d2bJB6qA51PctQZA%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a0ca0c865d3656bd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62,"size_decoded":1102,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"330aaf8d87a09c7d261c683abf86d722","sha1":"b7363a2adc49be136bb15eebc3f2147df842b5b7","sha256":"8ec8178cdb4a1bcb0114c6f0e3a268a104ad4f68c07eccb1b740de751b8db8d4","sha512":"9ddb30a67f0d3ccf6bd261b76b38b4aabc2297321fcece1f23d3fd3ad11ef5727c66ea883106cb0aa25dbe7d57a0875b42db3718140b4440dafb24b9872e4f5a","ssdeep":"","tlshash":"17a022a30022c0a2cbf2c08f2028c2b0802c00882222b020a20ab30a08bc000a282bf3","first_seen":"2026-06-16T07:11:01.611533Z","last_seen":"2026-06-16T13:14:20.152761Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4629,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4629,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcR9VCyanORchqA16UEy9boiiD0nlC-4Y6Z-1w\u0026s","fqdn":"encrypted-tbn0.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:28.262Z","timestamp":1781615368262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /images?q=tbn:ANd9GcR9VCyanORchqA16UEy9boiiD0nlC-4Y6Z-1w\u0026s HTTP/1.1\r\nHost: encrypted-tbn0.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upholdvip.im/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/images-tbn\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"images-tbn\"\r\nreport-to: {\"group\":\"images-tbn\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/images-tbn\"}]}\r\ncontent-length: 5025\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 16 Jun 2026 07:10:25 GMT\r\nexpires: Wed, 16 Jun 2027 07:10:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 23 Oct 2025 08:44:54 GMT\r\ncontent-type: image/jpeg\r\nage: 21543\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":5025,"size_decoded":5840,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"d84cb903f52bc191e8385bfdf7c58bc9","sha1":"382fa64fd9f177505794034fa0a04a4701d8271d","sha256":"cfa47ff4041bf7174907631faafb1fc20089d826b84cf3e203d91b41c2600360","sha512":"63688175975d1e4015fd7a86582477f5fed34bf2e7e1a3c907151244e0e3d32cceb9e89875d286e4e14b9d64221fc5aec21b49fda88182a8fdb9bda9195383f2","ssdeep":"96:RmJpw1SbnHWUe+dxHjJfYK3mKJoQXFlt6rNFHgzHc2bnfP8uF:kJpw1uF/xDJfPmsoQ1lMJFAzTz8m","tlshash":"5fa16b4d5f68acbcd445c370332a4127fa498047f593626b5cfb80a2187fbca9e2d14d","first_seen":"2026-06-16T07:11:01.610519Z","last_seen":"2026-06-16T13:14:20.155735Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":15,"receive":1,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upholdvip.im/h5/assets/js/vendor-vue-CmgJETlJ.js","fqdn":"upholdvip.im","domain":"upholdvip.im","tld":"im"},"ip":{"addr":"172.67.174.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:25.487Z","timestamp":1781615365487,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upholdvip.im","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 14:33:00 GMT","end":"Sat, 12 Sep 2026 15:21:04 GMT"},"fingerprint":{"sha1":"01:77:C7:56:E3:3F:6B:02:53:B7:D5:3A:FC:AC:BA:41:45:70:17:F1","sha256":"42:3C:B6:EC:E4:1F:77:59:43:E8:BC:FA:17:63:F3:98:99:2C:1E:AD:96:79:8E:D2:CF:D8:A7:4D:9D:63:32:59"}}},"request":{"raw":"GET /h5/assets/js/vendor-vue-CmgJETlJ.js HTTP/1.1\r\nHost: upholdvip.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upholdvip.im/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 13:09:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 31 May 2026 18:04:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1c7832-1b7ea\"\r\nexpires: Thu, 16 Jul 2026 07:10:24 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nage: 21541\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3eDN9wfdHBImvlVGy38h25yXAJ7KpcqPKRUGcDoCeocF9X%2FANn7TDawdnPEJKVO5OQ59Ub1E7gI1rrEE6FJ32p1Z5goq9ExfRzX8M7Ta8UdmWQNvMobzb%2FxL919raqw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0ca0c824a8b56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112618,"size_decoded":44763,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (45188)","md5":"3ef3889b977315fc496d8cc99e1cb026","sha1":"5b94b12106cf3b0f5770a9b950f8c35c0805661f","sha256":"85caedc731db8b1585d022c4777a916a0a1bc6d037401013e935d27a04f00400","sha512":"3b3be276b4d2119a26e058b1f92b21675484cdd1bba4c2158adbf5d0dde3155a9d2f63efa493f9343ade16242f09acd3ba4ab4f8eb07395809ad4e8bba83a449","ssdeep":"1536:sTNLdzluIFxx6Qwz6Wc7NXd+y/LDOu0KHwJKL3Yp/iXPuxkgnAcsh:qNTlxx7Qc7n+kLF0AwJI32/nx/sh","tlshash":"c8b328e93286b46253f609e1007b0402f3791c89384d88d4b16deedb3d7745a81abf7e","first_seen":"2026-06-16T07:11:01.609262Z","last_seen":"2026-06-16T13:14:20.157366Z","times_seen":2,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"upholdvip.im","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upholdvip.im/h5/assets/js/vendor-utils-BwYsbWOI.js","fqdn":"upholdvip.im","domain":"upholdvip.im","tld":"im"},"ip":{"addr":"172.67.174.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:25.492Z","timestamp":1781615365492,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upholdvip.im","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 14:33:00 GMT","end":"Sat, 12 Sep 2026 15:21:04 GMT"},"fingerprint":{"sha1":"01:77:C7:56:E3:3F:6B:02:53:B7:D5:3A:FC:AC:BA:41:45:70:17:F1","sha256":"42:3C:B6:EC:E4:1F:77:59:43:E8:BC:FA:17:63:F3:98:99:2C:1E:AD:96:79:8E:D2:CF:D8:A7:4D:9D:63:32:59"}}},"request":{"raw":"GET /h5/assets/js/vendor-utils-BwYsbWOI.js HTTP/1.1\r\nHost: upholdvip.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upholdvip.im/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 13:09:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 31 May 2026 18:04:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1c7834-1cc1e\"\r\nexpires: Thu, 16 Jul 2026 07:10:24 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nage: 21541\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yR0B0QPGne3PG22cOzBJ001U2pgPFKXOeKg4rD%2FN%2BlrP%2F4NuO7yDHTstvSy7dicDhO%2FeIjh%2F%2Bjqh5GOecf7HoNwhwD0niuaA6eM6qklXqAD6%2FvxXAGbJk8Zj7K0aOs4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0ca0c825a8d56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117790,"size_decoded":45287,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24189)","md5":"79fbeded4e0578c7241c3c555f3e78bb","sha1":"6adc6badcba1243abf6ffc11fd7f8f201e354c20","sha256":"3aebe1f3366ce825234adffe977a098639798f2c7786926bba501646cb55a98e","sha512":"8f3f689b9e04c3186c34a4ba44a76282ab6543d652f8a11282205f941e67e20e702c6428cd75866d00edb746af2d007a14e4dd30bcef26ba7d53286384b4632c","ssdeep":"3072:7p+LpT0BkFjuNikHzlk0gCfHBNVmCuOGlgkXJATloT2xB:7p+LtUkFgi5KGbT4B","tlshash":"c0b34ad97292706753eb61e8007b050af2bd9c15740c84a8f688dde73cb994a91bbf3d","first_seen":"2026-06-16T07:11:01.615428Z","last_seen":"2026-06-16T13:14:20.15912Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"upholdvip.im","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800\u0026family=JetBrains+Mono:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:25.544Z","timestamp":1781615365544,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700;800\u0026family=JetBrains+Mono:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upholdvip.im/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 16 Jun 2026 13:09:25 GMT\r\ndate: Tue, 16 Jun 2026 13:09:25 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22579,"size_decoded":1730,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"5d8cc665b32c9d8e88e2de3920e98bff","sha1":"ecda86e41e3cd533e94c3758421d0784b69c7e3f","sha256":"8295ab9f938da66d56c2ce64b203c291d33e10572e870454ce26a1db4093cafb","sha512":"89970a08d159218953160c26f07b886adec9272c079e6724bcc7c64620fbc33e7d12f0ab4ae68ba85399d1a983177359fdc64f941545e33b9c135b64b01e5481","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHgG+7p3ZAt:vXuM0p2+g7rOGC6CmOW","tlshash":"6fa2eb91002ba400ab471cc673cf7e3abdce504a6085d5b99ffe0d899ceac66537475d","first_seen":"2025-12-19T05:16:15.847388Z","last_seen":"2026-07-13T07:45:14.0545Z","times_seen":37,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upholdvip.im/h5/assets/js/Index-DyHuBvDA.js","fqdn":"upholdvip.im","domain":"upholdvip.im","tld":"im"},"ip":{"addr":"172.67.174.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:25.899Z","timestamp":1781615365899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upholdvip.im","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 14:33:00 GMT","end":"Sat, 12 Sep 2026 15:21:04 GMT"},"fingerprint":{"sha1":"01:77:C7:56:E3:3F:6B:02:53:B7:D5:3A:FC:AC:BA:41:45:70:17:F1","sha256":"42:3C:B6:EC:E4:1F:77:59:43:E8:BC:FA:17:63:F3:98:99:2C:1E:AD:96:79:8E:D2:CF:D8:A7:4D:9D:63:32:59"}}},"request":{"raw":"GET /h5/assets/js/Index-DyHuBvDA.js HTTP/1.1\r\nHost: upholdvip.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upholdvip.im/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 13:09:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 31 May 2026 18:04:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1c7834-5ebb\"\r\nexpires: Thu, 16 Jul 2026 07:10:25 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nage: 21540\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vhg%2FfjpvFHO0PN%2FN8kVeveohJKEwZaUmYjgbljJJqB13%2Bw1P4weXsPB2%2Fq5jjhxAzLazddXTKxEcckmkoHB0voxBPDm%2BWHbMRwJAk%2FMcpQH7281Vggioz%2Bag4SDgP7k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0ca0c84daad56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24251,"size_decoded":8864,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (24198)","md5":"5cb4337793727286f74765bd077a3b4f","sha1":"5832923a0f7b4f8b183057fdd5f6a6c6d353d77b","sha256":"232f3b0c43e3e927c91680f93cf117d28c710d32906d6e161ccc43a22240a060","sha512":"801160352d78d505fc710d33dd4b9c71b421a960d2fb00b8c572e64a264631ac94967e2a8eb8de49887c65653a90d28eba4266639eb6b221075e358f90b9d85d","ssdeep":"384:EGdELpsBrk80LEQ8/1OG3ejCYG3glooc9hF3xzjjMb/LoqOjT/o3GYio/UV8vJbi:EGdELWBIQhYaglUzF3xzjILoqO/o3GBh","tlshash":"44b2b320e2114b3ea0a361f5b5d4394821a4bfdadb054da375bcc5352bd2dfa372e226","first_seen":"2026-06-16T07:11:01.613422Z","last_seen":"2026-06-16T13:14:20.162838Z","times_seen":2,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"upholdvip.im","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/spothq/cryptocurrency-icons@trunk/32/color/usdt.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:26.124Z","timestamp":1781615366124,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /gh/spothq/cryptocurrency-icons@trunk/32/color/usdt.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upholdvip.im/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Tue, 16 Jun 2026 13:09:27 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 62\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"3e-tzY6KtxJvhNrsV7rw/IUffhCtbc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230215-FRA\r\nx-cache: MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D3zWoOiyR7jlyPZI2hbZSG2xDg5VcDj416Zg4xVHUWVasFuPePAlAt%2FQ8K5SbRNPpVLq3%2BtwIDsypqT9IIUZDEe41fn0l92SZjdhTdLciQFwTJGX%2FM%2FzuLz4JgdN%2BIseDe8%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a0ca0c864d1c56bd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62,"size_decoded":1084,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"330aaf8d87a09c7d261c683abf86d722","sha1":"b7363a2adc49be136bb15eebc3f2147df842b5b7","sha256":"8ec8178cdb4a1bcb0114c6f0e3a268a104ad4f68c07eccb1b740de751b8db8d4","sha512":"9ddb30a67f0d3ccf6bd261b76b38b4aabc2297321fcece1f23d3fd3ad11ef5727c66ea883106cb0aa25dbe7d57a0875b42db3718140b4440dafb24b9872e4f5a","ssdeep":"","tlshash":"17a022a30022c0a2cbf2c08f2028c2b0802c00882222b020a20ab30a08bc000a282bf3","first_seen":"2026-06-16T07:11:01.611533Z","last_seen":"2026-06-16T13:14:20.152761Z","times_seen":2,"resource_available":false,"data":null}},"time_used":991,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":991,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/spothq/cryptocurrency-icons@trunk/32/color/avax.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:26.127Z","timestamp":1781615366127,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /gh/spothq/cryptocurrency-icons@trunk/32/color/avax.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upholdvip.im/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Tue, 16 Jun 2026 13:09:27 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 62\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"3e-tzY6KtxJvhNrsV7rw/IUffhCtbc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230064-FRA\r\nx-cache: MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m5jOyaho1iZt7P063oa%2Bcjf2RGOFXtTZo5hb9MzdAQfXL748VNI5RHVw3%2BmlPHI2eIXHv00%2BZEU3SS6hfgESB3qY%2FGfGDCQw4iUO9dSmMTb444HT40gWGgpROQ3w3SgejZE%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a0ca0c864d2456bd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62,"size_decoded":1082,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"330aaf8d87a09c7d261c683abf86d722","sha1":"b7363a2adc49be136bb15eebc3f2147df842b5b7","sha256":"8ec8178cdb4a1bcb0114c6f0e3a268a104ad4f68c07eccb1b740de751b8db8d4","sha512":"9ddb30a67f0d3ccf6bd261b76b38b4aabc2297321fcece1f23d3fd3ad11ef5727c66ea883106cb0aa25dbe7d57a0875b42db3718140b4440dafb24b9872e4f5a","ssdeep":"","tlshash":"17a022a30022c0a2cbf2c08f2028c2b0802c00882222b020a20ab30a08bc000a282bf3","first_seen":"2026-06-16T07:11:01.611533Z","last_seen":"2026-06-16T13:14:20.152761Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upholdvip.im/h5/assets/css/index-BJ7hidxh.css","fqdn":"upholdvip.im","domain":"upholdvip.im","tld":"im"},"ip":{"addr":"172.67.174.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:25.494Z","timestamp":1781615365494,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upholdvip.im","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 14:33:00 GMT","end":"Sat, 12 Sep 2026 15:21:04 GMT"},"fingerprint":{"sha1":"01:77:C7:56:E3:3F:6B:02:53:B7:D5:3A:FC:AC:BA:41:45:70:17:F1","sha256":"42:3C:B6:EC:E4:1F:77:59:43:E8:BC:FA:17:63:F3:98:99:2C:1E:AD:96:79:8E:D2:CF:D8:A7:4D:9D:63:32:59"}}},"request":{"raw":"GET /h5/assets/css/index-BJ7hidxh.css HTTP/1.1\r\nHost: upholdvip.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upholdvip.im/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 13:09:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 31 May 2026 18:04:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1c7832-14964\"\r\nexpires: Thu, 16 Jul 2026 07:10:24 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nage: 21541\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yUTiVWovfWqOxb2jPXZ0H%2FzhTPVGdZCNSQ2b2rNW8OrRKmzoiWwhQO9JWsbyg0RkROszw8vKqKJsKUU4zdUaJh1ZZgzSK0xv4U%2FZCkXDyvvNURDaSmPTfhMFvF0w6iA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0ca0c825a8e56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84324,"size_decoded":16869,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f19387725c9a399fd9cffa00735fa7cb","sha1":"7fc3ad1b3b33c683ffcfd2f4cbf94d1c4fefa69c","sha256":"28a76f19cfc4c5e965d8785143bddb7625cf4e769a17eb2ea9fce750e534b0cc","sha512":"7252605d0220ec5865f08e32bd6699e36e1de2c6b9363a3dcb2f8dcc9866218a70c359ee779241b6fd0cd263c8ba06657d308679ff8e57e6b8625a9af7c6b1bf","ssdeep":"1536:++OgdZyem+fQqlFcU6xHBKUqbX/BDhegDDknF/4eStyc:NOgdZyem+fQqlynHBKU4K264eStP","tlshash":"6183743d9a94003b7c1791f5d5e8fa5df61af0c0de3a5baeb88261109bd23f61da7600","first_seen":"2026-06-16T07:11:01.622258Z","last_seen":"2026-06-16T13:14:20.165615Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"upholdvip.im","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:26.111Z","timestamp":1781615366111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://upholdvip.im\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 14 Jun 2026 12:19:00 GMT\r\nexpires: Mon, 14 Jun 2027 12:19:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 175826\r\nlast-modified: Tue, 09 Sep 2025 18:33:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":84924,"size_decoded":85737,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84924, version 1.0","md5":"f5b588b5cfef2173838149769c8a0269","sha1":"5312086a01f8e8299094ddee5819b9727a19cae2","sha256":"b8811a6cd6f7e0707dfc9e9e6f1daf5f6f450b51e887e163945a9ade91c2720f","sha512":"05d5271c633bbe102775c0b6df9c5e110dae3a2517061714bb5c26ec66a00f8e1b62961135ec96962e7ccaf3942d8e32bd86f42558cbac8ee16ff6c333117886","ssdeep":"1536:PABWz4rSN/GzH27xN5UR1OnX+uyRsd1osLZBi/JGyQI01xDj+C:PAG4rCGa7L5UR1OnX+fGd/VB03QI+xP","tlshash":"378302b4ae71b3968f1c7fe46396273c2a7bdf41053950aeae44e16787f00dba148784","first_seen":"2025-05-29T19:39:57.235915Z","last_seen":"2026-07-13T11:08:09.285664Z","times_seen":18155,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:25.858Z","timestamp":1781615365858,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://upholdvip.im\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 11 Jun 2026 01:47:01 GMT\r\nexpires: Fri, 11 Jun 2027 01:47:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 472944\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-13T11:17:56.345809Z","times_seen":233417,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":30,"send":0,"wait":16,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/spothq/cryptocurrency-icons@trunk/32/color/bnb.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:26.045Z","timestamp":1781615366045,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /gh/spothq/cryptocurrency-icons@trunk/32/color/bnb.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upholdvip.im/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Tue, 16 Jun 2026 13:09:32 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 62\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"3e-tzY6KtxJvhNrsV7rw/IUffhCtbc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230020-FRA, cache-bma-essb1270030-BMA\r\nx-cache: MISS, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KqY8q8qujMiBbYQX96t2Z5%2BFHe6wbYmGbHJbOqqWcn1UcuJcsGnzW1%2FHfJAzKcjj74qJS9ZaOUHYrCbww4zjz5%2F8nv2e50qBWThrdaO2aHxRC5Kxm7I4fXcGXPR9vHp18WA%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a0ca0c85ecad56bd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62,"size_decoded":1113,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"330aaf8d87a09c7d261c683abf86d722","sha1":"b7363a2adc49be136bb15eebc3f2147df842b5b7","sha256":"8ec8178cdb4a1bcb0114c6f0e3a268a104ad4f68c07eccb1b740de751b8db8d4","sha512":"9ddb30a67f0d3ccf6bd261b76b38b4aabc2297321fcece1f23d3fd3ad11ef5727c66ea883106cb0aa25dbe7d57a0875b42db3718140b4440dafb24b9872e4f5a","ssdeep":"","tlshash":"17a022a30022c0a2cbf2c08f2028c2b0802c00882222b020a20ab30a08bc000a282bf3","first_seen":"2026-06-16T07:11:01.611533Z","last_seen":"2026-06-16T13:14:20.152761Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6054,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":6041,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upholdvip.im/api/v1/content/platform","fqdn":"upholdvip.im","domain":"upholdvip.im","tld":"im"},"ip":{"addr":"172.67.174.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:26.047Z","timestamp":1781615366047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upholdvip.im","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 14:33:00 GMT","end":"Sat, 12 Sep 2026 15:21:04 GMT"},"fingerprint":{"sha1":"01:77:C7:56:E3:3F:6B:02:53:B7:D5:3A:FC:AC:BA:41:45:70:17:F1","sha256":"42:3C:B6:EC:E4:1F:77:59:43:E8:BC:FA:17:63:F3:98:99:2C:1E:AD:96:79:8E:D2:CF:D8:A7:4D:9D:63:32:59"}}},"request":{"raw":"GET /api/v1/content/platform HTTP/1.1\r\nHost: upholdvip.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upholdvip.im/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Tue, 16 Jun 2026 13:09:26 GMT\r\nx-ratelimit-limit: 300\r\nx-ratelimit-remaining: 299\r\naccess-control-allow-origin: https://uphold.im\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WnH8Sksy%2BiW7Oj9yTEe0ITxnJ9CzS0YPglMfEb7d33rWTP4ds4pjqPZmo%2BYZqGraQWibCvRZ2tw1B8WXBOK175EF1dPOZjBRGfCw6UEcqXsz5dZThgQkHds7gtTmqUg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0ca0c85caba56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":273,"size_decoded":1001,"mime_type":"application/json","magic":"JSON text data","md5":"712584d8608aa1c17cf857347055d005","sha1":"d64acd1fcea1961daab73b81126e39c0666a65f7","sha256":"fa4aeac3430f68372a763fc911b7ed861479dc79ba7669f6142d0def5fd34912","sha512":"3f33e21e9eacbe3cf157bace62843e22d108c66e6e48d34989385cd1c1736b5d1e1edb6329cb0daa70ed6c1432bcb2b0ece58c06fd7b552e5ea5e42597bff992","ssdeep":"","tlshash":"0fd0c2510b3adc56ab7214c55aee0068c7e486c28a068bae50499cac8364568b356b35","first_seen":"2026-06-16T07:11:01.62022Z","last_seen":"2026-06-16T13:14:20.143899Z","times_seen":2,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"upholdvip.im","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:26.109Z","timestamp":1781615366109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://upholdvip.im\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 11 Jun 2026 01:47:01 GMT\r\nexpires: Fri, 11 Jun 2027 01:47:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 472945\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-13T11:17:56.345809Z","times_seen":233417,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/spothq/cryptocurrency-icons@trunk/32/color/link.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:26.134Z","timestamp":1781615366134,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /gh/spothq/cryptocurrency-icons@trunk/32/color/link.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upholdvip.im/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Tue, 16 Jun 2026 13:09:29 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 62\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"3e-tzY6KtxJvhNrsV7rw/IUffhCtbc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230206-FRA, cache-ber1080044-BER\r\nx-cache: MISS, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7dh37FA1u4yIBzX5l2FUXJi8PEsp9IQlUaRdYqTHJjNn6y770c3v4khyTVXNEBd%2BCHe2tEItIzNLVMvi3NMgUtszMWKvOkSqizSs9zIC5VFyqO3N38bGinMFo7Kb7OjOSH8%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a0ca0c865d3c56bd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62,"size_decoded":1104,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"330aaf8d87a09c7d261c683abf86d722","sha1":"b7363a2adc49be136bb15eebc3f2147df842b5b7","sha256":"8ec8178cdb4a1bcb0114c6f0e3a268a104ad4f68c07eccb1b740de751b8db8d4","sha512":"9ddb30a67f0d3ccf6bd261b76b38b4aabc2297321fcece1f23d3fd3ad11ef5727c66ea883106cb0aa25dbe7d57a0875b42db3718140b4440dafb24b9872e4f5a","ssdeep":"","tlshash":"17a022a30022c0a2cbf2c08f2028c2b0802c00882222b020a20ab30a08bc000a282bf3","first_seen":"2026-06-16T07:11:01.611533Z","last_seen":"2026-06-16T13:14:20.152761Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3645,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3645,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Manrope:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:25.481Z","timestamp":1781615365481,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Manrope:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upholdvip.im/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 16 Jun 2026 13:09:25 GMT\r\ndate: Tue, 16 Jun 2026 13:09:25 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10720,"size_decoded":1411,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"da3301dfd91fdc1be5ab43c54f09b29d","sha1":"9450ee235452602effc7b92c803fbd441e3d6686","sha256":"f67253a45f3086760a0c4c204f5dad9636a0c0e0984ab5584b8b96b2c1aeeccb","sha512":"f4767030466d6b0f5f49fe20b39fc0124072c3d573da3e764ad4241473996ddcf818e4d565a55bdde791c6ebb73b4f124cbcd3e45b31cf3c56bd44edb6df11fd","ssdeep":"192:zJDEV3WW89RJ8rV3118+4JlOV3MM8b/JGNV3TT80uJHYV3668hs:9wU+ME02EQJ","tlshash":"8a22a990002be804eb470cd677ce7e39ad4e61567451c5ba5bfe1cd8addbd222320b5e","first_seen":"2025-09-06T21:49:31.167078Z","last_seen":"2026-07-13T10:24:53.808116Z","times_seen":6218,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":34,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:25.542Z","timestamp":1781615365542,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upholdvip.im/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 16 Jun 2026 13:09:25 GMT\r\ndate: Tue, 16 Jun 2026 13:09:25 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15162,"size_decoded":1524,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"cd46912baf19b9fe32c8e6a6320bcaf9","sha1":"08ee007e9656ed41ffbabdb06701a3895bfa0094","sha256":"92a04c9ec1ae41b88f1eda4e7c4d74ffea87294a25c63c0fcdd7472dd82f1035","sha512":"33912fabd74bd7afee0c49ddd4b89161dfc7939fabb2ac6a75b9a5b4fd3e745fcdb6a4dda2ba6ddef3c9177f4ac972ff43239bc2f1af456c7530e7b981510b9e","ssdeep":"192:wNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kc:8KYXuM0p2+g7r","tlshash":"3f628892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T14:17:01.635764Z","last_seen":"2026-07-13T10:43:47.044811Z","times_seen":5170,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/spothq/cryptocurrency-icons@trunk/32/color/eth.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:26.041Z","timestamp":1781615366041,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /gh/spothq/cryptocurrency-icons@trunk/32/color/eth.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upholdvip.im/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Tue, 16 Jun 2026 13:09:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 62\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"3e-tzY6KtxJvhNrsV7rw/IUffhCtbc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220088-FRA, cache-ber1080036-BER\r\nx-cache: MISS, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JBw0jBjtaZjrtQlLu2ydhXVCqXOmFc%2FWC18mUWQ6aiXy%2FX8lZwFwxIaRCOXVxQy43G%2F%2FdJHE%2FMG9%2B12XzGuKko0nwBb5JGWd84lurD3XfrhG%2FrdVsG3Y30hYUkJ6b3KDe%2Bk%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a0ca0c85eca756bd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62,"size_decoded":1118,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"330aaf8d87a09c7d261c683abf86d722","sha1":"b7363a2adc49be136bb15eebc3f2147df842b5b7","sha256":"8ec8178cdb4a1bcb0114c6f0e3a268a104ad4f68c07eccb1b740de751b8db8d4","sha512":"9ddb30a67f0d3ccf6bd261b76b38b4aabc2297321fcece1f23d3fd3ad11ef5727c66ea883106cb0aa25dbe7d57a0875b42db3718140b4440dafb24b9872e4f5a","ssdeep":"","tlshash":"17a022a30022c0a2cbf2c08f2028c2b0802c00882222b020a20ab30a08bc000a282bf3","first_seen":"2026-06-16T07:11:01.611533Z","last_seen":"2026-06-16T13:14:20.152761Z","times_seen":2,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":1,"connect":2,"send":0,"wait":583,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:26.106Z","timestamp":1781615366106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://upholdvip.im\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 11 Jun 2026 01:47:01 GMT\r\nexpires: Fri, 11 Jun 2027 01:47:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 472945\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-13T11:17:56.345809Z","times_seen":233417,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/spothq/cryptocurrency-icons@trunk/32/color/xrp.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:26.122Z","timestamp":1781615366122,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /gh/spothq/cryptocurrency-icons@trunk/32/color/xrp.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upholdvip.im/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Tue, 16 Jun 2026 13:09:26 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 62\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"3e-tzY6KtxJvhNrsV7rw/IUffhCtbc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220100-FRA\r\nx-cache: MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L2UIwMtUo0iPpaOepgUiHZoSJZSJD7FNqZPUJPhLIUKPcFM7fsvYIXVrqjk7nEOp45%2Fj9I0gMHph0nk0WIOtkb80TE0kEurdxYBPUc9KtQvd6GtHqCc1xlnOu89AFLz9aeU%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a0ca0c864d1956bd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62,"size_decoded":1076,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"330aaf8d87a09c7d261c683abf86d722","sha1":"b7363a2adc49be136bb15eebc3f2147df842b5b7","sha256":"8ec8178cdb4a1bcb0114c6f0e3a268a104ad4f68c07eccb1b740de751b8db8d4","sha512":"9ddb30a67f0d3ccf6bd261b76b38b4aabc2297321fcece1f23d3fd3ad11ef5727c66ea883106cb0aa25dbe7d57a0875b42db3718140b4440dafb24b9872e4f5a","ssdeep":"","tlshash":"17a022a30022c0a2cbf2c08f2028c2b0802c00882222b020a20ab30a08bc000a282bf3","first_seen":"2026-06-16T07:11:01.611533Z","last_seen":"2026-06-16T13:14:20.152761Z","times_seen":2,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/spothq/cryptocurrency-icons@trunk/32/color/ada.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:26.126Z","timestamp":1781615366126,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /gh/spothq/cryptocurrency-icons@trunk/32/color/ada.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upholdvip.im/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Tue, 16 Jun 2026 13:09:29 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 62\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"3e-tzY6KtxJvhNrsV7rw/IUffhCtbc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220048-FRA, cache-ber1080048-BER\r\nx-cache: MISS, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n1IJldKAmXdY8ayS6CjoGU%2BcIojQj%2FRXxDTq3SIpEHYxgR%2BEWnqWWBC9t%2BS69QDR%2FydSVENPZKx2%2BvgxQ8BhkbO6uJqbVuZHa7djVfQLjvSaZRhiQ9%2FXE%2FegKekKHY4DuIo%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a0ca0c864d2056bd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62,"size_decoded":1118,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"330aaf8d87a09c7d261c683abf86d722","sha1":"b7363a2adc49be136bb15eebc3f2147df842b5b7","sha256":"8ec8178cdb4a1bcb0114c6f0e3a268a104ad4f68c07eccb1b740de751b8db8d4","sha512":"9ddb30a67f0d3ccf6bd261b76b38b4aabc2297321fcece1f23d3fd3ad11ef5727c66ea883106cb0aa25dbe7d57a0875b42db3718140b4440dafb24b9872e4f5a","ssdeep":"","tlshash":"17a022a30022c0a2cbf2c08f2028c2b0802c00882222b020a20ab30a08bc000a282bf3","first_seen":"2026-06-16T07:11:01.611533Z","last_seen":"2026-06-16T13:14:20.152761Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3869,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3869,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/spothq/cryptocurrency-icons@trunk/32/color/doge.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:26.129Z","timestamp":1781615366129,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /gh/spothq/cryptocurrency-icons@trunk/32/color/doge.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upholdvip.im/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Tue, 16 Jun 2026 13:09:29 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 62\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"3e-tzY6KtxJvhNrsV7rw/IUffhCtbc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230110-FRA, cache-ber1080056-BER\r\nx-cache: MISS, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rYPOvjg9%2Fvtyvnf7b6DmTCziaPCMxFDSVEa3PzpACVbR5xiGpwbxqAKQj5SkGwY3IKHYEvyNrLTGGKt1%2BXwkR8%2BDl9l37285UnX%2F3cwoTF4KQ45Ha%2Fl6RDFBTHmfHT7DI8o%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a0ca0c865d2f56bd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62,"size_decoded":1112,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"330aaf8d87a09c7d261c683abf86d722","sha1":"b7363a2adc49be136bb15eebc3f2147df842b5b7","sha256":"8ec8178cdb4a1bcb0114c6f0e3a268a104ad4f68c07eccb1b740de751b8db8d4","sha512":"9ddb30a67f0d3ccf6bd261b76b38b4aabc2297321fcece1f23d3fd3ad11ef5727c66ea883106cb0aa25dbe7d57a0875b42db3718140b4440dafb24b9872e4f5a","ssdeep":"","tlshash":"17a022a30022c0a2cbf2c08f2028c2b0802c00882222b020a20ab30a08bc000a282bf3","first_seen":"2026-06-16T07:11:01.611533Z","last_seen":"2026-06-16T13:14:20.152761Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upholdvip.im/h5/assets/css/Index-C8cbc4Ru.css","fqdn":"upholdvip.im","domain":"upholdvip.im","tld":"im"},"ip":{"addr":"172.67.174.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:25.901Z","timestamp":1781615365901,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upholdvip.im","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Jun 2026 14:33:00 GMT","end":"Sat, 12 Sep 2026 15:21:04 GMT"},"fingerprint":{"sha1":"01:77:C7:56:E3:3F:6B:02:53:B7:D5:3A:FC:AC:BA:41:45:70:17:F1","sha256":"42:3C:B6:EC:E4:1F:77:59:43:E8:BC:FA:17:63:F3:98:99:2C:1E:AD:96:79:8E:D2:CF:D8:A7:4D:9D:63:32:59"}}},"request":{"raw":"GET /h5/assets/css/Index-C8cbc4Ru.css HTTP/1.1\r\nHost: upholdvip.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upholdvip.im/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 13:09:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 31 May 2026 18:04:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1c7834-474c\"\r\nexpires: Thu, 16 Jul 2026 07:10:25 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nage: 21540\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2FzpGO6LzW3uMi0jN6TbNZIP1dqIoAbX%2FXEwKe2eApFhHzJ5D%2BVga%2FAPFI0ZwKqkthvV4VHxcQ2tdGH%2FURXONJ3qHXblRa%2FXVeefcXKzOP1sAZoXQqQAVPXjLHGZFZA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0ca0c84eaaf56a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18252,"size_decoded":4760,"mime_type":"text/css","magic":"ASCII text, with very long lines (18251)","md5":"cd3cea3be3c86c7c5dce08e937a025f1","sha1":"aac4fe59b04e1cfe6e59a9f754774b641ad5daef","sha256":"6f42a8e37f092173002cb1c7e920cc9547c4dc539d180b62c5874a1e85c342d2","sha512":"879afd43dcc18696d92016809e24af867f7fad9ee142e0c975838001ce8134f396b294b6fe31ead8d617ceb03d36183f8bd0c780ca24af82f4c6db957b37677e","ssdeep":"384:d4mZKnvsycu10tMF7JVIjDTxQjYR6qW66o5gGuL:d45kycu0tMF7JV6b6o6Gu","tlshash":"c0821152b10ca52a7437f4f1b4c04acf7274fa0bd71e46bca641e225aa97d93373274a","first_seen":"2026-06-16T07:11:01.623532Z","last_seen":"2026-06-16T13:14:20.171755Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"upholdvip.im","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:26.115Z","timestamp":1781615366115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://upholdvip.im\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 11 Jun 2026 01:47:01 GMT\r\nexpires: Fri, 11 Jun 2027 01:47:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 472945\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-13T11:17:56.345809Z","times_seen":233417,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/spothq/cryptocurrency-icons@trunk/32/color/matic.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://upholdvip.im/","date":"2026-06-16T13:09:26.130Z","timestamp":1781615366130,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /gh/spothq/cryptocurrency-icons@trunk/32/color/matic.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://upholdvip.im/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Tue, 16 Jun 2026 13:09:31 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 62\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"3e-tzY6KtxJvhNrsV7rw/IUffhCtbc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220185-FRA\r\nx-cache: MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XxRZxGfnucG9AC422Ig7hqmInzq5oywsunkrvlUxl4Wow2UzLBoTb3tUWXjm3H8LLr%2BLNBXU3qvKDEFIzCcbJB3NIXERmGONW%2BYpxmk8h5rhKYv%2BLBv3H2tiub5z21mt4cU%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a0ca0c865d3456bd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62,"size_decoded":1080,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"330aaf8d87a09c7d261c683abf86d722","sha1":"b7363a2adc49be136bb15eebc3f2147df842b5b7","sha256":"8ec8178cdb4a1bcb0114c6f0e3a268a104ad4f68c07eccb1b740de751b8db8d4","sha512":"9ddb30a67f0d3ccf6bd261b76b38b4aabc2297321fcece1f23d3fd3ad11ef5727c66ea883106cb0aa25dbe7d57a0875b42db3718140b4440dafb24b9872e4f5a","ssdeep":"","tlshash":"17a022a30022c0a2cbf2c08f2028c2b0802c00882222b020a20ab30a08bc000a282bf3","first_seen":"2026-06-16T07:11:01.611533Z","last_seen":"2026-06-16T13:14:20.152761Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5843,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5843,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}