{"report_id":"1f54fc8d-cadc-4edd-8941-36b5f715b0ab","version":6,"status":"done","tags":[],"date":"2026-01-30T12:58:14Z","url":{"schema":"http","addr":"freefire.official-topup.com","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"172.67.196.112","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"freefire.official-topup.com/","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"title":"Top Up Free Fire | Promo Terbaru | Codashop Indonesia","dom":{"size":344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (344), with no line terminators","md5":"e7b73c6047e0800c6b9d95f3800ccfa5","sha1":"99d0f2d6d29b17bc31ef9f699ee0363c4736d0d4","sha256":"00bcd2f5bbfa8253ab276c7ea360a812e4b654a3f2d111167a507b758d5b2377","sha512":"751b9aecff714bec682cca4ec7772b966100b1ff3aa684308b667894554c06ad386091b52a02772ca0e764e142b6f20acc63af69e3caff4719ad733383db67aa","ssdeep":"","tlshash":"eae026ea2c66c83874e0038a20f6e29c162061a0bb15f74482d8d82a9f10fd35c92998","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"freefire.official-topup.com","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"172.67.196.112","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-06T12:58:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"freefire.official-topup.com","ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-26","domain_rank":0,"first_seen":"2026-01-30T12:35:47.338649Z","last_seen":"2026-01-30T12:35:47.33865Z","alert_count":96,"request_count":48,"received_data":611969,"sent_data":22959,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}]},{"fqdn":"d1qgcmfii0ptfa.cloudfront.net","ip":{"addr":"65.9.60.229","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2016-07-28T16:06:45Z","last_seen":"2026-01-26T23:41:30.556633Z","alert_count":0,"request_count":2,"received_data":6422,"sent_data":988,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-01-26T03:26:27.114953Z","alert_count":0,"request_count":2,"received_data":815960,"sent_data":846,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn1.codashop.com","ip":{"addr":"3.167.2.78","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2014-09-15","domain_rank":684437,"first_seen":"2020-11-16T21:51:06Z","last_seen":"2026-01-26T23:41:30.714025Z","alert_count":0,"request_count":6,"received_data":97166,"sent_data":3067,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"ph.support.codashop.com","ip":{"addr":"216.198.53.11","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"domain_registered":"2014-09-15","domain_rank":2494663,"first_seen":"2025-08-07T15:48:31.48001Z","last_seen":"2026-01-30T12:35:47.819037Z","alert_count":0,"request_count":1,"received_data":26438,"sent_data":505,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-01-25T22:25:20.721908Z","alert_count":0,"request_count":2,"received_data":254181,"sent_data":1043,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-01-25T22:46:21.910908Z","alert_count":0,"request_count":1,"received_data":90135,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-27T13:57:28.433315Z","times_seen":494812,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-07-27T13:59:40.670675Z","times_seen":46814,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"58c91bd75282c4b5ab6895fe9312580c","sha1":"7ae2980414bf4dce243bc6c3d340184c8c8d6d8e","sha256":"ad6aed4e8f32f84a62d78e277600158cdf5cb4db49bfeeb3188c474cf8a80675","sha512":"e6317ecaf1101dd809fb4b83d1df5ac137b67bde146c53d4e77d04120c6f6236fb3f73f5a6db5221653a9334c955348cf87a9b8dc2a70730edaf440f2a4871fb","ssdeep":"96:f/6/O7cLOeOPDZfSmUhmKEGajF30WO8hbh:fy4+kRqD80h8hh","tlshash":"71b1f105faf62ba05037907667f3c1052b2e002f9a06ce147a7d17d91f51b12fea1bad","size":5468,"data":"","first_seen":"2026-01-30T12:35:51.781015Z","last_seen":"2026-01-30T18:01:04.921613Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e30e6515264a1bd1ca6d45b7a648f1a5","sha1":"6ebcc162656b2b139ced390c1c80711534233a79","sha256":"a87014f724c7952724fbdea0693a54c36638d59fe8331d5e255e7c81c8d6c520","sha512":"ceb17b36df76a04648c866c6cd5bf1057901925a22bb6a7d7e181fe3751d44695312000cb14001cef74ce7a1012b7547e73f713fd526bf4d0141a70333f27899","ssdeep":"","tlshash":"5e71d308b0f70a50043be0676b77e50a2e19102ba706ce487abd56c92f997d772e275b","size":3522,"data":"","first_seen":"2026-01-30T12:35:51.782038Z","last_seen":"2026-01-30T18:01:04.923332Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"615dd601c34e09bdc5bcab65fd512bcf","sha1":"2d5fb4860833042897e36c43d1e2c8fab1a07e0d","sha256":"b6b25a425d2e5d5cea782460cd355c20857787f2d7e13561c3e97ad78af033fd","sha512":"3f0d5588a6cf29c9b30dd5b5835b06a8189ed6cbf59621fbe7a4ff2e742ca2441173f912b930b306ea3005eed09f566c5c58d0696dbabc6f127aebe4d5089274","ssdeep":"","tlshash":"30810e14bb7602c014bb51136fbbc5853e34122fe999ced8752ca5959f0221bfae724f","size":3892,"data":"","first_seen":"2026-01-30T12:35:51.782867Z","last_seen":"2026-01-30T18:01:04.92638Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"34a72ec03ffbe8a0172234735605ec4c","sha1":"bb6b431380e502401b7e67d82d95dd5d9b9f0ba1","sha256":"71d799a08620e29f6d61f667d7e7fb9b1251dcc478735c91f687701b45457900","sha512":"ef5b1a2e91d1fdf4983fd664cb258d06701497601d0579667b446cac2b78887a9bd57fc5c98479f9760fec25295a7d74698a3e2c875f16a29802d886e9bfbfba","ssdeep":"384:rQTST4WkiyaarGwzuKKpXsYFuTjRYXaHWtCwFvgwAxG:cWkh7W7zbuWthv9","tlshash":"2da2928ebddbf42803356ce5021b7cdb316e9d91284caa44c3d0d9f0baa13595edad98","size":23220,"data":"","first_seen":"2026-01-30T12:39:12.997834Z","last_seen":"2026-01-30T13:24:41.645768Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"97ba29560db6afce27f498226727f4b0","sha1":"7ccacdbccce0c274ed2f416e835a117f4c111fb3","sha256":"31babbdee7cd34bc51add809a29df3824b57367478e6dc0985252aa3e8888724","sha512":"361e288781be23aeac6b5b9d78c89ac96328d7641f8cc1a06da4959be6078c546425d0d5b58a7c31ed12f228174cbe45d8051fb3e0bb300266c37a6e59323376","ssdeep":"192:MRW39JaOhKowrG6GlOub7I+eCy9LmKNu4eY/LbWoUtAHpF7bZzYRnAVsV3Nya+qS:rtJYrG6GjI04LbW5tAHpF3ZzIAVsRq3","tlshash":"c252260477ba0534147b60bb2bb786846f38005fe317ce84b47c9cd41f6922afa9b69d","size":13571,"data":"","first_seen":"2026-01-30T12:35:51.784957Z","last_seen":"2026-01-30T18:01:04.927573Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d45c1f5aac2777850ac9264013ce4253","sha1":"5f3a8ed6497a818b6781031c3577f238ce60669a","sha256":"dd5b4e97f20aa9eab5675437edb368f46d57c35144f035a59a14fd1cfc337db5","sha512":"610740f24f6843dea890ca04ce4e7c922bfab69fede32b60c21237b5913abd075e5a150966807ef37782f8bfd8e55942404d7ac6fdee40327c36bcc87afa9dde","ssdeep":"","tlshash":"b91104753a161534c5c5818b317ee7a93d3220317a02a184c26ccc285d18d8314dfcbe","size":902,"data":"","first_seen":"2026-01-30T12:58:21.257678Z","last_seen":"2026-01-30T12:58:21.257678Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff1c60e68304cbb644fdd729c44633c4","sha1":"9a6a35b003052f831cf14f4c5b62edbe2b568b1e","sha256":"4f8a95db1b349ebd60252ecb9d6840f9c602abfe8c52e17803e4a0a0cc022642","sha512":"a890d2066422740b05591ad755eb1118a3bd4aed2d26df3804411146d2df4ab81b4d8c84931bb80087440def1bf15ed618636aa8eb6fd754a8f4166241cb38ec","ssdeep":"","tlshash":"d2d0239a3875853471d5034a10b7d3e83661306077157345c5c8cc1f7f11dd32cf5568","size":217,"data":"","first_seen":"2026-01-30T12:58:21.258558Z","last_seen":"2026-01-30T12:58:21.258558Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/InfoSheet.XvZuAAbC.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/InfoSheet.XvZuAAbC.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 552\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SBy5IjUM7leHA1EnfYXCQLoc0PKRd2sAGzWmWIIc5qfDL%2BhCDeoroRoWNxeXE3caPEJm4EtYESbSf7gsP7t2eeS3tI9SEj9lwFtU2zFPnjfvh5JSu9SXrag%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233b0d4656a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2210,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2209)","md5":"b5f50bc57e137ae680c9fd7abf2590c3","sha1":"14d94f9bb8266819eebe3baa9c993c9acea32ee9","sha256":"12bff07ff08aad91e2e2c7479fc4d2936cd085a4bb6dc74747ed3704a193804a","sha512":"8545b597e7b97e13fa208ccfa22ea28ed0208b23759f7b842897f5778cafa4b68e5ad8990aabf9af87bbd2151789f36a9329dfd4e945d6e61da93f6fea7ef2bf","ssdeep":"","tlshash":"ca41680c297d003aae3792f3f5965558b3c936a75f15f0b69b80e108cfb17c92ab855c","first_seen":"2025-12-27T19:31:15.484135Z","last_seen":"2026-07-05T11:03:17.943087Z","times_seen":44,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/InfoBars.DAVj1K-y.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/InfoBars.DAVj1K-y.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 382\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vWJnWKKP%2FOVnSTE0i0hMJysavx9hZE6msplP2DeRnZ3kj7gJQtuU%2BAqL9EWr7b8b%2BsaGodhn3VVE4BzAprAJmegsFaT2fdS%2BUL6qTVkqd7H1d5JHeFm49nk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233b0d4556a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1066,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1065)","md5":"f1d60a7d965da2b8cac944bc8f2bd0bc","sha1":"e1fabd7938c759e7d1a5311f1a18d138f4d1ce52","sha256":"14590b278fd7e50a835ffb1ce68d8b17315cc41aa201a7a41643477ee7facc10","sha512":"e8a1500d0e65c7e1119fbb4dabd6fe99d79e1d9f622b71c6ecec4efd30578050f1afc8ab5dcde9e17173a1b6a5c359003f6335902e7317a066fa921306736b5c","ssdeep":"","tlshash":"f3118051b159403b7d37a0fee196845a610b31c2ef2ba5c52de31014eed62db7cd2610","first_seen":"2025-12-27T19:31:15.67991Z","last_seen":"2026-07-05T11:03:18.001339Z","times_seen":44,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/TooltipDisplay.BP1mB7Cq.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/TooltipDisplay.BP1mB7Cq.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 718\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9eeIHeL2pRbWx5gBeKrJHW4Zo%2BqcIxgrm4mLKlCeiFrX00iNikCYgfiD0fBLvR%2FiX6WQF55Vwcy3iNRXiSO2hlYSHNoGpjLiDMEuNiAgEejmOf8iml9VPRM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233b0d4756a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3005,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3004)","md5":"dee036a7f1965cd20415af6d1f7774fa","sha1":"cba064e0b35c09e693ee4ba476308416a87ef4db","sha256":"0f1d9e5ae9eb6716154200fa3bebef35e2e599a88a25be72be3fbfd9c5ed985a","sha512":"3777b7006d38c18c6b09baab63de094f4f57729612397782b76df28322ebba95aaa552007e3181929682f89442e522f1d97a3c6a3f1dfdbe246078210dc1e4e8","ssdeep":"","tlshash":"c551cca3355a19f57fbbc030e841624d603bb15babdbd07582a7a20915c6b433ec22b8","first_seen":"2025-12-27T19:31:15.526539Z","last_seen":"2026-07-05T11:03:18.077296Z","times_seen":44,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/FreebieRedeemModal.BGvTUp8h.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/FreebieRedeemModal.BGvTUp8h.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 709\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F1Xit%2FZjhIXiFO7ZKYfHgi8iSzGrcvGASk36lzp%2BVGAgxffU0BVuHZMrtsRoD2ixR%2BWCvwOQCxnW7nxKxdYeUk%2Fb1IqZqwvyzZML1otxWYmiJPeBET7NWt0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233b0d4a56a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3165,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3164)","md5":"b8e40d9a425babadd7cd1f176d815b0c","sha1":"1cd673e24eb21edd5e9b2532ef9eae92dedffaab","sha256":"bfee63656f5c1a2255e1d6c8c6b4ce47ede6f9ebb460475ab8f4c8fcd1f97a7e","sha512":"823da6e6764e58b40eb6f33079a408a51961175538c530dac326a70b8167397dd23ab6de5fded8adeda1f3dcfe8ac62f9add2d23363aedfcdcef1de7c1d609dd","ssdeep":"","tlshash":"f451f0507a6de328387bd58370f09be68819e58da6126e56d7330f1dcca71c33a13a9d","first_seen":"2025-12-27T19:31:15.489762Z","last_seen":"2026-07-05T11:03:17.99904Z","times_seen":44,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/ManageCookie.BlPHKQhD.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/ManageCookie.BlPHKQhD.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 283\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oJWqRgsVJTI61%2B2oQWHpRcEzWMxR7dbiagAPCptIeiIpS07gw75EvFa15Q7cuM98%2F3YbCRvW3tY%2F2ulNZVIdz58LjtjK0Cn1abt0%2FAN27HBzrUZ3EmnX0cY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233b1d4c56a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":738,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (737)","md5":"8e1e5ff444bbb1bbbc8a4f5609d86f12","sha1":"1b38e1dd002a6945172916d5d7d18c215f575335","sha256":"41b6e95c947f29dd28378b9642c2b9132e1474581fa402b3f2dde1aa8a149917","sha512":"c1afaad099b7a26e8cbef2a0c99e32adb3d0a1569b71b37f7b56cd92bbcb317fae656f2d7dda94fbee6c21a98fefcf2f35d76f0e9c2d53059bc52ab58144ea1f","ssdeep":"","tlshash":"88019c19774c603d34b740a2b290448e8167caa6bf8a535afd632e7485c73f3ad61147","first_seen":"2025-12-27T19:31:15.537572Z","last_seen":"2026-07-05T11:03:18.091092Z","times_seen":44,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:54.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Fri, 30 Jan 2026 12:57:54 GMT\r\npriority: u=3,i=?0\r\ncf-ray: 9c6123410d9956a2-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DMJtmWXl%2BknYduQWlPqSQBXnjGrpda4geWretqgJJWMUmljegRYfcsExeWLoNNzC2S%2BYc7q7fBZNet7iCn%2BIuEv%2FUV3FXcUEh0DaTQ8lXhHBP7fUb5OO72lHJe6%2BTZTS54aqz6g4f0nXDRTs1NE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1514\u0026min_rtt=867\u0026rtt_var=737\u0026sent=119\u0026recv=47\u0026lost=0\u0026retrans=0\u0026sent_bytes=78780\u0026recv_bytes=14642\u0026delivery_rate=3521974\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=43321\u0026ss_exit_bw=2315594\u0026ss_exit_reason=2\u0026cwnd=17368\u0026unsent_bytes=0\u0026cid=45f46104ac1ec46d\u0026ts=1205\u0026inflight_dur=124\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23220,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T14:00:40.754596Z","times_seen":17564307,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/TrustTag.DTEznldf.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/TrustTag.DTEznldf.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 277\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b5dScIBvULni2dtOHRGOevL50tkDsYzcokBXk%2BMXiZ79YtljT2r5g0YQAzEDhK1ZLscjF1WD0%2BmxR2OAFSa8RG6rsqr9LdYbAqYxh8S3kkr4DLE28wTVoE8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233abd2956a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":782,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (781)","md5":"2402dfb2e5245b259772a247f86dbea6","sha1":"8541a56adb9447fd7c06555f4ce71a9c2de1d519","sha256":"1e811661613c7d2d332e2f8e01540ba8d224f6520377c58a7875b0f04c716d49","sha512":"edd250e3e6135d03ea24cea3266ee1831f78d79e84fc2995998b680eacfc224f79c00cde8a58c395532b969123770a60ce731bc8729a23be83db2bc19bd02461","ssdeep":"","tlshash":"fe014028aa348539ad37c5b7e654e461f3666383be430aedc982b730c852ad7bc52604","first_seen":"2025-12-27T19:31:15.647695Z","last_seen":"2026-07-05T11:03:18.037656Z","times_seen":49,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/Sidebar.61bhHIgO.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/Sidebar.61bhHIgO.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 999\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gZytdnEFPBrKW9AzD6315L55fnPkwFXZyh%2BmvIRKTgL95mOTVI5jmzpfZ5hD9B1yCS4REfmwq7Nnx8bKk%2BGNvYaM%2BQJvnwPowyabOhnExr%2FREx5oeOyVdu8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233b0d4356a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4144,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4143)","md5":"57942530fad6704ac4f08879160a6d49","sha1":"5409ebcb9904f5a99d4a8cb1177aa669c775492c","sha256":"305d977fc19431575693ecc835d67cc5ef11736cad976623fdf944fdd5874389","sha512":"0b81a8a5b5344fac2045cb73ceac2769e46572fb5de0492c88041df7e15ac49ba5b5746a72cefe0f69f75fe50d514a370cb6f3fb7b85dbc6257f4c67c44d7491","ssdeep":"96:RaRv823KSpjiCL2iOffvDadsS/VdJci2JE+eE2hLx188cljOsMOZtm2:FmZyLMJWosfh","tlshash":"26814211b28934243f37d1e2d5c494ad9106e6cbee2bf1eddd21032acdc67a27e81398","first_seen":"2025-12-27T19:31:15.479946Z","last_seen":"2026-07-05T11:03:18.113532Z","times_seen":44,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/apple-touch-icon.png","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:54.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BNhRZH%2FT25m3iIrfhd2VoaTCr%2BVjZmQ0b3Ad87JYGpvAH0qePftxkaktf31ZTe%2BzwEGnAZSgzUFZhMivaP2Qdz9HwNJenBvtYX9uL69BJyP2W6kguDZLT1U%3D\"}]}\r\ndate: Fri, 30 Jan 2026 12:57:56 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c612340fd9756a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-27T13:55:47.187528Z","times_seen":144280,"resource_available":true,"data":null}},"time_used":2090,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2090,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.9262252100502651:1769775981:2VEDo_DiDnUEvsrmzYl24TCZLaQKAwtzJVfzzSF-Ah0/9c6123307803712d","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:54.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.9262252100502651:1769775981:2VEDo_DiDnUEvsrmzYl24TCZLaQKAwtzJVfzzSF-Ah0/9c6123307803712d HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12171\r\nOrigin: https://freefire.official-topup.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12171,"data":"ZE$p6dbGAJtIbIbM5FzGTsbsnbIz5zODAz$Hbhz0pFedCPEPbBzXdZdnzEA5azidOptMzaBUbqwpWRHMWzWEEFWzAiCnzbdpbT1JJHbYJRqHpKqCI$$bX6IrJ4YlppzD81N1pqibHp8CUEzbs4IjLApntkj6Ud1dzoNpxz4dxPHaDCJGWfAGWgzt6Ajt4o+HUzF8nGWLDgU-gD+duHz6HazlEzPKS5zJrZqwapVc20bw2xiGmfjjEEz6$PzbetA1M690MJzRnTkecaHupzA8C4H$$pz6LH2ZspkI$zVDfdUI-G97$EzxsPHlUFAiDZIqDUGJszF$EHnTwCpztAXxHGCbPwkPw4P$zGKazwLHd$zxa8UMBC$dA$zrDqG1qq8l+3Xk32$Td7aOML2x5YIiAx+c$aOLTpzxYmxxzn1FeCounznDObnOdSOIAAF-OSNdhak55YgO0oa6MTdzM$dPzzipDB2lp1f8WWDsz66SxaO3iF7VXoNLBagXn0ki9SOd-HY4SYBnzfA6eN$CFk4d2mxzzcDTE+i9OfC3qPFZB$CPWcYLO7AYKWYi-WS-pTKMw23PZgOwZ+ZZjcDc$l2-LDTnysd7BXzQc$SXEN3PN0+WeKJD1GTdlTqzsqmFGpEUqW4Lt-JtDKp4PpMpXsVRe99fX6CyO2tKiotoyRJioPLZHQjTmlYeb86DZFQHQdz2AcjoPER8h+L0pKnh4PF+6kdPSi5uoeen5MK3CpSuOYJGh6SIbbr06+AF-thun$rgnywqI+zPznkpzMeJG$9FJh$czxWJ1lkJ+gdd4gYyahzDdKMEuqRrFrAuqsH45tH-qhh4B6mh$dpdtaHbcAHjzaZfDYHwnwx4la+p4z$D8fh$lAJ6U1zxA2$CoA2RbfbUbtuAxlAAhz7YA$$p836KEdGhzwRAWAOYUIi$AOtAWzdtlGa4hxHA0Z7U8dzA0u3-P96KOnUqF62HzFhlUYQxGp1FlUWz4h2I5cxXlAfNFzuHWJp8GM2UdT-Xnc0G$uaX6JzOqHPMAtOJ2Xq-phcxPaWbatpd$aJcEDDCcJWO1Ju1ehHn1ynxu1RFl750NXD9G+WF$4lnRtFw7RhV1IqtFwlq4NGActKOaBnQJZyOPRTn2z$eaxlHA-JsJ$$p$MbPAnHdIMl1RNRtAZ$kqSJ4WJaJUeFqbGRI+5JthbzPRAW8dxUVUEAOiwQ$ADwayOn2GbnbbpWAjx7kHiAgHXyAg5npZpMaiwAhW-ZWnn2TUu6mqiZ2EPxx7zqk7$ORreH5IEAHCwnQJLfohzk1skz39ji2+f8wF1bpRIXO+hzbARWlPYFzddp5w3BCRlik8nLlFWRNe+d5zOI6T-lE-pWR02for1AA6$HbRFDtmHwFlto6Lqz4x9L24ZdQXPFu$tD-ebp4JtodnPIVIpwYN8xZpoIx$UzqTE6BA9jsodOwsLm0emV+hfwt-JhxJQHJtjA5RsVU6Y1GpsIIg0VqKg0auFgo9Lf7qkDn2OcoLrtR0O1apl9eY1kN-QrobZQkAHt7s4QY74MLgRjYjDQJzztNyHbq$sNEstVE4zpasJz7z19zJQsQwBZJ-YFhn1u-UgTxlHWzxyNnUA7lp$$OpmM$bq8oA5RNFUKT4A6lVDDM$3-6HztaKtAbHdH1sGp5daAZTpM8Wb4tJWJlnYSgGrsfqJz$wrLZyFZmO8y580ADEMxxZdxpgDIt3fPSOG9rnAzdtpN7$f$8XH4AAjORGq26zoxElcCE-DRpR2glHLdhe8bKMbtD6fVddLGUIbnX+Qde9bwIjAxUY8kqYRkJElBMbs9Udd-phWG9dOWB91AA8-ahLLm9NP1sI8htiZ99zn3+99bD$sV2Z8i3+pI5-TuhxM9EdlwFJ$WHHbqggfr1xO$Mbqr9dswcApp9HnafYuxn$G9xDpzEJt$4QDs4fwkx9WkMc-$xtPw2PUeCrSJxxziikT--HK5UJG9U6C2g01IjlGrDc+8EtkxuiCrkJDGA+RITWSkHU7fSt7PzA$Bf$dsAdwsKX8zQt5DcF3zb3HnG8ErlwDJDSFLOk4bzKPHiK1Pp3mM63GkUWkw3jzdhnxn4TrglMGxSOllAglPtZwPMg19oSWfJJYG4VZ3P4zCty+xta8bmC$J-9+-9huiAbi2$P7sFazAITuDCeDc5iCO6tA3h3wxlVHs1wZ+nm$FnOTFQ6dC-t4nFtESrHPGAXZZEsap$PfFDQ6y45fC62SpbzmqHd7OUo3m61syOLjszZt9wi4R2JutegY8aaAVpkK$PLpSe9baLSlG7OrtXhHAwXqfU2CMAc6nefY6zfubVD1D9SKcpz0K$IcF$Dunf5-pJ2ZZ8AkhahNMTocIzrK34xGZ3fYpfLZ+Iy$Hr8bzri9kkacVHL-zJDkmZlzLz7BHWJQZcc-1QWCb-9iEPBxAbVOA7h$zNqDz0hz$nbk4zifeI4o3Jy8tJjkhU4k1OzhFrB+hI2IIEnrFbi+8xcY6AGnIl5jTZGrtAUCqIqknW6DcRFKwODQVzBPmWI$+Hlz3PXKU6KokHzHkgB0I$H0MbOBU3JlHxpIcu4M$$ZKQDyxUAulg8OGZjtoRoAb1KPqrJrr9Ig-2qqYIBiCrbcapzdTtRiHgnzkW86UrMpFany6Q-O+r7$p10b+Gs5lP7C2ns$RkqtisAYl6U2-tUNJAwtzgAbLFUaBV6n9lUtkVZ0D5XgME1KpdSyX$6$lzpHCTXzjca9nkQXkuTL8lBqqccQmoxJpsfpE4KwHzCadXtPcbAJw6jC0UQUbyzLVb-J$igrLMhaOYMo7fi5-lM6Y5ZcJMmJJdYdjzUZbbL5OnJR8BYnL4izxgksYzAqjMkgcbr1r+WjlsgoDDi76E9jr+aH3Oz0JeCEIyMn3U8DdtPbUQUg1CKl62e8D4BX7glkHA1xGYSHV8I5$$ip+u6HzqxR7zUZ5X4KbalW8Yf978RlE9dlejaacLWQ548YILen$8Es$R4ZpqAa+8s0oHrSUtzfabxCpMzye1MGLGT4+5rzwMAgrQYGwyJ3ZrNamRBMeJrtQjtHnk2cbt$t8ipIxOMJHIimx9qT80TeimHfRsMbdDt6LiHlq8RmLDJDn5+aJWwsks-IWqVyFpaq6h5ky3W-ZE2X+$$nWwcaNJN0O4Ii0r64aWWnA84UpILaIc4OFZEdmW9MbPrrt3O2Jc65i20ktbfW1SQxf9Vi4RMc62lnl0VyCwPiJADfn0JFSi-en69+cOo4h7bwZuXUpDGpbkm$cOEP5qYL+JlGCcR0b4RUcaXZwZR84NYgZy-duDwKoCV1rUmD6V2hxzwIeZZUXbKBu+se36oQp4xyb4eR6kDo27enWdr8IbMTLDhfO3w9cKEKKGW5wjIb3yj5qiRU8lM$2HlLnnUZwrSsJJVIzs38Oqsdleoe9$zn5km4+oJ5V9K72dkoZ+I$9BVgG4Dp-7R9HJ2Flz6x2+2IZgUKV9Wp6xLgYzYIXrQFVHX5d47ouhjF$+D9hE24IBWzdJIpizE$x4na9g9he5jnX5WGYULUMh+hlbe9q5u$xhUb0PsBj5$2lFcFIaEU$2eG1dunhI35P7$hunVUqo0a628dEAabnoI$YpOzuMESS+VFF$JrGrLAezgFEd6KYPVKdUbzXIxnwpE$P+wJl+KrdFGpjzRJnaubEgG4+h5bz8JIxbV+Tb7bA4kdsBPoK86nhkPUKa05o8u2eg4+S5lJ9$u+IdEPJMG9paDI2+bHlS1xis2+2$nkRzFat4XoXJTo5MEgwSKP39AMGrRgfdVJA$2K77$+c9aoOKu8lBH+kbnFl8ibk7bzA8I$d4897HaCA+H+TCRB7ferOxSnXJRz+z$f4kdC448hVHu8m8RSN8$zVAJs9d2hPrc$cC$KX8mPhELU-hIawAmrVUrBEfN7MKOI6IuzLo1+aSuookyFk26dPFPU2ol4Io3aP$qzI5XJ55s+G97s0FZfEgjndptMBbB5Zzg5R+YxFgtKrf6n85xW5hUSlGQADpto5PAGrKU5P$0I$Bt4dUCpG9nF9bEo5an+VWNkuAx$u5t4IgonssjfyoopzWJB0aWzu8paUa$B$+IoVJfUtzGp+JRB$+Krux0alJffKrqkJ$ff893+S7z3kBC947xpsbmxEbJIjMcap3$3bzize7yfQMP$fCHpPsnFRAN5zpRA1AmJL5x3taoCFpQUsIn5D4nsgGRztzVUV9qAnFzrBEKPCbmH3Sx42h4oRzBoYxsBPrPWmWG9PsznpbJ$n+wAMEMa+zxMCpU2ppVAiUdBniWzNCf+lzy4z$jGlJl+89RAqUlz+46fs2Y3DW2BxiHfzFriA32hmnRzZz+iXBwFs8z3hgXG3hQUaa8BLUWBp$P+VJUJziHzoGkp-7Viggt8PkJo3WEPxeYP2+FrRzF+6FjngAJ$gBPihk2ncM0oaPuidSFWAWonRUKaaa0eaFQhM8S47C5k05oM1+riy+Zhnd6kmUsBSF$pViE3plhbJ$$fHb7$y5op4WDAQU+zmoISenkb0bohzlSCB+$bplc$6zgE6xYCzlqoYoXlaajCRIekliHMXi47Ti2MAeisWJopegPrC2lpOxisB4uA38XCcI-222SePlT+2lMfKkh4-7Or6M+fjnGDXzmzbpb3SktW77$Mx2OJHWH8KI62EouaEPNCFDGUXGE8QaP8bIXG2eCF$zPsDzjJLDnbMrOzYoGDnMe9JfZzGehWe9foLK4J2klo0Gd70DkbNCri5dG$hGn4ffD5z2giakDbSkAit4$hA$ZP1zqPB+cadMmnqU9UWpc+648FVrOoQp28wiIMRPCDO2nF75uSyMd7cgLcV4XdmPQoNDbk+n-hMzG+IAgDI$zo2WFdWpbfw8P$l7KaISl859t4jDhST3ESbHC$NpRzqhkprbgSJIsBpX1SPs9UgGKhIapfG9onezrl$MdeUSoIHnP7Or0IJi$Kg5pWWKBzBc3aBgfW07wUon29ka+zuC5SsB4nTnqzRlkaYcbFsa65GnwlHW6nZoS3acSk2D9fzl89ViUhgcRWjlZJFxxn9W0DXG$oYIhc0ZGCF2Q5VZhIok3S3FNCk2QzQ5UcVeWXE$hI$f$EbobpJZPrxUu4GcK9O5J3$amCe97sCnrrOlPAHGe9fZsDYWmPOc8hrJ6kzgsaHZzaBnmPHp7aYBLSYKbzWo4J1DuKrXPCOTu8MioTlANUHkN+Hep3DXXGPrMFhIVlflPrxchflK2+8BGpopkeDZnfEopb24Xz$pxUGUVXonDx4XmXisW4OgiseWcGP783Elt4ongCtlZCrJYz2fSkfeKkt4$U$hHhbzU8ei+oHiHfDpPfOKOrYGVUaXwAqxwIeeAXl4YrKFOWTbNCsBQ9mGz5KConhSUhcgl8kZJKBZP3KW7lB5O5xnJcZzLhCUKKPi2IKlW3Vgxd$7EWYTLTVUFcHS1GGrNo+pGrqTy93cOxCJnClAk2k3l+c+g7pKhiU+7ccnO2hK8PPBNTGnRs1suW7WHFF$7bczaSTGL2op-7JCS4zokC88L3pbwJfTuU8CV3DSkWflp3y5G$O3SBISt0XK24O50+bFKXHinFT-SJdUjGQXWXZt1x7sA-3l2+PWkpcAnamDPshG5kNU+atGcgwUAk5aVoP73fcg0CVGw+wCBWlJyT28WpBFPq8Icz98YcO5IeZzJZzr3anrBIrWBa7MzlS+2W$WP7ununwUk4hIl+t-oJBAaJFpzOdK-KplP$lWa$t4KrRXGpPFL2V9ff$hC$I9JH4qC0$z$-qx1+IqHpgGVJQkT8GnfUIhCBu8qqqUF$UrXTUW1dP7ViVfNnneHtMZhTlA89o-ZZsi-Z8ZqZYZkk3-8nbpCpd4lD1MHi$qGAXbecsX1B6ouSqgh+RS1S+iDiEMnDaMgGx7sBdMkMfdi5KrnZqgffoiXe3aHY8pfpbD+31MMatzGWtl89c$oXzleaF7lzl2HUy8P0rJhIl8IAzFl8+-Iq8ionz4bKrgRiBCVJl+R-cgr8Rxb8TpiGYi0bezObz$BSbAdpxIp7pc4aQ46qxiu3C-c4MEmxYYT4upUMzlp8L$i0zauzC8zTzFY-G9NoZlflAcT84JpakaaarqzsdfsD$5wJhfr5otaqcYkpZYxYHe4Zppx-DpNDGlRZ8ZUTr2g2GlyDcg1-w-lJF6sBjCbFtldMJHp605Wp7tizk0dGC3-333OlXcu6--2hw6tlOrDt3TQDrgkG2GYOrgxdt+jabpsBOrW-Thso5LekMLsTfhrDD-zM0DcrunsBgr7kdkUp$YkcOxhaFgTi-OB+wJj5WrPbo36Zb+Tbk26UVULb$qenwxO34Kf3r-G93O6nUcDKVDj-xi3CC-2qe-LZ33Te6n3h3ar3mhYg6CUY6SkS5YpDPM-ic$AK8kOixi2DntoZ-Vmbt+Tf60e+f5H7lJV0CrX2UpWqDpuTdbiZUpHn5Kt493cz6+NDSKP$yScMjaOzhKwxXtuxOUucMhQUWT50A$gqKVVU1kH--WW--6kTeOOzOpwiZVtkzUxnmP7$sZQSjp9THVbFV8aOOD0o+pTY5tMtRI+t-7$4yFm5di2KlpAUDpQXl+VtbF+-qtKyCrQOF4uZdVg2HTGRi-DGseOTPrUTppdicMKPpF9S9dQPKfHBQ-zTwDZz6k3V98PsAKQPMWfr0kc0dL-Ypl3i$8NDioOS+Vdyd4ySipl+SFbzxdLG7UCqQbqF33t3QffhyF$qhk+uxGjediVHKhyn25c37$ffO6-q6AbyXyBR57fce9aY1fLIXT1qOO4cbDsrErSOSqAkibJR3ql4d-T32TMM5kd4jZ7VO0DlyBcAp$soGpK01OGnOF1rSJBnceZB3aoD94s6JY$XRs4ODnlp61ZWlAK3O28e6o9lHB$ENLGl8MfMsLM0ORrl73XejFBXJkGk-SKV$Yc$Ji9pKo3uHcka2+aYnFQ6iF2aMDISWJCUwJP6Dlg-mU99C-z-UrxcM4dDzlzc9up6jBngQSoOrbwUbGGnQkCPsD2qEDegViWpQtXIkMQP42iL$CBE-cGribp6tlDTHnpqsawq34$pn+ZyrV+CBnTy-07FYIKrNLnBOkFleOZ8Tm5d6Uiyow09$i48X9C-y4HpXtSZ2rD64$LRwR1G3weulw-y$6F$XLVUYAT-FpsDA$OP4PPjD+5-xmGn0XFpo814R3$lXq+o$EW-9mCM3ez5kFPObSB8J$d48+1xAhB2xLQ$42n97$z07+ylVHssYucc+6iXSnsBNiII937pr3VM7K-77sNpFp0JQPK0YRfV4umBBuUaccddbuCkMgLjlzu8Ugwa7qdqKakqp$CydcVUj5nelyndhgDeYiLirgYLl+Vio43aIFiayOaOBgxO$VHkLOP7pkUkrg5lUwcaZbP3NCfZRNjN0j$zSZzUFL1uRowum9elEgJ1i87su8PQESN3Sbkfonj9Qwq6d0uZfZriz4dj2FGmc9TugYFpqCs8WcG9dTRPZbI3HnFNmU8SlCbqpeDjeAHfxbDCW3HRpisfqdpn1sbja$ybnkIDfzfbz1dp$A$BopVsx3k0qE7mh7W-2jA13f5WtHWpzT4ldgeA$YzcXV8bt9dV8-HImOZiwnM$LO$JhlUir4kBWnKXroaQxwtIb+bPzE9caRHzrusYcW+EEoayqIzkqg7jsWpRH$Ox1iJIKhq+VztIbhtQsUzcf9UlauPRVzCzu265rqhpUFtLMJJlrLxCaRfC3bBnxi63bq6kzTkfBwnSwha95zWxKPMktpb$Vd2XbBU9BMGh86$lOK$$tFw2PxA-CFFop9h49tAlWs$8GpF$it5fA0bH8sjx1zP6nObnH8xEM$96Pg8UUknTIFwze8btlt-BFnss5A1xqJAAFpgHd4aMrxtCBal+Cs5Cq+pTzh8s$Ws+pFqCHAwHMzgtAAtWdRD58BUlnlatzbqtk8sBZsS0zwEO8k8Bg9HuAOFfYAVkPUHnRZCuLb8k8Ft$AhpUHLLt8zMu9Zxg92FyA483UykMGw6k3tG8gnT3zPWkRbp6$NDJs-9OWzICC7OdVHZ7M-qNbm8BUCd$$h8eaEkn19RFxczop8tTpCJRiZA$JWbtWbi$+xGXm+phxhrXwikFdwPYsqM8b8916d$nF$qwsjnSVsoDFqxdxCh$YgWqDohWC-H$p6d3JtWzqb4xcmasSAzc8lA$sslCMwlbbAJq2a2kna-IAgOMUF2zn-h4k$gAwehHasB1$Zpuz9qBJiUaYJqU8x9toMYwceFAWe8pt-8Vh1wwiA3dVnHBxEZxcDt66VWrCX+wzOYh6Fbin8BnS2+iYWzpdA+WUInMhYWAFAHH1srUCAFOC4d5plsEJZDA+h8qUf6su3lTmKC3AqklzWHhYqPh6ty$28JzF4ZtROAJfZP1Rt4FdiDA7fjJxKs5J1Ep87aME1gbMxEtcqHCPUbU5sOUtp8DzNxFs+26fO5Eq8mn0s9PZLEEbdKxHkf8dBtzin$++hJH9AJgFTqT2HsIUl9dw6SX5CTHqpw5WuxnpQCuS5J8fbVhVdWUPUir6KZVlP8XUT8$iwXAFRofk7CHyHMubNWUpf8+YJWqplYRKCB$TnQ-ReApiltdJqSJaHszstJzusIqCkwgfbAzOpWRz9hLDO+zo$WUgGnODJ$y9UON8FpWbPhkGbVdqf2kOA-1bbtXCGr5GOH3kqObz8uU$pRz6UbJzTd2+ku$kRWmAx4zI7g5lhWwbk9UH4$$n9UFqpAfIOOskJlXt3zmFAboWBz19wEtxPpbtdMc$fMa8PDS0+EuwamqVAhOU85AiObdKkuciPIiCJpZu4y8JzjzN9Mz$Qs+O3pl7SpkyhILImdpIOiGUBxRrHtNfNbDzGrM4MVOfHoztJC4nhFeuI8+dGAczXzIARUsa$5W7W+U+DzWHAbkpTxPUzzAD+pV$tpNHADEmsqajzh2V5PPOBXHAAqxnwU85EhagH0knKw$MkzMWVxNpuGhOu7DR$0bZkMxFp62xfPmBAEfrVn9fSJleGuASUVIRmHZI75MUas6aUbb9z0b4P6NxstfWoAEnJQAXdHMBbie4zQaKdcVnuzC9+f$U3Z68Btb1a$KNm6sinbw$+qyFi$l4hxtlhUprESHEJhXwNHz9Yzr2IPF9qlx+Hw$HsfEA6158R7kntJwztYtllXqWPy2QcAYBHOjOLFt66snAt8tRcSfAg61dAR7dgqF3L2EqhF6bzn8BfxECkJHdnEVqHCtzNkw2dWDlA0fkpMGS0FGqW0Fii$x4HdR3D3pHUhPSPr-X4tbnIMypJUW2lCkCErCNpmz4ntVhU-WE$$1phTAxtFqpU$UCaCJtFz+qVzTO92lnRKtwbkPEFVgG-lab3p4rsPSI-1RIdwz83Vn+xIV6dE7UlF1Bbd8VFhD5kGMlJGpwYWFq4nWbrYVzwilJdOfy$bP$khyZ586z33$OxzlyM1lKbhzIcZBNOxquFDseOzbU1$AJbozmBWu+kxGAYOCkqIXI-Mi7J04+$$am9td-RFrbmf2e2JtM104quuX7ekp+pJRWY4NCb2VITISlbLh8k4eVGj4L1JRCWnudwGT$wRb04-Y0z+unJ8m6VlgCSewx-6W1FG4CWm$K6ay3xqNY6kR$zFwu4y6JbCY7eipnB6Ht-4OHezXzjkjiAwuE3cbRGsoa0t-DgXVeWmarWjwYDgX9sphaJ3VRjPrzfeGn+kh2hQ$ukmiN7PnwAAZ4JzplBa+qlclQPg7qfpAu1dLzyupF8eGAy7qNwYPInaFp5+k6$Aq8KYizmewb1RwY4WY67RGLkz44TfKk8bG7rbHUb6EQkgl$J585Ix4qek5l4KZ+5OYBUcCKHCBMnA7tMY4k7oUpCb4yMz1ElarRGkdVoqH1sPSlHdkBxzaE5LeuHHdruw56-DUY8zO2OnLnKzeaHEn7d0b5FqQWdF7bm7IfOS6i8hFMeKPH+M+4U1rdZHJGf4RprG55zzlfA0fiylVdM6YpXk+MhEj7a3khlmJHWGpr71bFnlU7IWSiqy426PgAkVfOHuOYwkQ$99EW9P3lVekCpPIganJbI1n6Bp+9g5iIFGz-Uze7HLdhydU50UrD+pZ+aUbKk9ilAnd33aK9M95ffekV+0lzfG1Q07eXR$elzUS5SFdrVJOBFN$2k0FFHld0b1p1iLX6Be0PH5Npn0OZ6y$z$DeTb85a66XDR9KiCmZ51MU8Debl+5jJIzc67eWzHsWHA7poC7ecGxeWBqLpJFuDrrGlRNwYPpd7z89suRwAIi8zQDMc-5Ln3b58C6Di5+kbnhdz$kMe0PMl-pTApTqlo9FrgHtWslPFrp+uAENix4AbEFH2KOuWUIG426UaCF4xhBMxzxLViJW$uA-Y-DqUxIdN+kWb4BdJLuosG-MRibgAeCbio2UktUTolELyFnocgtH3bb8YuDR279l7hEp1tWcjG5eGHuUE+C$C7rmE-flEqU8wor$GHSUT+xMn3igZAc-Il0uhrbpPF755SIqu+Fc33rjf1xsni5rknhHE3qXwBk4LhitYzXFg$sRbpQz+h$lW5M71$0pXBUx3+q1tckk3iAIjnMhjIqPzwi8ryBSgj1uokWUdSrpxRMYD3LmDPUV+O1JZafYxeSSPTGr5OuazwziSLsIFrEdeLJX0SjkR53e5kr1H9+JTS166acYSXmSjcGVwLPZLtcLG0oIMIR9q6hX$ggW543R1fFiXpgAW5ML9AR6lcP7XKFK3uPaURclpC+iUD8Ru6ocdr2DxQJZ5lLoX3JWQR$umaIzPaudUX+NJs5ZLLegg4Xc7IZajYnEpm-0nQMabjkOXdrj5dK3T1pFyXdr7b-MIV1pFeXPh4bHx3pmNPxlHhobaMFnBsF1XFkYb543UaFrVcoA2X$ST65Zr9lPdfc+n3RqGZhXXAmTiCLPVur+sI8CT+ULO1IFWX8rL8aXXE1VPbl+e$HOSjx5RroZ+nACSMIc19F-rqhKC-CLHBF6FcYhDC++LgkFZBedrLCOsTRhFL0lI5V-5fzPUPVbZZsstHikI13k3ZF48ZbWOL5f6ulZ9Lt-ETzBEVjlSApq-ETpcxVjldh8Y+x3nB+VOJxheYGxKpBhLxDc4kUlP31RNLQ$$5uXRkwAX$VdDlrI3-KTkaWSkp6rfT+2TuPBV2T9kg0CDs38VF03drj65YxJmO68D5gL6HSTMaq6DZZrgLCOx4c3LgTW5L3++KM1y62ILhfc+XKFBV65DwHmi5nt550VMDOxZL1IKSmuF2XS5XESfaIANd0cIpwdlJZjl6V-J1$Qlz$r3foigz3APxbHhgnyV+G$4yHMKx+t2dknVSPU8ztOtDbypW9KZ1e1jhyiWp5lRHJ0lEbR0VBBsQD9Z$6qExyKUnjnNibmSj9aT7SuyVAWqabbRTk$BOn86yS7LBcSHOUzIPxAnzzz0bqK7Web7iUpJX-xl+tAszzTwHF+dp8Zs0UFB+o2TtA8uUkAZ9ZsuKbSWX$SHW-hHRBYmbB-bdz9h4hPLirzzbxIlntUz7ndA+EtIt78dzekDsa6dEaSq2Cf8SE3x$7bdlrCF3Zd1G$LLLlryIzgHVHMszl2zzFn$$ozzAaxK31CUtSWTa2UZpCpM8xT2MAUz3F51C2RD2Hy0-8KsmNVKshAzb-K$z19+zZ2zbKz1NVInC8gDpP+p1iLbpb5p1nbKImn6jQCsUFzhM2aMsbwbigI0zK4CWJzJ86zJ-2zbwnVITmNPAzn7FWh4lOmJbkWMp-y1ExJUya2U+pHuc9l9hFghzbpnlVKlVBJbB0jnOzWiAy2zL6sDsWZOntst-y5zPxnp8MzMPJATbGs92hdDjk+7YxPxMkMo$Aqos2U9shJJOLsdHnJeTCt5$S6FhOXHpl2kMNMa7OXCgESHZTCqI7zTzqH5ouYddzpF5pG-CnOizO3rsPgk-RzAu9exp81a0pip92WGzQXzOMxDs6wCqrTtrzJ0nP+zxRTlAnb2UIz6zkWxUdJYGJ0aCkl96OtpsM-E2d7c9Jp8pPOkC$Id-xlTAwb+sopCp$nVymHbqW1zGN6SxEJ+rFs-byz6Sz4lrr-sSJ0p54zztxdoyz3btM2uTSHFMQVKqrfBQg7-zbsun$lWBUJntBoqRVSbCpdzNxcUzz6yhhpzz"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 12:57:54 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\npriority: u=3,i=?0\r\ncf-ray: 9c6123435da256a2-OSL\r\ncf-chl-out-s: FIIZ24f5arR75PTt4OicxA==$j43YA+Ze3lf0CKGGivwkdg==\r\nset-cookie: cf_clearance=O9HdkBcQKT_rXE549RRpHmdtOIDOb9kzWhxgheOaXUM-1769777874-1.2.1.1-t9bybPEnRFaIRk2HVMkfRicEUxSfpg7RIEPIMQt4nBnuET4IwlqflHYc2Xd1Bz8j9juLXVXiMlI6xN3uQg54_fOe_dtc2w79AKeVXcLPHTJt6r5FOVfgiWdI68Bej32NtQpuaAR6rBbM.VdEtnrQSpVDh2aL7FMsyYEFwytg1izTU.QVJmoyXV73U8wwqFpl6gxNk0j45lB4b6_WHblPOauXpG6Z_53aR4cx0thu.O4; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=official-topup.com; Expires=Sat, 30 Jan 2027 12:57:54 GMT\r\ntiming-allow-origin: https://freefire.official-topup.com\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2jCAqn96atcrFC5rMP0Sz%2BEgkPJepskMKsoYE9SSnZU7mFnLBDLS5jteRwgaou1Hq35qFp4Z2Dku5TiM5vONZu5jmjFk86OGwleu5y%2BdXb2HbACIv1hU6Hs5Wt7hmsaHftYgp8lwfEhGEzt9VhM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1401\u0026min_rtt=867\u0026rtt_var=626\u0026sent=136\u0026recv=61\u0026lost=0\u0026retrans=0\u0026sent_bytes=91264\u0026recv_bytes=28028\u0026delivery_rate=4508852\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=43321\u0026ss_exit_bw=2315594\u0026ss_exit_reason=2\u0026cwnd=16393\u0026unsent_bytes=0\u0026cid=45f46104ac1ec46d\u0026ts=1577\u0026inflight_dur=149\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T14:00:40.754596Z","times_seen":17564307,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/S/content/mobile/images/product-tiles/MLBB-2025-tiles-178x178.jpg","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /S/content/mobile/images/product-tiles/MLBB-2025-tiles-178x178.jpg HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XoFIffBokvMIkbmnsdq%2Fi1QKEZoHOgdk%2FvoRTczFjIgRCnbmh5cCFcXrDIbl5wsCZOWdqBJkb4svrDcw2mWuy0pyZ5u5ASdMIXD8YIhlm5qOTWgieLZPJhg%3D\"}]}\r\ndate: Fri, 30 Jan 2026 12:57:54 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c61233afd3756a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-27T13:55:47.187528Z","times_seen":144280,"resource_available":true,"data":null}},"time_used":939,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":939,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/default.BzdkMEGG.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/default.BzdkMEGG.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:08:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 617\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9msrvjG98AH%2FACiddDDAMyANXZ265jefkNXCIpANww9uUDWNy5Racl416r1XWa4v8iwBHbuti74bKEkQtHhI5GoCK2YzhhJc9o90JibkL1QUX4nrOEz7z%2BU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233afd3656a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2252,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2251)","md5":"ec0e5d28445c78fe1f0c08a05c1c22fd","sha1":"3d7f1d83f959faa948b333f9cb783064077f188f","sha256":"b99c8942c810a71623d486ccdc141e6c76a11405b10014e4d3373fc8113c51e8","sha512":"b9858843fc7adb57267a89ccd27fb7638d694c64f4885c81b7d0950009bccf4e0e5521ae6ec5a14d83f32f57d29e848a3046ab0c1b17d9ff174542718703ff38","ssdeep":"","tlshash":"dc41d2543a68d0367df3e0b8d244ed98338f7a93ee25208dadb11109db9bb593f52194","first_seen":"2025-12-27T19:31:15.474216Z","last_seen":"2026-07-05T11:03:18.112121Z","times_seen":44,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/BillingForm.BtwpVYVl.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/BillingForm.BtwpVYVl.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 160\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NxiyHEy3oJnRNcT7cdC4SChUXLMkjZTDqVZ7qIPThJOq1tn9wvbxa9JAvchy9aFPz2o6Hwyq8U4xkbEr75p6ljy4pP5qN%2FR5ONAK5GdUppXsv7OHE1VEbfQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233afd3d56a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":397,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"d4213179011bb9e1468872b4223ff06e","sha1":"45471cde42b6c4c54a2ca6d47a1fd098424402fd","sha256":"a500d71304084c5bb4ce5a0cd7a53554fcf8e72365ecb3938bb2eafc5d275dac","sha512":"11ee40a150bc219769a6abdeb092ed59521ed3325ae5cd96c76fa1680bccb9c1e2ca8b279326180669c3dde6b437a125a41c78683a153062ae6123059bc22799","ssdeep":"","tlshash":"71e0ec0435497e207253077b7bc9f10f201083d7c936955ae4b0557bbfa46467d0638e","first_seen":"2025-12-27T19:31:15.476829Z","last_seen":"2026-07-05T11:03:18.022898Z","times_seen":44,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/Contact.3HIQMxEM.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/Contact.3HIQMxEM.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 373\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dFxkNX3Xi7Hhs7lZLqykwa3%2Bm3K9gMN33bp%2BRdKyxAXnDhM1nm3m2RUHWutvOuFNNw3xwFX3uERGqR2GDZI6JKYakVQT0P3Q5pXNB92JbVCdGRVo8DB9Y90%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233b0d3f56a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1252,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1251)","md5":"efceeeaf69a3c849c58a384e8c1bec1e","sha1":"46ee05968491fc434bcb374b69cd4aaa333c8199","sha256":"632b7c81c0d5ad4c67cba78b05a418396df92bd6f31146d9b04f8a2c4587d494","sha512":"58ab0aec6b0b58d6c8011e12e82102e0f263a3065b1d6760cbc4c9345eee7dad06b6c7607eedd2b1b210f2be4c1ee0ace5f4bb55986d44647cecbad5cbf3d110","ssdeep":"","tlshash":"f7216a59769c1138747f446ee242b146d37ad5aaea054d96e403d33ccbeaddf3c1004c","first_seen":"2025-12-27T19:31:15.589112Z","last_seen":"2026-07-05T11:03:17.986893Z","times_seen":44,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d1qgcmfii0ptfa.cloudfront.net/S/content/mobile/images/app_store_coda.png","fqdn":"d1qgcmfii0ptfa.cloudfront.net","domain":"d1qgcmfii0ptfa.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"65.9.60.229","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:54.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /S/content/mobile/images/app_store_coda.png HTTP/1.1\r\nHost: d1qgcmfii0ptfa.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nContent-Length: 2799\r\nConnection: keep-alive\r\nLast-Modified: Mon, 17 Jul 2017 08:47:30 GMT\r\nContent-Disposition: attachment\r\nAccept-Ranges: bytes\r\nServer: AmazonS3\r\nDate: Fri, 30 Jan 2026 03:28:50 GMT\r\nETag: \"cfd0f0cbf8aa1717324f64a438c378c5\"\r\nX-Cache: Hit from cloudfront\r\nVia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: ARN52-P1\r\nX-Amz-Cf-Id: 3l6qe13oOKyxM-i0urOkTCuUtPRH7VlmtnMoUjqwBqojyIfQ-YvcMg==\r\nAge: 34170\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2799,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 138 x 41, 8-bit colormap, non-interlaced","md5":"cfd0f0cbf8aa1717324f64a438c378c5","sha1":"deb76943cf9b96153b36c04c9de02996857a808b","sha256":"6a69de99192160f4a77667679c5a985beb0758dd464c162f58e2f89b91d11011","sha512":"31a63735bb127554c217e4cc0b811baa8d83087d64a024ce44d4ebf9741fdf58a9c8d2d1f3105dea5056ca96ec1b1762aad73694774e45daf8badbed647f62d9","ssdeep":"","tlshash":"d4514ddb37dcde765b341032525313b4b0bb26f6158bc57d8487e8601ac3b1f46056ae","first_seen":"2023-05-05T11:53:17Z","last_seen":"2026-07-05T11:03:17.976032Z","times_seen":885,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":28,"dns":155,"connect":9,"send":0,"wait":10,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/TextField.CLSHXHMW.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/TextField.CLSHXHMW.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 855\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QEg4SoNmK629fFcUxqpWkKWzVTlckYUsfmRwwGOI9tr2lymdrpA7w52Iyup5ugJQ6J%2Fo7Q%2B8JAdL5akV5%2BPrd42iDL2xQNrff0zOPu9fAlWD0rLNF8NFJjw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233acd2a56a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6756,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (6755)","md5":"5ecc6a10e8988f903d9b22d6720f76dc","sha1":"e968a51128c83f5163d012c1e3d2ee3a79f9cd72","sha256":"6596d6cbf2bc6e7f4c4f1da0c83f05358006713e08958128068354d34e23f33a","sha512":"82c8dc35ca3809a75b6cbddb09bf17d9af13ca42ce042dcf3b0e39c851b8da737b586c39044ddcb4e52861e31e365680fa443aa551f0daec3d2b5502005f03b1","ssdeep":"96:f3cyXCXdvQX9iGLXbXmbsaliTCXSXtvQo0nvQbXrXWH9IE6qao8S3XCXXiQtR0+2:/EsKcsfNsfaSwsSD","tlshash":"5ad12916becc5531b473c7fa98c4c819a70ee792de278a43e9814309d7e2a622f70d84","first_seen":"2025-12-27T19:31:15.652195Z","last_seen":"2026-07-05T11:03:18.038489Z","times_seen":44,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/PhoneNumber.CB3EKAw1.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/PhoneNumber.CB3EKAw1.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 594\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NpTjQGg8sXfsPZILYB6BSnBZ0IDnqFSEgDddPNEK5Xa95cxy4TzmBm6MOtWzrfqBWS3XgKf9xw1UIPO56wNKjHgx5qzWXuFwbiv0OnGxYrwOGhsQ2MtVuHg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233acd2f56a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2897)","md5":"d8e23a068b0fd4c25628b7916baa8095","sha1":"f86536f834a23fd347918ff28efa36b885bc67db","sha256":"a0a4b6f5b681d89ad87bdf023e13b86003576577709c03b7c004779319b9411d","sha512":"39901572f30f5344a093726b1106f880aaf0bd26f3c7463754f5e89eed331a03b0d4f1a38080f2656ba5f5325f1f673cd153252bbf6951a420ee783bd17c1141","ssdeep":"","tlshash":"ec513e24f255c03a6e23c7f7f6889889850ba3cbed2e5557d84105068b967e33e95e8c","first_seen":"2025-12-27T19:31:15.580612Z","last_seen":"2026-07-05T11:03:18.123065Z","times_seen":44,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/Ghost.CdUd_47P.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/Ghost.CdUd_47P.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 618\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4nGF4Q0WruDgB3L9DOu24m%2BLnKoXOIBD4%2FpR7nQQbYZI20K6OLmuFzJ6FF8ZpG7R7qcGhV%2FSMQdbJZeL84IfMJpX%2FolSlyEHHstiNiOgjTz%2FcyihEHjB0yU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233acd3056a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3465,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3464)","md5":"59367f05ad0c626ffc124b706d9f0529","sha1":"f251e35c9bee1bcffd6452c2c9b521f7d0f0e072","sha256":"8da3596f3863cd4fa94c54980c44b8230ceb633eb258c55adcae14a692a6956d","sha512":"bd13ca7ea45df9071db0c87f54c7101c743a49207f9542479abab9b2e7cce715df719abd12f0b2e191f115365c71ff084fd5dcaf3538ab6efd5e9642aea377da","ssdeep":"","tlshash":"83617df8758841367e3380f4d18588a4b14ba6c26e3a5567b8c245accad3b773dca793","first_seen":"2025-12-27T19:31:15.549628Z","last_seen":"2026-07-05T11:03:17.980917Z","times_seen":44,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://freefire.official-topup.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::gv5lr-1767495562922-401ec0c56245\r\nlast-modified: Sun, 04 Jan 2026 02:59:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 2282309\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OyWf3axLXsWdX5gOkaE9SoOBC5afzXon3eKSWt63agO%2FjZdEkXyK19KqhDE0xaZ73nxM6oLRsG3PaJwXNchXcDmc2v7B6FpfXolCopJA%2FtdzBQ%3D%3D\"}]}\r\ncf-ray: 9c61233cea462efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-07-27T13:59:40.670675Z","times_seen":46814,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/FieldErrorMessage.BQqnUcrH.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/FieldErrorMessage.BQqnUcrH.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 208\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B13iL%2B1FEhgc5an6Dd3%2BP2is%2F%2FXkio%2BaudUVdHiKZC%2BjqUQD4gPjleOMuSqyv3zqrvJNkI8wnOUhSyQoSAc%2BBY7niEYUBcqOYou9FXggePF5QJ9QlR48RT0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233acd2c56a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":643,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (642)","md5":"7e1937f63f439e2861be0159caab7085","sha1":"9f72b3a0f0253eb5df0f183a7ca6c317c48f3ca4","sha256":"e0a02003f2fb5edbc310fb393ea14e116f0d18c603426d48fd5fe928c9912800","sha512":"72d92a2ab7b380539f319f227877b7c600ae20473eccf3311c54606805d4a8e57ecad0c8c0cbbe384b9ecc4901e7273629d73a0b0583f52aa5b36f0ecf11ed33","ssdeep":"","tlshash":"fff0a202b21d492a782349bb7600e90df712b3428b226d07f74e3d128b4711a7f217a4","first_seen":"2025-12-27T19:31:15.686306Z","last_seen":"2026-07-05T11:03:18.028689Z","times_seen":44,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/Hero.DPbncZ5q.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/Hero.DPbncZ5q.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 694\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FIxjP9CotjaSlNy59GRIvuZD3N2HroDEcPoj6RLRMY65VWAdU2WMgqu6vNpCD30r5MQKtzAI%2FLNwB44eTczpT7EwbRK2RY4ycilYqsrNHBvpuPhj2k2a4sc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233afd3956a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3104,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3103)","md5":"06e68fe3ce9c75ae24d4220ab11d2150","sha1":"9e0e1aa55e06522993f151de201ef5d75356ab9c","sha256":"cf3deea8afb22abef5324252992a10781cd09cd342ce9f612027b675d7cfbe09","sha512":"48a91cbe2e6d91ba96454ffeca6b161be7af3cb6f527cdc9848ec0442ffc92231e82af316d5115967a4fc5fcabd0e26b4ac7c891b884ea8c0a923cf0a5750537","ssdeep":"","tlshash":"8f51bb97d9344069fd72da7ca11084cdbe0ab50bd5df99d52e09b800f8cebe36672b08","first_seen":"2025-12-27T19:31:15.487522Z","last_seen":"2026-07-05T11:03:18.022003Z","times_seen":44,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:54.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js? HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 12:57:54 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FqYd26pOFB1CyRECffh8rG8fOkysH2Ldb2sJT0vsxM1E5gCdfRTeunBA9WSWU3gfviwu6%2F4dSBWaJU%2BkdE0LBUI69Ru3K%2FrxQLzidCiGndZZbHfa%2BLgb8wnpIEaY%2Bs0Nh0wyOQZq8MQKyOqduE8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncf-ray: 9c612341dd9a56a2-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1555\u0026min_rtt=867\u0026rtt_var=635\u0026sent=121\u0026recv=49\u0026lost=0\u0026retrans=0\u0026sent_bytes=79591\u0026recv_bytes=14962\u0026delivery_rate=3521974\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=43321\u0026ss_exit_bw=2315594\u0026ss_exit_reason=2\u0026cwnd=17368\u0026unsent_bytes=0\u0026cid=45f46104ac1ec46d\u0026ts=1330\u0026inflight_dur=146\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23220,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (23220), with no line terminators","md5":"34a72ec03ffbe8a0172234735605ec4c","sha1":"bb6b431380e502401b7e67d82d95dd5d9b9f0ba1","sha256":"71d799a08620e29f6d61f667d7e7fb9b1251dcc478735c91f687701b45457900","sha512":"ef5b1a2e91d1fdf4983fd664cb258d06701497601d0579667b446cac2b78887a9bd57fc5c98479f9760fec25295a7d74698a3e2c875f16a29802d886e9bfbfba","ssdeep":"384:rQTST4WkiyaarGwzuKKpXsYFuTjRYXaHWtCwFvgwAxG:cWkh7W7zbuWthv9","tlshash":"2da2928ebddbf42803356ce5021b7cdb316e9d91284caa44c3d0d9f0baa13595edad98","first_seen":"2026-01-30T12:39:12.997834Z","last_seen":"2026-01-30T13:24:41.645768Z","times_seen":7,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/Banner.DLTGqivo.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/Banner.DLTGqivo.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 481\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IIoHT1OSlJmNMFqE02h1ulBLqa3r2clzDK86YozuY63rvlC0Wx0%2BEbM8dBN9tGj2hyy8IE76JNAP7DjjGi3sDwk88RxdknXJ8PVkgXk6206MmCJzZp3hlhw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233b0d4256a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1668,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1667)","md5":"05eb2aefb0ba361d0e524069f1053305","sha1":"a0b7757c4c102c8e6750a6aac9e32b5584615d75","sha256":"9291c456f0d91f362eb6178fcb2245d5ec4a87773082af914cd366ba94a7d51a","sha512":"113539f30199b6efe75eca377a7ae70f9876de7f0c6c3a65820acfb6febd33299589fe871b4e12c77f1c4667b871279030ff461bef6ac130cb2aced9eade3a0f","ssdeep":"","tlshash":"aa31ef00bd2ca03f1d7bc0eeddc4560fc227bae2dd36aa68564121104fae1ab3d4e759","first_seen":"2025-12-27T19:31:15.597756Z","last_seen":"2026-07-05T11:03:17.973264Z","times_seen":44,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/img/closemt.png","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /img/closemt.png HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 17 Dec 2025 09:48:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5543\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EI%2B5IXkIr95IcT8BtnbOG%2FrOcXlNZNnxWjGfo9ER7HoNU6y2RFojmmrLSrHs0OSQS0Da8eeFkPL%2B8VxMCRX2aMQMwKthAdiGDgkbPcJ%2BwpsEax%2FBn2CLcKM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c61233b2d4d56a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5543,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 63 x 63, 8-bit/color RGBA, non-interlaced","md5":"33eab42765590eded2b8a884c322f676","sha1":"fef19c407810bf8a520fde0b051092de5bb971eb","sha256":"6701cf1d46feac6efe8cc702f109298718d2da7531ef713caf292d749fff55f1","sha512":"7ae6eb3fd7eeacf0a1402311ea310ff77af37cf67d0ac54c54e15376b350c9aa89248f4a88e2849e9acda652f474edf00897fdf25b4dd42d3c2e872ece7e0d88","ssdeep":"96:O+bBelNj1A51rXL+kurc2BdepJHqqUTNNluGhjnoBPMBHvdHVCnBrFPUE3VzG6CX:O+bBejjqSpgJHMTNljnVBPDkNFPTa5cM","tlshash":"19b19fcfe07c18b5615154140ff62988998356bc1a911eb81e3e63250ce4dd9fcf017b","first_seen":"2025-12-27T19:31:15.511818Z","last_seen":"2026-07-05T11:03:18.053287Z","times_seen":43,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/img/divider.png","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /img/divider.png HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 17 Dec 2025 09:50:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 628\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sDF6HjiHkqdn7ZDHk%2FvAN0CmXK0AoSNYLgKsPywEiX%2BoZLy6LRdsPi425o7J63HRmPpczvUF%2BSJ722wSb9LvN98ON8E3VZ%2FrTX%2F7GS7XRyMkD5VSW%2F6RTBE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c61233b2d4e56a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":628,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1227 x 8, 8-bit/color RGBA, non-interlaced","md5":"9449d1728f4d027458c776edec3375c5","sha1":"538d28dd4c8b95fbc49fe2764f2d8284b4ae04d8","sha256":"6ec7d3cb0899bc074b52f1002af5ee875d12591feb24f9d8b200de860ec57edf","sha512":"f5a87625df4079d72124ee48b222a9682f338d78a6c90e6cfa2cc08cc0d2591795093c9f98386ee2c9b679a55f82567f16534bb1787f2599fdeed77eb46bfc9e","ssdeep":"","tlshash":"abf078a3ec86713f58060486932338e5c636e60734814faf2f0488319d478e0f436dd2","first_seen":"2025-12-27T19:31:15.601888Z","last_seen":"2026-07-05T11:03:18.002236Z","times_seen":43,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn1.codashop.com/S/content/common/images/mno/CARD_PAYMENT_ID_CHNL_LOGO.webp","fqdn":"cdn1.codashop.com","domain":"codashop.com","tld":"com"},"ip":{"addr":"3.167.2.78","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:54.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"codashop.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 21 Jul 2025 00:00:00 GMT","end":"Wed, 19 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8E:7D:1D:5D:22:2C:EB:1C:92:96:6D:32:A9:C1:97:A4:36:FB:F4:2E","sha256":"60:63:15:F4:CE:03:49:BA:99:D0:BE:65:06:67:D1:E4:DE:4C:FC:D0:6F:1B:68:03:C6:C7:8C:1F:3B:BA:9D:93"}}},"request":{"raw":"GET /S/content/common/images/mno/CARD_PAYMENT_ID_CHNL_LOGO.webp HTTP/1.1\r\nHost: cdn1.codashop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/octet-stream\r\ncontent-length: 1448\r\nlast-modified: Tue, 19 Nov 2024 09:36:34 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: PXWCVrMRGKcAXnUKtE9QMNptxwthU.dF\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 30 Jan 2026 12:35:28 GMT\r\netag: \"840f3734070195bcef0617c1a3030946\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: zgYt9euFCWqa4qz-mC6E26Per9d5WSXrtpHx8Yo9OVIsddCKF54tWA==\r\nage: 22611\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1448,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"840f3734070195bcef0617c1a3030946","sha1":"4c0a7c5eac509035455c640fe7a0f37cbb78db15","sha256":"e5f51266d00d7d9fa1ba490fd91043d28cb839803c8746cefec87e437582fab9","sha512":"5b5780c752158fe06b89d63a002d511f6e2253dccf06ea2fa8403595f5849c597d6386c1f580bcbb4e89e7b79ec092281383dcf6970d5a2faee1f1c72acac249","ssdeep":"","tlshash":"da31cb37236032a8f424aeb000857fcfe6467c260eab4393c7890f2b4b31d89107c2d6","first_seen":"2025-03-25T21:37:43.195337Z","last_seen":"2026-01-30T18:01:04.901577Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/Tooltip.BjcTSI_m.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/Tooltip.BjcTSI_m.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 717\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Nh%2BkSqY1JNuETZOsjACKuRp7Dtp1T%2F8rGsK9dsBkEOHy2AdnlK4N1eFWroiggyV924Dl5kO2nIZOakMFRcOVocHKtKv0MrnIwTENI3CIHoVDCDmKUSdXC0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233afd3c56a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3005,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3004)","md5":"748bccc3925f024b861035f68837ca8a","sha1":"e2f5a13582ea3e5e080664c016915623b8b4e333","sha256":"18b650b623649aac523704b1a9bd1cf813ca15affaaf08e8878d5cdca9876987","sha512":"7deb85eb87bc420ab9f0b37c569bd52bf000ce3726e5768d0b4a2ea86d223477dafbfda85c6bcc49fea325a78beb3c26d44fa5b449a94f1581fa32a00860b681","ssdeep":"","tlshash":"a451e162766414f67ffbd430e143a98d602fb1db9f37526d4362a11a0dd23413ae61b8","first_seen":"2025-12-27T19:31:15.586133Z","last_seen":"2026-07-05T11:03:18.034195Z","times_seen":44,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/LiveOpsUserIDModal.B4u_DQe1.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/LiveOpsUserIDModal.B4u_DQe1.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 437\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S2jnM%2F6jagDdUhDTafbsvqKdWI8zwQ0UtRdndxzPm8RmmnihInwpgTw%2F6cDWBkSURxu1Jp%2BdIHyuywRCwUQwrHHx5cysX7yOeWjBRxMrSe9ur37t3KwjJzw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233b0d4956a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1557,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1556)","md5":"90c0e9353263cec603e95cc75705ca31","sha1":"ba637da9f66ede1c2ead0b3516fcbc3e9b8dbe50","sha256":"1e62746dc39804c0fbed67de829772dbe02647e40a382c2ca21261ef9c2f8748","sha512":"a6f9b4cff133e6b5149d0b7a1bfc1cd47125ad31e01f79ceaadd8e4684e2408990d59a110edc000ba711179bb4b5dac8454023adb441206dc89b0974d23f89e5","ssdeep":"","tlshash":"73313e6a99fdb031fc77f0d7f18dbc6e6801e5698e36610a8d7b060c6bb25e15b44980","first_seen":"2025-12-27T19:31:15.692338Z","last_seen":"2026-07-05T11:03:18.035027Z","times_seen":44,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/img/btn_gp.png","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /img/btn_gp.png HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 09 Nov 2025 17:44:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9268\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KLwqmBzIlFptaNc5B2o31LtM9ksNaM8T40G1XlnNS39vOYN8elmA9oJ111X8KxIVyjk0m2yYw9YEcKCM8RlZF4uwbmNSnr%2FVVXairLyAQMi8mwC%2FjSbpvWQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c61233b2d5056a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9268,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 465, 8-bit colormap, non-interlaced","md5":"9fd2c79aa38ebc154913f849f854f059","sha1":"6b42a4bf21a8ad037f4df4dfb284a5675303a84a","sha256":"1c92dbfd03f5a35ec4c551da03831186ea678b8581612549329959e6453e5916","sha512":"38a58ba763c3fa75f38ca424154628c3dcbcdb7776bde116c00b630b5dec7f1db41a0821b522329a512520bc57f513b268a990b726703c4d1b86729ff9771939","ssdeep":"192:Ld1orL1SsWUXA5HXKOCWglVFbI+Dyz5D1qWCBm9i2n97rtNo8kJKySHYSS8j:x1oP8sWWAFXKgGVy+Dyd1qns829E8kEB","tlshash":"4912a05916881f178a0eb31c5803d5528b433674380b22693772249ca93b6ef4dbfbec","first_seen":"2025-02-11T13:44:57.719263Z","last_seen":"2026-07-25T15:40:05.720693Z","times_seen":143,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d1qgcmfii0ptfa.cloudfront.net/S/content/mobile/images/google_play_coda.png","fqdn":"d1qgcmfii0ptfa.cloudfront.net","domain":"d1qgcmfii0ptfa.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"65.9.60.229","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:54.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /S/content/mobile/images/google_play_coda.png HTTP/1.1\r\nHost: d1qgcmfii0ptfa.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nContent-Length: 2631\r\nConnection: keep-alive\r\nLast-Modified: Mon, 17 Jul 2017 08:47:31 GMT\r\nContent-Disposition: attachment\r\nAccept-Ranges: bytes\r\nServer: AmazonS3\r\nDate: Fri, 30 Jan 2026 02:33:17 GMT\r\nETag: \"e7ebc6c74ec20ea3614970e178217c10\"\r\nX-Cache: Hit from cloudfront\r\nVia: 1.1 700671cc10acea065425b8871c537de8.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: ARN52-P1\r\nX-Amz-Cf-Id: GC3fEpipk1XiDJH_4gXsYU1PEn8ul2n5xJr6xGaDQ9b1_GVJkgyrlQ==\r\nAge: 37734\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2631,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 138 x 41, 8-bit colormap, non-interlaced","md5":"e7ebc6c74ec20ea3614970e178217c10","sha1":"f667fbc525f046f8c6d7617541884c4d6ed52478","sha256":"19c2b75fe23ae2238adbd7f34901396d4120605d9028c2fcc7bd3c010e27ef9a","sha512":"919503e8bb602ea51ad0d92b3afd7dd5701b5f2d3e28d8ecbf90d632afdb7c14fcfdba99f60f2bb6796db536d3461882318b7dc0136e40b3d93556774bc30677","ssdeep":"","tlshash":"42512ce26932e55a1e9824fed111361e3a73740b8a3d8a375b0a183f86c5f58990520f","first_seen":"2023-05-05T11:53:17Z","last_seen":"2026-07-05T11:03:18.127749Z","times_seen":887,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":30,"dns":154,"connect":13,"send":0,"wait":12,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ph.support.codashop.com/hc/article_attachments/4406220541583/codacash-darkmatter.png","fqdn":"ph.support.codashop.com","domain":"codashop.com","tld":"com"},"ip":{"addr":"216.198.53.11","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:54.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"global.support.codashop.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 07:54:15 GMT","end":"Tue, 10 Mar 2026 07:54:14 GMT"},"fingerprint":{"sha1":"2A:3A:0D:95:65:D6:4D:8F:33:2F:73:54:56:D1:9C:6C:F7:46:C3:B8","sha256":"31:F9:09:00:DA:20:D3:A8:E3:B5:F3:C8:FA:42:2E:0B:A8:2D:B2:A0:79:BA:73:C7:59:7F:53:D4:F8:84:96:50"}}},"request":{"raw":"GET /hc/article_attachments/4406220541583/codacash-darkmatter.png HTTP/1.1\r\nHost: ph.support.codashop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 12:57:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 24927\r\nserver: cloudflare\r\ncf-ray: 9c6123421be90731-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public\r\ncontent-disposition: inline; filename=\"codacash-darkmatter.png\"\r\netag: \"cdb85251679fc8e8c9e39b27a3052ed6\"\r\nlast-modified: Thu, 09 Mar 2023 06:11:45 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-request-id: 993ab45391d2240f-FRA\r\nx-robots-tag: none, noarchive\r\nx-zendesk-zorg: yes\r\nx-amz-replication-status: COMPLETED\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: Ib4F5f7.7Coli7m_wBcRtTvR1_dGjB3_\r\nset-cookie: __cf_bm=SAYWnrOfWh8ILXj64z8ytlW4RuNMoLIDXhbVW7tk.mA-1769777874-1.0.1.1-ZfNFO7NEMQgC1Hh8oR_n4Ri8vzgV4Dfpg5TUd_vhtMIidC0K6WEOgq3q_rq2rS.c4V_nRSupN2gAwNJPAyeDfuiOqcDn4X6VoKOFCcifmOc; path=/; expires=Fri, 30-Jan-26 13:27:54 GMT; domain=.ph.support.codashop.com; HttpOnly; Secure; SameSite=None\n_cfuvid=wydH85qpqOLN91CRAHM2XVxUhls5Um8rREe.N9OB7RY-1769777874315-0.0.1.1-604800000; path=/; domain=.ph.support.codashop.com; HttpOnly; Secure; SameSite=None\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hfX5YjdbHyKBiCa2S%2Bb04UALWM44o0UjYh9zrHIAuEJzv8uMEb%2Fegi%2FRGSqLlL7P%2FSZdwY80tvE8f2PZ6w%2FYOwtLJS66zfZZ5x3I%2BWyiyowowV4uBURISRT6hvqDuVVCoP0P7uY5B%2Bxl\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":24927,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3000 x 417, 8-bit/color RGBA, non-interlaced","md5":"cdb85251679fc8e8c9e39b27a3052ed6","sha1":"ee4be2459a30fd7b56f12a77448e05865da855e0","sha256":"270273126b0ec7cabddea78a7bb88aff47cb4eda18dee2b17699c923189e3f23","sha512":"f430fbc701eae69fd02635a5accd93e657a5f4d780434c3919cf9eb618c4a66352bb0b25343ffbd49a390dda28a76ef288733dbe90deff51a885490886959d11","ssdeep":"768:gBXIJF7iFWvhsF07uwJQCJTTvK11bnjM3n8mW4yo:EI4w6euiQCJHK11s3n8m6o","tlshash":"90b2d1bd8b626e62cdcd1939045c6b7fae61f189c34986974309c7f63bb22275039368","first_seen":"2025-09-21T05:09:39.538838Z","last_seen":"2026-06-06T02:23:39.30868Z","times_seen":16,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":32,"dns":32,"connect":1,"send":0,"wait":58,"receive":2,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/Dialog.UuzwtdD3.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/Dialog.UuzwtdD3.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 601\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ejnWGCHr39jDrPG854gim3g98ShQxrmno5qQOoOlZfZjV6R8DJz2ysgLWJoNrekQBOKCtkrmagdipsjDY7NwXBe7q24986JkHT17Rms4iiD3KPmGVe3jCd4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233abd2856a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2270,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2269)","md5":"072e265a2ef1485ecefb6c8ae4992620","sha1":"c282d55a2ccb6afa93f6bc94329291c60b567ccd","sha256":"d5e4f8542a0e82f9157c46eca64df9b77b9f87e8c9b1ab52215649ac4d420fbe","sha512":"a5ad4eee2e132336d76e5d2dbcfb73591c7c610a4e7cfa1f67420fae271ced04b561d03c85090b9f9774674fdafb0c22f29b33990c456872f8aa7815e8d238aa","ssdeep":"","tlshash":"5f41f254326d512c78bbc0f9f6a60d19da3fa297ff1a93765c5d3318478d2973c51084","first_seen":"2025-12-27T19:31:15.567633Z","last_seen":"2026-07-05T11:03:18.04161Z","times_seen":44,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/Instructions.DC5UWLDa.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/Instructions.DC5UWLDa.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 718\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wVUX0BaBPd9Tdqb2%2FQc5L2ncdoxvyYz7BzMYMym58q0TW3gJrXoF3WEA%2BXad72bNjBB%2BLx8dxhKXXcap%2BRJb245LFLWp5%2FOAJLJBbKOlzX0Gl9w5SDB1WkE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233afd3b56a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3005,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3004)","md5":"561b21b4399c3e0c8bc624d0b7144b57","sha1":"8129863a5d8d913dbd48dea4f97beb0e1d293d8f","sha256":"33614708ec2c998ceb2cc2a62ca9b1765c01dc6ca6e4a8c8a34cac6fe6dce51a","sha512":"56fea4f2091a57954e734dfd4c6e4447972d7fe55ed8c991a268d7e1dd61ede731e2419f50073542531bfb8b63229929651eaaf82477ae866ac7863bbece4f75","ssdeep":"","tlshash":"d151bba73d5814b57ee7c0f0f081ea49b02ab55fab275065c2bfb71905c33413a82af8","first_seen":"2025-12-27T19:31:15.6608Z","last_seen":"2026-07-05T11:03:18.127166Z","times_seen":44,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn1.codashop.com/S/content/mobile/images/codashop-logo-new-3a.png","fqdn":"cdn1.codashop.com","domain":"codashop.com","tld":"com"},"ip":{"addr":"3.167.2.78","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"codashop.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 21 Jul 2025 00:00:00 GMT","end":"Wed, 19 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8E:7D:1D:5D:22:2C:EB:1C:92:96:6D:32:A9:C1:97:A4:36:FB:F4:2E","sha256":"60:63:15:F4:CE:03:49:BA:99:D0:BE:65:06:67:D1:E4:DE:4C:FC:D0:6F:1B:68:03:C6:C7:8C:1F:3B:BA:9D:93"}}},"request":{"raw":"GET /S/content/mobile/images/codashop-logo-new-3a.png HTTP/1.1\r\nHost: cdn1.codashop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 9858\r\nlast-modified: Thu, 27 Oct 2022 07:27:13 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: rFQqGopZFLtORw_yVR3WdRQIxEHGV7Al\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 30 Jan 2026 01:04:42 GMT\r\netag: \"34c07d92a1940ff45b0c59875cba9815\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: l7F5X4gLmb9RzBFzzds06rKlK6wWA3QX4Uu_CVpd060a3VHL025AuQ==\r\nage: 42792\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":9858,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 636 x 140, 8-bit/color RGBA, non-interlaced","md5":"34c07d92a1940ff45b0c59875cba9815","sha1":"b54b870ec327fe1ff53828cf3696fb48d6f151d7","sha256":"ce568121eb1ecb0aae759a502d54ed5907d8e24778d9a6bd2c28cda62945952c","sha512":"3c1935cd8993e9b9bd7119abb6e0e8bf22d4585ad902fcf5264544f9052b6423129d5ed288ea39061314ec68e1d92fe8fa68898040b01b2c7da80dc7eac46277","ssdeep":"192:nSdUMmeV4Y6PQgVmDJHs0VAkfqAczCWvBDpaJPBouOcJE:SqMmU4A+cHrVAkfqA5K2poulW","tlshash":"d612bfc959b68c36fb5dbf71c712330d626d8c6ead229e59e99600807c35f0d670835b","first_seen":"2023-12-24T16:08:58Z","last_seen":"2026-07-05T11:03:18.078663Z","times_seen":188,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":61,"connect":1,"send":0,"wait":2,"receive":1,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn1.codashop.com/images/337_448ecd16-c203-497d-af3b-eecc4fbad855_product/1759843970258_caa85b75-a621-4867-84e7-c89716c74f7c.png","fqdn":"cdn1.codashop.com","domain":"codashop.com","tld":"com"},"ip":{"addr":"3.167.2.78","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:54.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"codashop.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 21 Jul 2025 00:00:00 GMT","end":"Wed, 19 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8E:7D:1D:5D:22:2C:EB:1C:92:96:6D:32:A9:C1:97:A4:36:FB:F4:2E","sha256":"60:63:15:F4:CE:03:49:BA:99:D0:BE:65:06:67:D1:E4:DE:4C:FC:D0:6F:1B:68:03:C6:C7:8C:1F:3B:BA:9D:93"}}},"request":{"raw":"GET /images/337_448ecd16-c203-497d-af3b-eecc4fbad855_product/1759843970258_caa85b75-a621-4867-84e7-c89716c74f7c.png HTTP/1.1\r\nHost: cdn1.codashop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 5052\r\nlast-modified: Tue, 07 Oct 2025 13:32:58 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 30 Jan 2026 12:57:55 GMT\r\netag: \"28380515fca2c6f9a34c8d63c84082ee\"\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: Y_nP3BQ7jNnMz1Blh_3lr8HyRmhyy-b2d961hj5t5yrojTFZKc70iQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":5052,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"28380515fca2c6f9a34c8d63c84082ee","sha1":"8f4e3f2a27ac7daf8d4ad527df869e3283280d2e","sha256":"7c77ef25ab71668ce14480e52815e31bcf9e19f2409889048c0c00bde9716895","sha512":"e61f5eadb42f9cb626fcad82d07cb6a9263cdbd7d92a2d0f71717aa8f3ef4527794a0f81c9e762e930a9e30eb1f68a6c9eb8fc140910784e29db88eeb5f928ea","ssdeep":"96:E4VtDHYxsRUjApSw90doUj5C+1y6lBDxLQgmHvJmdt6JxJg/axUERDaG5z:pHYxsR1pkdoU9C+s69QgmxmdUTg/Yvh","tlshash":"b0a17dc7d6e0f0b320b0128d44ad20b18a95eeed0c3202fb73dbf51608f4778848e202","first_seen":"2023-05-26T20:48:51Z","last_seen":"2026-05-28T18:04:01.882522Z","times_seen":292,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":523,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::9cghd-1769777639096-f11ec568fe93\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 233\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3s3yV2DVxu%2F96WkukZUCKVkTZDNUtQEdIXD5G7guD7LiCxzDvXP21ya8r4EKbiWNfpa9XofE1cYAiCaqH6nSZUY1aQbZ4KQGeOFfgagrLIDPWA%3D%3D\"}]}\r\ncf-ray: 9c61233b0c912efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T14:00:40.754596Z","times_seen":17564307,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":14,"dns":1,"connect":1,"send":0,"wait":7,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/Dropdown.DEw9_vCR.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/Dropdown.DEw9_vCR.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 468\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qMyVYp30N66YuZlXTMq%2FXdvrLuJEB0NTqpaNgpRp5j0ANDueAWY6iYXoQLFItyScNIV3lB0leCIxhvVbqWkjOUTWd9MlR3zO%2BBSkEoMpBKJrcPCr7m7Bk0c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233acd2b56a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2544,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2543)","md5":"bf7173baadda6f1fc258b3020247dad1","sha1":"477cebd816a5572b9d554537e2cd6ed8c67eeac6","sha256":"2f957c533a7c496e35f730e1423fa8fcd75cdd4fcf12cc7f97d76108e5a9b888","sha512":"64f4497122b4c65602e30dc2529b15e6b7cfc943d04f5bd3f2ca528f722757f93ee07e54daeb7fdafc6f27b261208644a2766b06f3a0ac446f162d1c3a41cfbb","ssdeep":"","tlshash":"11513f9cb29900353d63dcf198c4980a4043a5c67e21d5b3e8a3164c5faa5a37bbef99","first_seen":"2025-12-27T19:31:15.66862Z","last_seen":"2026-07-05T11:03:17.979807Z","times_seen":44,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/index.Gg40wHeJ.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/index.Gg40wHeJ.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13842\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hCCtxiTY7zgA%2BaplA1%2FjVkUGCWyFI8Q8561j0XLVVO%2BBPvPPxX%2FEvPt3mAKV1TvtfGfsPfYoRovchfCuYhfcO2a3SwgcYFpb%2BBCVusrss8kP%2BAfpm3zUV1U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233acd2e56a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":103493,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"08902817d55dcd07c156b48723ef7bed","sha1":"b1863c1cad0225520d6ba47ea4924236e6eab2f2","sha256":"632776286d57ef48ae07ba9839703d95b22876e28a41ac02c500fe2eaeb1e834","sha512":"a75736d1fb4e5cb762fc10e4b5e75a50e339ba7c0df2d0fb0fd97d640d9eee79ca429dc14a9dec05d41dcb26139a5d2433867627d3be496ec69f0a64a4d1a1b9","ssdeep":"384:OiMSVVdC8VjyAeVlRC4YuL4VSYC1RnN2Oi9ZzPS1WDOX/ARrBhjrkcvAO5r9wtCd:nHUp5WE4OIpk0ZwtCaY5FfY7E59qcwY","tlshash":"66a37528b66450367c37d0f6e244c5cda116b6c2ef2696a6f9523214cbcb7e33e57388","first_seen":"2025-12-27T19:31:15.517358Z","last_seen":"2026-07-05T11:03:18.009493Z","times_seen":44,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/Checkbox.CApa6DZJ.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/Checkbox.CApa6DZJ.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 451\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zknS7cQv%2F%2B%2F5Eow%2FH2tKmmr0gepLjKe6HJncjEZuf%2FudwOebvXLfzvy0UP4PW%2BPVBL%2BWQmojvPH7TiaFUGaGUhOD33tMfboOWJLjpD3hLH2A%2BSaZBQuxb2k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233add3356a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2025,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2024)","md5":"b4bd443c97737ec20d6ee6749966bd6d","sha1":"da783fb4e5b31c6ababc5170ece1eaa1d81cea9a","sha256":"145766bcdbb180f70f4b7822e55f4a23b682a3401a8623743f228684e2ae0c01","sha512":"e3a7632c1f6a1b9e31e4cff48c5d3e501f95def24d9eb194a14bdc729e4621c2421025ac368ab55e6dd53b5568d3136168b6428d5750472eeab61b701a1e132b","ssdeep":"","tlshash":"3941451bfd96086668bb80f0e194af47503333d26f516bb3d6c619299ade5d33c0768c","first_seen":"2025-12-27T19:31:15.714781Z","last_seen":"2026-07-05T11:03:18.018067Z","times_seen":45,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn1.codashop.com/S/content/common/images/helpers/19.png","fqdn":"cdn1.codashop.com","domain":"codashop.com","tld":"com"},"ip":{"addr":"3.167.2.78","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"codashop.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 21 Jul 2025 00:00:00 GMT","end":"Wed, 19 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8E:7D:1D:5D:22:2C:EB:1C:92:96:6D:32:A9:C1:97:A4:36:FB:F4:2E","sha256":"60:63:15:F4:CE:03:49:BA:99:D0:BE:65:06:67:D1:E4:DE:4C:FC:D0:6F:1B:68:03:C6:C7:8C:1F:3B:BA:9D:93"}}},"request":{"raw":"GET /S/content/common/images/helpers/19.png HTTP/1.1\r\nHost: cdn1.codashop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 60307\r\nlast-modified: Fri, 14 Jan 2022 11:37:20 GMT\r\nx-amz-meta-sha256: 82c66f550f2e411f0ab5aadbba1b3daf61116ae0458596ffd96cc35b5d12dc9d\r\nx-amz-meta-version-id: JsIFXrWh5Q3VS1mYbVyURIraiIX4QcoH\r\nx-amz-meta-s3b-last-modified: 20210927T072903Z\r\nx-amz-version-id: B53nL4UV2BetCEvuYl4WysCrey1N0zwm\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 30 Jan 2026 12:35:27 GMT\r\netag: \"5a4f38ba63cb19db7837795795ffc99a\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: JvgzjZEv1fosxha80eJScJgbE1lIav46QOVgdUQ6ZgaSBZwxHWQeUg==\r\nage: 26096\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":60307,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1443 x 367, 8-bit colormap, non-interlaced","md5":"5a4f38ba63cb19db7837795795ffc99a","sha1":"ccc60296fa447e5aa16bf67a1d8893c6d49e61b1","sha256":"969a8b1b50bb9644b727b993c1b0fc76c0c0b0a3d45e59e468ca3f0055ad649d","sha512":"3fd0d97acd3a47220e130f09bfad41872bdfd7b62df83f30f33a307fbcea8b92eeba7a41b702102faf3f1d64272b69a8cb3ec937d99e36ef6cf503260ebeb268","ssdeep":"1536:c+ZBgXUOP5+rpUNUlCT6QH43OrOKBxXrIvYB/:zgXUk5+rpUNUlAlH+Or3H7zB/","tlshash":"b143026cb50d7ba0003329afdd4ba9fb60f31c6785bd10af5188c5149607bab4e16af8","first_seen":"2025-01-11T16:53:50.882374Z","last_seen":"2026-07-05T11:03:18.051642Z","times_seen":91,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":58,"connect":1,"send":0,"wait":2,"receive":3,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/LoyaltyRedeemModal.ITDcVu93.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/LoyaltyRedeemModal.ITDcVu93.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 742\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dnjUgYgo7R3Nilwv9APEXcpMHa6qPaIoefiDVnD9ZMlmafNpVpaIJWh6Xw6jVmYj1D1zR9A2VTuUxTns0nYd8q3wZuC4gbadtNOSl4XWrdvkGWgvTK9Y4NE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233b1d4b56a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3465,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3464)","md5":"2fec6985d81240c839b211a7058e6ad9","sha1":"27c09a6b4f6ddac27166da09e0fb7801b8a9e98a","sha256":"419bf282415403745854f21e6e13f006b7709ff682037e58e3dbb20b7e4bf091","sha512":"f4955c63d7f721a136d2c3846d99ce7ded868816fa425ae91c891a1b8affb8f76e85347b9e84f5479313fa943a7c19e32f4bde88f5c83d54a338a58d76dd6f51","ssdeep":"","tlshash":"1761ae26fa1c7f1c34abc34770e38b8b642eda41a515f545a7371a0bdcd72422931aaa","first_seen":"2025-12-27T19:31:15.696318Z","last_seen":"2026-07-05T11:03:18.045423Z","times_seen":44,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/Category.7Q4fGZwk.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/Category.7Q4fGZwk.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 278\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e%2BVK6Qq05kbjvhx1YU3rsroObWuIhKBbDcFh1aXWY16Nr%2BTcLWTkRu%2BwzVejNC%2BhUaaYyJqfp%2FYhrMtvfLly%2B%2FbghP745tNKiyvBwTpwkDOLfW9EZJ0qPmE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233b0d3e56a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":870,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (869)","md5":"98600b1c60132ff7bf66a329a3fd2a76","sha1":"53b9b37b5049ac9b926990c06fbd827cc2d4b4de","sha256":"22bb149572e0925a4f1f4c9917ae492ddc8d1ed35ee89b11072ab7b7419e49e3","sha512":"642691ba51b1f294147339e095f86c3b433de2952235d9361751a0f3c261a031cde9ebcea547f46b6974794f03e2ed87007b74f4156da98de53c2b8b83094667","ssdeep":"","tlshash":"0611e93ce1bee0d5205b762ba2d71c5ed229d6ab9b271ef041d1cf1445d3b161e29808","first_seen":"2025-12-27T19:31:15.570488Z","last_seen":"2026-07-05T11:03:18.044661Z","times_seen":44,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/LoadingSpinner.CNGYYImg.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/LoadingSpinner.CNGYYImg.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:08:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 596\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aP1o0VZS10Yxh%2F%2F7t2Isi41t191EOmYALiUnZGlvD7PxhSVNm%2FjiDS0cciqz3CEkY5DWdHvDPj4f7mQZdgwuML6HxkTmybKS%2BJ0ibf836%2FF9V5x5KjcxkaU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233abd2756a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2986,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2985)","md5":"4a51984b58f78559ec93f22fe3e4c84a","sha1":"dab7d16bcf06f09a253046490c0e5f91e8ddb9d7","sha256":"8eb19cd6607e77ffcdf33eca3faf22773dc04a6814825e0213501ad55375b763","sha512":"547605be721f8e641bf128fb411deb1dca5fd262d1c2e52abce9e6d8e3c12165affca67c448ea127e4576aef43120f19c956ad6738a159988a495c1c8adbdb35","ssdeep":"","tlshash":"9d512a2171cc08757d3795b09d6d8adea227fb63ab508681d51df241cb23eee382632c","first_seen":"2025-12-27T19:31:15.545094Z","last_seen":"2026-07-05T11:03:18.040791Z","times_seen":44,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/PartnerSsoButton.gDhhFnfE.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/PartnerSsoButton.gDhhFnfE.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 311\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gO2DhOAvq5LpTalpavpQfYtCVSa8KLjS%2BfJhkpO9%2FCiBycAnuTE8ODUsiC%2F54rzodjkMVtjf4n%2FP9M2Fbb7JVq3V0Ot2OPTFHyIwyWtBQCIYsDBu0yDauos%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233acd2d56a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1008,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1007)","md5":"249366e178b5661d4b2750d1b733005e","sha1":"00242686b3b589fd4aad4a0b09a37c3ac79347ce","sha256":"9ddb2c4246e24d999f32315da714ff8da207f9f080c69d15debb0edb66a4e8a0","sha512":"a10f0b9b7499265900d4b3bfa0ad660963d241639ca5200dfcc2584eeecfd3ca75b86ac05852ff18ad05a25d0fb8341fff426cb8fc171d8753f8d2bfac4fcd17","ssdeep":"","tlshash":"391102a4f73c1929757bcb8119c3ceccc13586a47e21b25ca2975b5080d70162f1bb98","first_seen":"2025-12-27T19:31:15.671492Z","last_seen":"2026-07-05T11:03:18.04739Z","times_seen":45,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/Header.DBqX41vY.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/Header.DBqX41vY.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 367\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4jYTRqgrXmfQzA%2FE8uZKw9OhrIoc1tpYUC3C%2BF8K3Yardlzy2MzUqiAQOeTzNHMUc25WkWUDbRKSnpTl%2BB1NSdewN490oSnpcJqd5lttrTX2yCAjkOZ219w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233afd3856a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1363,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1362)","md5":"587bf3360489528d22d0fc2b28ccf804","sha1":"32f8fef8625e4ebcea6db185bd802fa8ab6b4aa4","sha256":"0d738656116ef04111d92bdfc86a7c282b61a5c6de17c1dc4998152dddd4e998","sha512":"c20301a733b5b5ee2f7d215d43f320685b89e2e0d3311c5cfb69c87f04233baf728c4e6203cff6656abf63eaa6662e531049a89ed764e33c9b4c366469d6d8a0","ssdeep":"","tlshash":"2d215911570f3238b17f502ee620ae8e730db102e61f78b5ab46911f8eca691f7e2049","first_seen":"2025-12-27T19:31:15.555133Z","last_seen":"2026-07-05T11:03:17.982733Z","times_seen":44,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/Social.Bis463MZ.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/Social.Bis463MZ.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 251\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Fz8l9irmk4%2B3Vc3nXv9QTc4tzBqnpMKbBnRwmC%2BPg0GsSeOFeNyi1fIm8nb%2FBSi27d5l6ZRvMLWMOlvVK1l6TNhrtP1zGDfQSV4mx7UAAVO4lwjv7cozQQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233b0d4456a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":685,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (684)","md5":"9fc42ccc5de884d43860f7c65f079e55","sha1":"bef0981ba53d4828a0eff67adf967b0193781f9b","sha256":"1387cc36e8ff91fc691fc4a3f0923c8619bef9f2f204114217a2a1192a2db394","sha512":"20cfb989b6f109fee606540a7eaa8ed15ad78cb5354d8bb315c0c2f7c3a8e76f5fac181038541bb46781892d3576b6448f1b6f7368b0d0c2b8e64cda7a597c5b","ssdeep":"","tlshash":"5001f95a73c8be35b82fc325711103c96126e515672f42959cf72760447332379bb64e","first_seen":"2025-12-27T19:31:15.677291Z","last_seen":"2026-07-05T11:03:18.112817Z","times_seen":45,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18752\r\ncf-ray: 9c61233b18aa3181-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"6421d693-4940\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 746880\r\nexpires: Wed, 20 Jan 2027 12:57:53 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BV0I%2Bw4a3c4jdN9Dsm1GQoF2pmHvyTDoIrvFrrqmp7UDNM7bwHf3AmUsXFMVCxy57madbQslq9GSw%2FKpckzClONogwZmtNgplJ2reWuLXevg2A3NSaC8uR9u98tpk09XVPIwa%2FEW\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102025,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"ded1c367363e8b20bdc6a19b8350a737","sha1":"8c06d82739d14b094ff6d9036021a252bd1d985d","sha256":"1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf","sha512":"89e71d2e66ac925ec2564aa45cd43f647fd72e5bd664e2728fb632eed71e9e6a43d72a404a8ce9993fc4d223ed985201e3a66676d01cf5e341bc7d07fd9a6207","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:S709gMGFiyPGuZpfZCl","tlshash":"2ea3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-07-27T12:54:07.924325Z","times_seen":58336,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":18,"dns":3,"connect":1,"send":0,"wait":11,"receive":1,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/Sheet.KrvcHgO_.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/Sheet.KrvcHgO_.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 620\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Exrhdvg7th6zu9Oz7wPbNlfwECnXHk9hQQJ55slfrBwfDbiZLyEyFaiHT1qsiSR%2Fk94972%2BPbXmrfU0REIY9xLO4z0w2ledM0F0wsGD1dy7HlZrucVT1iGk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233acd3156a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2322,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2321)","md5":"15451e2bfa5e61b547ec8b145e77fb51","sha1":"481785a204641ffbb829e5d13fd8fc673bf8381f","sha256":"e6c8fd9f3e6c7cf94e99d07954a0999d4ddee3e4d2649edf7b792ea3368e756b","sha512":"34f92e5cb65bc54f8afead410eaf6a39b56a621cd596e74135c28393741da45a80d09121d34688ceb83e9a9ce54f40e5cf4e9b6a7d60b2b7c4e026cb23a8e578","ssdeep":"","tlshash":"22417c34722e913e7f3399e6e384ae9d501fb2815d3a2a64ff8410250ec16f93e5bd08","first_seen":"2025-12-27T19:31:15.656476Z","last_seen":"2026-07-05T11:03:18.055715Z","times_seen":44,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/ReCaptcha.Bgft6uvC.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/ReCaptcha.Bgft6uvC.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:10 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MxYlQfp7KNBkOrkW7izRsuiMHOB8t43ddUfNTxAJvupJLBWizyC4xDY4PuyAHdTZIJgZl2FDwolw9eO4jiDybeqDhYE8Dpr016OZTfm5AlWS%2F5Zp1AxQ2ys%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233add3456a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":47,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"6ff2b8f9774df5977067e726ab81a559","sha1":"137b13dc93cd67be0139dbe9b66d3691b54437ad","sha256":"942066b377706eac54ab18b9926b3822781904b659acc857cde2b0ef013b9585","sha512":"4d2145b9170c559f10c2427284d5d7b871fd8ebb40a5b7d81eaa88b41c2cc77ed0d743d7e8aa9631bbb7cf7ba17e2155d7ef5baf33c3a1bfd2911c370db4693d","ssdeep":"","tlshash":"77900411711f4031df55d054cd450d40435155d1f41554740f0dcd751f5ff70531dc54","first_seen":"2025-11-06T10:55:19.053604Z","last_seen":"2026-07-05T11:03:18.042388Z","times_seen":47,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/Legal.KlbezL_M.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/Legal.KlbezL_M.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 374\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BQa3fQmivlnP6s70K%2BV4aFnc9LdoiqtSkRBUKDFaPHiNZDVGZtUIuXswqQKBY8xGc%2B31mmk0PeIl%2Bb0qKAA5C%2FqJqEjajQXkEb%2BzYORHGSD96WZQjG3JUrg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233b0d4156a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1455,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1454)","md5":"8d7987799a5eb30e904f25bf94aae359","sha1":"83b5f1611da064957de8f447a14c19089292ffac","sha256":"ee6f463f412af980f0d691d3eca1fe0842963a0d949802211483a9acdd9ca487","sha512":"e8e8de1d484810aca26c51a6820e89aa857064f3f0060f1bb7c512580a1eff0cb273ce7f1f64faedc22954421b40677d0796d2ffe4992b1e0c7c2251496ca3b7","ssdeep":"","tlshash":"ee312714227a8617e52ff935c6c87f8ea1237d9779fb94d28c0a53104eda343af39249","first_seen":"2025-12-27T19:31:15.561593Z","last_seen":"2026-07-05T11:03:18.012151Z","times_seen":44,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/favicon-16.png","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:54.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /favicon-16.png HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D3u3seGJ3s0LpaDjAMuL9iqSnyOSQPnELScC%2FH5LApMu3FBGn0Dv9CMOPio5j24OrQeCt09PgLCMWFBGJrIrxQRy1FH4MQoszFlIOJGH1BRMS9Ca6p6YfMY%3D\"}]}\r\ndate: Fri, 30 Jan 2026 12:57:55 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c612340fd9856a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-27T13:55:47.187528Z","times_seen":144280,"resource_available":true,"data":null}},"time_used":936,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":936,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn1.codashop.com/images/337_448ecd16-c203-497d-af3b-eecc4fbad855_product/1759843971236_75ed2db9-44ca-450f-8f11-bb91a4ec9ea0.png","fqdn":"cdn1.codashop.com","domain":"codashop.com","tld":"com"},"ip":{"addr":"3.167.2.78","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:54.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"codashop.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 21 Jul 2025 00:00:00 GMT","end":"Wed, 19 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8E:7D:1D:5D:22:2C:EB:1C:92:96:6D:32:A9:C1:97:A4:36:FB:F4:2E","sha256":"60:63:15:F4:CE:03:49:BA:99:D0:BE:65:06:67:D1:E4:DE:4C:FC:D0:6F:1B:68:03:C6:C7:8C:1F:3B:BA:9D:93"}}},"request":{"raw":"GET /images/337_448ecd16-c203-497d-af3b-eecc4fbad855_product/1759843971236_75ed2db9-44ca-450f-8f11-bb91a4ec9ea0.png HTTP/1.1\r\nHost: cdn1.codashop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 5052\r\nlast-modified: Tue, 07 Oct 2025 13:32:57 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 30 Jan 2026 12:57:55 GMT\r\netag: \"28380515fca2c6f9a34c8d63c84082ee\"\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: P1Bf5KcfmNkor7NnqJEN_iKTC4wikk6Qdep5P2JrCLDYd8sh84yu-A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5052,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"28380515fca2c6f9a34c8d63c84082ee","sha1":"8f4e3f2a27ac7daf8d4ad527df869e3283280d2e","sha256":"7c77ef25ab71668ce14480e52815e31bcf9e19f2409889048c0c00bde9716895","sha512":"e61f5eadb42f9cb626fcad82d07cb6a9263cdbd7d92a2d0f71717aa8f3ef4527794a0f81c9e762e930a9e30eb1f68a6c9eb8fc140910784e29db88eeb5f928ea","ssdeep":"96:E4VtDHYxsRUjApSw90doUj5C+1y6lBDxLQgmHvJmdt6JxJg/axUERDaG5z:pHYxsR1pkdoU9C+s69QgmxmdUTg/Yvh","tlshash":"b0a17dc7d6e0f0b320b0128d44ad20b18a95eeed0c3202fb73dbf51608f4778848e202","first_seen":"2023-05-26T20:48:51Z","last_seen":"2026-05-28T18:04:01.882522Z","times_seen":292,"resource_available":false,"data":null}},"time_used":516,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nage: 839980\r\nx-served-by: cache-lga21931-LGA, cache-hel1410022-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 71, 53662\r\nx-timer: S1769777873.152033,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-27T13:57:28.433315Z","times_seen":494812,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":55,"dns":6,"connect":14,"send":0,"wait":14,"receive":5,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/OrderSummarySku.BE_sKAgv.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/OrderSummarySku.BE_sKAgv.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 893\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6j4Cp5Z6lbkRp7focZk4IE6LqjO6eN3P4Yqxf67uHbZ%2FlMwoye8vskXdyuSpH4XCdckEexivmPMcNYXYuZaV67x6fu3syrEB0l7tO8l5a0VOmsc6pYEq%2Fps%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233add3256a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4427,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4426)","md5":"8beffcb8d4be596213790e8b60d1594f","sha1":"62ac01952a952ff4ed3ecea20c6fb47a0bf26d63","sha256":"333a3bf66074407199321f0904638f7fbe87024027143d0aeacc41ec06f5b656","sha512":"a80235fad6965b7186696f5e0f5beb7265d58f7af6b68b93e6eae689795bc489002cec0ba01179347ba9af3c439d5d3f67297d7d68a2e6772a9bdf138876e044","ssdeep":"96:CwAtLvxAftwJtPzgUdAK05bLK01dLn1hK0bLPDK0D1FG+ozoyi8Q0/rxN:CptFcMtgUCfz0fDdP","tlshash":"7b9132f866b8b0327e37f4e2e5401beda836e7dadd3e0416c084336467b32d66819c54","first_seen":"2025-12-27T19:31:15.471396Z","last_seen":"2026-07-05T11:03:17.982004Z","times_seen":44,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/Country.C9dXdJHH.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/Country.C9dXdJHH.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 439\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mno8f1JG%2BMlYd8mzJas1IzQvL5Yb78TDPISnk9QlgesBIVBuQTIHIiV0n0s4l%2F18dPzUW9Y0kUF%2B8B3tsfBH477g1TWIyLT1ct4%2FYQ%2F%2FSGnuMNZpSCrjK5U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233b0d4056a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1576,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1575)","md5":"c7f65931649fa31d02805eef31a90fa5","sha1":"a12920d7e6a34e12992a5d3eb56e0480fef8636a","sha256":"55a4988ac25ce957a54deb0646ced3a65d2b75651e921e21832f46c0f9c231e0","sha512":"be8725ceb41fcbdcc689de6a93f5eeae14d7ac65c962eb64508f935331367aecb120b27b240e26e5fcb2200dbf65bdbcdfa0102c590a8ed8caf30512b2217dc8","ssdeep":"","tlshash":"6331beac3506953bbd37d6b3f450088ed0136fa32f7e248a95d62b10a9522df2fc01c4","first_seen":"2025-12-27T19:31:15.627129Z","last_seen":"2026-07-05T11:03:17.960129Z","times_seen":44,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn1.codashop.com/S/content/mobile/images/product-tiles/free-fire-tile-codacash-new.jpg","fqdn":"cdn1.codashop.com","domain":"codashop.com","tld":"com"},"ip":{"addr":"3.167.2.78","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"codashop.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 21 Jul 2025 00:00:00 GMT","end":"Wed, 19 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8E:7D:1D:5D:22:2C:EB:1C:92:96:6D:32:A9:C1:97:A4:36:FB:F4:2E","sha256":"60:63:15:F4:CE:03:49:BA:99:D0:BE:65:06:67:D1:E4:DE:4C:FC:D0:6F:1B:68:03:C6:C7:8C:1F:3B:BA:9D:93"}}},"request":{"raw":"GET /S/content/mobile/images/product-tiles/free-fire-tile-codacash-new.jpg HTTP/1.1\r\nHost: cdn1.codashop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 12019\r\nlast-modified: Mon, 15 Jul 2024 04:04:16 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: LSXqSrDDbu_K.EGC3P9zWbgMmjxLI6sh\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 30 Jan 2026 12:35:27 GMT\r\netag: \"79c3da379e28be95711acb0eefd54f0e\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 42964aaabd797233b1d1e846aea4d0f8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: U5dbb0ju83x9opqLLMeRK6DoWpJrVKvhV8qjLAlx-BXivqFMCCmkWg==\r\nage: 16020\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":12019,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 178x178, components 3","md5":"79c3da379e28be95711acb0eefd54f0e","sha1":"3f91f0ccd7a8ca8788e6809dcc26c8fcacd9d47e","sha256":"902336ed3c960bb72ec5cabe5054f2d9606accd9b448b02415f84f05aa8523b8","sha512":"d86926593b5649fd00ad0a50269faa351213a0d7650d4feb2d012543768ba0c461a55a88cf5aea5a72595a6d5da054aad257abd4d6532739b3a33c88a821bd1d","ssdeep":"192:9wZm7mzLbE3hXHZei9OYbppAxwUlFmdeksXMyw8IdlNOiPlMY+8gY74iGhF6uBK6:9w87mzneNZe65wPlFmd6XMv8IIi+gUJb","tlshash":"d942c00f3a75c9c8c8abd575788193b5f3a465012e8b2cedc20642477b9bcf3ca68b41","first_seen":"2024-12-27T11:38:42.672874Z","last_seen":"2026-05-28T18:04:01.91887Z","times_seen":12,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":46,"connect":1,"send":0,"wait":4,"receive":1,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/img/tutupmata.png","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /img/tutupmata.png HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 17 Dec 2025 09:52:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1257\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gHSNrI3iMJTigqJlsUhuekgLupUIfhg1T%2FdEUdNgA6uztA%2FI1y9YCKn3nP3kjHLwsb6Qox60rD6cr0x0F6dDmOT34nYOaazm1lpYBfSYjx2yRsODWYm6P9g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c61233b2d4f56a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1257,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 35 x 23, 8-bit/color RGBA, non-interlaced","md5":"1e8c0ad9d43ee8e7f4fd201c929f7ebb","sha1":"c1dec6d5f8ebc37773b5b4eb66e73ada5b040c7c","sha256":"32ce701d464e8facbca30e0b48af24ac5135c5670b1f218a118a13f29c6eb4b3","sha512":"3aa22737dc4636585a04d7b2673a5ba74678b3a4d057117c704d4e6044de1cca2c8042efdf12cd5bd44d255632096b7ff445e1d17127b633daf125e94fe117ec","ssdeep":"","tlshash":"0e211ad60d781ae98b21c0bb159887911d3f721654c11b7c0ee4fae5c7845f18c44478","first_seen":"2025-12-27T19:31:15.606813Z","last_seen":"2026-07-05T11:03:18.091914Z","times_seen":43,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:54.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://freefire.official-topup.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 30 Jan 2026 12:57:54 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 150124\r\ncf-ray: 9c612341db6f120a-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"6421d693-24a6c\"\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1228553\r\nexpires: Wed, 20 Jan 2027 12:57:54 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rapPPXloYiuMKMXIpnAhfE%2FIgxLnjE7EOSjxoWSKyqI%2BO%2FfXDjEWmG2%2FZ73CIb4EpmO9LYbnl319CMCeuIUcEP3R6TSw4WGv28YbIa%2BumDhpKe2FHgdZlWjtuWo9MWcSeEdXXbBB\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150124,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 150124, version 772.256","md5":"c64278386c2bbb5e293e11b94ca2f6d1","sha1":"6b99aa650bd12a36caa14e0127435d8f4cd3ba73","sha256":"7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880","sha512":"0ccdc1515510d902c0b4a48b863c48bad86e1f766b1f9c890a64e28d91ee7c6d488241c531fc094d15b29c211da71e092587a987e24ee8e67ef8ea99c284e821","ssdeep":"3072:7sCbk7w0ZXdkN6iMjif3Lr7x7wAtf+D7gDk1feXDLnurWHqrNIuv5n0:7sCbkFZXdC7MaLr9w2mIY1feXXurWyNW","tlshash":"28e3123cf2c6d486735f5aeadb79636894fd0a2e74ecc67d26b982112048f828174d1d","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-07-27T13:00:22.049596Z","times_seen":44040,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":16,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/entry.DZ_7f9mh.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/entry.DZ_7f9mh.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1307\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f4PaZ1UHOFqOm4rMXffDyU533qL0NLh6xu7fjdgdFPc7nCiifdFMiUg5luqvUmftPMrEXwzpMUeeK81rlVGdKWvjdvb6jMzzYDEEbNKCXZD8ymYz2v%2F6SKg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233abd2656a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":10497,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10496)","md5":"bbc5871b9ad8941e74afff21bf1c512f","sha1":"a27ff7bcc276ca5689dc075e0b7eb2a37fb7a03b","sha256":"d1687adb93055ce0addddb42ec0522a628ba03ff907eb960c43ee996f036e9d9","sha512":"5d70c867e1488bd8de0c0301884cabf960cddd38b7b58ef5879e593fff8639b4f911b0e5a754df90a3dce2175f6490709e74f80be2ed885f5495a791c9593b23","ssdeep":"96:NrR0vo8iKh+iChvKqNTEHXitvoyi069i7ji+voyi0i9iljiVo7vifySVi7fi/o7y:NRafcPjR2lwaz+4yY","tlshash":"51224d4572aa0d372ef781e5e0098a19e297fbc2ef3cb6a658c516c0cfe15d37c46246","first_seen":"2025-12-27T19:31:15.523868Z","last_seen":"2026-07-05T11:03:18.10702Z","times_seen":44,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/PurchasePendingModal.D2Z83_ny.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/PurchasePendingModal.D2Z83_ny.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 552\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BfwOCN%2BmZxDihSfVP3qQFIJWDABdV5Qck5PQRyIocqAAtVkhUwCwBq%2BBUu6sVga8Gw3JS9ZJ%2BwKEIiWB9GMepf5BmOB7o0Rf08dYYsuVUJtjDxZXIkS9r2k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233b0d4856a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2210,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2209)","md5":"59fdb9d926e1ba1c2aae7a592b1fdb0e","sha1":"9281cc5bf08ac677ba3d0a537a2430970dd5af78","sha256":"971238e53373d332d9f45f81983fe169767fcaf6c838848f1f523cee84fd9425","sha512":"cbb15460c96db598c7528ee928aa293624d47e2f1a2e7793bcb1104908e5838db8c27cd6d425ac0cbad36b1ae9845c3ec02cd90bde613d91babc998d4f4b8cba","ssdeep":"","tlshash":"0641af48255d202aaaf793b3f9b54558f2056e737b55f0b6a980a108cb727cd384f924","first_seen":"2025-12-27T19:31:15.705683Z","last_seen":"2026-07-05T11:03:18.119299Z","times_seen":44,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-30T12:57:51.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 12:57:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iFYmonhdmz6Lg%2BOwtvRQlqXCusE6e1IYcauTXYqXvl%2FsPqJfyClLtfBU0siweA%2BpfRKMD80gdPI6%2FtleEbWyrmuVPI6YVDq%2BRK3WPE4KEE0fvdOomAa6ubE%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c6123307803712d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}],"data":{"size":316618,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (9897), with CRLF line terminators","md5":"53ada1d318e26cd2f27d55c09e556c3d","sha1":"68f6fd6e837c386ee9f89c5eb0683fe975928e25","sha256":"ee673de9cbea1b3e33837f37d781aff6226061fc46d31b7cb37848161b2e1be2","sha512":"65e351d5df71367bc587361ed41220f8ee4bca003e2cb348ebf552ce56859be4386d43caca44fa593f7fab72886817249a8aecc75d0080e74b737128931185d6","ssdeep":"6144:WkhrHFmU6M5pHw2kaEmg5LrnPbhK4mIsDBGMpU8ITq:ysDBuTq","tlshash":"38640914719400252837c2f1e7919e8cfa5ab383cb1b4594f5ec27658ff3ea2bd57a88","first_seen":"2026-01-30T12:58:21.253297Z","last_seen":"2026-01-30T12:58:21.253297Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1490,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":1451,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freefire.official-topup.com/assets/_nuxt/Footer.DGbf0AXy.css","fqdn":"freefire.official-topup.com","domain":"official-topup.com","tld":"com"},"ip":{"addr":"104.21.44.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freefire.official-topup.com/","date":"2026-01-30T12:57:53.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-topup.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 09:47:57 GMT","end":"Thu, 26 Mar 2026 10:46:37 GMT"},"fingerprint":{"sha1":"4D:A2:F2:D6:43:0D:B7:D9:AA:AD:86:EF:21:FF:28:D8:F0:75:98:A8","sha256":"6C:59:CD:AA:4A:C2:33:75:D1:0D:7A:91:3F:30:6D:D2:49:4D:0B:85:B6:F8:9D:17:D4:B2:F0:AB:84:EF:03:77"}}},"request":{"raw":"GET /assets/_nuxt/Footer.DGbf0AXy.css HTTP/1.1\r\nHost: freefire.official-topup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freefire.official-topup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 06 Feb 2026 12:35:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 23:09:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 375\r\ndate: Fri, 30 Jan 2026 12:57:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 1345\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y1fxJou89%2FKEvOvNMJ3TVpuKJFg%2BbVnJqwxYyM1QHg9VHMqbS7N2ndh%2BhZK5IwbKRUDYpIIKwaPvkkKDng8v5Pqn7Lp6chNGm3S4kQpnTFjmRe0D2%2BtdADc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9c61233afd3a56a2-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1472,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1471)","md5":"7ea6f17ae35a7f2182e6d3766c0d4464","sha1":"86c602940cd096fc8994083cc7cb7b22885c42fa","sha256":"99a7ee667a0ddb05d0261f250980d6b276aa5e76505cc3157b7a447c9ded6ead","sha512":"12d009dd3807b0581177bc645f2d3aafb5bc6aa374bda0e4bd29891ad223e42b6cc4a65b628da66a19960681bb143ca59b7c432e4977f1565df1e9cf58040a79","ssdeep":"","tlshash":"d7314639327e203c753b8430f537698c1176d162ea1a60faad6c57085ed72f35e9328a","first_seen":"2025-12-27T19:31:15.68919Z","last_seen":"2026-07-05T11:03:18.090201Z","times_seen":44,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"freefire.official-topup.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"freefire.official-topup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}