{"report_id":"990117a1-770f-4f0e-b50c-ffbe8a21eef7","version":6,"status":"done","tags":[],"date":"2026-03-30T12:14:40Z","url":{"schema":"http","addr":"uphold-log-in.com","fqdn":"uphold-log-in.com","domain":"uphold-log-in.com","tld":"com"},"ip":{"addr":"62.182.82.205","port":0,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"final":{"url":{"schema":"https","addr":"uphold-log-in.com/","fqdn":"uphold-log-in.com","domain":"uphold-log-in.com","tld":"com"},"title":"Uphold Log In – Most Trusted \u0026 Secure","dom":{"size":21511,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6500)","md5":"4fb28ab4eeabc8b892d03ccdda7c21ea","sha1":"472d2b037f2b7903f752fcb608ebb97ddb2a2865","sha256":"90aed88feb3931993f5a53723a94b23b44f0ffbf52fd3d880534bf3ddc968cc4","sha512":"d9c0e760f66a0ddc8db50f6aaae161ac375df67ec074c5e1300f3350c20355bf64c5081efbfe30e3d1ebcdf0a46a2ae2839219b45098df686ee079225c032143","ssdeep":"384:YHzIDUCx6SUJxD3LtI4okb48G1W6N/npvQGkW1oYwMtt:RUCIzS4o+BoWE/npvQGkjYwMz","tlshash":"bfa2dbb2579da72f40530342f77deb78266a4128f742087d76995336a3c3c3a90a369f","dom_hash":"domhashda56e5aba1ed4b0d27e8c95fcd080cc1","first_seen":"2026-03-30T12:14:46.925129Z","last_seen":"2026-03-30T13:59:59.891478Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"uphold-log-in.com","fqdn":"uphold-log-in.com","domain":"uphold-log-in.com","tld":"com"},"ip":{"addr":"62.182.82.205","port":0,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-04T12:14:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"uphold-log-in.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"uphold-log-in.com","ip":{"addr":"62.182.82.205","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":10,"request_count":10,"received_data":289858,"sent_data":4754,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"WordPress:6.1.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-29T22:16:18.281815Z","alert_count":0,"request_count":2,"received_data":17368,"sent_data":1078,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-29T22:20:07.848058Z","alert_count":0,"request_count":1,"received_data":2944,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"uphold-log-in.com/wp-content/themes/exs/assets/js/min/init-1.0.5.js","fqdn":"uphold-log-in.com","domain":"uphold-log-in.com","tld":"com"},"ip":{"addr":"62.182.82.205","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e39dffc4a3ccd44c0d65e30c3b0db84","sha1":"ce5ef4037297f24aed858aaae58fb2159557fbbf","sha256":"5b9953e22b5abf8073d9b2373582feb705600561ecdb4bc059ee5050dcf052ab","sha512":"7cf63e5ab2f5af7e8e41c9108b93f2e8ea6fb6cb8546474e32d0bca1447a898ef745ceb3da15911a739d45ecf260b7f2af45684b9ac67088477b8bc039bf9354","ssdeep":"96:vdg0jcnSkLsTVShZ3O2Vu1cNrXyRKRkSflVMNK8DNw5wlHAPg/9cehUR0BxTjlFx:vdg0jeS8+VmZnMcYalVuKxalHAPo9cef","tlshash":"8fc1546d2511b9b601df4690b0dfbd8435266cdbd44a84322839cc9d0f7ceea6163bde","size":5970,"data":"","first_seen":"2023-03-11T15:20:12Z","last_seen":"2026-05-10T07:40:59.433355Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uphold-log-in.com/wp-content/themes/exs/assets/vendors/glightbox/glightbox.initver%3d1.0.5.js","fqdn":"uphold-log-in.com","domain":"uphold-log-in.com","tld":"com"},"ip":{"addr":"62.182.82.205","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a5384ae4dcc28a7b1182d8f9dd1a9c3","sha1":"3ce708c94886c3b952a5a8ca467259b4076e8afc","sha256":"d473af38de9ce7e07106936fd82350e234f5492d439ac8dcd417c12a71c55e70","sha512":"ea20d0062ac3b58c441febcd00ad5855a444042f574e13b916f5005dfbecea05a93ddcb8863849d4bf8846b6abd6712656bc798437fc6e7c013c757f1431af23","ssdeep":"","tlshash":"62e068bc022450e40e763dadf81d8331698631e73c0b2a23649ec48098e8f690e23aa8","size":365,"data":"","first_seen":"2023-03-11T15:20:12Z","last_seen":"2026-05-06T11:17:36.16133Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uphold-log-in.com/wp-content/themes/exs/assets/vendors/glightbox/glightbox.min-ver%3d1.0.5.js","fqdn":"uphold-log-in.com","domain":"uphold-log-in.com","tld":"com"},"ip":{"addr":"62.182.82.205","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7987140246faade511d4f3b31c71b00","sha1":"614a1451a89a19938113f7315cda4fd18df1cf86","sha256":"500a08da20deeca28fa5ce724eff64176e8d404ad90e0d9ce9c515fbc8a6c045","sha512":"a87d985f9a03a51d8a938e8cf563a3b52419a8c00288ca3450d49ddc8aa20a6750f9644aaf8e39ebbaf85bcb703bf16f793666339b22ccfb4308ff4a9f8dd253","ssdeep":"1536:qS1mR9m1fdbY9LabNZzEhq3+w+AnocJpxuN2Xf3AHPGbX8qNXqlZVEpLE5rf+dDo:L1YkVpDiD9","tlshash":"3933f9057382387645de617aa07b830772b7260a1801d09cb4bddcdb6db8d9e31a7bf5","size":55078,"data":"","first_seen":"2023-03-10T11:33:39Z","last_seen":"2026-07-22T05:54:18.155246Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"uphold-log-in.com/wp-content/themes/exs/assets/vendors/glightbox/glightbox.initver%3d1.0.5.js","fqdn":"uphold-log-in.com","domain":"uphold-log-in.com","tld":"com"},"ip":{"addr":"62.182.82.205","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://uphold-log-in.com/","date":"2026-03-30T12:14:19.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.uphold-log-in.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 15:55:45 GMT","end":"Fri, 26 Jun 2026 15:55:44 GMT"},"fingerprint":{"sha1":"2A:76:01:1E:FE:BD:DB:E6:98:47:12:A8:AE:9B:63:65:7E:4D:4C:75","sha256":"4C:62:7E:50:23:E7:DF:A3:AA:D7:68:07:F0:BF:E9:36:72:09:94:12:D0:7B:7E:D4:8C:97:4B:91:B6:55:0B:2A"}}},"request":{"raw":"GET /wp-content/themes/exs/assets/vendors/glightbox/glightbox.initver%3d1.0.5.js HTTP/1.1\r\nHost: uphold-log-in.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uphold-log-in.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 12:14:20 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 16 May 2023 08:25:48 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":365,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"3a5384ae4dcc28a7b1182d8f9dd1a9c3","sha1":"3ce708c94886c3b952a5a8ca467259b4076e8afc","sha256":"d473af38de9ce7e07106936fd82350e234f5492d439ac8dcd417c12a71c55e70","sha512":"ea20d0062ac3b58c441febcd00ad5855a444042f574e13b916f5005dfbecea05a93ddcb8863849d4bf8846b6abd6712656bc798437fc6e7c013c757f1431af23","ssdeep":"","tlshash":"62e068bc022450e40e763dadf81d8331698631e73c0b2a23649ec48098e8f690e23aa8","first_seen":"2023-03-11T15:20:12Z","last_seen":"2026-05-06T11:17:36.16133Z","times_seen":11,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"uphold-log-in.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uphold-log-in.com/wp-content/themes/exs-news/assets/img/bg-dots-small.png","fqdn":"uphold-log-in.com","domain":"uphold-log-in.com","tld":"com"},"ip":{"addr":"62.182.82.205","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uphold-log-in.com/","date":"2026-03-30T12:14:19.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.uphold-log-in.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 15:55:45 GMT","end":"Fri, 26 Jun 2026 15:55:44 GMT"},"fingerprint":{"sha1":"2A:76:01:1E:FE:BD:DB:E6:98:47:12:A8:AE:9B:63:65:7E:4D:4C:75","sha256":"4C:62:7E:50:23:E7:DF:A3:AA:D7:68:07:F0:BF:E9:36:72:09:94:12:D0:7B:7E:D4:8C:97:4B:91:B6:55:0B:2A"}}},"request":{"raw":"GET /wp-content/themes/exs-news/assets/img/bg-dots-small.png HTTP/1.1\r\nHost: uphold-log-in.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uphold-log-in.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 12:14:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 5792\r\nlast-modified: Tue, 16 May 2023 08:25:48 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5792,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 800, 4-bit colormap, non-interlaced","md5":"fa01dcff838ac684a1107b06ae6e5b3b","sha1":"9e4e79b16d787904ac67684b8cf259a76bdd26ea","sha256":"29e1f9dd801dba234b6a96ffe8ff91fea7e4695424eff58a7158a5c283bcb227","sha512":"5b8c59d27c1771f4189cdf9ff77a15b52e8833b737c723dcf5751ff0ee2a37ae30918de3b64d827c0c6376dea8157867988aa14dcbb590bd2678523a44e6ff27","ssdeep":"96:O9H6dUIIIIIIIebbguvgXDQCl2WkwwAd0O7fr7UF+C8TfwAias6Xk3BlgLAPCc04:hdqHg7XU0kRW7r7UFMwAzfkb56cSbFDG","tlshash":"0bc14bee52b1d01aa9e9ab189117136f5defbfc2c8fd36269a4c5603b1c4190c3d0c21","first_seen":"2026-03-30T12:14:46.927967Z","last_seen":"2026-05-06T11:17:36.162099Z","times_seen":5,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"uphold-log-in.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://uphold-log-in.com/","date":"2026-03-30T12:14:19.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://uphold-log-in.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Mar 2026 02:12:26 GMT\r\nexpires: Sun, 28 Mar 2027 02:12:26 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nage: 208913\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-08-10T23:57:50.622951Z","times_seen":295939,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":106,"dns":2,"connect":7,"send":0,"wait":8,"receive":1,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uphold-log-in.com/favicon.ico","fqdn":"uphold-log-in.com","domain":"uphold-log-in.com","tld":"com"},"ip":{"addr":"62.182.82.205","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uphold-log-in.com/","date":"2026-03-30T12:14:19.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.uphold-log-in.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 15:55:45 GMT","end":"Fri, 26 Jun 2026 15:55:44 GMT"},"fingerprint":{"sha1":"2A:76:01:1E:FE:BD:DB:E6:98:47:12:A8:AE:9B:63:65:7E:4D:4C:75","sha256":"4C:62:7E:50:23:E7:DF:A3:AA:D7:68:07:F0:BF:E9:36:72:09:94:12:D0:7B:7E:D4:8C:97:4B:91:B6:55:0B:2A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: uphold-log-in.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uphold-log-in.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 12:14:20 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-10T23:57:33.790047Z","times_seen":55610,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"uphold-log-in.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uphold-log-in.com/","fqdn":"uphold-log-in.com","domain":"uphold-log-in.com","tld":"com"},"ip":{"addr":"62.182.82.205","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-30T12:14:18.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.uphold-log-in.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 15:55:45 GMT","end":"Fri, 26 Jun 2026 15:55:44 GMT"},"fingerprint":{"sha1":"2A:76:01:1E:FE:BD:DB:E6:98:47:12:A8:AE:9B:63:65:7E:4D:4C:75","sha256":"4C:62:7E:50:23:E7:DF:A3:AA:D7:68:07:F0:BF:E9:36:72:09:94:12:D0:7B:7E:D4:8C:97:4B:91:B6:55:0B:2A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: uphold-log-in.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 12:14:19 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress:6.1.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":21432,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6052), with CRLF line terminators","md5":"4d11d5741fb3291a4f23abd1701c43e3","sha1":"5948d8ae57435106e35651b9d23d9d2f872f4e70","sha256":"6196fc6f206262ade18b82505e29f2d444b5e74ec5fa4354b935360810ff2437","sha512":"2a332dcc77e2a865e28b2bf3bc0452e4a8a14f4858a6b5b612d9274605bd6034198442c63b942c9d918d8e78a7e47635472c62d67986ee241d24431e3eddbeb0","ssdeep":"384:UkrzqArQevnUJkkig3v7a3B4VYG6jpQWoEgbSoWG4JQO1AD5P:vKAcahe7ax4u9jpBoEgbSoWG4JQJD1","tlshash":"2fa2086267946b3f80530323f3beeb7d67698415f34308b97698533ba3c2c2591a258f","first_seen":"2026-03-30T12:14:46.930225Z","last_seen":"2026-03-30T13:59:59.898579Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1446,"timings":{"blocked":697,"dns":594,"connect":46,"send":0,"wait":52,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"uphold-log-in.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uphold-log-in.com/wp-includes/css/dist/block-library/style.min.css","fqdn":"uphold-log-in.com","domain":"uphold-log-in.com","tld":"com"},"ip":{"addr":"62.182.82.205","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://uphold-log-in.com/","date":"2026-03-30T12:14:19.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.uphold-log-in.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 15:55:45 GMT","end":"Fri, 26 Jun 2026 15:55:44 GMT"},"fingerprint":{"sha1":"2A:76:01:1E:FE:BD:DB:E6:98:47:12:A8:AE:9B:63:65:7E:4D:4C:75","sha256":"4C:62:7E:50:23:E7:DF:A3:AA:D7:68:07:F0:BF:E9:36:72:09:94:12:D0:7B:7E:D4:8C:97:4B:91:B6:55:0B:2A"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1\r\nHost: uphold-log-in.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uphold-log-in.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 12:14:19 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 16 May 2023 08:25:48 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":94889,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (47826)","md5":"71d925864153f0edf91037f3d31048e8","sha1":"cc16a0524ac63b5ce29f703a66412224f0dd771a","sha256":"c324ef26b20264369e4568dc9ef1c5cb1f325f6bc4e8b7c01f7fe93fa353276a","sha512":"d6c41c41196df44d606ec3c3d589a2053bb218b1ad164844c438810b3028c9f25a1e4f2d6654f2121758c9736128dffce55f6ce6d3a5ffacfa860f2886430238","ssdeep":"1536:ccaF0fMgkA5SOV+sQ354NThtf0J6BZ9NuZrV:ccaFckA5SOV+sQ354NThV0cBZ9NuZrV","tlshash":"ba93415417b0dcf939ffa73a9d5ee248a513aa41c24a9be7e036d190614ca494cf3b0f","first_seen":"2023-04-05T04:06:46Z","last_seen":"2026-08-10T22:32:17.981531Z","times_seen":2861,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"uphold-log-in.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uphold-log-in.com/wp-content/themes/exs/assets/css/min/main-1200.css","fqdn":"uphold-log-in.com","domain":"uphold-log-in.com","tld":"com"},"ip":{"addr":"62.182.82.205","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://uphold-log-in.com/","date":"2026-03-30T12:14:19.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.uphold-log-in.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 15:55:45 GMT","end":"Fri, 26 Jun 2026 15:55:44 GMT"},"fingerprint":{"sha1":"2A:76:01:1E:FE:BD:DB:E6:98:47:12:A8:AE:9B:63:65:7E:4D:4C:75","sha256":"4C:62:7E:50:23:E7:DF:A3:AA:D7:68:07:F0:BF:E9:36:72:09:94:12:D0:7B:7E:D4:8C:97:4B:91:B6:55:0B:2A"}}},"request":{"raw":"GET /wp-content/themes/exs/assets/css/min/main-1200.css HTTP/1.1\r\nHost: uphold-log-in.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uphold-log-in.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 12:14:19 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 16 May 2023 08:25:48 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88811,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d97a4f46442a5be0004a2279168583c6","sha1":"99d5784bbd04aeda3a70fbbd503d35d948a8fe4c","sha256":"45de2a17a884dcc11168d96e0c22621b47e96a3c3721945170d8f7e5186031f3","sha512":"c68525cb3cc699e3d1dbc3787dc43bf34e9c8e614d2f79bb41f9fcae82e949d0f528e0785257fe5276b1155b8356f37fb127cffe485207771a54d0ab6a546d8f","ssdeep":"1536:9xaTWuVi6Jr1T1M/RhByiQFumfn4D/0Wpmuulv8vdiHV8IZlY:OTWuVi6Jr1T1qhBUFuMHV8IZlY","tlshash":"95931b51a26029bdb42bc31fe3e4ea183514f652cb5357e7f912e1258bca3da16f0b0d","first_seen":"2026-03-30T12:14:46.931877Z","last_seen":"2026-05-06T11:17:36.148941Z","times_seen":5,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"uphold-log-in.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uphold-log-in.com/wp-content/themes/exs/assets/vendors/glightbox/glightbox.min-1.0.5.css","fqdn":"uphold-log-in.com","domain":"uphold-log-in.com","tld":"com"},"ip":{"addr":"62.182.82.205","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://uphold-log-in.com/","date":"2026-03-30T12:14:19.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.uphold-log-in.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 15:55:45 GMT","end":"Fri, 26 Jun 2026 15:55:44 GMT"},"fingerprint":{"sha1":"2A:76:01:1E:FE:BD:DB:E6:98:47:12:A8:AE:9B:63:65:7E:4D:4C:75","sha256":"4C:62:7E:50:23:E7:DF:A3:AA:D7:68:07:F0:BF:E9:36:72:09:94:12:D0:7B:7E:D4:8C:97:4B:91:B6:55:0B:2A"}}},"request":{"raw":"GET /wp-content/themes/exs/assets/vendors/glightbox/glightbox.min-1.0.5.css HTTP/1.1\r\nHost: uphold-log-in.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uphold-log-in.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 12:14:19 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 16 May 2023 08:25:48 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13847,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13746)","md5":"3e5eb3f540cb3e417095d5068f2569b6","sha1":"acfc8c15fecf723afe83abca4503e838165c4188","sha256":"5844b50c93af941d259b9275ef17a27d92305b7eb41c2c4dc0366c325a1c43e3","sha512":"609191a947c871c86240509c1c71e835d93b1f99ad2844e40d4488ed11f4041c51db85073bbc585a46c91c9c9d485902a3f4dc7128c1020e0aeb1f729e821313","ssdeep":"96:pYU6W2PjwbEeuDUPoeXDWYCdBCg0WKyPi3AFkWdLpjxMchAkY:pR6D6qroqYCdBCg0WKbIdKcho","tlshash":"fe521417975032149097ca1a1ad8d6a8077dc133ea326fee77c1fa91c7c3b8b14b2697","first_seen":"2023-04-05T13:27:28Z","last_seen":"2026-07-11T16:51:07.361515Z","times_seen":72,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"uphold-log-in.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uphold-log-in.com/wp-content/themes/exs-news/assets/css/min/main-1.0.5.css","fqdn":"uphold-log-in.com","domain":"uphold-log-in.com","tld":"com"},"ip":{"addr":"62.182.82.205","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://uphold-log-in.com/","date":"2026-03-30T12:14:19.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.uphold-log-in.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 15:55:45 GMT","end":"Fri, 26 Jun 2026 15:55:44 GMT"},"fingerprint":{"sha1":"2A:76:01:1E:FE:BD:DB:E6:98:47:12:A8:AE:9B:63:65:7E:4D:4C:75","sha256":"4C:62:7E:50:23:E7:DF:A3:AA:D7:68:07:F0:BF:E9:36:72:09:94:12:D0:7B:7E:D4:8C:97:4B:91:B6:55:0B:2A"}}},"request":{"raw":"GET /wp-content/themes/exs-news/assets/css/min/main-1.0.5.css HTTP/1.1\r\nHost: uphold-log-in.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uphold-log-in.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 12:14:19 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 16 May 2023 08:25:48 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1267,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1266)","md5":"bf2af53b2ad0daa5cff941c9205ca1cf","sha1":"0a49ea93efe8014578f87b6ba0385ba72a9a19ef","sha256":"64a2273857d0ff32d58ffba2bd0934e4a7c008ba505f48286ab257cc287b6481","sha512":"cb3b36f404bdd2444ae45e485faedc365b9b8dd992a32c11a7c1af72a28161cb30a90f59b24377e2296f6fe555ba59fc2a413a1c8bd5d09b58ebd85581c5eb43","ssdeep":"","tlshash":"2121329461d500ac341b58fed678099899247235c10353f9ff59b675c6960ca2bf7e2c","first_seen":"2026-03-30T12:14:46.933827Z","last_seen":"2026-05-06T11:17:36.164184Z","times_seen":5,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"uphold-log-in.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uphold-log-in.com/wp-content/themes/exs/assets/vendors/glightbox/glightbox.min-ver%3d1.0.5.js","fqdn":"uphold-log-in.com","domain":"uphold-log-in.com","tld":"com"},"ip":{"addr":"62.182.82.205","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://uphold-log-in.com/","date":"2026-03-30T12:14:19.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.uphold-log-in.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 15:55:45 GMT","end":"Fri, 26 Jun 2026 15:55:44 GMT"},"fingerprint":{"sha1":"2A:76:01:1E:FE:BD:DB:E6:98:47:12:A8:AE:9B:63:65:7E:4D:4C:75","sha256":"4C:62:7E:50:23:E7:DF:A3:AA:D7:68:07:F0:BF:E9:36:72:09:94:12:D0:7B:7E:D4:8C:97:4B:91:B6:55:0B:2A"}}},"request":{"raw":"GET /wp-content/themes/exs/assets/vendors/glightbox/glightbox.min-ver%3d1.0.5.js HTTP/1.1\r\nHost: uphold-log-in.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uphold-log-in.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 12:14:20 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 16 May 2023 08:25:48 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55078,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (55078), with no line terminators","md5":"a7987140246faade511d4f3b31c71b00","sha1":"614a1451a89a19938113f7315cda4fd18df1cf86","sha256":"500a08da20deeca28fa5ce724eff64176e8d404ad90e0d9ce9c515fbc8a6c045","sha512":"a87d985f9a03a51d8a938e8cf563a3b52419a8c00288ca3450d49ddc8aa20a6750f9644aaf8e39ebbaf85bcb703bf16f793666339b22ccfb4308ff4a9f8dd253","ssdeep":"1536:qS1mR9m1fdbY9LabNZzEhq3+w+AnocJpxuN2Xf3AHPGbX8qNXqlZVEpLE5rf+dDo:L1YkVpDiD9","tlshash":"3933f9057382387645de617aa07b830772b7260a1801d09cb4bddcdb6db8d9e31a7bf5","first_seen":"2023-03-10T11:33:39Z","last_seen":"2026-07-22T05:54:18.155246Z","times_seen":88,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"uphold-log-in.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://uphold-log-in.com/","date":"2026-03-30T12:14:19.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://uphold-log-in.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Mar 2026 22:14:21 GMT\r\nexpires: Sun, 28 Mar 2027 22:14:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nage: 136798\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-08-10T23:57:50.573983Z","times_seen":390224,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Poppins%3Aregular%2C700\u0026ver=1.0.0","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://uphold-log-in.com/","date":"2026-03-30T12:14:19.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /css?family=Poppins%3Aregular%2C700\u0026ver=1.0.0 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uphold-log-in.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 30 Mar 2026 12:14:19 GMT\r\ndate: Mon, 30 Mar 2026 12:14:19 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2258,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"81db411f3d725935f1588d3b4f4632f9","sha1":"8db59d70c88fb67dc7cd2859e2f1bbe13019c83f","sha256":"511981795f7a659de2a5218843f7915d4c6c73c784eeafbb1c0bc935974672fc","sha512":"73d0fb0e99311e1549244da9e39c086ccb58920b72c58fa5ad653dd98e5639bfe99dad92ccffdb14f98bc03d20c28460193c41fe10ca516c4a23bf04b58e39d1","ssdeep":"","tlshash":"03419a92083ae41467931cc623ce7c37ef0ea244b450e564abfe0c9cada7c69537272d","first_seen":"2025-09-17T14:39:35.303831Z","last_seen":"2026-08-09T07:05:24.430376Z","times_seen":1133,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":105,"dns":0,"connect":20,"send":0,"wait":32,"receive":0,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uphold-log-in.com/wp-content/themes/exs/assets/js/min/init-1.0.5.js","fqdn":"uphold-log-in.com","domain":"uphold-log-in.com","tld":"com"},"ip":{"addr":"62.182.82.205","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://uphold-log-in.com/","date":"2026-03-30T12:14:19.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.uphold-log-in.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 15:55:45 GMT","end":"Fri, 26 Jun 2026 15:55:44 GMT"},"fingerprint":{"sha1":"2A:76:01:1E:FE:BD:DB:E6:98:47:12:A8:AE:9B:63:65:7E:4D:4C:75","sha256":"4C:62:7E:50:23:E7:DF:A3:AA:D7:68:07:F0:BF:E9:36:72:09:94:12:D0:7B:7E:D4:8C:97:4B:91:B6:55:0B:2A"}}},"request":{"raw":"GET /wp-content/themes/exs/assets/js/min/init-1.0.5.js HTTP/1.1\r\nHost: uphold-log-in.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://uphold-log-in.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 30 Mar 2026 12:14:20 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 16 May 2023 08:25:48 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5970,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5970), with no line terminators","md5":"0e39dffc4a3ccd44c0d65e30c3b0db84","sha1":"ce5ef4037297f24aed858aaae58fb2159557fbbf","sha256":"5b9953e22b5abf8073d9b2373582feb705600561ecdb4bc059ee5050dcf052ab","sha512":"7cf63e5ab2f5af7e8e41c9108b93f2e8ea6fb6cb8546474e32d0bca1447a898ef745ceb3da15911a739d45ecf260b7f2af45684b9ac67088477b8bc039bf9354","ssdeep":"96:vdg0jcnSkLsTVShZ3O2Vu1cNrXyRKRkSflVMNK8DNw5wlHAPg/9cehUR0BxTjlFx:vdg0jeS8+VmZnMcYalVuKxalHAPo9cef","tlshash":"8fc1546d2511b9b601df4690b0dfbd8435266cdbd44a84322839cc9d0f7ceea6163bde","first_seen":"2023-03-11T15:20:12Z","last_seen":"2026-05-10T07:40:59.433355Z","times_seen":17,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"uphold-log-in.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}