{"report_id":"da45d675-a281-47a3-a5dc-f6d95de22489","version":6,"status":"done","tags":[],"date":"2026-03-10T12:04:32Z","url":{"schema":"http","addr":"recover-uphold.com","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.65","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"recover-uphold.com/","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"title":"Ledger - Approval Requests","dom":{"size":24096,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (23630)","md5":"4e43783b89042f543f116cec254236b8","sha1":"443c6eae0d846bec04917396b9d689dfa8496c53","sha256":"bb1fc6ef5c537539eba61b7ed929bae93a8dd8e9c468190f3398aab8d4f207dc","sha512":"ac8a3b442ee67d13a231aef04a16313769e4636b86ac81b4d7a0144177d9beffe1736330a44a2a72d63dc8edafa25c046e35e8d64ed7bf22861d71a3c9fe6fc3","ssdeep":"384:pMUurfmFf20kF5lfp9psWr0S9CkzTvWPS9eprIiKGQCHYc1CcW7RJr7YtlvAlcyD:pMUuiFf20kVfLprr19CkzTvXeyiKX0YP","tlshash":"b4b2f957bd00ed4d5e5b8e6d763a7e39118cc07be52984a5f78ecb6802929f2cb53c80","dom_hash":"domhashf6ca94ad1d921413397cd9a87e947f98","first_seen":"2026-03-10T12:04:38.067258Z","last_seen":"2026-03-10T12:35:26.597416Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"recover-uphold.com","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.65","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-14T12:04:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"recover-uphold.com","ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-03-09","domain_rank":0,"first_seen":"2026-03-10T12:04:34.166708Z","last_seen":"2026-03-10T12:04:34.166708Z","alert_count":44,"request_count":44,"received_data":1282708,"sent_data":20318,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]},{"fqdn":"cdn.brandfetch.io","ip":{"addr":"52.84.50.83","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-04-17","domain_rank":443360,"first_seen":"2024-11-15T13:00:59Z","last_seen":"2026-03-05T18:35:54.949296Z","alert_count":0,"request_count":2,"received_data":9214,"sent_data":994,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"recover-uphold.com/_next/static/chunks/13e130d36132d73e.js","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1350c8f31b36e3cc68614d4ce2400a3","sha1":"b31286f950f536602f68b10f7c2776ad7eac582a","sha256":"4074dee602c22606ba4c4dea451ad70e5c298fcf3ffba167b63b42830e7191d3","sha512":"76c7800196ff52dc08c27feeae6479ed02ad935fb6f92fb471ce4d5d50e3454e83841b01236496938abb436225f7c90a3cb339b21a9ea6a1a0563539f1e4db63","ssdeep":"384:g78l17CWCmLgG4AYHfcseD1eFFbKDRP1JnppTh4vyfmybZznCjLDoq9ggZrIwi+P:rl1OJ4nTNx4LDoq9ggZrIK","tlshash":"3a03b5b172d4faa2025744f0d83f101af23d4c7621ad74b0a7e4ccdbb99858d92b6f99","size":39262,"data":"","first_seen":"2025-12-16T03:35:31.869639Z","last_seen":"2026-07-19T16:34:27.028588Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_next/static/chunks/218c272dd29e1284.js","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0cf77ed69cce5e0d9e42a72ed9fc2348","sha1":"2edbf658680ae7c0b0cfdbf679f2ca15a6dd7888","sha256":"94048db49c3b218fb45b9fb936324029adcb95d662fce398f9149c1996a4d345","sha512":"e5c51e6c99f9ffe97574850f3d181eb01dc0d5c2cdb716368ad2bc5310add3ae9052af6e61c97d823b3559aad43033fc9458591d3e5f775dec0564a2097060f3","ssdeep":"","tlshash":"4a61536572d9f9c1114a90d88c3b5006f2391e3666bd70e0b799cdf939d408e92f2f9a","size":3324,"data":"","first_seen":"2026-03-06T10:10:35.726798Z","last_seen":"2026-06-10T16:31:24.045184Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_next/static/chunks/340820ca5a1417a0.js","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"39140bde28e747cc18c2d96ea8f962d0","sha1":"60b3642cf55b9ce1c23dd8f680cd87920e313d59","sha256":"74e7ddbc780d1a41db1c6ef099b76eff62d3e3f287c9d6967969cacd25c683bd","sha512":"7fd12f2683b75acd8a9751d2a5b6ba01a79133c85684447f91c71c8ca7e956b218c07f160b317dcf4cb788f2f57bffe697db3d6491bba2f9b35cb46f502d023e","ssdeep":"192:DyGTMk5dQfzDwP9+HN6fT1arO+1pgwh1ebDPSA7EGpErj3+yPCwid/iXYfaIwX5q:DydxbdYwrOUpybT4LuyPCwiQrIwX8","tlshash":"309295a571d5f9c1069b80e8c83b4016f32e0e7610ad74d4e7e1cce679a095ed1b2fba","size":21124,"data":"","first_seen":"2026-02-11T15:34:34.013898Z","last_seen":"2026-06-10T21:22:45.290458Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3e3e350f78cf22bd7b335d70b41a58a","sha1":"cce22220b6a8dff76692755cc45439b4ec474a4d","sha256":"ee6bb81f4e9fc030a39a7c71affc4d1f2b900baa4b4c7af83361388d7c39599b","sha512":"15b6cbf8bd67e82a4952004138ebc95c44e4d373317826f1560eeec13416cc1d6a38d834609ef4b713e7a9c92d1b1bbf84de08e2e4061ed3d1e3891982c25b0a","ssdeep":"","tlshash":"3f90025ff2302063a756122b166f15456421626565550869123830eb4955148474265c","size":57,"data":"","first_seen":"2025-06-30T14:23:19.448274Z","last_seen":"2026-08-12T12:42:56.027694Z","times_seen":66944,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_vercel/insights/script.js","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e699b6e4471fd6950176e39c5f1ace0","sha1":"a3957a826a0c77a338e1bd9b408b90c6215491f8","sha256":"79bf638dd4acdeb9b80c5a4009a3e1986968d615e9557dcf23d91b5e8ad158d8","sha512":"c49b40fbcbe959fab505da0d27a9f3c273a3740f07b34433619e5bc88cd7dd54564609284f4ee30ae219a1572a0a255fe9af92f2f948931b761cbc1be3605e2f","ssdeep":"","tlshash":"2251a5ea74a1e16d4ad79275817f1204f37f2a92fc05000132d99c9d3539d1dea73f99","size":2495,"data":"","first_seen":"2026-02-17T21:27:06.661745Z","last_seen":"2026-08-12T11:59:57.961435Z","times_seen":19879,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_next/static/chunks/dc47d06c64892b19.js","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e1298c5537adcfda7157d01af0dd673","sha1":"bfc4af73f648d0cc430733e56e600b2540463566","sha256":"5aa4027e37c40e43b9846d95aefcc5f0966e456c18284590cb2bfc6f8a534602","sha512":"aa9f8ae6b7f8cd5c4b43efa3f050db84588231c17da36e75ad1451b9110aa80a5ebf8784175464174a57d2357970f14ded3d947bdbf86157c502fdf498dcac01","ssdeep":"192:LFCkjRF72jbSTv/y0DlRs2BjCceSy9Iw2Bnu9DDBsQ3BfiJY6XBQUrI/1RmE5L4s:ztTtl3tpy9IwKkBsuiJY+QakLlq3y","tlshash":"976209b532a5fcc6125bc2d4d83f4409f7251c71667d70b473e948e96aa0d48a0b2fbb","size":15358,"data":"","first_seen":"2026-03-10T12:04:38.092594Z","last_seen":"2026-03-14T13:06:54.551139Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_next/static/chunks/7af99b4fe779898e.js","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8a56d4d89a50246b38ae41a252e653f","sha1":"8f03d29d93b28ebf10c3273209c5750cf9e7819c","sha256":"b63b6b7c8c8b75f7859f44b952075a63c33a623206642f7f7b51b115f07dd31a","sha512":"09e16b8f025924a2fe7811c05b89d40c2de7b52a61f3bb05580b105e5621fefef698c555d0d347ac4b93a98dfcf6bac3c1517bd9599bd672a807c30e0e03766b","ssdeep":"768:7mFYmHlSuyBKywJr8EU6KtsdDvVI4Bu51Bb1beAvrtmaP8apfY47q6F3PwNNPug9:Kb254FcLrDr0EUxuioyoyqTfqR","tlshash":"b983d6f936d0f8920bab45a6c07f0005f31c4d77245e78b4a3e5ddda316459ea0e2faa","size":85404,"data":"","first_seen":"2025-12-14T10:05:37.44573Z","last_seen":"2026-08-08T23:15:08.849558Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-08-12T12:37:18.908219Z","times_seen":221995,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_next/static/chunks/05b1b0ed80150415.js","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"04f507de2293912289a780c74cc1824e","sha1":"e455037b6d4fcc8b788b1445c776cfb9337d7b70","sha256":"7cf7c82762ea4b57306bd25ff90a48495d41175536f2dc9a93458d56296ba339","sha512":"c025f4c36cf907c70597c792c5096cb8bc1e5f477cab4721b5c842c2dbc6ccbb7003db932d49dafb6e57381d17f1fe13faa0441b7c9cb547f459b5fa8fd0c09c","ssdeep":"6144:hxPB9EMZf+KStQaaafXFCqcWNalxYMTPnyCfzZ8bec:F+KSiw","tlshash":"8a242bc5b3b6b03247d595a594361403f23ca61eb81d802cb76d5edb2a98948fb3bf31","size":216338,"data":"","first_seen":"2026-03-10T12:04:38.143023Z","last_seen":"2026-03-14T13:06:54.548943Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"bbf2bef46f0c5a8d2a7e2f7ff0aca433","sha1":"d89d09525e83ab30536cda2a475529b37c0c3db3","sha256":"c585e3067158f8c74b5237a75dfa2d76b22ee9a831f41ab0af78c49769667e6f","sha512":"33301d97ecc689b9d9ca755b796d02644c3d436fda2da3a06cb1e48520b8a0db8e2a829da31ed47300f58642a534312938723c05728e2ecd30427513fe6d34c1","ssdeep":"","tlshash":"9e31ec0af51bea84bc30de5f122f2f7358d4dd778074145df75eced909218668b849a2","size":1565,"data":"","first_seen":"2026-03-10T12:04:38.15776Z","last_seen":"2026-03-14T13:06:54.55431Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"dcf9ee6617ae8fe335beaefb50b766d6","sha1":"52d8394f6587b7491bdcb662b2dcca41fdcc51ad","sha256":"f5cbdd3e04fa9c91282a2fdce8bc62f40c476c14b883ce366b758e183991ef43","sha512":"c18bd93145b3b10bdb313bd4cc28c12e7b8a4dc192d277742b96726b2aa1bca944ff08eca782c3b6f9c673f03ef5ae4020114005271bfcebfb2b47770e89655c","ssdeep":"","tlshash":"a671ae2d7804de4bec7e7d69023e9d3a10cc897b4394deb8869dcf140a464ba27e6dc1","size":3523,"data":"","first_seen":"2026-03-10T12:04:38.161151Z","last_seen":"2026-03-10T12:35:26.640277Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_next/static/chunks/ea73f2a8b8c7334e.js","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f58357877aa2cbf6dd6a12d0ed698b89","sha1":"c0fe3c702e74118f36b1db3d21b6bf44aea8cd17","sha256":"256aef6897032ea958549c731fc407d48bd7fd6afe5b3edfc840782527baefa7","sha512":"64373503c3eb604eeb61866b7ea42a3d2a09eae19847bb7cd2a2116208d380192a0c9af4c68f98898963ee089d8e1753c6bef76fe21c782a0637587b2cdf4872","ssdeep":"6144:epVSnHMw+TQRnTg6O052bJ6t0VYUzEbJ6t00rmzhzwiqGhtVdKamAu6qRnmnzN2O:OSnHMLQRT+bJ6t0+bJ6t0hzwixhtVdK+","tlshash":"9c640944b212bfbdf56b4598a46e910db12f5b98fa0f4834fabd382d26094c07b53bc5","size":336622,"data":"","first_seen":"2026-03-10T12:04:38.10756Z","last_seen":"2026-03-14T13:06:54.5409Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_next/static/chunks/73fc282fee4c4fe2.js","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"90af8bef9f1b0cb96e1e42e7b8dd904f","sha1":"e8b1e3de25ecf488078ddc06ff8d21b13db6e4a7","sha256":"453431f6c9934da37624f5704008351303868b82a1d6f17ebbd58cfdb20500a6","sha512":"ee4b1276de42e8f42937c04366edf04d56771df454fb123fb447d5cfde6a0bd37d6fb3471624ae86e5b30987c4e4b27ed717821e8ce739a75bb82ae73af2ebfb","ssdeep":"768:OYRijlM8ycxb9Xl2hSBWqLu2GfKcozd+a9INR+xTd+JXRQAPSKB:voeCbvvoTJozVINMxTd+BRfPSKB","tlshash":"f603facd75a5b0910fb396b1802f401bb23e1937188d48a0d3a3dde9b8b94add237f59","size":41036,"data":"","first_seen":"2026-03-06T10:10:35.723691Z","last_seen":"2026-06-10T16:31:24.043393Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"14cca1cdf4e02f191386a78d1b6522ae","sha1":"39323120ca9d8cdcb11eb8ecd9b8f8644c319a60","sha256":"faf7f7e8b08a4922b0a23263025ee322960f71dab36acb70315e9a5932d55189","sha512":"ef3cc968d4fbece9f4af091172b903dbeadf08f6b61308c61aab47649595369ecf5663edaea8a5c9890d9e0019dffe650b82910c762ca153b8e615f2e2a09a3b","ssdeep":"","tlshash":"3ed0c2a1dc12dc0dc7965f29283a2d2521cddab406466147b895c93859c6d340aa0e86","size":286,"data":"","first_seen":"2026-03-06T10:10:35.739844Z","last_seen":"2026-06-10T16:31:24.059596Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"acd05ad1dd63571075137d505a994518","sha1":"04a2d93839ccd8f09c814af3ff5af7f8da1bb3c4","sha256":"092a9ed73134a0f34cd115648daa0c0c08c9cc9867badf1ac459c8105e52543a","sha512":"05f1815dcfc39fd62dfaab5b6bb60bdb60a1bfc84547683545e716af981e49593b6aef9ebabc748d6f12e4917c5041aaf8529a044d1a0a37fd458937e5cdec07","ssdeep":"","tlshash":"2b215ce3dd26fc04cb8a4e0c393a7c6674c8c371c558544baa5ccdae1093e70aee5661","size":1387,"data":"","first_seen":"2026-03-10T12:04:38.164576Z","last_seen":"2026-03-10T12:35:26.642213Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4f58df8ef556437633bb90cc31469c4","sha1":"c1c713bb5046a54cb79a8e7537b6d7fca624fd45","sha256":"2dcb2e50c883929aebb7a64a7a22cfe2260d856a3c36a6926c082da19c552b7b","sha512":"54c8a79f5897cd198db689700c24f950ad7fe19eed815f8bfa0e47428701d8c84a1fd8f677a6f1b2a4f1443f35f2dbd19e6f456ceeebfb1c59275bb356e1a5e9","ssdeep":"","tlshash":"bfc02b041427c47b421c6f4dc02243d4e4b020bcdc492480801d181800d0c313b40cd6","size":130,"data":"","first_seen":"2025-03-25T18:26:20.414558Z","last_seen":"2026-08-12T12:42:56.028217Z","times_seen":53032,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_next/static/chunks/cc1c88799edfe106.js","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"daf7d884cc19abcd99ba76518ce46398","sha1":"bd58ed5ec94119cb19b93f7714e4baad50ac8761","sha256":"3415b81ffc4e3c99b1bcc01f4e18264093e080df1d270e15e23f833f4f256d4f","sha512":"f0d69b4c21365951d11974f91560ba872764293c668384874927aac7c70fc3353d009c204ae1a0b4810944cb8da15262209d6202c4fb3e85a295b2902387bddd","ssdeep":"384:oO0+4IZDHYaW/Egmmk8llDPNhtQUV7H8oWDmuRgE0S:Q+4IZDHs/mgZPxtwXaE0S","tlshash":"e4c2a5b27391f9a212db85d9c0371005f2650c3621ae24b0b785ccef769dcd991bafa9","size":27854,"data":"","first_seen":"2026-01-14T22:21:30.971778Z","last_seen":"2026-06-11T01:39:08.201136Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"00933d3d76fccf8f1d330b001b6dc118","sha1":"72a3f9f693a7d05bb6f1b38fd381a0f4e8bb5c7a","sha256":"4009527b06902e2fcd3c2ce78c0652caf43bda1783d1577198d0c3919782c607","sha512":"8fce1ced1efcaf7f17f0fbc71664f0ca59f5f7bddc682fdbc8b9ef3862def740a845bc3cd5cc3926c09b98782296d14c9b38d50b2dd6cb53b296ec76ba558602","ssdeep":"","tlshash":"090156a9f328199a66d92fbfa06a570c7460603e380600319507edfa1700de021cbd8e","size":845,"data":"","first_seen":"2025-08-20T23:30:20.291724Z","last_seen":"2026-08-12T12:45:01.894125Z","times_seen":51309,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_next/static/chunks/3337476739009024.js","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"66763d775e3e4700a85242abef26f133","sha1":"72192a20d5a1bc2bdc13fe81bae8de31c8d99452","sha256":"39f55d14657527fbacb855f9abc9ebb3cd2e031493d31c7098611148a9661718","sha512":"0991ea9601575ccdbcdd2ef730aa7297c310be34291396a7b097df0ecfb43741f55590bda7aaaea4cef8e53c38d0751f94fde6ea03a7fff50aae78e528733de2","ssdeep":"","tlshash":"5dd02b742290f9d44086a0cc8836424bf569287262fe3495e7ae8cb16174f0c51e1955","size":281,"data":"","first_seen":"2025-12-14T10:05:37.449663Z","last_seen":"2026-08-08T23:15:08.909313Z","times_seen":202,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_next/static/chunks/c3f31ae7688b1ab0.js","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f690b1f27ca6c278f30ebffe8c057ad","sha1":"3852d6015b41a072b465efd6a2f533c7fb36ce18","sha256":"a0c2f8422a7b1b9dfd966a747adf6251909b1e616b1fb260bec40ca68e15287c","sha512":"7174cd121b621d339d385a77c2bd579ea3e337f8817a22109387b96708c1d0258114c0716bf3215b65d66e848f270da26a22458bdbe7ad17a67d7e2875ae5203","ssdeep":"","tlshash":"8e5155ee31e1f46c63ba13e1413b1356b7781f6cd04e90586298d83d3a38dd79462eae","size":2537,"data":"","first_seen":"2025-12-14T10:05:37.436213Z","last_seen":"2026-07-19T16:34:27.039245Z","times_seen":129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_next/static/chunks/turbopack-1fd100bc21fc3abe.js","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cfc095e22b507d4cf3c4e054fde2721","sha1":"261876511af67ab3d038b14eb0a2445c424e2659","sha256":"e453f90550fd5e52adec57ceced23f3710db73968664ed33afeda141bca7c170","sha512":"15cc1ac139029905a1a7726078988bfb27ce8e29dd90d325253baab0141d160b3d750d6a0da6d4a96b238e0a302c063b3506bb2e57bc1dc79fce1fadc117e801","ssdeep":"192:CQwMSiHG+J8iEsuRnAEY8iaWkUmlGVhFd2mKKW9PZPKFXVqXmHyLxf:xwMSiHhylWkUmlQ8mKDZZyzyLxf","tlshash":"6422b6ea37a6f07343afa0e6903f4144e1799479146d581c935ce8fa28784ae45e3f37","size":10420,"data":"","first_seen":"2026-03-10T12:04:38.077744Z","last_seen":"2026-03-10T12:35:26.630638Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_next/static/chunks/e1e73461228f2d3c.js","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"46bc303bcfd9ec18bdabb436a8df5efc","sha1":"e9931dddf890b5275c77659596ec0669ff8cf15f","sha256":"2c6eedce1fde1178f3a4e2a86a89e1f91ac9111440413a41930269ca07026672","sha512":"d729b2f84823935126e36c003c2827be55d68adf9a73b1124e6f0a651eaf90d5cd61441a63c5f4d2aa48738b760bb4a514eb0fcadf2fdad5f50098a54170fcba","ssdeep":"3072:yMLzpLeh21pCpKs1n4YHjbprm4/pFdFtl:yMfpLe+ezjVjxFdFtl","tlshash":"31240ae83d55f6626eb302b710af1803733c252b280d4d60a611fd9eb57845eb17bf9a","size":214812,"data":"","first_seen":"2026-01-03T00:49:49.650733Z","last_seen":"2026-06-27T19:07:49.970596Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4533235bc340f56829dea0a7d50f01e1","sha1":"57e36d2d5ea0be6ffc8e6001b28f5b4f3b865a43","sha256":"a7b184efc6db3070eb138216ce988c4adb40b13a54bbbc308b9ff0be71f9e0eb","sha512":"dd0bfc5260b16d9a9b387ef134ba454aa5ed7636fab9b79e5034e229418ca5f0e6fd99dca3c881fa091df55204dfaf7e77e4526050a60e8110ed49b41ea4e831","ssdeep":"","tlshash":"1c60000000c000ff0000f0c03ccf0c000c0cf000300c00000003c3000000000030300c","size":16,"data":"","first_seen":"2023-03-08T20:20:25Z","last_seen":"2026-08-12T12:49:49.633941Z","times_seen":29330,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"recover-uphold.com/api/activity?visitorId=visitor_eahobwua49vmmkkb0py","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:19.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /api/activity?visitorId=visitor_eahobwua49vmmkkb0py HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recover-uphold.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Tue, 10 Mar 2026 12:04:19 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /api/activity\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::928dq-1773144259563-59b167659d3f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":384,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"47b173d6a8651a85806f2ce7cad0db40","sha1":"1c7dd492fb5253193c6830d37280af34b02f3cfe","sha256":"6f7df9dcdd9069366e335d75f9a2f938cb0b16969f6d5b0111f926b389c3d523","sha512":"411bf500ffb437d714dd0ffd7a4e4a0104cd4a25c1e0e1a79b3f167f4ec2e2adc5c9afeb2f3585b5d4b655f15fe2ebfa9640d2372ddb47c0bd637b13891d561a","ssdeep":"","tlshash":"23e0613946a3d530891500465129674309ee3177f5855754e7ec1f4433847740f13289","first_seen":"2026-03-10T12:04:38.07091Z","last_seen":"2026-03-10T12:04:38.07091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/api/activity?visitorId=visitor_eahobwua49vmmkkb0py","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:21.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /api/activity?visitorId=visitor_eahobwua49vmmkkb0py HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recover-uphold.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Tue, 10 Mar 2026 12:04:21 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /api/activity\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::ng722-1773144261564-3ca59c55c6c6\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":384,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"47b173d6a8651a85806f2ce7cad0db40","sha1":"1c7dd492fb5253193c6830d37280af34b02f3cfe","sha256":"6f7df9dcdd9069366e335d75f9a2f938cb0b16969f6d5b0111f926b389c3d523","sha512":"411bf500ffb437d714dd0ffd7a4e4a0104cd4a25c1e0e1a79b3f167f4ec2e2adc5c9afeb2f3585b5d4b655f15fe2ebfa9640d2372ddb47c0bd637b13891d561a","ssdeep":"","tlshash":"23e0613946a3d530891500465129674309ee3177f5855754e7ec1f4433847740f13289","first_seen":"2026-03-10T12:04:38.07091Z","last_seen":"2026-03-10T12:04:38.07091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/api/activity?visitorId=visitor_eahobwua49vmmkkb0py","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:27.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /api/activity?visitorId=visitor_eahobwua49vmmkkb0py HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recover-uphold.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Tue, 10 Mar 2026 12:04:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /api/activity\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::5b2kf-1773144267564-6c143e3b3759\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":384,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dad632f2ef155edb7a2852b127d0af45","sha1":"a544957d2533474ba90eebf41daecc45513e50ac","sha256":"79623d0f06f047bdc8e772025a317689829916b999d552ea496f86ebcd77d7b6","sha512":"4377946a760835ff58b3313c7aceefb200563b03dc61172621b87454e999f1e296034251132c32ae15a363418fb641d3d262c35faba0695c4f3c39563e728a96","ssdeep":"","tlshash":"9ce0613646a3d530891604465129674209ee3177f1859654f7ac1f442394b740f171c9","first_seen":"2026-03-10T12:04:38.073667Z","last_seen":"2026-03-10T12:04:38.073667Z","times_seen":1,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_next/static/chunks/7af99b4fe779898e.js","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:10.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /_next/static/chunks/7af99b4fe779898e.js HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recover-uphold.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 12034\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"7af99b4fe779898e.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 10 Mar 2026 12:04:10 GMT\r\netag: \"a01cc5a9fc38db610620a55b3775de21\"\r\nlast-modified: Tue, 10 Mar 2026 08:43:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/7af99b4fe779898e.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nmt2n-1773144250922-7e89fbe01c7a\r\ncontent-length: 23614\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":85404,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e8a56d4d89a50246b38ae41a252e653f","sha1":"8f03d29d93b28ebf10c3273209c5750cf9e7819c","sha256":"b63b6b7c8c8b75f7859f44b952075a63c33a623206642f7f7b51b115f07dd31a","sha512":"09e16b8f025924a2fe7811c05b89d40c2de7b52a61f3bb05580b105e5621fefef698c555d0d347ac4b93a98dfcf6bac3c1517bd9599bd672a807c30e0e03766b","ssdeep":"768:7mFYmHlSuyBKywJr8EU6KtsdDvVI4Bu51Bb1beAvrtmaP8apfY47q6F3PwNNPug9:Kb254FcLrDr0EUxuioyoyqTfqR","tlshash":"b983d6f936d0f8920bab45a6c07f0005f31c4d77245e78b4a3e5ddda316459ea0e2faa","first_seen":"2025-12-14T10:05:37.44573Z","last_seen":"2026-08-08T23:15:08.849558Z","times_seen":122,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_next/static/chunks/turbopack-1fd100bc21fc3abe.js","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:10.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-1fd100bc21fc3abe.js HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recover-uphold.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 12023\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"turbopack-1fd100bc21fc3abe.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 10 Mar 2026 12:04:10 GMT\r\netag: \"75511adfd8416f988b1512b38c14a054\"\r\nlast-modified: Tue, 10 Mar 2026 08:43:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/turbopack-1fd100bc21fc3abe.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6wvlk-1773144250923-6eea3d337c56\r\ncontent-length: 4301\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10420,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6194)","md5":"6cfc095e22b507d4cf3c4e054fde2721","sha1":"261876511af67ab3d038b14eb0a2445c424e2659","sha256":"e453f90550fd5e52adec57ceced23f3710db73968664ed33afeda141bca7c170","sha512":"15cc1ac139029905a1a7726078988bfb27ce8e29dd90d325253baab0141d160b3d750d6a0da6d4a96b238e0a302c063b3506bb2e57bc1dc79fce1fadc117e801","ssdeep":"192:CQwMSiHG+J8iEsuRnAEY8iaWkUmlGVhFd2mKKW9PZPKFXVqXmHyLxf:xwMSiHhylWkUmlQ8mKDZZyzyLxf","tlshash":"6422b6ea37a6f07343afa0e6903f4144e1799479146d581c935ce8fa28784ae45e3f37","first_seen":"2026-03-10T12:04:38.077744Z","last_seen":"2026-03-10T12:35:26.630638Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_next/static/chunks/dc47d06c64892b19.js","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:10.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /_next/static/chunks/dc47d06c64892b19.js HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recover-uphold.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 12030\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"dc47d06c64892b19.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 10 Mar 2026 12:04:10 GMT\r\netag: \"08374ad43b13be474c3ab7094ab65f3f\"\r\nlast-modified: Tue, 10 Mar 2026 08:43:40 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/dc47d06c64892b19.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7pfhs-1773144250925-2bb104e918e4\r\ncontent-length: 5889\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":15358,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6843)","md5":"7e1298c5537adcfda7157d01af0dd673","sha1":"bfc4af73f648d0cc430733e56e600b2540463566","sha256":"5aa4027e37c40e43b9846d95aefcc5f0966e456c18284590cb2bfc6f8a534602","sha512":"aa9f8ae6b7f8cd5c4b43efa3f050db84588231c17da36e75ad1451b9110aa80a5ebf8784175464174a57d2357970f14ded3d947bdbf86157c502fdf498dcac01","ssdeep":"192:LFCkjRF72jbSTv/y0DlRs2BjCceSy9Iw2Bnu9DDBsQ3BfiJY6XBQUrI/1RmE5L4s:ztTtl3tpy9IwKkBsuiJY+QakLlq3y","tlshash":"976209b532a5fcc6125bc2d4d83f4409f7251c71667d70b473e948e96aa0d48a0b2fbb","first_seen":"2026-03-10T12:04:38.092594Z","last_seen":"2026-03-14T13:06:54.551139Z","times_seen":4,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/api/favicon","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:11.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /api/favicon HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recover-uphold.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Tue, 10 Mar 2026 12:04:11 GMT\r\nlocation: https://cdn.brandfetch.io/idObwT_2k3/w/400/h/400/theme/dark/icon.jpeg?c=1dxbfHSJFAPEGdCLU4o5B\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /api/favicon\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::57hlf-1773144251199-ae4db6e7e8d0\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3921,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T12:40:46.817109Z","times_seen":17855281,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_vercel/insights/script.js","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:11.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /_vercel/insights/script.js HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recover-uphold.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14497\r\ncache-control: public, max-age=2678400\r\ncontent-disposition: inline; filename=\"script.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ndate: Tue, 10 Mar 2026 12:04:11 GMT\r\netag: \"3cbd3d764f83ec900bccffe70a3ebd08\"\r\nlast-modified: Tue, 10 Mar 2026 07:37:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1:arn1:arn1::nl47p-1773144251592-6f0ff219de23\r\ncontent-length: 1300\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2495,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2495), with no line terminators","md5":"8e699b6e4471fd6950176e39c5f1ace0","sha1":"a3957a826a0c77a338e1bd9b408b90c6215491f8","sha256":"79bf638dd4acdeb9b80c5a4009a3e1986968d615e9557dcf23d91b5e8ad158d8","sha512":"c49b40fbcbe959fab505da0d27a9f3c273a3740f07b34433619e5bc88cd7dd54564609284f4ee30ae219a1572a0a255fe9af92f2f948931b761cbc1be3605e2f","ssdeep":"","tlshash":"2251a5ea74a1e16d4ad79275817f1204f37f2a92fc05000132d99c9d3539d1dea73f99","first_seen":"2026-02-17T21:27:06.661745Z","last_seen":"2026-08-12T11:59:57.961435Z","times_seen":19879,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/api/activity?visitorId=visitor_eahobwua49vmmkkb0py","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:13.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /api/activity?visitorId=visitor_eahobwua49vmmkkb0py HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recover-uphold.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Tue, 10 Mar 2026 12:04:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /api/activity\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::h7l4l-1773144253565-9f09d0a4b7d6\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":384,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"47b173d6a8651a85806f2ce7cad0db40","sha1":"1c7dd492fb5253193c6830d37280af34b02f3cfe","sha256":"6f7df9dcdd9069366e335d75f9a2f938cb0b16969f6d5b0111f926b389c3d523","sha512":"411bf500ffb437d714dd0ffd7a4e4a0104cd4a25c1e0e1a79b3f167f4ec2e2adc5c9afeb2f3585b5d4b655f15fe2ebfa9640d2372ddb47c0bd637b13891d561a","ssdeep":"","tlshash":"23e0613946a3d530891500465129674309ee3177f5855754e7ec1f4433847740f13289","first_seen":"2026-03-10T12:04:38.07091Z","last_seen":"2026-03-10T12:04:38.07091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:11.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/x-component\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recover-uphold.com/\r\nnext-action: 00440b427e23be8637b76f849fbcf6fe9cd92ba618\r\nnext-router-state-tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2\r\nOrigin: https://recover-uphold.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"[]"}},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Tue, 10 Mar 2026 12:04:11 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-action-revalidated: [[],0,0]\r\nx-matched-path: /\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::9djgd-1773144251249-8c1635d2d2d0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"bcf2732102fdddbcbad831967d7b0956","sha1":"4e99b5a100a3118a2c58a675ab757e299e954b54","sha256":"8b98dcf3e34ad6479173131c1cc2fe84bbff40712bce0cd2b47e6bbde0dce2ef","sha512":"42ba655ed6e887143dfa25ea74200d54b807bc0f1247c15b2046038f5b8951141b9367aaee770e742a50b46105ff15d3e1c2cf5ac52983c987721432124cc80e","ssdeep":"","tlshash":"4da00294d7340a2eb41f449168c14444469c804563dc7184dd90bd49310e6159708477","first_seen":"2026-03-10T12:04:38.098301Z","last_seen":"2026-03-10T12:35:26.632514Z","times_seen":2,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.brandfetch.io/idObwT_2k3/w/400/h/400/theme/dark/icon.jpeg?c=1dxbfHSJFAPEGdCLU4o5B","fqdn":"cdn.brandfetch.io","domain":"brandfetch.io","tld":"io"},"ip":{"addr":"52.84.50.83","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:12.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.brandfetch.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 23 May 2025 00:00:00 GMT","end":"Sun, 21 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"50:6F:A8:0E:A7:AD:D1:62:14:9C:76:60:46:69:AB:41:70:CA:25:EB","sha256":"7D:9F:45:2A:FC:15:97:18:E7:AF:9E:8D:70:B9:7C:C8:FE:88:EA:A2:FA:1A:2B:2C:15:23:A1:FB:48:19:69:7F"}}},"request":{"raw":"GET /idObwT_2k3/w/400/h/400/theme/dark/icon.jpeg?c=1dxbfHSJFAPEGdCLU4o5B HTTP/1.1\r\nHost: cdn.brandfetch.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recover-uphold.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: CloudFront\r\ncontent-type: image/jpeg\r\ncontent-length: 3921\r\nx-amz-cf-pop: OSL50-P3\r\ndate: Sun, 08 Mar 2026 13:28:00 GMT\r\napigw-requestid: Z5_nDie1oAMEVsw=\r\ncache-control: public, max-age=86400, immutable\r\netag: \"146c-+1c4CNGtH7fq22dOgTh17iBlNb8\"\r\nlast-modified: Tue, 08 Nov 2022 14:47:58 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nvia: 1.1 1052525f0d15ecb6749de58fe7a481c8.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: HROYs6RpCFm1N2v1qN-M0atbaNoBHHWGrbF3QMIMsvKbPm04Rm5sag==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":3921,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=bf@v1], baseline, precision 8, 400x400, components 3","md5":"dc25317ab592227257b70db04ff851bf","sha1":"a0f78b08f93de98e62f1a0b3d92a5f5945a568a1","sha256":"abe23aa304294d3ccd8d83995fc891977246b5b5c41a85fe350b8d55c06e5a48","sha512":"4cebb61ac8a2307a3eaee652b446a74b3fa1bee822c14a83f6dec82cffbe509849521a957df7af350e70312132f76f8e5520dd13dd7bd3178bca09dde8e62f4e","ssdeep":"","tlshash":"f6811b0a72004f38c5a3f736ace2ffbd670ea4e25f84c05fd62d85149849206fe0a0c9","first_seen":"2025-10-22T12:27:12.412626Z","last_seen":"2026-03-10T12:35:26.6218Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/api/active-brand","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:14.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /api/active-brand HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recover-uphold.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Tue, 10 Mar 2026 12:04:14 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /api/active-brand\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::jlgdm-1773144254503-235ac856844b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":18,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b55f67f6d20e587870e54fed2f3e030f","sha1":"1593a4819b63071c82dc3cb817befa194ef4b197","sha256":"f41afaad8a540166b59875ad92be0f308220d2179185abe967976296d9e9a1c8","sha512":"f82fca87265826da06f6ee72479a3909306a850da80bce2046ba51009208509ab696a66076ce023d0d629405acf8aed011f8e53e2381967d3b3a7c9cb8cb1e87","ssdeep":"","tlshash":"417000808320208a0308200200c0280080380000c22808088820022e0020200000aaa0","first_seen":"2026-03-10T12:04:38.103384Z","last_seen":"2026-03-10T12:35:26.610049Z","times_seen":2,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/api/active-brand","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:29.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /api/active-brand HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recover-uphold.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Tue, 10 Mar 2026 12:04:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /api/active-brand\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::stpqn-1773144269504-8a6cac21abee\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b55f67f6d20e587870e54fed2f3e030f","sha1":"1593a4819b63071c82dc3cb817befa194ef4b197","sha256":"f41afaad8a540166b59875ad92be0f308220d2179185abe967976296d9e9a1c8","sha512":"f82fca87265826da06f6ee72479a3909306a850da80bce2046ba51009208509ab696a66076ce023d0d629405acf8aed011f8e53e2381967d3b3a7c9cb8cb1e87","ssdeep":"","tlshash":"417000808320208a0308200200c0280080380000c22808088820022e0020200000aaa0","first_seen":"2026-03-10T12:04:38.103384Z","last_seen":"2026-03-10T12:35:26.610049Z","times_seen":2,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_next/static/chunks/9128056a0ea0a47f.css","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:10.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /_next/static/chunks/9128056a0ea0a47f.css HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recover-uphold.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 11851\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"9128056a0ea0a47f.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Tue, 10 Mar 2026 12:04:10 GMT\r\netag: \"9f20ee1aacaebf78679ed10e549687b4\"\r\nlast-modified: Tue, 10 Mar 2026 08:46:39 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/9128056a0ea0a47f.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nl47p-1773144250916-56a814dfbe43\r\ncontent-length: 26374\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":157632,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"83bbd82239c6224fed59987ac739e0ab","sha1":"ac1236f9fe54c955893ca41826ac9f56954e478d","sha256":"21eacfb7657eadeb26f9a61092584f077c94b3ea935572dc908d24ad464abbe0","sha512":"4bc20957452519798317995962cbbfed2e1d504b9ac0f739bd81935947b9b65ff45f18bbdc2c50474f67a17d83cc2fd67c5e08a3af71bb9b0a16f87d5352e55f","ssdeep":"3072:X9hsS1Cf9Ku3kagv5E94g8vU6UWrfAgMno+WDAm+A9vsjA:thsS1Cf9Ku3kaX4guU3WrfAgMno+WDAW","tlshash":"66f3b5a0b139e53fbd27a8be13dcf89c91097081dd6943edfa25a22152c7bf26973504","first_seen":"2026-03-10T12:04:38.105742Z","last_seen":"2026-03-14T13:06:54.550298Z","times_seen":4,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_next/static/chunks/ea73f2a8b8c7334e.js","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:10.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /_next/static/chunks/ea73f2a8b8c7334e.js HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recover-uphold.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 12028\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"ea73f2a8b8c7334e.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 10 Mar 2026 12:04:10 GMT\r\netag: \"3f9120e65c9c1b57f3128556666b9a09\"\r\nlast-modified: Tue, 10 Mar 2026 08:43:42 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/ea73f2a8b8c7334e.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4h5gj-1773144250926-dd71ee6e1f0d\r\ncontent-length: 73447\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":336622,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f58357877aa2cbf6dd6a12d0ed698b89","sha1":"c0fe3c702e74118f36b1db3d21b6bf44aea8cd17","sha256":"256aef6897032ea958549c731fc407d48bd7fd6afe5b3edfc840782527baefa7","sha512":"64373503c3eb604eeb61866b7ea42a3d2a09eae19847bb7cd2a2116208d380192a0c9af4c68f98898963ee089d8e1753c6bef76fe21c782a0637587b2cdf4872","ssdeep":"6144:epVSnHMw+TQRnTg6O052bJ6t0VYUzEbJ6t00rmzhzwiqGhtVdKamAu6qRnmnzN2O:OSnHMLQRT+bJ6t0+bJ6t0hzwixhtVdK+","tlshash":"9c640944b212bfbdf56b4598a46e910db12f5b98fa0f4834fabd382d26094c07b53bc5","first_seen":"2026-03-10T12:04:38.10756Z","last_seen":"2026-03-14T13:06:54.5409Z","times_seen":4,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/api/activity?visitorId=visitor_eahobwua49vmmkkb0py","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:25.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /api/activity?visitorId=visitor_eahobwua49vmmkkb0py HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recover-uphold.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Tue, 10 Mar 2026 12:04:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /api/activity\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::mv8j2-1773144265564-009a02830075\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":384,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dad632f2ef155edb7a2852b127d0af45","sha1":"a544957d2533474ba90eebf41daecc45513e50ac","sha256":"79623d0f06f047bdc8e772025a317689829916b999d552ea496f86ebcd77d7b6","sha512":"4377946a760835ff58b3313c7aceefb200563b03dc61172621b87454e999f1e296034251132c32ae15a363418fb641d3d262c35faba0695c4f3c39563e728a96","ssdeep":"","tlshash":"9ce0613646a3d530891604465129674209ee3177f1859654f7ac1f442394b740f171c9","first_seen":"2026-03-10T12:04:38.073667Z","last_seen":"2026-03-10T12:04:38.073667Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_next/static/media/797e433ab948586e-s.p.dbea232f.woff2","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:10.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /_next/static/media/797e433ab948586e-s.p.dbea232f.woff2 HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recover-uphold.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 11851\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"797e433ab948586e-s.p.dbea232f.woff2\"\r\ncontent-type: font/woff2\r\ndate: Tue, 10 Mar 2026 12:04:10 GMT\r\netag: \"da83d5f06d825c5ae65b7cca706cb312\"\r\nlast-modified: Tue, 10 Mar 2026 08:46:39 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/797e433ab948586e-s.p.dbea232f.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4h5gj-1773144250914-bbee64dae298\r\ncontent-length: 31288\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31288,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31288, version 1.0","md5":"da83d5f06d825c5ae65b7cca706cb312","sha1":"3820bcdc2e187ff5332ab0d5dc8529f8e10fd574","sha256":"b7ac144b394cbd81052d6397ec0c33397977b1d7e9bc095e744e652a378c6fb3","sha512":"c8b02f1655b30d6fd6e0b3ee92280d175fb0410938a71f625354fe79e009fb2928ed55b45d0000db9e527a388e8f3eb42875c6965c80eb4b03046c50f49ed187","ssdeep":"768:N4C8ya3ZZij3h4s0iIfv/x/tV3167X/27IwwlsUxCkegAeyTrJD7/kX:Z8Pzf3JF67eqlsZXLTrJcX","tlshash":"47e2f1e7f5578489abb26e7102e105d5c5ed4aa105bfd1fb642c70660d3aa0e0fc0b27","first_seen":"2024-12-09T15:40:29.87187Z","last_seen":"2026-08-12T11:05:02.004565Z","times_seen":25888,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_next/static/chunks/73fc282fee4c4fe2.js","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:10.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /_next/static/chunks/73fc282fee4c4fe2.js HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recover-uphold.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"73fc282fee4c4fe2.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 10 Mar 2026 12:04:11 GMT\r\netag: \"e9bf8abfa3c5f246c3e5441a7baf4874\"\r\nlast-modified: Tue, 10 Mar 2026 12:04:11 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/73fc282fee4c4fe2.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::57hlf-1773144250917-0d92d2591b28\r\ncontent-length: 13429\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41036,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (41036), with no line terminators","md5":"90af8bef9f1b0cb96e1e42e7b8dd904f","sha1":"e8b1e3de25ecf488078ddc06ff8d21b13db6e4a7","sha256":"453431f6c9934da37624f5704008351303868b82a1d6f17ebbd58cfdb20500a6","sha512":"ee4b1276de42e8f42937c04366edf04d56771df454fb123fb447d5cfde6a0bd37d6fb3471624ae86e5b30987c4e4b27ed717821e8ce739a75bb82ae73af2ebfb","ssdeep":"768:OYRijlM8ycxb9Xl2hSBWqLu2GfKcozd+a9INR+xTd+JXRQAPSKB:voeCbvvoTJozVINMxTd+BRfPSKB","tlshash":"f603facd75a5b0910fb396b1802f401bb23e1937188d48a0d3a3dde9b8b94add237f59","first_seen":"2026-03-06T10:10:35.723691Z","last_seen":"2026-06-10T16:31:24.043393Z","times_seen":12,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_next/static/chunks/e1e73461228f2d3c.js","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:10.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /_next/static/chunks/e1e73461228f2d3c.js HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recover-uphold.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 12029\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"e1e73461228f2d3c.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 10 Mar 2026 12:04:10 GMT\r\netag: \"76d1bfd0ce5a75e5fc31c7a10d43f1c4\"\r\nlast-modified: Tue, 10 Mar 2026 08:43:41 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/e1e73461228f2d3c.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::msdxx-1773144250919-5ef190db356a\r\ncontent-length: 68668\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":214812,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"46bc303bcfd9ec18bdabb436a8df5efc","sha1":"e9931dddf890b5275c77659596ec0669ff8cf15f","sha256":"2c6eedce1fde1178f3a4e2a86a89e1f91ac9111440413a41930269ca07026672","sha512":"d729b2f84823935126e36c003c2827be55d68adf9a73b1124e6f0a651eaf90d5cd61441a63c5f4d2aa48738b760bb4a514eb0fcadf2fdad5f50098a54170fcba","ssdeep":"3072:yMLzpLeh21pCpKs1n4YHjbprm4/pFdFtl:yMfpLe+ezjVjxFdFtl","tlshash":"31240ae83d55f6626eb302b710af1803733c252b280d4d60a611fd9eb57845eb17bf9a","first_seen":"2026-01-03T00:49:49.650733Z","last_seen":"2026-06-27T19:07:49.970596Z","times_seen":44,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_next/static/chunks/3337476739009024.js","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:10.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /_next/static/chunks/3337476739009024.js HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recover-uphold.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 12037\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"3337476739009024.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 10 Mar 2026 12:04:10 GMT\r\netag: \"66763d775e3e4700a85242abef26f133\"\r\nlast-modified: Tue, 10 Mar 2026 08:43:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/3337476739009024.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fnqmg-1773144250923-938e2a983c1f\r\ncontent-length: 281\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":281,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with no line terminators","md5":"66763d775e3e4700a85242abef26f133","sha1":"72192a20d5a1bc2bdc13fe81bae8de31c8d99452","sha256":"39f55d14657527fbacb855f9abc9ebb3cd2e031493d31c7098611148a9661718","sha512":"0991ea9601575ccdbcdd2ef730aa7297c310be34291396a7b097df0ecfb43741f55590bda7aaaea4cef8e53c38d0751f94fde6ea03a7fff50aae78e528733de2","ssdeep":"","tlshash":"5dd02b742290f9d44086a0cc8836424bf569287262fe3495e7ae8cb16174f0c51e1955","first_seen":"2025-12-14T10:05:37.449663Z","last_seen":"2026-08-08T23:15:08.909313Z","times_seen":202,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_next/static/chunks/cc1c88799edfe106.js","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:10.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /_next/static/chunks/cc1c88799edfe106.js HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recover-uphold.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 46758\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"cc1c88799edfe106.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 10 Mar 2026 12:04:10 GMT\r\netag: \"29ef703c5a457feda48f73f53f869487\"\r\nlast-modified: Mon, 09 Mar 2026 23:04:52 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/cc1c88799edfe106.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5b2kf-1773144250924-2be640d352cb\r\ncontent-length: 7210\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":27854,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27852), with no line terminators","md5":"daf7d884cc19abcd99ba76518ce46398","sha1":"bd58ed5ec94119cb19b93f7714e4baad50ac8761","sha256":"3415b81ffc4e3c99b1bcc01f4e18264093e080df1d270e15e23f833f4f256d4f","sha512":"f0d69b4c21365951d11974f91560ba872764293c668384874927aac7c70fc3353d009c204ae1a0b4810944cb8da15262209d6202c4fb3e85a295b2902387bddd","ssdeep":"384:oO0+4IZDHYaW/Egmmk8llDPNhtQUV7H8oWDmuRgE0S:Q+4IZDHs/mgZPxtwXaE0S","tlshash":"e4c2a5b27391f9a212db85d9c0371005f2650c3621ae24b0b785ccef769dcd991bafa9","first_seen":"2026-01-14T22:21:30.971778Z","last_seen":"2026-06-11T01:39:08.201136Z","times_seen":12,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_next/static/chunks/c3f31ae7688b1ab0.js","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:10.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /_next/static/chunks/c3f31ae7688b1ab0.js HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recover-uphold.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 12032\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"c3f31ae7688b1ab0.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 10 Mar 2026 12:04:10 GMT\r\netag: \"b8ac729c9af75d01402c8f922ecbd456\"\r\nlast-modified: Tue, 10 Mar 2026 08:43:38 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/c3f31ae7688b1ab0.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7j7t7-1773144250924-13430e972552\r\ncontent-length: 1291\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2537,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2537), with no line terminators","md5":"9f690b1f27ca6c278f30ebffe8c057ad","sha1":"3852d6015b41a072b465efd6a2f533c7fb36ce18","sha256":"a0c2f8422a7b1b9dfd966a747adf6251909b1e616b1fb260bec40ca68e15287c","sha512":"7174cd121b621d339d385a77c2bd579ea3e337f8817a22109387b96708c1d0258114c0716bf3215b65d66e848f270da26a22458bdbe7ad17a67d7e2875ae5203","ssdeep":"","tlshash":"8e5155ee31e1f46c63ba13e1413b1356b7781f6cd04e90586298d83d3a38dd79462eae","first_seen":"2025-12-14T10:05:37.436213Z","last_seen":"2026-07-19T16:34:27.039245Z","times_seen":129,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/api/activity?visitorId=visitor_eahobwua49vmmkkb0py","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:17.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /api/activity?visitorId=visitor_eahobwua49vmmkkb0py HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recover-uphold.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Tue, 10 Mar 2026 12:04:17 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /api/activity\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::wrrs9-1773144257564-0c023f248c18\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":384,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"47b173d6a8651a85806f2ce7cad0db40","sha1":"1c7dd492fb5253193c6830d37280af34b02f3cfe","sha256":"6f7df9dcdd9069366e335d75f9a2f938cb0b16969f6d5b0111f926b389c3d523","sha512":"411bf500ffb437d714dd0ffd7a4e4a0104cd4a25c1e0e1a79b3f167f4ec2e2adc5c9afeb2f3585b5d4b655f15fe2ebfa9640d2372ddb47c0bd637b13891d561a","ssdeep":"","tlshash":"23e0613946a3d530891500465129674309ee3177f5855754e7ec1f4433847740f13289","first_seen":"2026-03-10T12:04:38.07091Z","last_seen":"2026-03-10T12:04:38.07091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/api/active-brand","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:20.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /api/active-brand HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recover-uphold.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Tue, 10 Mar 2026 12:04:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /api/active-brand\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::928dq-1773144260503-494c9308d422\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":18,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b55f67f6d20e587870e54fed2f3e030f","sha1":"1593a4819b63071c82dc3cb817befa194ef4b197","sha256":"f41afaad8a540166b59875ad92be0f308220d2179185abe967976296d9e9a1c8","sha512":"f82fca87265826da06f6ee72479a3909306a850da80bce2046ba51009208509ab696a66076ce023d0d629405acf8aed011f8e53e2381967d3b3a7c9cb8cb1e87","ssdeep":"","tlshash":"417000808320208a0308200200c0280080380000c22808088820022e0020200000aaa0","first_seen":"2026-03-10T12:04:38.103384Z","last_seen":"2026-03-10T12:35:26.610049Z","times_seen":2,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_vercel/insights/view","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:11.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"POST /_vercel/insights/view HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recover-uphold.com/\r\nContent-Type: application/json\r\nContent-Length: 130\r\nOrigin: https://recover-uphold.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":130,"data":"{\"o\":\"https://recover-uphold.com/\",\"sv\":\"0.1.3\",\"sdkn\":\"@vercel/analytics/next\",\"sdkv\":\"1.3.1\",\"ts\":1773144251623,\"dp\":\"/\",\"r\":\"\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ndate: Tue, 10 Mar 2026 12:04:11 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-ratelimit-limit: 1000\r\nx-ratelimit-remaining: 999\r\nx-ratelimit-reset: 60\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::nl47p-1773144251634-c280fc95f1ab\r\ncontent-length: 2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-08-12T12:39:47.732453Z","times_seen":363371,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.brandfetch.io/idObwT_2k3/w/400/h/400/theme/dark/icon.jpeg?c=1dxbfHSJFAPEGdCLU4o5B","fqdn":"cdn.brandfetch.io","domain":"brandfetch.io","tld":"io"},"ip":{"addr":"52.84.50.83","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:11.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.brandfetch.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 23 May 2025 00:00:00 GMT","end":"Sun, 21 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"50:6F:A8:0E:A7:AD:D1:62:14:9C:76:60:46:69:AB:41:70:CA:25:EB","sha256":"7D:9F:45:2A:FC:15:97:18:E7:AF:9E:8D:70:B9:7C:C8:FE:88:EA:A2:FA:1A:2B:2C:15:23:A1:FB:48:19:69:7F"}}},"request":{"raw":"GET /idObwT_2k3/w/400/h/400/theme/dark/icon.jpeg?c=1dxbfHSJFAPEGdCLU4o5B HTTP/1.1\r\nHost: cdn.brandfetch.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recover-uphold.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: CloudFront\r\ncontent-type: image/jpeg\r\ncontent-length: 3921\r\ndate: Sun, 08 Mar 2026 13:28:00 GMT\r\napigw-requestid: Z5_nDie1oAMEVsw=\r\ncache-control: public, max-age=86400, immutable\r\netag: \"146c-+1c4CNGtH7fq22dOgTh17iBlNb8\"\r\nlast-modified: Tue, 08 Nov 2022 14:47:58 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nvia: 1.1 efa1f20185894fba06fb038a3e989f24.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nvary: Origin\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: KSC3YXo0wPGtQFqjHnY-6V2SjVoE3anXzVlTU9hmcoO3Ww2GpJjP2g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3921,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=bf@v1], baseline, precision 8, 400x400, components 3","md5":"dc25317ab592227257b70db04ff851bf","sha1":"a0f78b08f93de98e62f1a0b3d92a5f5945a568a1","sha256":"abe23aa304294d3ccd8d83995fc891977246b5b5c41a85fe350b8d55c06e5a48","sha512":"4cebb61ac8a2307a3eaee652b446a74b3fa1bee822c14a83f6dec82cffbe509849521a957df7af350e70312132f76f8e5520dd13dd7bd3178bca09dde8e62f4e","ssdeep":"","tlshash":"f6811b0a72004f38c5a3f736ace2ffbd670ea4e25f84c05fd62d85149849206fe0a0c9","first_seen":"2025-10-22T12:27:12.412626Z","last_seen":"2026-03-10T12:35:26.6218Z","times_seen":3,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":87,"connect":1,"send":0,"wait":29,"receive":0,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/api/activity?visitorId=visitor_eahobwua49vmmkkb0py","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:15.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /api/activity?visitorId=visitor_eahobwua49vmmkkb0py HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recover-uphold.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Tue, 10 Mar 2026 12:04:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /api/activity\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::wrrs9-1773144255564-4d18977b1b14\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":384,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"47b173d6a8651a85806f2ce7cad0db40","sha1":"1c7dd492fb5253193c6830d37280af34b02f3cfe","sha256":"6f7df9dcdd9069366e335d75f9a2f938cb0b16969f6d5b0111f926b389c3d523","sha512":"411bf500ffb437d714dd0ffd7a4e4a0104cd4a25c1e0e1a79b3f167f4ec2e2adc5c9afeb2f3585b5d4b655f15fe2ebfa9640d2372ddb47c0bd637b13891d561a","ssdeep":"","tlshash":"23e0613946a3d530891500465129674309ee3177f5855754e7ec1f4433847740f13289","first_seen":"2026-03-10T12:04:38.07091Z","last_seen":"2026-03-10T12:04:38.07091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/api/activity","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:21.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"POST /api/activity HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recover-uphold.com/\r\nContent-Type: application/json\r\nContent-Length: 426\r\nOrigin: https://recover-uphold.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":426,"data":"{\"visitorId\":\"visitor_eahobwua49vmmkkb0py\",\"activity\":{\"email\":\"\",\"caseId\":\"\",\"isOnline\":true,\"decisions\":[],\"ipAddress\":\"91.90.42.154\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"visitorId\":\"visitor_eahobwua49vmmkkb0py\",\"lastUpdated\":\"2026-03-10T12:04:12.043Z\",\"currentStage\":\"intake\",\"lastHeartbeat\":\"2026-03-10T12:04:21.798Z\",\"sessionStarted\":\"2026-03-10T12:04:12.043Z\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Tue, 10 Mar 2026 12:04:21 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /api/activity\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::ng722-1773144261806-465ee4dc6bc3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-08-12T12:40:46.873849Z","times_seen":181672,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/api/activity?visitorId=visitor_eahobwua49vmmkkb0py","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:23.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /api/activity?visitorId=visitor_eahobwua49vmmkkb0py HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recover-uphold.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Tue, 10 Mar 2026 12:04:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /api/activity\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::rcrml-1773144263565-44d980ab7985\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":384,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dad632f2ef155edb7a2852b127d0af45","sha1":"a544957d2533474ba90eebf41daecc45513e50ac","sha256":"79623d0f06f047bdc8e772025a317689829916b999d552ea496f86ebcd77d7b6","sha512":"4377946a760835ff58b3313c7aceefb200563b03dc61172621b87454e999f1e296034251132c32ae15a363418fb641d3d262c35faba0695c4f3c39563e728a96","ssdeep":"","tlshash":"9ce0613646a3d530891604465129674209ee3177f1859654f7ac1f442394b740f171c9","first_seen":"2026-03-10T12:04:38.073667Z","last_seen":"2026-03-10T12:04:38.073667Z","times_seen":1,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/api/active-brand","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:26.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /api/active-brand HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recover-uphold.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Tue, 10 Mar 2026 12:04:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /api/active-brand\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::7xp4q-1773144266502-00f49ee82da5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":18,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b55f67f6d20e587870e54fed2f3e030f","sha1":"1593a4819b63071c82dc3cb817befa194ef4b197","sha256":"f41afaad8a540166b59875ad92be0f308220d2179185abe967976296d9e9a1c8","sha512":"f82fca87265826da06f6ee72479a3909306a850da80bce2046ba51009208509ab696a66076ce023d0d629405acf8aed011f8e53e2381967d3b3a7c9cb8cb1e87","ssdeep":"","tlshash":"417000808320208a0308200200c0280080380000c22808088820022e0020200000aaa0","first_seen":"2026-03-10T12:04:38.103384Z","last_seen":"2026-03-10T12:35:26.610049Z","times_seen":2,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/api/activity?visitorId=visitor_eahobwua49vmmkkb0py","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:29.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /api/activity?visitorId=visitor_eahobwua49vmmkkb0py HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recover-uphold.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Tue, 10 Mar 2026 12:04:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /api/activity\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::vdtxg-1773144269565-4ebd36bff873\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":384,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dad632f2ef155edb7a2852b127d0af45","sha1":"a544957d2533474ba90eebf41daecc45513e50ac","sha256":"79623d0f06f047bdc8e772025a317689829916b999d552ea496f86ebcd77d7b6","sha512":"4377946a760835ff58b3313c7aceefb200563b03dc61172621b87454e999f1e296034251132c32ae15a363418fb641d3d262c35faba0695c4f3c39563e728a96","ssdeep":"","tlshash":"9ce0613646a3d530891604465129674209ee3177f1859654f7ac1f442394b740f171c9","first_seen":"2026-03-10T12:04:38.073667Z","last_seen":"2026-03-10T12:04:38.073667Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-10T12:04:10.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 10 Mar 2026 12:04:10 GMT\r\nlink: \u003c/_next/static/media/797e433ab948586e-s.p.dbea232f.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/caa3a2e1cccd8315-s.p.853070df.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /\r\nx-powered-by: Next.js\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::4h5gj-1773144250324-ce3677920c19\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}],"data":{"size":11064,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (10644)","md5":"bd0b8050236dca3f5390a5c76eca693e","sha1":"b936afce1b8010baf77c58abd2f6ca793fc88d23","sha256":"f6e6e412cdf110901bef574d4ec2ba919e615e4be7dab8e92fdb9aa6d4c775e2","sha512":"9cd3b1310382cbb2f3a27c3a7d227ca7c7f42b3f1a73bef21510b61a74d9ec59ca14e258ce7e619bb8d513038a44fe13616730fcf8c6dac829195bfe84875434","ssdeep":"192:hzBKUOVafGnvsgnqzcpm6UgvQ3R06lcyHRTXL6l2+fFRd6lVK6lpuRi6lx/R36lv:h9fOMfyvVlvAlcyFX+l2Igl5lpElmliA","tlshash":"6f32955bfc15de49dc26ad6c103eae3a14ccc53bc5648829a7ccce9c0691af25bd6c81","first_seen":"2026-03-10T12:04:38.119654Z","last_seen":"2026-03-10T12:35:26.63363Z","times_seen":2,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":73,"dns":40,"connect":1,"send":0,"wait":10,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_next/static/chunks/8a80e7184ad3a13f.css","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:10.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /_next/static/chunks/8a80e7184ad3a13f.css HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recover-uphold.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 11851\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"8a80e7184ad3a13f.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Tue, 10 Mar 2026 12:04:10 GMT\r\netag: \"0261e7dd5c820bdae6309b3d4bd8971d\"\r\nlast-modified: Tue, 10 Mar 2026 08:46:39 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/8a80e7184ad3a13f.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::h7l4l-1773144250915-5f30ed9007d9\r\ncontent-length: 663\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2200,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"CSV ASCII text","md5":"125447d233c37760bd6802d783ee2c0b","sha1":"aaf3829e337597ea5dc51c78e70f8b89037ab233","sha256":"a886fc5ec3ebbafcd8960b7a6610d99dc905d12d46b6b3cc8d3f04752232b11b","sha512":"d9f241981ba141eb43d3a34b9dc38b90292e7a3103780595d3b400a8a3efe0a6df3c24c3241a368919401c7ed98a33c6dda7afcef18ee612393fe19fad83cc67","ssdeep":"","tlshash":"c441c234442ea409d6e78c6330cf3ea3241564254bee2663993d1eb84eeb47f13e1724","first_seen":"2025-10-27T14:52:15.049814Z","last_seen":"2026-08-03T02:59:18.224636Z","times_seen":412,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_next/static/chunks/340820ca5a1417a0.js","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:10.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /_next/static/chunks/340820ca5a1417a0.js HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recover-uphold.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 12036\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"340820ca5a1417a0.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 10 Mar 2026 12:04:10 GMT\r\netag: \"809b84d890ca2f7f6579adeb16226b9f\"\r\nlast-modified: Tue, 10 Mar 2026 08:43:34 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/340820ca5a1417a0.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vl8dh-1773144250918-af9d1636e182\r\ncontent-length: 6162\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21124,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21124), with no line terminators","md5":"39140bde28e747cc18c2d96ea8f962d0","sha1":"60b3642cf55b9ce1c23dd8f680cd87920e313d59","sha256":"74e7ddbc780d1a41db1c6ef099b76eff62d3e3f287c9d6967969cacd25c683bd","sha512":"7fd12f2683b75acd8a9751d2a5b6ba01a79133c85684447f91c71c8ca7e956b218c07f160b317dcf4cb788f2f57bffe697db3d6491bba2f9b35cb46f502d023e","ssdeep":"192:DyGTMk5dQfzDwP9+HN6fT1arO+1pgwh1ebDPSA7EGpErj3+yPCwid/iXYfaIwX5q:DydxbdYwrOUpybT4LuyPCwiQrIwX8","tlshash":"309295a571d5f9c1069b80e8c83b4016f32e0e7610ad74d4e7e1cce679a095ed1b2fba","first_seen":"2026-02-11T15:34:34.013898Z","last_seen":"2026-06-10T21:22:45.290458Z","times_seen":18,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_next/static/chunks/13e130d36132d73e.js","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:10.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /_next/static/chunks/13e130d36132d73e.js HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recover-uphold.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 12039\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"13e130d36132d73e.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 10 Mar 2026 12:04:10 GMT\r\netag: \"c45bde5c2093233a5449f2c466dd6e6e\"\r\nlast-modified: Tue, 10 Mar 2026 08:43:31 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/13e130d36132d73e.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4h5gj-1773144250921-4247ffac78f3\r\ncontent-length: 9278\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":39262,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (28591)","md5":"e1350c8f31b36e3cc68614d4ce2400a3","sha1":"b31286f950f536602f68b10f7c2776ad7eac582a","sha256":"4074dee602c22606ba4c4dea451ad70e5c298fcf3ffba167b63b42830e7191d3","sha512":"76c7800196ff52dc08c27feeae6479ed02ad935fb6f92fb471ce4d5d50e3454e83841b01236496938abb436225f7c90a3cb339b21a9ea6a1a0563539f1e4db63","ssdeep":"384:g78l17CWCmLgG4AYHfcseD1eFFbKDRP1JnppTh4vyfmybZznCjLDoq9ggZrIwi+P:rl1OJ4nTNx4LDoq9ggZrIK","tlshash":"3a03b5b172d4faa2025744f0d83f101af23d4c7621ad74b0a7e4ccdbb99858d92b6f99","first_seen":"2025-12-16T03:35:31.869639Z","last_seen":"2026-07-19T16:34:27.028588Z","times_seen":29,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/api/ip","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:11.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /api/ip HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recover-uphold.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Tue, 10 Mar 2026 12:04:11 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /api/ip\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::57hlf-1773144251524-80d737ead3dd\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T07:51:18.251001Z","times_seen":93313,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/api/activity?visitorId=visitor_eahobwua49vmmkkb0py","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:11.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /api/activity?visitorId=visitor_eahobwua49vmmkkb0py HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recover-uphold.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Tue, 10 Mar 2026 12:04:11 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /api/activity\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::nl47p-1773144251797-465d2f78fe62\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8f9d648d1916aab7c402d890ca83ed2d","sha1":"172455286bc0d5146b5ce2f5d7342596badd9f05","sha256":"9b17d02ddc7416eae7a35e091efd3df5dd6e4a9e180a52e17b67b26a272beebe","sha512":"26761e7ca8eb21894586ac253ac4dfc27420b5390372fe4cf905389df24672cf7a3dcabcd6633482a6234b24bf1be36db6df5bcae7b38ba02a16f2c79d7dae85","ssdeep":"","tlshash":"7060000080282020000f00000000000282082082022888322a800a0802882e0802000a","first_seen":"2026-03-10T12:04:38.139422Z","last_seen":"2026-07-11T13:48:19.532757Z","times_seen":3,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/api/favicon","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:11.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /api/favicon HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recover-uphold.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Tue, 10 Mar 2026 12:04:12 GMT\r\nlocation: https://cdn.brandfetch.io/idObwT_2k3/w/400/h/400/theme/dark/icon.jpeg?c=1dxbfHSJFAPEGdCLU4o5B\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /api/favicon\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::7j7t7-1773144251977-e55b2db28caa\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3921,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T12:40:46.817109Z","times_seen":17855281,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_next/static/chunks/05b1b0ed80150415.js","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:10.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /_next/static/chunks/05b1b0ed80150415.js HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recover-uphold.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 12042\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"05b1b0ed80150415.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 10 Mar 2026 12:04:10 GMT\r\netag: \"d5410bbbe66feea8257c0c98ae23b40d\"\r\nlast-modified: Tue, 10 Mar 2026 08:43:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/05b1b0ed80150415.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5b2kf-1773144250935-041811737ea7\r\ncontent-length: 59891\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":216338,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (33610)","md5":"04f507de2293912289a780c74cc1824e","sha1":"e455037b6d4fcc8b788b1445c776cfb9337d7b70","sha256":"7cf7c82762ea4b57306bd25ff90a48495d41175536f2dc9a93458d56296ba339","sha512":"c025f4c36cf907c70597c792c5096cb8bc1e5f477cab4721b5c842c2dbc6ccbb7003db932d49dafb6e57381d17f1fe13faa0441b7c9cb547f459b5fa8fd0c09c","ssdeep":"6144:hxPB9EMZf+KStQaaafXFCqcWNalxYMTPnyCfzZ8bec:F+KSiw","tlshash":"8a242bc5b3b6b03247d595a594361403f23ca61eb81d802cb76d5edb2a98948fb3bf31","first_seen":"2026-03-10T12:04:38.143023Z","last_seen":"2026-03-14T13:06:54.548943Z","times_seen":4,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/api/activity","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:12.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"POST /api/activity HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recover-uphold.com/\r\nContent-Type: application/json\r\nContent-Length: 426\r\nOrigin: https://recover-uphold.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":426,"data":"{\"visitorId\":\"visitor_eahobwua49vmmkkb0py\",\"activity\":{\"visitorId\":\"visitor_eahobwua49vmmkkb0py\",\"ipAddress\":\"91.90.42.154\",\"currentStage\":\"intake\",\"email\":\"\",\"caseId\":\"\",\"decisions\":[],\"sessionStarted\":\"2026-03-10T12:04:12.043Z\",\"lastUpdated\":\"2026-03-10T12:04:12.043Z\",\"lastHeartbeat\":\"2026-03-10T12:04:12.043Z\",\"isOnline\":true,\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Tue, 10 Mar 2026 12:04:12 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /api/activity\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::nl47p-1773144252049-71158292b6f9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-08-12T12:40:46.873849Z","times_seen":181672,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/api/activity?visitorId=visitor_eahobwua49vmmkkb0py","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:21.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /api/activity?visitorId=visitor_eahobwua49vmmkkb0py HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recover-uphold.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Tue, 10 Mar 2026 12:04:21 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /api/activity\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::pbqkm-1773144261565-31d1267046cb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":384,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"47b173d6a8651a85806f2ce7cad0db40","sha1":"1c7dd492fb5253193c6830d37280af34b02f3cfe","sha256":"6f7df9dcdd9069366e335d75f9a2f938cb0b16969f6d5b0111f926b389c3d523","sha512":"411bf500ffb437d714dd0ffd7a4e4a0104cd4a25c1e0e1a79b3f167f4ec2e2adc5c9afeb2f3585b5d4b655f15fe2ebfa9640d2372ddb47c0bd637b13891d561a","ssdeep":"","tlshash":"23e0613946a3d530891500465129674309ee3177f5855754e7ec1f4433847740f13289","first_seen":"2026-03-10T12:04:38.07091Z","last_seen":"2026-03-10T12:04:38.07091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/api/active-brand","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:23.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /api/active-brand HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recover-uphold.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Tue, 10 Mar 2026 12:04:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /api/active-brand\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::4hxkr-1773144263503-18d9e3b7fbb2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":18,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b55f67f6d20e587870e54fed2f3e030f","sha1":"1593a4819b63071c82dc3cb817befa194ef4b197","sha256":"f41afaad8a540166b59875ad92be0f308220d2179185abe967976296d9e9a1c8","sha512":"f82fca87265826da06f6ee72479a3909306a850da80bce2046ba51009208509ab696a66076ce023d0d629405acf8aed011f8e53e2381967d3b3a7c9cb8cb1e87","ssdeep":"","tlshash":"417000808320208a0308200200c0280080380000c22808088820022e0020200000aaa0","first_seen":"2026-03-10T12:04:38.103384Z","last_seen":"2026-03-10T12:35:26.610049Z","times_seen":2,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_next/static/media/caa3a2e1cccd8315-s.p.853070df.woff2","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:10.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /_next/static/media/caa3a2e1cccd8315-s.p.853070df.woff2 HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recover-uphold.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"caa3a2e1cccd8315-s.p.853070df.woff2\"\r\ncontent-type: font/woff2\r\ndate: Tue, 10 Mar 2026 12:04:11 GMT\r\netag: \"18bae71b1e1b2bb25321090a3b563103\"\r\nlast-modified: Tue, 10 Mar 2026 12:04:11 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/caa3a2e1cccd8315-s.p.853070df.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9djgd-1773144250940-2d554bf82e05\r\ncontent-length: 28388\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":28388,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28388, version 1.0","md5":"18bae71b1e1b2bb25321090a3b563103","sha1":"a636827d1fb47f9fddf94d55ed8f25e85155d1ea","sha256":"a29f900a6d603e989449327956e7ac61ea3e6b26ca7426f64e7cccf2cd4aed37","sha512":"e6560e1f68d236883884afa1fa4c2de5ddd6c75e69ddf1057c97f525015aa4306a14fb56c1526141bf2067d24b2ca72ea78e0e518b2bcbaf162056ee4a2b327a","ssdeep":"768:KD+2Y2za0bgeumM+doeWITKGOgUT3CbeZq:KDFzfKJ+SHIGGOh3CbeZq","tlshash":"9dd2e1a0bb98461d35fe1ba096ed42bf4a1d7f4ded7c1a65093b2b80174d4df20d8c68","first_seen":"2025-09-14T11:55:19.751418Z","last_seen":"2026-08-12T11:05:02.005758Z","times_seen":24503,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/_next/static/chunks/218c272dd29e1284.js","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:10.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /_next/static/chunks/218c272dd29e1284.js HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://recover-uphold.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 12038\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"218c272dd29e1284.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 10 Mar 2026 12:04:10 GMT\r\netag: \"450a2c90482cc5eec633f8b817e4e19e\"\r\nlast-modified: Tue, 10 Mar 2026 08:43:32 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/218c272dd29e1284.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9r499-1773144250916-2dfa2b49b3af\r\ncontent-length: 1275\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3324,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3324), with no line terminators","md5":"0cf77ed69cce5e0d9e42a72ed9fc2348","sha1":"2edbf658680ae7c0b0cfdbf679f2ca15a6dd7888","sha256":"94048db49c3b218fb45b9fb936324029adcb95d662fce398f9149c1996a4d345","sha512":"e5c51e6c99f9ffe97574850f3d181eb01dc0d5c2cdb716368ad2bc5310add3ae9052af6e61c97d823b3559aad43033fc9458591d3e5f775dec0564a2097060f3","ssdeep":"","tlshash":"4a61536572d9f9c1114a90d88c3b5006f2391e3666bd70e0b799cdf939d408e92f2f9a","first_seen":"2026-03-06T10:10:35.726798Z","last_seen":"2026-06-10T16:31:24.045184Z","times_seen":12,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/api/activity?visitorId=visitor_eahobwua49vmmkkb0py","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:11.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /api/activity?visitorId=visitor_eahobwua49vmmkkb0py HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recover-uphold.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Tue, 10 Mar 2026 12:04:11 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /api/activity\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::7pfhs-1773144251589-b304859a087e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8f9d648d1916aab7c402d890ca83ed2d","sha1":"172455286bc0d5146b5ce2f5d7342596badd9f05","sha256":"9b17d02ddc7416eae7a35e091efd3df5dd6e4a9e180a52e17b67b26a272beebe","sha512":"26761e7ca8eb21894586ac253ac4dfc27420b5390372fe4cf905389df24672cf7a3dcabcd6633482a6234b24bf1be36db6df5bcae7b38ba02a16f2c79d7dae85","ssdeep":"","tlshash":"7060000080282020000f00000000000282082082022888322a800a0802882e0802000a","first_seen":"2026-03-10T12:04:38.139422Z","last_seen":"2026-07-11T13:48:19.532757Z","times_seen":3,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"recover-uphold.com/api/active-brand","fqdn":"recover-uphold.com","domain":"recover-uphold.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://recover-uphold.com/","date":"2026-03-10T12:04:17.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.recover-uphold.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 22:55:31 GMT","end":"Sun, 07 Jun 2026 22:55:30 GMT"},"fingerprint":{"sha1":"F3:78:10:73:49:BC:E0:C9:6B:32:5D:4D:FD:CF:D1:C8:43:2E:15:A3","sha256":"8C:3B:6F:53:A2:EC:F9:4F:46:9C:FF:C4:C0:2B:51:E0:39:D2:A9:97:C2:50:83:8E:26:5B:DB:13:75:E5:EB:BC"}}},"request":{"raw":"GET /api/active-brand HTTP/1.1\r\nHost: recover-uphold.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://recover-uphold.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Tue, 10 Mar 2026 12:04:17 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /api/active-brand\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::4jfsv-1773144257504-ad6c506aa329\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":18,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b55f67f6d20e587870e54fed2f3e030f","sha1":"1593a4819b63071c82dc3cb817befa194ef4b197","sha256":"f41afaad8a540166b59875ad92be0f308220d2179185abe967976296d9e9a1c8","sha512":"f82fca87265826da06f6ee72479a3909306a850da80bce2046ba51009208509ab696a66076ce023d0d629405acf8aed011f8e53e2381967d3b3a7c9cb8cb1e87","ssdeep":"","tlshash":"417000808320208a0308200200c0280080380000c22808088820022e0020200000aaa0","first_seen":"2026-03-10T12:04:38.103384Z","last_seen":"2026-03-10T12:35:26.610049Z","times_seen":2,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"recover-uphold.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}