{"report_id":"e200f97d-6c63-4984-be24-f79e968bba96","version":6,"status":"done","tags":[],"date":"2026-01-30T12:03:41Z","url":{"schema":"http","addr":"faq-uphold-sso.dream.space","fqdn":"faq-uphold-sso.dream.space","domain":"dream.space","tld":"space"},"ip":{"addr":"104.18.21.20","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"faq-uphold-sso.dream.space/home","fqdn":"faq-uphold-sso.dream.space","domain":"dream.space","tld":"space"},"title":"Log In | Uphold® : | Sign In to Your Account","dom":{"size":28403,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16471)","md5":"2109addeb88b5a0c8f860a57078e96e2","sha1":"f39472b69017676bee27f7ea550e6ed4213a28cc","sha256":"6d4eb4d11e65212555ff94d90186c59636805d6f7eed0c95c50f4ef3e5dc07da","sha512":"2cec69a0e731c72f70232fc0246ea75eac85905c2f5f6f8858b6aadcda21f0fa271ad4a3eb0637ee1891c6c18e5634b7c81b324dcbbbca5f79ed24f81d422e69","ssdeep":"768:KoOpEzxaWgNPCM0rGV4xksc64Jysq7vuhnMUhWAW:qCMebx/c64Jysq7vuhMUhWN","tlshash":"22d2da84b80c12385c279a41efc8a62cb125f5c26e6248ab714d184ffed7ff635e6b45","dom_hash":"domhash0f47018306c2245a6938de9703c5c4af","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"faq-uphold-sso.dream.space","fqdn":"faq-uphold-sso.dream.space","domain":"dream.space","tld":"space"},"ip":{"addr":"104.18.21.20","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-06T12:03:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-30T12:03:21Z","timestamp":1769774601,"ip_dst":{"addr":"104.21.88.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":35128,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI","source":"{\"timestamp\":\"2026-01-30T12:03:21.189377+0000\",\"flow_id\":563592554988657,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.42\",\"src_port\":35128,\"dest_ip\":\"104.21.88.25\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2051768,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_03_22\"],\"deployment\":[\"Perimeter\"],\"malware_family\":[\"Cloudflare_Workers\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Cloudflare_Workers\"],\"updated_at\":[\"2024_03_22\"]}},\"tls\":{\"sni\":\"dreamspace-blob-manager-prod.space-and-time.workers.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2026-01-30T12:03:21.181361+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"faq-uphold-sso.dream.space","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"faq-uphold-sso.dream.space","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"faq-uphold-sso.dream.space","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"faq-uphold-sso.dream.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-01-25T22:30:32.196824Z","alert_count":0,"request_count":8,"received_data":5278802,"sent_data":3318,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-01-26T03:26:27.114953Z","alert_count":0,"request_count":2,"received_data":1003280,"sent_data":839,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-01-25T22:25:20.721908Z","alert_count":0,"request_count":1,"received_data":579631,"sent_data":409,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"faq-uphold-sso.dream.space","ip":{"addr":"104.18.20.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-11-08","domain_rank":0,"first_seen":"2026-01-30T11:52:56.904486Z","last_seen":"2026-01-30T11:52:56.904486Z","alert_count":8,"request_count":2,"received_data":2957875,"sent_data":905,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Three.js","description":"Three.js is a cross-browser JavaScript library and application programming interface used to create and display animated 3D computer graphics in a web browser using WebGL.","website":"https://threejs.org","common_platform_enumeration":"","icon":"Three.js.svg","categories":["JavaScript graphics"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"ECharts:5.6.0","description":"ECharts is an open-source JavaScript visualisation library.","website":"https://echarts.apache.org/","common_platform_enumeration":"","icon":"echarts.png","categories":["JavaScript graphics"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"dreamspace-blob-manager-prod.space-and-time.workers.dev","ip":{"addr":"104.21.88.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-02-08","domain_rank":0,"first_seen":"2026-01-14T23:59:21.328584Z","last_seen":"2026-01-30T11:52:57.364968Z","alert_count":0,"request_count":1,"received_data":12653,"sent_data":514,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":[{"md5":"612b6bb7e5490ee841245cc12d40c973","sha1":"e96fbcd4be8ac391ab3404cffcbe9f9a853aabfe","sha256":"92e9397f53715c629c0d3f799cbcca25358a32edd3fd6bea0fd07fe7ad9f9896","sha512":"91923a2c6b4900f1d7cc7b08b96f21da40e8985cef3fa430afc87cc86ee98d3ec612195ed8394411a55c3e6087d1ffd41eadd4623b45f3472654616ffa1c8ab0","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","size":11239,"url":{"schema":"https","addr":"dreamspace-blob-manager-prod.space-and-time.workers.dev/blobs/published/miniapps/f77b456d-eaed-4940-8e53-72f791761f20.zip","fqdn":"dreamspace-blob-manager-prod.space-and-time.workers.dev","domain":"space-and-time.workers.dev","tld":"workers.dev"},"ip":{"addr":"104.21.88.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"archive":[{"path":"content-map.json","filename":"content-map.json","modified":"2026-01-30T08:52:42Z","Modified":"","magic":"JSON text data","size":3509,"md5":"df2f720c809d2592adf0ec798f29484d","sha1":"6f74edaaf64bb41a9d19c391ac7b7a8a5cdff79b","sha256":"18a4686edb4089601df6e496ebada54747878ca37efaa6492cc01f53c349c548","sha512":"2ec96aeafcf23f890bea7b87fcec0bcddf21bb0e7d124cd65887daf760abcc867d4ed6a39a77a0b4fafed6f8f83f69dca15e7e6f384294c512a5d08ffe9eb4d4","alerts":{"urlquery":null,"analyzer":null}},{"path":"src/theme.json","filename":"theme.json","modified":"2026-01-30T08:52:42Z","Modified":"","magic":"JSON text data","size":10355,"md5":"f375193de7c6e4e99a09469ad651c118","sha1":"b2d02c6c4eebd9505e5ae8d72307ef4dc3f6e4fa","sha256":"fe0788dc04e3b5008c241c3da0fee7d6083647d273b467c35d2f51fe3910ac76","sha512":"4c83f8ff203471c5206346e94cd5f470bf466b680cdca6faca658ef415ed787e7603a5443bb1f9455264a2d7da77fd51e31d4eb8fcca6d5251b3a51ff95f5f0d","alerts":{"urlquery":null,"analyzer":null}},{"path":"src/pages-layout/page-0.json","filename":"page-0.json","modified":"2026-01-30T08:52:42Z","Modified":"","magic":"JSON text data","size":404,"md5":"34d31d4165e4dddc484ba205efa6c77d","sha1":"8a5a324d2b36d0d7639876e1234ce16837911b2e","sha256":"4f240499832c3dd2434090a7361b55978c29ac8b58b87211790a30c372c90899","sha512":"db914d831d658ef87cf5309769843f9057573aa00b42b5a038099844ee5c9fc5612bb5a5ee29328c06b4c6b9b60d9e7fa8d8c02e3820affa13e0eec296032226","alerts":{"urlquery":null,"analyzer":null}},{"path":"src/ProjectComponents/Footer/component.tsx","filename":"component.tsx","modified":"2026-01-30T08:52:42Z","Modified":"","magic":"data","size":2576,"md5":"aeb355edc386ba7d3cf065d563986be4","sha1":"73df5861137ebcb3d1be75dc9578331ae9b90c33","sha256":"d4516294361b72495988851e00ef67fdd3dd484404e528a9dc1bf2f58c8a0caf","sha512":"885c648560fefa2dcde67c7cc05113de38f59d5d64adbb499fe5775f72c83ae1925c5a8c8272ef7e69792d9021db390947548e69029ee6b564073a8d89ba0544","alerts":{"urlquery":null,"analyzer":null}},{"path":"src/ProjectComponents/MainApp/component.tsx","filename":"component.tsx","modified":"2026-01-30T08:52:42Z","Modified":"","magic":"HTML document, Unicode text, UTF-8 text","size":16307,"md5":"446984f9f47b76030266adc5b0dcb7fd","sha1":"221ad862b048df2614dada9e1aab24e509c0ed45","sha256":"b3eb7350d10af27c22b8b4f772fe5a7eaa0f8114bc2ec41190e289f4e36b441a","sha512":"1311d977a0b300e1f678746fae8742b3beb82b91c23f5f1ac219a3c9e1f06d85abe0ebe925b7c943842a2da4cbd985dfc808f80a665b7f91b61c2c2427412999","alerts":{"urlquery":null,"analyzer":null}},{"path":"src/ProjectComponents/Header/component.tsx","filename":"component.tsx","modified":"2026-01-30T08:52:42Z","Modified":"","magic":"HTML document, Unicode text, UTF-8 text","size":4573,"md5":"4313684b70851429f8ebd933b803f096","sha1":"350027011a93c6ba0aac73fc0ff8b3f32957961e","sha256":"89478e519abf268e60a7670e31447ac94da6487d2339738dff338d62676a6ddf","sha512":"9020828bede54ba4d1fee7edaaacef210cb7afe25dd8e8b791b4e29fdbfe7dc0e782f76b44e5bf6222da54231e1f611775172278753a993c9cbc4b99ad5686f7","alerts":{"urlquery":null,"analyzer":null}},{"path":"record.json","filename":"record.json","modified":"2026-01-30T08:52:42Z","Modified":"","magic":"JSON text data","size":449,"md5":"a22041571442eaa31717acfb78ea2651","sha1":"094bdb1e6f39bc704526451cedb123b95f65fa95","sha256":"8a4f59de6bdd7fe33507b87692300da5babd865ae77708d144d9e524fbacd408","sha512":"2ef4e41cd09693537c0527ba709879c58915668e7fb6fd29bc4c2146de558af76aa7891f7d8a9f099890404ddf38400c139170365acea4cfefa1e430a96ab4dd","alerts":{"urlquery":null,"analyzer":null}},{"path":".sxtignore","filename":".sxtignore","modified":"2026-01-30T08:52:42Z","Modified":"","magic":"ASCII text","size":294,"md5":"62d832cfe47e26ec52b5b99d327a9485","sha1":"8c0213000d162af15ca43c2e6e7f5067836bb2cc","sha256":"c190b1d59035ed6e3d8bf5bb5c6f97d905e0201a828abaa765a7f101a7b73a83","sha512":"dfa513c89f540be6324ed47ba0732ba8d4482faeb20cbe01a58f53a651952ae9725084801bf5775eab3267db5db55f90919e7b7526c0632afcbfd4c8cac51044","alerts":{"urlquery":null,"analyzer":null}},{"path":"settings.json","filename":"settings.json","modified":"2026-01-30T08:52:42Z","Modified":"","magic":"JSON text data","size":95,"md5":"ab5b7ea68beb7e7127f127512c018ac6","sha1":"593665da1970b7e7fec537a292e4f7f5d7c0db00","sha256":"88d5db523ab3e5e2096a8da98bd30aaeb97265f55eb119f2da92f573a104adf1","sha512":"9f6c97ac52441caf8879be747a96b04e68522bd6702908c58b5263cf5fc1488e225831547c4c1fa60970b4454a20cc8ee184b5c9a80a4ed055f8d6ef3480182b","alerts":{"urlquery":null,"analyzer":null}}],"alerts":{"urlquery":null,"analyzer":null}}],"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"faq-uphold-sso.dream.space/91864a99-bdc7-487c-b47b-d8e58947764b","fqdn":"faq-uphold-sso.dream.space","domain":"dream.space","tld":"space"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"24b41574ae0cb6e6ce36319bc7fad701","sha1":"e60269c6ffe22788345f57d01df9f1cd2f274e94","sha256":"7a6812b518dbe54698cfbf8cefb6cea912fa12163b6ff57f7c864cefce4862d2","sha512":"3bf2d08cff2dcdd525c35c8ea4780a109618b4f6966fd9873326428f867b3530a67fc9931f8cb4b04d2dddc317997054ec907c51643ecc254f2c7ee93e5f349b","ssdeep":"","tlshash":"8251be14b6b0066a00ff888772fc6c0ea34d1742d7be7d6471d8da1dbfa4d9d9964344","size":2584,"data":"","first_seen":"2026-01-30T11:53:00.916931Z","last_seen":"2026-01-30T12:03:47.17731Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isomorphic-git@1.27.1/index.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d11cfbbfde954c4c87a43997a1751591","sha1":"fe01b9e11a90ec3cb8a54007af2626ee6020d57f","sha256":"4377c9fd608ecea01782ae1bd3bf7cb15121b7c6069af046a6431b2561e682e7","sha512":"02e0ba10fac66b278e3fdd67c69b390df392d660b2252aaef2607414f160d34ca745761f5e5e19d2c816aa7b0c951b6d8d2a7ae50c9c3a3409a9a8b538a79bc5","ssdeep":"3072:Ey5UokHioicWKSGFXZRzkQZRj1LDnYgMY4D1bZ44XQ5SJ+x4:gHHic1Z1AQZLebZ/XQ5SJ+a","tlshash":"5e64a4c87b82f09943e336b4d07f126be3267660744e5150e269d1cabc3d58ee237e69","size":309676,"data":"","first_seen":"2026-01-13T18:33:27.892816Z","last_seen":"2026-07-12T15:37:12.134074Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@babel/standalone@7.26.2/babel.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"517a798c2e02c50b80f042c02241e272","sha1":"e62ee928ac48a33cc8c601d24d9059287595c2e1","sha256":"545ce4b03ef3062f4689ccd9a232b94c457592c601f4624e8b32b3440012c087","sha512":"ab7be27e1409073085d41dc5262f7a703f72b689f0cc016c9c4ff09cbe329986eaad947cb173ad932dd5c7e5e3f343fe86d59e0cc1550910be1f10066dd49a7d","ssdeep":"","tlshash":"89112ec037c7f813534c24a580366043f32caeee1e0c9428ef7445b6f091e0985b2be8","size":1000,"data":"","first_seen":"2026-01-30T12:03:47.177843Z","last_seen":"2026-05-20T12:52:29.884177Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/echarts@5.6.0/dist/echarts.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b91b9de4da1677c82825c679112da8b2","sha1":"79a8b5a038d98fd1cee4d63eb0f7ddd8b5bed3fb","sha256":"bf4a223524e40b77c304bec67e1222cf551f14880cf42c69dc046558e11c07b1","sha512":"5d299b5f79a1ac3da2c797d73d34506f61702b6dac44c5504e904fd9a73c857ec387feb4e610364037a0556880bd93e25c8c4e57409b9265231a2a270e96c29b","ssdeep":"12288:Rl+haDl8jAFuoLr0ZJN+WfDxxVc8O7ZGzAJJvlrUb2ox4XINawo0B0GiC:4bwH0j9xVM78zAx0Vx4XINax0B08","tlshash":"5825089cb614b02543a771b4056f090f9336690db50b85a8fb69e4ea6cbd44f323bf78","size":1034102,"data":"","first_seen":"2025-03-16T23:28:59.530925Z","last_seen":"2026-07-23T12:24:50.22287Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/react-dom@17.0.2/umd/react-dom.production.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"23bfe7e99565ee8f34afd63c06f4c24b","sha1":"bf08b8ad1ad73c12a7c9cb211926ce23a861db07","sha256":"9db33292007ab6c38527b39d5663e976a305564e19b2a5a8713ea2b2c00f505d","sha512":"f6318daf93e2c1ef27ccb2d84e4f10ac430f7e3194d29c7cd066332995318bb96609fac18edc827355799244b9bf1570c0807b429cdced4c4b890c5f00ddf477","ssdeep":"1536:6s276dU+/c7hEUuoiwbUgLYUR16SLq959TDqReyDjG9M5nvr2aIgq20PH:12lCy6LSl16S4PTODj+MZDDRs","tlshash":"c2c32ae87952fa526af202ab10ef1407737c9a27740c48a1e501fddd69b806da17ff8d","size":120585,"data":"","first_seen":"2023-03-07T12:08:30Z","last_seen":"2026-07-25T16:35:28.237828Z","times_seen":4066,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faq-uphold-sso.dream.space/da55f199-bf38-4c9d-992a-d040f66d25ef","fqdn":"faq-uphold-sso.dream.space","domain":"dream.space","tld":"space"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"34de83bb3efadff44fdba36fc2c463bb","sha1":"97a6994db0f8e76fc5e708f03c6a264b57d37bc3","sha256":"45f2549986757b6a0bdd776e515e6e2331c7011a9009690d8962b448c161a189","sha512":"a62c03d81cc63fe50a7b7678586572b1d6603aba8eec24ad5347214e4e33ddf1bfa83f08769162bab05dc35b0dbfca7ecb2adfb150162dfb3b088b2ddcdedc52","ssdeep":"384:Vfk4fLHC9NKbxmMKfSfRfwzWf6f2fuXKdfBxEfTfhfofZf5fMfv6:Vfk4fLu8xmhfSfRfwzWf6f2fldfBxEfM","tlshash":"ea720049a174016d12bb485b69bd6c0eb304420bc6bf7da471e8ce39bfb45de70b6398","size":16238,"data":"","first_seen":"2026-01-30T11:53:00.920462Z","last_seen":"2026-01-30T12:03:47.178611Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faq-uphold-sso.dream.space/8f0e08a0-020d-4cad-8c53-edb2a626e8cd","fqdn":"faq-uphold-sso.dream.space","domain":"dream.space","tld":"space"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4357af62f8c0e59727b985e802f34ef9","sha1":"d40ab037692a11d0af0765963ad5187a2b22d684","sha256":"02cdaaf8977f3e523172e10339c9fb1637ee3a40c74890383b3da8c958adedd6","sha512":"9a294c0c5dd14f0e1a4b69619ef1c2e744f56c5ab69f862a4699c0cb9f74a60fe346e2b5a26c3a547f71432f218c9c0a36d487d941577613534f1216ff43340c","ssdeep":"48:ltcJOphzZPpaJizhk5HKcj7zFpSLFRpSLFYd/4bfjfhSfeTTB560wHivfNDiCUAS:cgNcel4bfjfhSf2/60lfEXw8ewHYg","tlshash":"b9819c44a030016e50ff8c9b61fd6d0ea319434bc7bb3da4b1e5cd297bf458a95b6398","size":4163,"data":"","first_seen":"2026-01-30T11:53:00.910775Z","last_seen":"2026-01-30T12:03:47.179497Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/react-router-dom@5.3.4/umd/react-router-dom.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"88223bc502249ab204401ecd8b89acb1","sha1":"c6c93f145c0d5a036c059abd56363f8708c4f71b","sha256":"cc8891800b94309dd1667cf8cc8457b0b25dbbe774eeb1c0c5c18f96a48d2e84","sha512":"5c9db905b8e6650a5a1a4389683157549a9fb0179bbf66832ec045dea4face80bf8158fb5cbb9e7cd4737209a573969d998b8e0da603adaa7c8f35723ac605af","ssdeep":"384:OfhKyPbZY03q15gTFS4oO/pPCl9YAtBxTNVHMIvPYbPTD:OwykgSO5Cl9rBNNVHMIvAXD","tlshash":"1fd2a5d9b091b0745bd72072863f111ff37f2899685f8060a1b6e4d43cb8a9e8167fad","size":30401,"data":"","first_seen":"2023-05-07T16:56:41Z","last_seen":"2026-07-22T23:29:19.83407Z","times_seen":152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/react-ace@9.5.0/dist/react-ace.min.js/main.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c18bb21f6c8e7e7eabac45c4641aa70a","sha1":"ed6cc631e33bb9ed4bfcfb0885c100a7944e75e6","sha256":"4b8b33949275d737844690a626d7dd77739d7ef26f89bc65ae03c1bdca3d3a3a","sha512":"c9edc5cb509c110c6872af1c1800da15dcc20d109163222660c7fb24ce36d136e7a6b9db73fc5ae2458fef1ea848ea73ef46a0b3ee689b8db394854272d90654","ssdeep":"6144:/defrqZ2AsNTTb+S1tFZR4ilP0/7hOmN8r+kaSFqlAm1oK6KnMmjnzagZn42zMVN:/defa2LNyfFRMWdbE95n","tlshash":"c694099b3214783247dba16674ef020a5237194eb84a915cbe38ece56c75d5e323bf38","size":434466,"data":"","first_seen":"2026-01-13T18:33:27.880712Z","last_seen":"2026-07-12T15:37:12.128253Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/react@17.0.2/umd/react.production.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"61699b70cf57abe63fdf5f4007d36ec1","sha1":"6c05189cc2d08bb2a7609c002f0675c9c670d362","sha256":"229bbf4d0e7488209564152c6723497f1ac3934136ca1684233d2fa88fa4146f","sha512":"aa5cc8794b5383b781a6611a4b5d8d660c73e766186551799b28fcf668c911eb0177fa04f543ec60e5f64005f3bce019604bd0a2129d718f33284d3689f5c398","ssdeep":"192:8cL60YrI90CW3j4xqLYfMHaPsiJcW9eYcfZcTQWhGJykDZNZ3e:9L6hrI90CW3jhgUiJc+eYcfZ3W0JySN0","tlshash":"9f32c5e8f591b0914b7378f1416f200f723e9aaa744c89b091a5d8e47eb41ad943bf4e","size":11440,"data":"","first_seen":"2023-03-07T12:08:29Z","last_seen":"2026-07-25T16:35:28.235029Z","times_seen":4119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/react@17.0.2/umd/react.production.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faq-uphold-sso.dream.space/","date":"2026-01-30T12:03:19.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/react@17.0.2/umd/react.production.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 17.0.2\r\nx-jsd-version-type: version\r\netag: W/\"2cb0-bAUYnMLQi7KnYJwALwZ1ycZw02I\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 30 Jan 2026 12:03:19 GMT\r\nage: 2683656\r\nx-served-by: cache-fra-eddf8230078-FRA, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 4707\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11440,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (544)","md5":"61699b70cf57abe63fdf5f4007d36ec1","sha1":"6c05189cc2d08bb2a7609c002f0675c9c670d362","sha256":"229bbf4d0e7488209564152c6723497f1ac3934136ca1684233d2fa88fa4146f","sha512":"aa5cc8794b5383b781a6611a4b5d8d660c73e766186551799b28fcf668c911eb0177fa04f543ec60e5f64005f3bce019604bd0a2129d718f33284d3689f5c398","ssdeep":"192:8cL60YrI90CW3j4xqLYfMHaPsiJcW9eYcfZcTQWhGJykDZNZ3e:9L6hrI90CW3jhgUiJc+eYcfZ3W0JySN0","tlshash":"9f32c5e8f591b0914b7378f1416f200f723e9aaa744c89b091a5d8e47eb41ad943bf4e","first_seen":"2023-03-07T12:08:29Z","last_seen":"2026-07-25T16:35:28.235029Z","times_seen":4119,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":94,"dns":32,"connect":29,"send":0,"wait":27,"receive":1,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@5.0.0/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faq-uphold-sso.dream.space/","date":"2026-01-30T12:03:19.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/ethers@5.0.0/dist/ethers.umd.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.0.0\r\nx-jsd-version-type: version\r\netag: W/\"618fa-QXOsRXhpWQkQ4p2wkn6bd++q72g\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 551876\r\ndate: Fri, 30 Jan 2026 12:03:19 GMT\r\nx-served-by: cache-fra-eddf8230021-FRA, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 111093\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":399610,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c5f13b45079bda1e88407e232a1c3d6b","sha1":"4173ac457869590910e29db0927e9b77efaaef68","sha256":"df6ebc0da86681a1e9f3df03c12bf3bc53f212f130e530c99a2168935eee14be","sha512":"7e9bb2539eb29feb47b3b8ee40947aca648edd0e159ed7f393599f834daa55b3875abece2f62869bc84c462d55c11df1031dc29327194e8097c7ac6a2c38a819","ssdeep":"3072:Wv+bcbs8xQRi06ryP0nCuSsQF8bIg0u8JKT4D2nlOSAH85XSkHdfKh0vEcSU:8qkyP0nCPsQQTg2cH85X1dfjz","tlshash":"32841ac476a5b066439725a0042f140bf33bb92da45d0468f659e8f63cfac8d963bf39","first_seen":"2026-01-13T18:33:27.896431Z","last_seen":"2026-07-12T15:37:12.136989Z","times_seen":51,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":27,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17?plugins=typography@0.5.16,container-queries@0.1.1","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faq-uphold-sso.dream.space/","date":"2026-01-30T12:03:19.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET /3.4.17?plugins=typography@0.5.16,container-queries@0.1.1 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 12:03:19 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::7v7gd-1760011754791-ebb28a472f22\r\nlast-modified: Thu, 09 Oct 2025 12:09:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 9762844\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oZHw0cshxK3hx7lPIMrLp17%2Bogb0i4WIGiFTpnzOgwEDgfj29eXpU3gEP4gcMQHp0ej1Iy8vnaN8nOjKmRE8AQMZlfknI2f219MjfhYKFlo%3D\"}]}\r\ncf-ray: 9c60d34f58675696-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":500926,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52873)","md5":"b38a5509328825d080963f38c82fb3d0","sha1":"7cd881022c7c20b995fc3c1e6865a59330478e59","sha256":"0e811396de2ffb23e833efa4f2c7ceb406228efe07281da7c7e4d2307345b09c","sha512":"d949266ab8a71f5a14cb5150d890a015982b71c72cb40492eb865f695ae276870de8dafb8f577baeea9bf548eebf6bd4e9ec707a3785cee6260cab48a5a3601b","ssdeep":"12288:UIeTurbePgEHVy61LLeQxLDtvXSXl2O0s:7eCrbeP7Vy61LLeQxLRvi12O0s","tlshash":"5eb43ba97356b13647eba1e890ab1402f37d5a28900c84acf79dc4da3de4d4950bbf3d","first_seen":"2026-01-13T18:33:27.887464Z","last_seen":"2026-07-12T15:37:12.130295Z","times_seen":53,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/react-dom@17.0.2/umd/react-dom.production.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faq-uphold-sso.dream.space/","date":"2026-01-30T12:03:19.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/react-dom@17.0.2/umd/react-dom.production.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 17.0.2\r\nx-jsd-version-type: version\r\netag: W/\"1d709-vwi4rRrXPBKnycshGSbOI6hh2wc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 30 Jan 2026 12:03:19 GMT\r\nage: 559949\r\nx-served-by: cache-fra-eddf8230181-FRA, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 40194\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":120585,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (605)","md5":"23bfe7e99565ee8f34afd63c06f4c24b","sha1":"bf08b8ad1ad73c12a7c9cb211926ce23a861db07","sha256":"9db33292007ab6c38527b39d5663e976a305564e19b2a5a8713ea2b2c00f505d","sha512":"f6318daf93e2c1ef27ccb2d84e4f10ac430f7e3194d29c7cd066332995318bb96609fac18edc827355799244b9bf1570c0807b429cdced4c4b890c5f00ddf477","ssdeep":"1536:6s276dU+/c7hEUuoiwbUgLYUR16SLq959TDqReyDjG9M5nvr2aIgq20PH:12lCy6LSl16S4PTODj+MZDDRs","tlshash":"c2c32ae87952fa526af202ab10ef1407737c9a27740c48a1e501fddd69b806da17ff8d","first_seen":"2023-03-07T12:08:30Z","last_seen":"2026-07-25T16:35:28.237828Z","times_seen":4066,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":95,"dns":32,"connect":29,"send":0,"wait":74,"receive":28,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/react-router-dom@5.3.4/umd/react-router-dom.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faq-uphold-sso.dream.space/","date":"2026-01-30T12:03:19.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/react-router-dom@5.3.4/umd/react-router-dom.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.3.4\r\nx-jsd-version-type: version\r\netag: W/\"76c1-xsk/FFwNWgNsBZq9VjY/hwjE9xs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 30 Jan 2026 12:03:19 GMT\r\nage: 3231715\r\nx-served-by: cache-fra-eddf8230177-FRA, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 10184\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30401,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (30351)","md5":"88223bc502249ab204401ecd8b89acb1","sha1":"c6c93f145c0d5a036c059abd56363f8708c4f71b","sha256":"cc8891800b94309dd1667cf8cc8457b0b25dbbe774eeb1c0c5c18f96a48d2e84","sha512":"5c9db905b8e6650a5a1a4389683157549a9fb0179bbf66832ec045dea4face80bf8158fb5cbb9e7cd4737209a573969d998b8e0da603adaa7c8f35723ac605af","ssdeep":"384:OfhKyPbZY03q15gTFS4oO/pPCl9YAtBxTNVHMIvPYbPTD:OwykgSO5Cl9rBNNVHMIvAXD","tlshash":"1fd2a5d9b091b0745bd72072863f111ff37f2899685f8060a1b6e4d43cb8a9e8167fad","first_seen":"2023-05-07T16:56:41Z","last_seen":"2026-07-22T23:29:19.83407Z","times_seen":152,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":96,"dns":30,"connect":29,"send":0,"wait":71,"receive":9,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isomorphic-git@1.27.1/index.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faq-uphold-sso.dream.space/","date":"2026-01-30T12:03:19.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/isomorphic-git@1.27.1/index.umd.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.27.1\r\nx-jsd-version-type: version\r\netag: W/\"4b9ac-/gG54RqQ7Dy4pUAHryYm7mAg1X8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 1840599\r\ndate: Fri, 30 Jan 2026 12:03:19 GMT\r\nx-served-by: cache-fra-eddf8230163-FRA, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 73124\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":309676,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (51152)","md5":"d11cfbbfde954c4c87a43997a1751591","sha1":"fe01b9e11a90ec3cb8a54007af2626ee6020d57f","sha256":"4377c9fd608ecea01782ae1bd3bf7cb15121b7c6069af046a6431b2561e682e7","sha512":"02e0ba10fac66b278e3fdd67c69b390df392d660b2252aaef2607414f160d34ca745761f5e5e19d2c816aa7b0c951b6d8d2a7ae50c9c3a3409a9a8b538a79bc5","ssdeep":"3072:Ey5UokHioicWKSGFXZRzkQZRj1LDnYgMY4D1bZ44XQ5SJ+x4:gHHic1Z1AQZLebZ/XQ5SJ+a","tlshash":"5e64a4c87b82f09943e336b4d07f126be3267660744e5150e269d1cabc3d58ee237e69","first_seen":"2026-01-13T18:33:27.892816Z","last_seen":"2026-07-12T15:37:12.134074Z","times_seen":50,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":99,"dns":29,"connect":29,"send":0,"wait":66,"receive":42,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/?plugins=typography,container-queries","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faq-uphold-sso.dream.space/","date":"2026-01-30T12:03:19.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET /?plugins=typography,container-queries HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 30 Jan 2026 12:03:19 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17?plugins=typography@0.5.16,container-queries@0.1.1\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::hlsxl-1769774296798-d735b875a57e\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d5EYiUhP3IT67363aFBOnmJOaflV1pWFfDwaunql%2FITZtOSBW9eNHAWPaTeoTF3AhETpK7S8u8FD10EN6fxo9zW2F3Jgzv3n901O2rpvySE%3D\"}]}\r\ncf-ray: 9c60d34e5f4f5696-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":500926,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T04:24:09.297648Z","times_seen":17539466,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":54,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/three.js/107/three.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faq-uphold-sso.dream.space/","date":"2026-01-30T12:03:19.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/three.js/107/three.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 12:03:19 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 117153\r\ncf-ray: 9c60d34e6cb149c5-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ffc-8d435\"\r\nlast-modified: Mon, 04 May 2020 16:17:00 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1445444\r\nexpires: Wed, 20 Jan 2027 12:03:19 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ue3GofCKB2k3OM3stPxXQG0m4XsZzri5tWInPPtm9akRS429mkrG9h1l7UvIOZfG%2BCQtXICvOU5iUywfrSEbhHKbGr4zwIDMaYOxtdgTCcHKGFCheDloxYzhiQQ%2BnA6fFDX22hJd\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":578613,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1085)","md5":"c25d8852fd9d967385b2aca3aaac96ec","sha1":"58a0c0118b5476ab71fd437fdd05db86ba2cb263","sha256":"df6d6fcd93541fbe003419af82ab44eded20b46523bd661a18caaeeb744c7268","sha512":"b93f0448e77397b311150e48e084f6e3283ccf3eddd8a46f34d60d37db3ceccc9d8181079672484e7c860d000f15c17a78d21bbf3e4f1603be06597e2f885ad7","ssdeep":"12288:rF9HoTOc+61NuW9PJ8vOD/rnLdp4L7+t+17ie7twhQ6z9NeEYjpE4hxFDGucueRw:fITOQ1UW9PJ8vOD/rnLdC7+t+17ie7tN","tlshash":"e8c42ad4b2b060568a13f8a5447f0047a23afcdb7004c5bcb958e8d7ace8998567ff79","first_seen":"2026-01-13T18:33:27.875339Z","last_seen":"2026-07-12T15:37:12.138518Z","times_seen":50,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":18,"connect":1,"send":0,"wait":12,"receive":5,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faq-uphold-sso.dream.space/","fqdn":"faq-uphold-sso.dream.space","domain":"dream.space","tld":"space"},"ip":{"addr":"104.18.20.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-30T12:03:18.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faq-uphold-sso.dream.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 07:55:00 GMT","end":"Thu, 30 Apr 2026 08:54:57 GMT"},"fingerprint":{"sha1":"42:64:B7:5B:9C:99:CC:30:BF:AD:13:6E:CC:78:00:D3:CA:26:0A:7A","sha256":"4A:6C:5B:87:D4:7C:22:2B:EB:D2:C8:57:AC:3D:B4:98:E0:0A:B7:F8:D3:66:93:F9:08:AF:FA:9D:0E:0D:BD:EC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: faq-uphold-sso.dream.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 12:03:19 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\nexpires: 0\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\npragma: no-cache\r\ncontent-security-policy-report-only: child-src 'self'; connect-src 'self' https://*.space-and-time.workers.dev/ https://www.google-analytics.com; default-src 'self'; font-src 'self'; frame-src 'self'; img-src * data:; manifest-src 'none'; media-src 'self'; object-src 'none'; script-src 'self' https://cdn.tailwindcss.com https://cdn.jsdelivr.net cdnjs.cloudflare.com 'unsafe-eval' 'unsafe-inline' blob: https://www.googletagmanager.com; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline'; style-src-attr 'self' 'unsafe-inline'; worker-src 'self' blob:; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; report-to csp-endpoint; upgrade-insecure-requests; report-uri https://faq-uphold-sso.dream.space/csp-reports\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nreporting-endpoints: csp-endpoint=\"https://faq-uphold-sso.dream.space/csp-reports\"\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9c60d34c3fa656be-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Three.js","description":"Three.js is a cross-browser JavaScript library and application programming interface used to create and display animated 3D computer graphics in a web browser using WebGL.","website":"https://threejs.org","common_platform_enumeration":"","icon":"Three.js.svg","categories":["JavaScript graphics"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"ECharts:5.6.0","description":"ECharts is an open-source JavaScript visualisation library.","website":"https://echarts.apache.org/","common_platform_enumeration":"","icon":"echarts.png","categories":["JavaScript graphics"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3425,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0322232367961d96e9d07921bff1f8fb","sha1":"9f2a12e7b5aeed91ce551cfb67c13d3133431d75","sha256":"50fe60b790054bb3c811738b408c154b06324c7c2591ab4ca6e6bcf60f689cdd","sha512":"b42b5a77aeecb4aa7a81edcfbef25e3b11f19fc873a231808d4e142ffe84088dfe9211a8888f59ee1a44ab710d450e7e896a1991cf69e70a9610a6ceee3ea96f","ssdeep":"","tlshash":"b06163cfdc5ac94b666108ca743b318db15fb43fb560c8e9e1acc8256e42fd82aa7454","first_seen":"2026-01-30T11:53:00.90552Z","last_seen":"2026-01-30T12:03:47.172979Z","times_seen":2,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":101,"dns":69,"connect":1,"send":0,"wait":166,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"faq-uphold-sso.dream.space","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"faq-uphold-sso.dream.space","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"faq-uphold-sso.dream.space","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"faq-uphold-sso.dream.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/react-ace@9.5.0/dist/react-ace.min.js/main.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faq-uphold-sso.dream.space/","date":"2026-01-30T12:03:19.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/react-ace@9.5.0/dist/react-ace.min.js/main.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 9.5.0\r\nx-jsd-version-type: version\r\netag: W/\"6a122-7WzGMeM7ue1L/PsIhcEAp5ROdeY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 2624425\r\ndate: Fri, 30 Jan 2026 12:03:19 GMT\r\nx-served-by: cache-fra-eddf8230130-FRA, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 122177\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":434466,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65473)","md5":"c18bb21f6c8e7e7eabac45c4641aa70a","sha1":"ed6cc631e33bb9ed4bfcfb0885c100a7944e75e6","sha256":"4b8b33949275d737844690a626d7dd77739d7ef26f89bc65ae03c1bdca3d3a3a","sha512":"c9edc5cb509c110c6872af1c1800da15dcc20d109163222660c7fb24ce36d136e7a6b9db73fc5ae2458fef1ea848ea73ef46a0b3ee689b8db394854272d90654","ssdeep":"6144:/defrqZ2AsNTTb+S1tFZR4ilP0/7hOmN8r+kaSFqlAm1oK6KnMmjnzagZn42zMVN:/defa2LNyfFRMWdbE95n","tlshash":"c694099b3214783247dba16674ef020a5237194eb84a915cbe38ece56c75d5e323bf38","first_seen":"2026-01-13T18:33:27.880712Z","last_seen":"2026-07-12T15:37:12.128253Z","times_seen":50,"resource_available":true,"data":null}},"time_used":331,"timings":{"blocked":97,"dns":29,"connect":29,"send":0,"wait":69,"receive":58,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@babel/standalone@7.26.2/babel.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faq-uphold-sso.dream.space/","date":"2026-01-30T12:03:19.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@babel/standalone@7.26.2/babel.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 7.26.2\r\nx-jsd-version-type: version\r\netag: W/\"2cbdd6-Kd3nPOM0a9C70XPXthbhPOFfqAs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 30 Jan 2026 12:03:19 GMT\r\nage: 1209521\r\nx-served-by: cache-fra-eddf8230168-FRA, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 524569\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2932182,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7eaa0cd11e033cb381350ed63747a7bd","sha1":"5624954e63f92012affe9f96530c914fc2f9bb85","sha256":"f6e9973f830fa84dec51f1002b40da2257c9f772c56e7fa271ed32e53971fb13","sha512":"4a8254f3efbe84540ed3b75d0b5ce13acb2d9f401ac4c34995f37997a03d1a3e7c89db3891a5914d5d131862ce161ffe910198cec65f6ae06b2ff226127c2845","ssdeep":"12288:CnS5xZ/Q7ITSAKq84+oBFhUISEC3DH5L2m5ZX:CncZ/DTSTq84+oBFhUI/CzHMw","tlshash":"0a2507e972c5b97266d761a6107f0002a37a2968740c401cfb68dee77d79c4e623bf78","first_seen":"2026-01-13T18:33:27.901455Z","last_seen":"2026-07-12T15:37:12.13545Z","times_seen":49,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":98,"dns":28,"connect":30,"send":0,"wait":65,"receive":99,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/echarts@5.6.0/dist/echarts.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faq-uphold-sso.dream.space/","date":"2026-01-30T12:03:19.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/echarts@5.6.0/dist/echarts.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.6.0\r\nx-jsd-version-type: version\r\netag: W/\"fc776-eai1oDjZj9HO5NY+sPfd2LW+0/s\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 1226055\r\ndate: Fri, 30 Jan 2026 12:03:19 GMT\r\nx-served-by: cache-fra-eddf8230136-FRA, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 334888\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1034102,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (63736)","md5":"b91b9de4da1677c82825c679112da8b2","sha1":"79a8b5a038d98fd1cee4d63eb0f7ddd8b5bed3fb","sha256":"bf4a223524e40b77c304bec67e1222cf551f14880cf42c69dc046558e11c07b1","sha512":"5d299b5f79a1ac3da2c797d73d34506f61702b6dac44c5504e904fd9a73c857ec387feb4e610364037a0556880bd93e25c8c4e57409b9265231a2a270e96c29b","ssdeep":"12288:Rl+haDl8jAFuoLr0ZJN+WfDxxVc8O7ZGzAJJvlrUb2ox4XINawo0B0GiC:4bwH0j9xVM78zAx0Vx4XINax0B08","tlshash":"5825089cb614b02543a771b4056f090f9336690db50b85a8fb69e4ea6cbd44f323bf78","first_seen":"2025-03-16T23:28:59.530925Z","last_seen":"2026-07-23T12:24:50.22287Z","times_seen":193,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":78,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"faq-uphold-sso.dream.space/assets/makeinfinite-ui.umd.js","fqdn":"faq-uphold-sso.dream.space","domain":"dream.space","tld":"space"},"ip":{"addr":"104.18.20.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://faq-uphold-sso.dream.space/","date":"2026-01-30T12:03:19.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"faq-uphold-sso.dream.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 07:55:00 GMT","end":"Thu, 30 Apr 2026 08:54:57 GMT"},"fingerprint":{"sha1":"42:64:B7:5B:9C:99:CC:30:BF:AD:13:6E:CC:78:00:D3:CA:26:0A:7A","sha256":"4A:6C:5B:87:D4:7C:22:2B:EB:D2:C8:57:AC:3D:B4:98:E0:0A:B7:F8:D3:66:93:F9:08:AF:FA:9D:0E:0D:BD:EC"}}},"request":{"raw":"GET /assets/makeinfinite-ui.umd.js HTTP/1.1\r\nHost: faq-uphold-sso.dream.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 12:03:19 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\nvary: accept-encoding\r\netag: W/\"ae658ee3fb28fd209ab22f164fd8a96c\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9c60d34e39b556be-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2952579,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (26061)","md5":"a7fb525fb4231d6f9de93dc031965c3c","sha1":"4340a064117efcaf964bc1e6f5c6044c51268b75","sha256":"4915dd2a7c7bb8ffec32d17c498d5c692c4963bccc14558e7ee4260d614f42c2","sha512":"cf78e49024799902ebcd43d3ab39c409f2c520f6ce27d07deb6580341e0528215f62f5bc950ab0114bd373c304c1b1e6c5f0cb0732208025bd44f695e7a1a9f5","ssdeep":"6144:kYbQTVw9ALj/15UA4luhqUiGzotLJz8D4d7sCtitrZX3j28IwGGRNn:kbwO3XIAqUvzotNz8D4d7suOlTIRGRd","tlshash":"6325646e5b98127b0552c9681f0fe0caab9c12bd765e7450b41b83b9ca3046fc9e7fd0","first_seen":"2026-01-30T11:53:00.893324Z","last_seen":"2026-07-12T15:37:12.144904Z","times_seen":47,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"faq-uphold-sso.dream.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"faq-uphold-sso.dream.space","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"faq-uphold-sso.dream.space","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-30","alert":"Phishing Block","trigger":"faq-uphold-sso.dream.space","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dreamspace-blob-manager-prod.space-and-time.workers.dev/blobs/published/miniapps/f77b456d-eaed-4940-8e53-72f791761f20.zip","fqdn":"dreamspace-blob-manager-prod.space-and-time.workers.dev","domain":"space-and-time.workers.dev","tld":"workers.dev"},"ip":{"addr":"104.21.88.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://faq-uphold-sso.dream.space/","date":"2026-01-30T12:03:21.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"space-and-time.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 18:20:24 GMT","end":"Mon, 27 Apr 2026 19:19:01 GMT"},"fingerprint":{"sha1":"87:6F:E3:B6:B4:DD:E4:6A:E3:6A:13:C9:F1:79:14:F2:DB:2B:C0:18","sha256":"24:7A:36:F8:C8:0E:C9:40:97:C6:29:F5:C6:9A:03:8F:D8:13:6F:CE:91:0D:C9:64:22:F4:7D:5F:1E:09:8F:B8"}}},"request":{"raw":"GET /blobs/published/miniapps/f77b456d-eaed-4940-8e53-72f791761f20.zip HTTP/1.1\r\nHost: dreamspace-blob-manager-prod.space-and-time.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://faq-uphold-sso.dream.space\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 30 Jan 2026 12:03:22 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 11239\r\ncf-ray: 9c60d3598a5ab50b-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 648\r\ncache-control: no-cache\r\ncontent-disposition: attachment; filename=\"f77b456d-eaed-4940-8e53-72f791761f20.zip\"\r\netag: \"0x8DE5FDCEE0A9CFC\"\r\nlast-modified: Fri, 30 Jan 2026 08:52:42 GMT\r\nserver: cloudflare\r\ncontent-md5: YStrt+VJDuhBJFzBLUDJcw==\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: *\r\nx-ms-acl: user::rw-,group::r--,other::---\r\nx-ms-blob-type: BlockBlob\r\nx-ms-creation-time: Fri, 30 Jan 2026 08:52:42 GMT\r\nx-ms-group: $superuser\r\nx-ms-last-access-time: Fri, 30 Jan 2026 08:56:11 GMT\r\nx-ms-lease-state: available\r\nx-ms-lease-status: unlocked\r\nx-ms-owner: $superuser\r\nx-ms-permissions: rw-r-----\r\nx-ms-request-id: 3616f61a-a01e-0022-10de-917a42000000\r\nx-ms-resource-type: file\r\nx-ms-server-encrypted: true\r\nx-ms-version: 2024-11-04\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C5mBRtqyPSrk8C19bUij%2BLOgDr7xBdYWy89yBNhB3aWpZROC3QWl2VwEFEfyvH1K%2BzfwblElKRRLAZPNyKH4CDAxs1ECNqtS0b8IpRwIxTggiN0hu8nMu9Vk4%2BzpMC4d17tVdwOCDOuLuk2vku2GFVxOH9vA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11239,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Zip archive data, at least v2.0 to extract, compression method=deflate","md5":"612b6bb7e5490ee841245cc12d40c973","sha1":"e96fbcd4be8ac391ab3404cffcbe9f9a853aabfe","sha256":"92e9397f53715c629c0d3f799cbcca25358a32edd3fd6bea0fd07fe7ad9f9896","sha512":"91923a2c6b4900f1d7cc7b08b96f21da40e8985cef3fa430afc87cc86ee98d3ec612195ed8394411a55c3e6087d1ffd41eadd4623b45f3472654616ffa1c8ab0","ssdeep":"192:+3DkOHTri1ameWg5M+HO/mRhG3j8bF2ZIfP1l+U9xT:+T5riE1o+uugjgn1l7xT","tlshash":"0b322a60a9180810e3af8830c77ead0790e7ead567a1e95f6b1183f5fb9f4481937a14","first_seen":"2026-01-30T11:53:00.900408Z","last_seen":"2026-01-30T12:03:47.176802Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1093,"timings":{"blocked":64,"dns":43,"connect":1,"send":0,"wait":963,"receive":2,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
