{"report_id":"e96f4c27-3569-412c-ab87-13db192ee8da","version":6,"status":"done","tags":[],"date":"2026-04-23T04:42:55Z","url":{"schema":"https","addr":"topupday.net.ng","fqdn":"topupday.net.ng","domain":"topupday.net.ng","tld":"net.ng"},"ip":{"addr":"163.61.188.9","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"topupday.net.ng/","fqdn":"topupday.net.ng","domain":"topupday.net.ng","tld":"net.ng"},"title":"topupday","dom":{"size":12317,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8601)","md5":"14225c6ad21a249053768d553e0ae333","sha1":"fdf8a01a6eeff317cd194a80152a36430e413cef","sha256":"ae0017d51406e7d402647a00a337089fd3d8fc23f5756d4eaafa0cb4cd67ec5f","sha512":"8e6cc7109a0b1cbcfd78f57a9350c20b60c8d9ff255048f2c9c390c0b71ba1958a70bf475db6e9272ebc0d81e1eb1bebe8a69b80bdb2ce6e42189b37c6eecb9f","ssdeep":"192:mThndSTBq9TyJh7JXeS7JXex/27xmgk6hgsfDsfKzqb3mR1dq9rwKS:qFd2IihL75kyM9xS","tlshash":"0a42965a56a0006f9da7c2e7e5a17a1cb416a0c3df3bcde5b28e0511efca9b704c3718","dom_hash":"domhashc47e5dea35a9f0241c166529fb048577","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"topupday.net.ng","fqdn":"topupday.net.ng","domain":"topupday.net.ng","tld":"net.ng"},"ip":{"addr":"163.61.188.9","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-28T04:42:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cdn.vtumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-04-20T05:47:47.109581Z","alert_count":0,"request_count":2,"received_data":815993,"sent_data":822,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-04-19T22:35:51.253585Z","alert_count":0,"request_count":2,"received_data":160291,"sent_data":903,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.vtumax.com","ip":{"addr":"78.46.40.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2024-02-04","domain_rank":0,"first_seen":"2026-04-23T04:42:56.217362Z","last_seen":"2026-04-23T04:42:56.217362Z","alert_count":3,"request_count":3,"received_data":178625,"sent_data":1484,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"topupday.net.ng","ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-03-25","domain_rank":0,"first_seen":"2025-09-15T21:17:05.829066Z","last_seen":"2025-09-15T21:17:05.829066Z","alert_count":0,"request_count":4,"received_data":7708,"sent_data":1793,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-19T22:16:46.237507Z","alert_count":0,"request_count":2,"received_data":55334,"sent_data":1086,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-19T22:20:23.925162Z","alert_count":0,"request_count":1,"received_data":5762,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-04-23T12:23:22.970754Z","times_seen":31133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@iconify-json/hugeicons@1.2.3/index.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"04b3c350924a8141b59a62131240afac","sha1":"2b43ae6d9f9bc665e8074fec6d6dda0f9996a014","sha256":"11090a1c75acb978749550f495a8ed76849290af07f5361ba16a9bbff8ba078b","sha512":"10d4c0e9a4ec525e11dc1313327d2fbca5f92f73b065e51f2ae63aee204ed492708e9fffdeff87aa6aef5462da799eeb65af0b6e3612e739e5cb45a4a93e76da","ssdeep":"","tlshash":"0ef00eafae7003432b1207e1660bfb43ad12d11baca1c8e7aca70adfc9b00b12058c55","size":506,"data":"","first_seen":"2026-04-23T04:42:58.431627Z","last_seen":"2026-04-23T04:43:47.343637Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://topupday.net.ng/","date":"2026-04-23T04:42:34.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 09:41:26 GMT","end":"Fri, 19 Jun 2026 10:41:19 GMT"},"fingerprint":{"sha1":"1C:D9:C0:8C:4D:FA:FF:5A:2C:CC:48:EB:7B:35:CF:FA:AB:7F:C0:61","sha256":"1E:81:97:52:8B:47:37:54:3B:62:1E:0B:E5:1D:D6:F7:F2:6D:CD:F7:D3:1F:8C:0E:78:14:26:9F:B9:87:EA:5C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://topupday.net.ng/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 23 Apr 2026 04:42:34 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::tpmdl-1776918971059-43f1cd7f7c14\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 382\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fpOTTP0SkLgf%2BFHVNxiukK2uk%2FALGe6AxF%2FVuw1be2LJq3MhPylTYiFiKfR3ebhOPy9jPWmHDHhSDl6oesxrUqEyFM9sUj4Joqqy67MTwTRFTEk9z9NOg%2Bkl65wZBFHm3zCZTIo%3D\"}]}\r\ncf-ray: 9f0a33cb8f0db1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T12:09:30.594009Z","times_seen":14102124,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":21,"dns":5,"connect":1,"send":0,"wait":4,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@iconify-json/hugeicons@1.2.3/index.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://topupday.net.ng/","date":"2026-04-23T04:42:34.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/@iconify-json/hugeicons@1.2.3/index.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://topupday.net.ng/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Apr 2026 04:42:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 318\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.2.3\r\nx-jsd-version-type: version\r\netag: W/\"1fa-K0OubZ+bxmXoB0/sbW3aD5mWoBQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230173-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 39\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FYMHDiVmmUTFrH%2BKShE%2FJmFcXACRtlCwbcnvbL7TqS2HDLjXCL0JOmbvbqvs5R084bVoEjNTiLiCJYK9tS0vafCANdIQxmwXnGvW8VBcW3mq40wCgA65xW%2BA1BesqIPisq4%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9f0a33cb8ad5783d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":506,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"04b3c350924a8141b59a62131240afac","sha1":"2b43ae6d9f9bc665e8074fec6d6dda0f9996a014","sha256":"11090a1c75acb978749550f495a8ed76849290af07f5361ba16a9bbff8ba078b","sha512":"10d4c0e9a4ec525e11dc1313327d2fbca5f92f73b065e51f2ae63aee204ed492708e9fffdeff87aa6aef5462da799eeb65af0b6e3612e739e5cb45a4a93e76da","ssdeep":"","tlshash":"0ef00eafae7003432b1207e1660bfb43ad12d11baca1c8e7aca70adfc9b00b12058c55","first_seen":"2026-04-23T04:42:58.431627Z","last_seen":"2026-04-23T04:43:47.343637Z","times_seen":2,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":18,"dns":1,"connect":4,"send":0,"wait":4,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://topupday.net.ng/","date":"2026-04-23T04:42:34.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 09:41:26 GMT","end":"Fri, 19 Jun 2026 10:41:19 GMT"},"fingerprint":{"sha1":"1C:D9:C0:8C:4D:FA:FF:5A:2C:CC:48:EB:7B:35:CF:FA:AB:7F:C0:61","sha256":"1E:81:97:52:8B:47:37:54:3B:62:1E:0B:E5:1D:D6:F7:F2:6D:CD:F7:D3:1F:8C:0E:78:14:26:9F:B9:87:EA:5C"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://topupday.net.ng/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Apr 2026 04:42:34 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::md8nh-1775101186152-d45e2b42ab64\r\nlast-modified: Thu, 02 Apr 2026 03:39:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 1818167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1vZCTE4cLgWjqSTZN9whKKiWwA%2FOuGA0kjV3vOjmLWIjysQqKYXnoxD7Jhl1nPZaIvNJO285XILGlMr1%2BMDuBORfHP%2FgR3VFDlc3hLA%2BieBjAAoEDXsqLP%2FEOCwCSvckD3E6o98%3D\"}]}\r\ncf-ray: 9f0a33cbef92b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-04-23T12:23:22.970754Z","times_seen":31133,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.vtumax.com/maxicon/style.css","fqdn":"cdn.vtumax.com","domain":"vtumax.com","tld":"com"},"ip":{"addr":"78.46.40.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://topupday.net.ng/","date":"2026-04-23T04:42:34.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.vtumax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 07:28:21 GMT","end":"Wed, 15 Jul 2026 07:28:20 GMT"},"fingerprint":{"sha1":"0D:9A:D1:9F:96:DA:A1:9D:72:7C:8C:5B:B1:BA:7F:45:D4:59:4F:E3","sha256":"0B:ED:35:7C:D7:75:AD:DD:E9:63:ED:E7:2A:DF:25:03:49:1F:AC:48:ED:2D:D4:FA:47:3F:20:E2:D3:49:94:3C"}}},"request":{"raw":"GET /maxicon/style.css HTTP/1.1\r\nHost: cdn.vtumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://topupday.net.ng/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 30 Apr 2026 04:42:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 14 Apr 2026 08:50:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6196\r\ndate: Thu, 23 Apr 2026 04:42:34 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43797,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3a4b7466d02edd735718d86909408da1","sha1":"195895f71d5807663bf57fc49ccf29fde51430da","sha256":"e26ed4a90142ef252d7abda960fd3b4c0c2870b40ad015bfa7143f7abbaf1626","sha512":"d59c697afc13ac02ee74db9afc24284897660e4e85f3af159969a5bd3f0f45b9f474a73e3b43f9a189c401a7f4dcd76da5263da26024219c07a75917b91242d9","ssdeep":"192:H6/08LvYxKXGIGgPLnT1yGrCUVqYqZwtZkrb+SC+onFUmXIduru10791Z9pMDUNO:KvYa7nmdawjonFD7eUOGejJ14HZOjZUW","tlshash":"cb13e0e4e5fd0c842713e0d122926671bb1db268990b2cddd6b7bd9cb5d3635c2822ec","first_seen":"2026-04-23T04:42:58.435011Z","last_seen":"2026-04-23T04:43:47.353107Z","times_seen":2,"resource_available":false,"data":null}},"time_used":608,"timings":{"blocked":281,"dns":215,"connect":34,"send":0,"wait":34,"receive":1,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cdn.vtumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"topupday.net.ng/img/NG.png","fqdn":"topupday.net.ng","domain":"topupday.net.ng","tld":"net.ng"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://topupday.net.ng/","date":"2026-04-23T04:42:34.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topupday.net.ng","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 19:03:42 GMT","end":"Sun, 07 Jun 2026 19:03:41 GMT"},"fingerprint":{"sha1":"27:B1:0B:25:22:2E:DB:13:BA:39:03:C4:1B:A8:67:08:E6:95:B3:AB","sha256":"6A:04:66:C5:18:15:1A:61:65:8E:49:D9:EC:E0:C1:C5:CD:CF:D6:9C:B1:19:6B:48:FD:34:54:5F:63:7A:60:BA"}}},"request":{"raw":"GET /img/NG.png HTTP/1.1\r\nHost: topupday.net.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://topupday.net.ng/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 30 Apr 2026 04:42:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 05 Mar 2025 10:25:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 92\r\ndate: Thu, 23 Apr 2026 04:42:34 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":92,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 32, 1-bit colormap, non-interlaced","md5":"d45154c9d613e73cdc0440ea7e0a9635","sha1":"07c10f4398c6f8a7d807267d09d39ca13a906622","sha256":"ba45a32d60c5e61be3690cf12bda5a27a977363c441c2f665ce360c39febd9bc","sha512":"7c3ea94f995e5de2f9c08d36a5960dde29b470a57aee9f22f4421aa02b07142495219583e8a5c2747a182c6ac1c1c1a09612b7ac2fe5da75b827a6a7b66db9ef","ssdeep":"","tlshash":"65b012d3626c9d24d180133270580901d4a2d9301263110a640d6126083300458c1102","first_seen":"2026-04-23T04:42:58.437299Z","last_seen":"2026-04-23T04:43:47.351837Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/publicsans/v21/ijwRs572Xtc6ZYQws9YVwnNGfJ4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://topupday.net.ng/","date":"2026-04-23T04:42:34.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:20:2A:2D:A3:02:EE:53:E4:CE:46:31:49:99:9A:9E:B0:E7:B5:19","sha256":"23:47:72:09:4E:47:52:14:EB:06:36:94:9D:9F:8D:66:FD:E8:20:45:1A:16:A2:2A:C5:F5:B8:7C:2A:41:2B:61"}}},"request":{"raw":"GET /s/publicsans/v21/ijwRs572Xtc6ZYQws9YVwnNGfJ4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://topupday.net.ng\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26832\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Apr 2026 10:16:27 GMT\r\nexpires: Mon, 19 Apr 2027 10:16:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 325567\r\nlast-modified: Mon, 15 Sep 2025 16:32:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26832,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26832, version 1.0","md5":"e4c9b081863ae33b18b6eb412185c13c","sha1":"fd76a14fbbcac582cfb04514f3d04e7594a975b5","sha256":"5ed4d31c988e73b258894244f209069ebe77dc7e564861954b21198b6de90d68","sha512":"a81562ce1e80596f124a86091aa0043a2117324070536ae34bbe888130cfd824751091e38d513b1514c8902d02587d848d7bdce5cd676092cda91d690cc216c8","ssdeep":"768:G942ZYV3MrL60NUBN4MHVss4fRitIWAQoRvTu:GPLvUB16ZfRiuWMRv6","tlshash":"fec2f1577a35e100f0546c79d1eb4db1e0d7a8287408f7046f998c53832fba9acd6ba7","first_seen":"2024-10-01T06:40:49Z","last_seen":"2026-04-23T09:56:06.261102Z","times_seen":4843,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":140,"dns":0,"connect":0,"send":0,"wait":28,"receive":28,"ssl":112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/remixicon/fonts/remixicon.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://topupday.net.ng/","date":"2026-04-23T04:42:34.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/remixicon/fonts/remixicon.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://topupday.net.ng/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Apr 2026 04:42:34 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 20322\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.9.1\r\nx-jsd-version-type: version\r\netag: W/\"26772-pECNePLN5nIDdBndpv4iyRapghY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230185-FRA, cache-bma-essb1270073-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 40814\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JGSdadC%2B255nIbLqiYjxRJKblZ0vQpPUZynuwYEFveqRaGz71M4WSPdW7sot1w%2F%2BX2GNQ3hFeWVdkTNohUcnagm8HgSwEAEeqTc7Wyx6iZL0D9tn%2FETQyBFv4qNIGbhyOiI%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9f0a33cb7ab5783d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":157554,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b44bde953ee968ea6dffeedc3259329a","sha1":"a4408d78f2cde672037419dda6fe22c916a98216","sha256":"50be2f9339fa2de9ad9a0832100219a909fd5401c6c07612c02c937827f9319c","sha512":"15d015e21a6188d427495dc2a29c99439198f19362c26234a46a3c99e2ad9a62a3b62ae8f1336e441eada9a9db428fad30645c6316099014f99504deff7a1395","ssdeep":"1536:zcv38vn4UYzgKvP1IqRCwNd1l3JclUaqM2GSsRt2IJb/ufwgP:g8v4UYcKZ7clA","tlshash":"95f3dbbeea4f04941702e8d26367274163b9b6bddd817c7ad403688df3c666883c62dc","first_seen":"2026-02-03T21:21:05.6792Z","last_seen":"2026-04-23T04:43:47.348594Z","times_seen":203,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":11,"dns":0,"connect":1,"send":0,"wait":7,"receive":1,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topupday.net.ng/img/gp.png","fqdn":"topupday.net.ng","domain":"topupday.net.ng","tld":"net.ng"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://topupday.net.ng/","date":"2026-04-23T04:42:34.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topupday.net.ng","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 19:03:42 GMT","end":"Sun, 07 Jun 2026 19:03:41 GMT"},"fingerprint":{"sha1":"27:B1:0B:25:22:2E:DB:13:BA:39:03:C4:1B:A8:67:08:E6:95:B3:AB","sha256":"6A:04:66:C5:18:15:1A:61:65:8E:49:D9:EC:E0:C1:C5:CD:CF:D6:9C:B1:19:6B:48:FD:34:54:5F:63:7A:60:BA"}}},"request":{"raw":"GET /img/gp.png HTTP/1.1\r\nHost: topupday.net.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://topupday.net.ng/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 30 Apr 2026 04:42:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 05 Mar 2025 10:35:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2623\r\ndate: Thu, 23 Apr 2026 04:42:34 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2623,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 314 x 96, 8-bit colormap, non-interlaced","md5":"3a06d9cc2cab72515c15e434b20a6e9c","sha1":"a83d1f524714c36095312df4fcf4c88f0caedb22","sha256":"3b80fd8405a3e4f5b2ee7f3ed907a927c21e42e8a3e1a2e0cdf113d3ca1186fe","sha512":"7f98d8450837535b80a2db2961d7bbb1573ce45c9de58cb9e4157d6fedfa9a01ab12be8028b4c8f1f3fd40de0046bdc4ac2a7ebfe7a70208065011cbde407ba6","ssdeep":"","tlshash":"b2512bb3f9b28d69d2590035c2b2627c5e48153b852ca6c711c2247d07eb1d8b1f4d4b","first_seen":"2026-04-23T04:42:58.441783Z","last_seen":"2026-04-23T04:43:47.349707Z","times_seen":2,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/publicsans/v21/ijwRs572Xtc6ZYQws9YVwnNGfJ4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://topupday.net.ng/","date":"2026-04-23T04:42:34.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:20:2A:2D:A3:02:EE:53:E4:CE:46:31:49:99:9A:9E:B0:E7:B5:19","sha256":"23:47:72:09:4E:47:52:14:EB:06:36:94:9D:9F:8D:66:FD:E8:20:45:1A:16:A2:2A:C5:F5:B8:7C:2A:41:2B:61"}}},"request":{"raw":"GET /s/publicsans/v21/ijwRs572Xtc6ZYQws9YVwnNGfJ4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://topupday.net.ng\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26832\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Apr 2026 10:16:27 GMT\r\nexpires: Mon, 19 Apr 2027 10:16:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 325568\r\nlast-modified: Mon, 15 Sep 2025 16:32:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26832,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26832, version 1.0","md5":"e4c9b081863ae33b18b6eb412185c13c","sha1":"fd76a14fbbcac582cfb04514f3d04e7594a975b5","sha256":"5ed4d31c988e73b258894244f209069ebe77dc7e564861954b21198b6de90d68","sha512":"a81562ce1e80596f124a86091aa0043a2117324070536ae34bbe888130cfd824751091e38d513b1514c8902d02587d848d7bdce5cd676092cda91d690cc216c8","ssdeep":"768:G942ZYV3MrL60NUBN4MHVss4fRitIWAQoRvTu:GPLvUB16ZfRiuWMRv6","tlshash":"fec2f1577a35e100f0546c79d1eb4db1e0d7a8287408f7046f998c53832fba9acd6ba7","first_seen":"2024-10-01T06:40:49Z","last_seen":"2026-04-23T09:56:06.261102Z","times_seen":4843,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":216,"dns":3,"connect":27,"send":0,"wait":30,"receive":10,"ssl":181},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.vtumax.com/maxicon/fonts/vtumaxicons.ttf?9c54m3","fqdn":"cdn.vtumax.com","domain":"vtumax.com","tld":"com"},"ip":{"addr":"78.46.40.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://topupday.net.ng/","date":"2026-04-23T04:42:34.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.vtumax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 07:28:21 GMT","end":"Wed, 15 Jul 2026 07:28:20 GMT"},"fingerprint":{"sha1":"0D:9A:D1:9F:96:DA:A1:9D:72:7C:8C:5B:B1:BA:7F:45:D4:59:4F:E3","sha256":"0B:ED:35:7C:D7:75:AD:DD:E9:63:ED:E7:2A:DF:25:03:49:1F:AC:48:ED:2D:D4:FA:47:3F:20:E2:D3:49:94:3C"}}},"request":{"raw":"GET /maxicon/fonts/vtumaxicons.ttf?9c54m3 HTTP/1.1\r\nHost: cdn.vtumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://topupday.net.ng\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.vtumax.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 30 Apr 2026 04:42:34 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Tue, 14 Apr 2026 08:50:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 129026\r\ndate: Thu, 23 Apr 2026 04:42:34 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":65034,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\"","md5":"15ad67f6368ffb9ee4d7411e8a8376cf","sha1":"d32527082d21d0cff29826926991d6dcc408252e","sha256":"eff858800948733c5ad51e8c16fd56bce1c287a137112fc989b418587b717fa2","sha512":"7a0c23c5466ca32754956a3f6a8be04b6412755ab7c2a0e48b249946f7e39abcea3a20db786bcdb2b483a80678d4c7b0062f51ff79ed3a70296800d261273aff","ssdeep":"1536:vCZLtIZ0odbFpBdHw5If764MOvQkuEDuqGdziX9sCvQw9I1xwby4YUWO:vCZLt40odbFbZwSj64MOvQk/uqGwX9s6","tlshash":"2653281fef4acb8dd46993b40db254614ef1af29b6ffd909798a1c1e91090840d58f4f","first_seen":"2026-04-23T04:42:58.443785Z","last_seen":"2026-04-23T04:42:58.443785Z","times_seen":1,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":88,"dns":1,"connect":0,"send":0,"wait":35,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cdn.vtumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.vtumax.com/maxicon/fonts/vtumaxicons.woff?9c54m3","fqdn":"cdn.vtumax.com","domain":"vtumax.com","tld":"com"},"ip":{"addr":"78.46.40.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://topupday.net.ng/","date":"2026-04-23T04:42:34.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.vtumax.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 07:28:21 GMT","end":"Wed, 15 Jul 2026 07:28:20 GMT"},"fingerprint":{"sha1":"0D:9A:D1:9F:96:DA:A1:9D:72:7C:8C:5B:B1:BA:7F:45:D4:59:4F:E3","sha256":"0B:ED:35:7C:D7:75:AD:DD:E9:63:ED:E7:2A:DF:25:03:49:1F:AC:48:ED:2D:D4:FA:47:3F:20:E2:D3:49:94:3C"}}},"request":{"raw":"GET /maxicon/fonts/vtumaxicons.woff?9c54m3 HTTP/1.1\r\nHost: cdn.vtumax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://topupday.net.ng\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.vtumax.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 30 Apr 2026 04:42:34 GMT\r\ncontent-type: font/woff\r\nlast-modified: Tue, 14 Apr 2026 08:50:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 356360\r\ndate: Thu, 23 Apr 2026 04:42:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":68525,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 356360, version 1.0","md5":"ee4f4504de7e8c841765c02bb960f480","sha1":"ca1901a0e16f6e419f0f1477d8b7f2f9cc31417a","sha256":"c2f386b2d4d1fc6bf11ddc125b94a5aedbc0996435a1c0b5f0235b8818e4b0aa","sha512":"d2c4d648a2aad2cff4e845fb2e7cdb6c4fb9d90b79821ca69584b76ea48d1c2cf6180d256d9de455b27f2cfa1c4486cef136dc3872008bd29c15f40338dc32cb","ssdeep":"1536:qCZLtIZ0odbFpBdHw5If764MOvQkuEDuqGdziX9sCvQw9I1xwby4YUWLU0ZV34s:qCZLt40odbFbZwSj64MOvQk/uqGwX9s1","tlshash":"6363171fef8acb8dd46993b40db264614ef1af29a6ffdd09758a1c1e91090880d18f4f","first_seen":"2026-04-23T04:42:58.447183Z","last_seen":"2026-04-23T04:42:58.447183Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cdn.vtumax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"topupday.net.ng/","fqdn":"topupday.net.ng","domain":"topupday.net.ng","tld":"net.ng"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-23T04:42:33.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topupday.net.ng","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 19:03:42 GMT","end":"Sun, 07 Jun 2026 19:03:41 GMT"},"fingerprint":{"sha1":"27:B1:0B:25:22:2E:DB:13:BA:39:03:C4:1B:A8:67:08:E6:95:B3:AB","sha256":"6A:04:66:C5:18:15:1A:61:65:8E:49:D9:EC:E0:C1:C5:CD:CF:D6:9C:B1:19:6B:48:FD:34:54:5F:63:7A:60:BA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: topupday.net.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.2.29\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 1244\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 23 Apr 2026 04:42:33 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}],"data":{"size":3825,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"a26c5bfc88b831316b15acafe7de09d7","sha1":"c1930f24c21410dd4d46456d89dfafac0b2749c8","sha256":"c0907a4f08d7bafbdb2a8f99c3eb92160890343248139f0bc542d67e9720a86d","sha512":"7c57847deca715e532c97a2fc1561e7a67aabe6abd3cba11274334c703ed73c6bc3a9f07a9e96637b3115d3b09b0f7836b2d1574f64ffe6f4d3e8d3d6244d6ac","ssdeep":"","tlshash":"2981db661ac0146b83f3c3e5a171bba9fde31497da138d8472ec1613afbdc1598c3664","first_seen":"2026-04-23T04:42:58.449965Z","last_seen":"2026-04-23T04:43:47.336169Z","times_seen":2,"resource_available":true,"data":null}},"time_used":988,"timings":{"blocked":443,"dns":264,"connect":88,"send":0,"wait":98,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Public+Sans:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://topupday.net.ng/","date":"2026-04-23T04:42:34.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:9D:A0:A4:A4:3B:62:A3:D0:B3:63:4B:5B:C3:1D:9B:09:43:3C:91","sha256":"DB:10:40:08:19:EF:D7:9C:5F:11:BC:78:DC:9F:81:F3:9E:A7:30:2F:1F:06:C8:C4:A4:DD:BC:C3:27:6F:2A:AA"}}},"request":{"raw":"GET /css2?family=Public+Sans:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://topupday.net.ng/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 23 Apr 2026 04:42:34 GMT\r\ndate: Thu, 23 Apr 2026 04:42:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5076,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a103b251dab0231afcb18f6e3bbb7ea8","sha1":"b16f5336462f31b62aecb3749f5d6942f023fcce","sha256":"b2c52fb9007e8ddd30252c6944caaaaf74e250d8ddee9f2c75f2174768d13bfb","sha512":"d92c331bb7654e287d32633312c4d4deea0437ea8e8a8fdea8a6b45f618b20d6a824e364dcabba01842f56231c48d920ea7734cbefbcb9bceb09ca2dca47f07c","ssdeep":"96:cdOEarnOEardJc+uhOEarsNDdOXarnOXardJc+uhOXarsNDdOxMarnOxMardJc+d:cCrgrVhrkxrHrVyrkYrqrVPrkfrZrVID","tlshash":"27a1cf91042ba510db871cc623ce7d329e4fa2617449c4786ffe1d88acaad396325f1e","first_seen":"2025-09-22T06:39:47.479726Z","last_seen":"2026-04-23T12:26:45.300503Z","times_seen":80,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":159,"dns":1,"connect":27,"send":0,"wait":44,"receive":0,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topupday.net.ng/favicon.ico","fqdn":"topupday.net.ng","domain":"topupday.net.ng","tld":"net.ng"},"ip":{"addr":"163.61.188.9","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://topupday.net.ng/","date":"2026-04-23T04:42:35.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topupday.net.ng","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 19:03:42 GMT","end":"Sun, 07 Jun 2026 19:03:41 GMT"},"fingerprint":{"sha1":"27:B1:0B:25:22:2E:DB:13:BA:39:03:C4:1B:A8:67:08:E6:95:B3:AB","sha256":"6A:04:66:C5:18:15:1A:61:65:8E:49:D9:EC:E0:C1:C5:CD:CF:D6:9C:B1:19:6B:48:FD:34:54:5F:63:7A:60:BA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: topupday.net.ng\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://topupday.net.ng/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html\r\ncontent-length: 20\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Thu, 23 Apr 2026 04:42:35 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T12:09:30.594009Z","times_seen":14102124,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}