{"report_id":"0e5db43e-b7fd-41f2-a340-6a8f217abe27","version":6,"status":"done","tags":["malicious","clickfix"],"date":"2026-05-25T09:54:15Z","url":{"schema":"https","addr":"usdgift.cc/","fqdn":"usdgift.cc","domain":"usdgift.cc","tld":"cc"},"ip":{"addr":"172.67.142.116","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"usdgift.cc/","fqdn":"usdgift.cc","domain":"usdgift.cc","tld":"cc"},"title":"usdgift.cc/","dom":{"size":346,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"50827fbc713c27274ae1811c0583912a","sha1":"869320b017f3f0289d797a10b5528fe4e4c006c3","sha256":"89c9953cbc04618e40a5b577f8d52ddc4937f4245cc08e456830e9f3331d7289","sha512":"693d845d2aac670f030c6f675d3b7f0308c7806c1078e30bad1faabc8adb3564a4b2e5a406172d8ca1538675ebe556045a753b80394996026247cd84c9e03594","ssdeep":"","tlshash":"93e026636d41853f4d324be0aaebb905d15c9c42a1108c90e28194ff89f0f5acea71b6","dom_hash":"domhash3e38f106d7ceeea51926eddbefeb5070","first_seen":"2026-05-25T09:54:19.612978Z","last_seen":"2026-05-25T09:54:19.612978Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"usdgift.cc/","fqdn":"usdgift.cc","domain":"usdgift.cc","tld":"cc"},"ip":{"addr":"172.67.142.116","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-29T09:54:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"usdgift.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null},{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]},"summary":[{"fqdn":"usdgift.cc","ip":{"addr":"172.67.142.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":45,"request_count":11,"received_data":186673,"sent_data":4854,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ipv4.icanhazip.com","ip":{"addr":"104.16.185.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-07-31","domain_rank":65266,"first_seen":"2013-10-09T05:58:12Z","last_seen":"2026-05-22T15:21:56.248522Z","alert_count":0,"request_count":2,"received_data":1206,"sent_data":866,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"opd6v11tc1zdoo4.fit","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-19","domain_rank":0,"first_seen":"2026-05-25T09:54:15.287182Z","last_seen":"2026-05-25T09:54:15.287182Z","alert_count":0,"request_count":2,"received_data":1182,"sent_data":1060,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"usdgift.cc/src/qrcode.min.js","fqdn":"usdgift.cc","domain":"usdgift.cc","tld":"cc"},"ip":{"addr":"172.67.142.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67f585861c1f73b54ed566a8b9f09475","sha1":"50f0d4a394d29702a183a433c7d07a132d52833e","sha256":"8b5f2d84c7194ffbe107dd1f018fa121a8224d8b3dd10b0dc9390b70c33d32c0","sha512":"9a7afb4c796b9bdbf2a8b0ecdee3d60137e753d3ae2eb2ffe23a9b476ae5d54f23181b115b0306f3aae98846d95275b03d720ccc6bd1c43637430a7b9634eb66","ssdeep":"384:15AvBxEpvs/T7yYgO9dPZbiJSWa57TadmURuRJFfrdokWjTKu3gVvkknZxR04Y46:1cBnf9vUSnlTTe8FkWZxLp2rOH4","tlshash":"94b2c6997391716b43af51da046f4046e3fea864282d486cef11e8d778b8d6980f7f38","size":24379,"data":"","first_seen":"2026-05-25T09:54:19.640959Z","last_seen":"2026-05-25T09:54:19.640959Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdgift.cc/gooll/gooll.html","fqdn":"usdgift.cc","domain":"usdgift.cc","tld":"cc"},"ip":{"addr":"172.67.142.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3df65e228bd8c59ff51fa216d946796e","sha1":"d2f8ffcf9d29a39f6b8f9cf73829b35868385d2e","sha256":"1be5e3621a98017f45e21a2df41e3027ca89c76e0a9b17fff51a5497e827ec77","sha512":"249849474fa1ee0aa6fe84f02e6844c406726b7648caa211463b4dfc088e9fecd02d4e5e73278c7ca930d6b3459e36941344e411b127bdfac73613e6d0ea9b53","ssdeep":"192:O7M9AkU2R/J9L2rS9n0IRiV/qmzhm1sG9GKAJw7EFc/lpnGIgOW8qJ+4qqFpi2m0:2M6kUI/bgS9n0IRiFqmzhmGG9GKAJw7M","tlshash":"ad02329972c1f85217436ba200b7040bf369e89835eac83cf4a5d9d53c7568681baffc","size":8335,"data":"","first_seen":"2026-03-04T10:06:21.801263Z","last_seen":"2026-08-02T03:50:33.525479Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdgift.cc/gooll/49554fde7424c31c.js","fqdn":"usdgift.cc","domain":"usdgift.cc","tld":"cc"},"ip":{"addr":"172.67.142.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3b589025219823b7cd970f5f40c9629","sha1":"e7e48b0320e34f573fd4b92b1dc75d4f1349ba1a","sha256":"7829af01ce0fc08525db12cdefacdd136313668d3848804203235547f2546324","sha512":"c2ce02bbbc039499f7ecd27fb8f9c891038de4ff2f345119953305d6e7c7d6ce7ed8b5f980a8e50aa57976a703a29b2b0e3780e22cb2e418506f9f1436ce1d36","ssdeep":"768:gM3zThFJqWx7EyYPWtBBYBS/8XuxzddhycF45cNR83V4VJwCB39E/ynXNY9aMh:Hz9qQEyruiDyTcNaKldXN0","tlshash":"b3337dee638026dc5cb4cce7a53706ad63f8db076c14326db38bae91b45f7109960729","size":50824,"data":"","first_seen":"2026-05-25T09:54:19.628135Z","last_seen":"2026-05-25T09:54:19.628135Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdgift.cc/gooll/gooll.html","fqdn":"usdgift.cc","domain":"usdgift.cc","tld":"cc"},"ip":{"addr":"172.67.142.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d8751da6f857e6ba355528fc47187a07","sha1":"3c271c8059271e5ff1f48ed0127f280a5919a297","sha256":"6b8653bec2fd37750a66db832eaa9d0529baa960a72ff250a0490236b33d2ee2","sha512":"ce4a65a31a2c238904607861bdcafaf5e18d52a99474a58fc83f19e45d7b867b1d86777a1570c7e70b10c208c925f8959413fe94fb936f0dc9e64f31d955bf0c","ssdeep":"768:I4JJt5z11OWLwAxsCpcOiRJ/wNvobSvJwh2xNH7ZMQlYN:I4JJt5z11OWLwAxsCWB/wNv7i476N","tlshash":"5ad24d3b53c321e2776d76a33742aa4603160dc6e8e3468548e705d99b25a1f0fed78d","size":29951,"data":"","first_seen":"2026-03-04T10:06:21.802937Z","last_seen":"2026-08-02T03:50:33.522904Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdgift.cc/gooll/gooll.html","fqdn":"usdgift.cc","domain":"usdgift.cc","tld":"cc"},"ip":{"addr":"172.67.142.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"471a8208af8e355aa71e5635b2810f36","sha1":"97d6512862904902aabd3bcd3a3e4ba2ebc1ca30","sha256":"6b96c050c129fcee4fc3fed1a45de3f66a1090914550b3665b419a3cd1aab39d","sha512":"7b69dac20fc9a36dad5a3aaa336284b1e469d89d9a31bab9009f90ee6794cd6b65d86bd4f4cf19ff2542ccc3a9ca48f59489259f40ffac2ed733683533a839b4","ssdeep":"384:84iG/FZpJgY/ZQpplmAsZzcjWLyjbUJTT:84iiZlZzcjJbQTT","tlshash":"c042c89b33c9c4accf29dc4f59571c93d5de9367229dc0e2eb835c89ec2a6198174b88","size":12501,"data":"","first_seen":"2026-03-04T10:06:21.804012Z","last_seen":"2026-08-02T03:50:33.526312Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdgift.cc/src/recaptcha.config.js","fqdn":"usdgift.cc","domain":"usdgift.cc","tld":"cc"},"ip":{"addr":"172.67.142.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"07069ec0ab357927ffde88f9e02b6ef5","sha1":"ccaa11c3d54bf69c55bd67f276ff8b8951bd4ba0","sha256":"9b723235e6ac33d9c25690429a1a5282b4562451fbfda96900c678497aa2d695","sha512":"0faaae3c240a0e2abe1f427fef9af0b12094b3d342678f8cb1da2b8bd1f744e348bb1c6cb4a7857c3a029db887530a0ec3cbf1bd4a77ebe2757a4cf40aa817f8","ssdeep":"","tlshash":"b45142e48f80121f23034fbb7e27cacdd1658c263a8c841bb1d66b997cd993a9016d70","size":2612,"data":"","first_seen":"2026-05-25T09:54:19.623173Z","last_seen":"2026-05-25T09:54:19.623173Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdgift.cc/src/recaptcha.js","fqdn":"usdgift.cc","domain":"usdgift.cc","tld":"cc"},"ip":{"addr":"172.67.142.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"886d51ff661e5bf5d632a98701f4ee6a","sha1":"7228ee3c1768ae271b147810731e0f37bf265b61","sha256":"4fdd93edc4d8260186f5b91a3a2c5655e9169baa078bf9bc0d0a1873f804735a","sha512":"62b6356cec58fcfffdf331a2d8221305ee3691d4bb71b69299a71843a93c3ae1993be9f5eb7644993a529246c891db75b32b3ce06565beae412dfc0e27a30882","ssdeep":"384:efbGf6wB9HEWzrQesCOOoeNAhYfQXG5nNxTTCmPBPU4dA8ncBPKSj02Asy0Q:eTGf6wB9kWzrQesCRcUQqPOmPZU2cBSJ","tlshash":"33a297e12e8027416b571f7b7b1bb5d9d6260a2e75c8c825c50eae603fc9203f7a6d34","size":21458,"data":"","first_seen":"2026-05-25T09:54:19.643301Z","last_seen":"2026-05-25T09:54:19.643301Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"usdgift.cc/gooll/gooll.html","fqdn":"usdgift.cc","domain":"usdgift.cc","tld":"cc"},"ip":{"addr":"172.67.142.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://usdgift.cc/","date":"2026-05-25T09:53:54.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdgift.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 22:15:57 GMT","end":"Tue, 18 Aug 2026 22:15:56 GMT"},"fingerprint":{"sha1":"7C:98:5B:8A:C4:8C:1A:5D:1C:9F:74:AD:D3:58:67:3F:10:77:18:47","sha256":"32:00:14:F5:E9:79:E9:80:7E:EE:A9:18:98:BE:1F:F2:2D:A0:C9:64:7C:A5:F9:86:A2:CA:41:3E:11:53:FB:13"}}},"request":{"raw":"GET /gooll/gooll.html HTTP/1.1\r\nHost: usdgift.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdgift.cc/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 09:53:54 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 20 May 2026 21:59:09 GMT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QXyNuRzBUwWiNiphUOWbrUJp3GSJxLyy5pDdlNZEvmWGS8t9E2h2EWU44Y76NJozu9aNhtFQ8hFTk42KYM65CTbHgFhApEJ51jEdD9BD02NJqCw26Y3XqySj6OVv\"}]}\r\ncf-ray: a013a7d9e88c8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":356,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"68d48e977d3d034bb49e4b1dde1b1860","sha1":"6161a45d728cdc94926b3ad908c9343d4e58edef","sha256":"5f6849fb28470e6b6175af358b7fe5b8c9067a8fbc3a2b4a1d292d0fc87b5b53","sha512":"892378be11b7b8ed79f5cad1449d7e71fec0c2caa5347b311f2ef3a1496673c204b0e43f775056ec7aa7f0944440442a054bd527669420e553b85936c4596fb8","ssdeep":"","tlshash":"e3e0c663bd01823b08330be062ebb500d2488803a2804c50d290d4ff89e0f4acfab1f6","first_seen":"2026-05-25T09:54:19.61763Z","last_seen":"2026-05-25T09:54:19.61763Z","times_seen":1,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"usdgift.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdgift.cc/images/captcha_spinner.gif","fqdn":"usdgift.cc","domain":"usdgift.cc","tld":"cc"},"ip":{"addr":"172.67.142.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdgift.cc/","date":"2026-05-25T09:53:54.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdgift.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 22:15:57 GMT","end":"Tue, 18 Aug 2026 22:15:56 GMT"},"fingerprint":{"sha1":"7C:98:5B:8A:C4:8C:1A:5D:1C:9F:74:AD:D3:58:67:3F:10:77:18:47","sha256":"32:00:14:F5:E9:79:E9:80:7E:EE:A9:18:98:BE:1F:F2:2D:A0:C9:64:7C:A5:F9:86:A2:CA:41:3E:11:53:FB:13"}}},"request":{"raw":"GET /images/captcha_spinner.gif HTTP/1.1\r\nHost: usdgift.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdgift.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 09:53:54 GMT\r\ncontent-type: image/gif\r\ncontent-length: 56379\r\nlast-modified: Wed, 20 May 2026 21:59:10 GMT\r\netag: \"6a0e2eae-dc3b\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mcVSro6G3IItWwDFCd5A6oRbCmZKQL5CcaE9Z7QMO5ZVFmwaXNw%2Fi2fYtPXMPIrfdlwrC64Re2GOUGbAHvELG8wiUGzRaT8aXRRroIxUOTl2zid1TUuS%2BhSmkFiE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a013a7d9f88f8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56379,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"44271f65031b0ccb25f23bfff0d23ef2","sha1":"6f835cd682e127beaeb784017c5261af10d38e82","sha256":"38dac62eb9a19a9015d273a2457d2592145bc09bb2c35ead7b65274fb7513a7f","sha512":"531395353d95712bb5998f581a7a0247d7a5c0545dd7f4eeb989b445b46717bb6df67e61df6867551aac107d8033cb7be7b555ac36f7dc46ecd1dea730cfccf4","ssdeep":"768:HmMwnn0yYbOkwjx4KYM93kqof0KLwAZVUGUU1dYLbnwTgSd5YibPbBbwt81:GMG5YbOHx4Kjof0kwAZVMPLbJEYC9bwq","tlshash":"4743f13fe2212d709a2052b1b1b7adcdea43bbb424953c4e51e504a5375bc7d60e24ef","first_seen":"2023-05-03T12:50:45Z","last_seen":"2026-08-03T13:21:45.626952Z","times_seen":173,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":235,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"usdgift.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdgift.cc/src/recaptcha.config.js","fqdn":"usdgift.cc","domain":"usdgift.cc","tld":"cc"},"ip":{"addr":"172.67.142.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdgift.cc/","date":"2026-05-25T09:53:54.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdgift.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 22:15:57 GMT","end":"Tue, 18 Aug 2026 22:15:56 GMT"},"fingerprint":{"sha1":"7C:98:5B:8A:C4:8C:1A:5D:1C:9F:74:AD:D3:58:67:3F:10:77:18:47","sha256":"32:00:14:F5:E9:79:E9:80:7E:EE:A9:18:98:BE:1F:F2:2D:A0:C9:64:7C:A5:F9:86:A2:CA:41:3E:11:53:FB:13"}}},"request":{"raw":"GET /src/recaptcha.config.js HTTP/1.1\r\nHost: usdgift.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdgift.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 09:53:54 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 20 May 2026 21:59:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6a0e2eae-a34\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VuSo6wM483Q0OwjNY%2BZS54dBCqrALGQmKhBt1AAf%2B%2FqOixdVc1v6Jma%2BqKg3ufROL%2F7iXlMFTtYtlNKb6kTyjHD4WHaDBzGhWh174%2FpuIYdHZz8nhmYQuAiqqwf2\"}]}\r\ncf-ray: a013a7da08918be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2612,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2612), with no line terminators","md5":"07069ec0ab357927ffde88f9e02b6ef5","sha1":"ccaa11c3d54bf69c55bd67f276ff8b8951bd4ba0","sha256":"9b723235e6ac33d9c25690429a1a5282b4562451fbfda96900c678497aa2d695","sha512":"0faaae3c240a0e2abe1f427fef9af0b12094b3d342678f8cb1da2b8bd1f744e348bb1c6cb4a7857c3a029db887530a0ec3cbf1bd4a77ebe2757a4cf40aa817f8","ssdeep":"","tlshash":"b45142e48f80121f23034fbb7e27cacdd1658c263a8c841bb1d66b997cd993a9016d70","first_seen":"2026-05-25T09:54:19.623173Z","last_seen":"2026-05-25T09:54:19.623173Z","times_seen":1,"resource_available":true,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"usdgift.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipv4.icanhazip.com/","fqdn":"ipv4.icanhazip.com","domain":"icanhazip.com","tld":"com"},"ip":{"addr":"104.16.185.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://usdgift.cc/gooll/gooll.html","date":"2026-05-25T09:54:06.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icanhazip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 04:20:37 GMT","end":"Mon, 13 Jul 2026 05:20:21 GMT"},"fingerprint":{"sha1":"60:6C:BE:D9:28:21:96:86:05:50:95:89:A5:98:38:82:EF:9A:2A:FD","sha256":"3F:8E:84:AD:B6:03:00:4D:70:F9:8E:57:27:21:5E:59:F0:9E:7F:52:CF:BA:86:DD:F5:8E:F9:94:BC:19:FC:C1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ipv4.icanhazip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usdgift.cc/\r\nOrigin: https://usdgift.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 09:54:06 GMT\r\ncontent-type: text/plain\r\ncontent-length: 13\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nset-cookie: __cf_bm=Hzm8unhHymyf9pBL.2EJHKUPAVs56vvrqRqDUpP0EfQ-1779702846.9749446-1.0.1.1-xeT9u0xX91kbmCsdlIleTzoPU1AsbBTB2blw8Ga5vkH9NAILsrQU4KFCNtWpVyQnHTE.Ur5tVfwPEmAzLMHT4KUG1Faxq.SFU3HhS4yyyy.HbRNIR77SZ0oVcBHnpuZH; HttpOnly; SameSite=None; Secure; Path=/; Domain=icanhazip.com; Expires=Mon, 25 May 2026 10:24:06 GMT\r\nserver: cloudflare\r\ncf-ray: a013a8299a405684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":13,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text","md5":"d0f727049a6c39e00df33badfc529120","sha1":"bcbe610cd9d4baf88e53c32375c624b8920fb570","sha256":"4b3f1dd9b6a31b14247dec82b502a00a71d83ebb9f007bfccf7bd490e1604821","sha512":"9760d662b6b3eb1d7611cb94350ec8e578d2b8d1de263603cd098f7095e9a2d5f3673170a36f08fb91ea8f4022840b0727c965114e201864e449b149a38ac5c4","ssdeep":"","tlshash":"ba600003300300030c00c00cc303030303c00003c30f0000ccc00f000c003300330000","first_seen":"2023-04-08T10:21:22Z","last_seen":"2026-06-07T05:13:47.561123Z","times_seen":4180,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdgift.cc/gooll/49554fde7424c31c.js","fqdn":"usdgift.cc","domain":"usdgift.cc","tld":"cc"},"ip":{"addr":"172.67.142.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdgift.cc/gooll/gooll.html","date":"2026-05-25T09:53:54.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdgift.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 22:15:57 GMT","end":"Tue, 18 Aug 2026 22:15:56 GMT"},"fingerprint":{"sha1":"7C:98:5B:8A:C4:8C:1A:5D:1C:9F:74:AD:D3:58:67:3F:10:77:18:47","sha256":"32:00:14:F5:E9:79:E9:80:7E:EE:A9:18:98:BE:1F:F2:2D:A0:C9:64:7C:A5:F9:86:A2:CA:41:3E:11:53:FB:13"}}},"request":{"raw":"GET /gooll/49554fde7424c31c.js HTTP/1.1\r\nHost: usdgift.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdgift.cc/gooll/gooll.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 09:53:54 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 20 May 2026 21:59:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6a0e2eab-c68b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zhrgm%2FQGfITbSpSmfk9ptvLdFLJR89gIrdAmtCKUEEHUjxIqPA3imh5il3D9x3yKs5hRypsNcdAEaY4fULXPIIfHUIBYFFpEw2j1n8Tr5m8ZTJutEtUBywZhQ0Ph\"}]}\r\ncf-ray: a013a7dc68e48be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50827,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (50824), with no line terminators","md5":"f3b589025219823b7cd970f5f40c9629","sha1":"e7e48b0320e34f573fd4b92b1dc75d4f1349ba1a","sha256":"7829af01ce0fc08525db12cdefacdd136313668d3848804203235547f2546324","sha512":"c2ce02bbbc039499f7ecd27fb8f9c891038de4ff2f345119953305d6e7c7d6ce7ed8b5f980a8e50aa57976a703a29b2b0e3780e22cb2e418506f9f1436ce1d36","ssdeep":"768:gM3zThFJqWx7EyYPWtBBYBS/8XuxzddhycF45cNR83V4VJwCB39E/ynXNY9aMh:Hz9qQEyruiDyTcNaKldXN0","tlshash":"b3337dee638026dc5cb4cce7a53706ad63f8db076c14326db38bae91b45f7109960729","first_seen":"2026-05-25T09:54:19.628135Z","last_seen":"2026-05-25T09:54:19.628135Z","times_seen":1,"resource_available":true,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"usdgift.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipv4.icanhazip.com/","fqdn":"ipv4.icanhazip.com","domain":"icanhazip.com","tld":"com"},"ip":{"addr":"104.16.185.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://usdgift.cc/gooll/gooll.html","date":"2026-05-25T09:53:56.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icanhazip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Apr 2026 04:20:37 GMT","end":"Mon, 13 Jul 2026 05:20:21 GMT"},"fingerprint":{"sha1":"60:6C:BE:D9:28:21:96:86:05:50:95:89:A5:98:38:82:EF:9A:2A:FD","sha256":"3F:8E:84:AD:B6:03:00:4D:70:F9:8E:57:27:21:5E:59:F0:9E:7F:52:CF:BA:86:DD:F5:8E:F9:94:BC:19:FC:C1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ipv4.icanhazip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usdgift.cc/\r\nOrigin: https://usdgift.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 09:53:56 GMT\r\ncontent-type: text/plain\r\ncontent-length: 13\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nset-cookie: __cf_bm=GQ66lf6CNgEDAguJGRuxW82SP.X8fxRKf9CrqoImBI4-1779702836.9920237-1.0.1.1-eUIOTdzORnXXTkINZl5hHUu5RpH9x8RML8aOEWEpyRa1zOfNA.GToFPVu0.fd2J15yEfAVDQt98NpC06Mlf9n5dz_51yJgMuDMPGAt_GpzTGDnRpNsklSfDHvb4VvHsS; HttpOnly; SameSite=None; Secure; Path=/; Domain=icanhazip.com; Expires=Mon, 25 May 2026 10:23:56 GMT\r\nserver: cloudflare\r\ncf-ray: a013a7eb3b495684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text","md5":"d0f727049a6c39e00df33badfc529120","sha1":"bcbe610cd9d4baf88e53c32375c624b8920fb570","sha256":"4b3f1dd9b6a31b14247dec82b502a00a71d83ebb9f007bfccf7bd490e1604821","sha512":"9760d662b6b3eb1d7611cb94350ec8e578d2b8d1de263603cd098f7095e9a2d5f3673170a36f08fb91ea8f4022840b0727c965114e201864e449b149a38ac5c4","ssdeep":"","tlshash":"ba600003300300030c00c00cc303030303c00003c30f0000ccc00f000c003300330000","first_seen":"2023-04-08T10:21:22Z","last_seen":"2026-06-07T05:13:47.561123Z","times_seen":4180,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":17,"dns":3,"connect":1,"send":0,"wait":5,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opd6v11tc1zdoo4.fit/api/ip-sync/sync","fqdn":"opd6v11tc1zdoo4.fit","domain":"opd6v11tc1zdoo4.fit","tld":"fit"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://usdgift.cc/gooll/gooll.html","date":"2026-05-25T09:54:06.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opd6v11tc1zdoo4.fit","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 21:49:53 GMT","end":"Tue, 18 Aug 2026 21:49:52 GMT"},"fingerprint":{"sha1":"7E:78:B8:71:38:F8:C1:29:FD:C1:03:6F:C7:CE:99:B5:CB:FC:EA:12","sha256":"6A:50:AB:70:FF:E5:3F:ED:06:91:07:AB:B6:1E:97:9A:AC:83:3A:05:D7:61:1E:94:91:9F:9F:16:13:F8:36:A7"}}},"request":{"raw":"OPTIONS /api/ip-sync/sync HTTP/1.1\r\nHost: opd6v11tc1zdoo4.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://usdgift.cc/\r\nOrigin: https://usdgift.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 25 May 2026 09:54:07 GMT\r\ncontent-type: text/plain charset=UTF-8\r\nserver: cloudflare\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v9dPk8h8SrVQR6v4vgTexQ2YL8ove9d%2BDYIAvFvsh6%2FnwMlyIvnSxKjur%2BscfJIBF6UIJfUV7ZKSlg5U%2B626qfO8PmAp8vvYyV6Q7SaTmS5vh5FaAhzHtjiJU5fF%2BP4JmHKp69uP\"}]}\r\ncf-ray: a013a829a8184c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T21:03:26.665966Z","times_seen":17731141,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdgift.cc/","fqdn":"usdgift.cc","domain":"usdgift.cc","tld":"cc"},"ip":{"addr":"172.67.142.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-25T09:53:53.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdgift.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 22:15:57 GMT","end":"Tue, 18 Aug 2026 22:15:56 GMT"},"fingerprint":{"sha1":"7C:98:5B:8A:C4:8C:1A:5D:1C:9F:74:AD:D3:58:67:3F:10:77:18:47","sha256":"32:00:14:F5:E9:79:E9:80:7E:EE:A9:18:98:BE:1F:F2:2D:A0:C9:64:7C:A5:F9:86:A2:CA:41:3E:11:53:FB:13"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: usdgift.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 09:53:54 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 20 May 2026 21:59:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rt%2B6migS8b6gjIGSiQa2QVjQuVq5gbic4tjv8mNuNhqWvlaRN7wn7PapGrjcvdrrMCRt3ehSRyXoS%2Bep2oLpyCbG6d8YhKN3aILhdkXAOXayPZ2Oq%2F576cRWOuSg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a013a7d688d67131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5347,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"603f5ec918419cbdfec97cea18442f57","sha1":"a97937d22c9fcb42d17f8c9bf68e98645ce9d8af","sha256":"2c841c6cdbe4aaffd2122a95233600f411af54592d4af56965774dbebba031c3","sha512":"2bcc234489a48de75fab0e5e64c3cad2ec8dd9b78d31196c7f07bd9a4770d6315ab073c13459c91749d20a45e51da550e24c1da68eeb96ef787d3b994ae9bf3b","ssdeep":"96:L5vzmMfzH6SEQADdNVpxEdk2WpM/RadG2Mfy1jGSSiEaolWAXv:L8MfmYu2WpM/R2Rtj+","tlshash":"33b1fc626ef40c3305a18bc7275aaf126ae0c043e6d565717bfd43804fe6c92c96b84e","first_seen":"2026-05-25T09:54:19.632253Z","last_seen":"2026-05-25T09:54:19.632253Z","times_seen":1,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":35,"dns":20,"connect":1,"send":0,"wait":363,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"usdgift.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdgift.cc/src/recaptcha.css","fqdn":"usdgift.cc","domain":"usdgift.cc","tld":"cc"},"ip":{"addr":"172.67.142.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdgift.cc/","date":"2026-05-25T09:53:54.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdgift.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 22:15:57 GMT","end":"Tue, 18 Aug 2026 22:15:56 GMT"},"fingerprint":{"sha1":"7C:98:5B:8A:C4:8C:1A:5D:1C:9F:74:AD:D3:58:67:3F:10:77:18:47","sha256":"32:00:14:F5:E9:79:E9:80:7E:EE:A9:18:98:BE:1F:F2:2D:A0:C9:64:7C:A5:F9:86:A2:CA:41:3E:11:53:FB:13"}}},"request":{"raw":"GET /src/recaptcha.css HTTP/1.1\r\nHost: usdgift.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdgift.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 09:53:54 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 20 May 2026 21:59:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6a0e2eae-2b7f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u%2F7ntGCV7tBbDjJy8TUObc7W1nsIMyFFO%2BkRhQxP3XAaGUgw1SgtqkLyGsIP5cO8dZjQh9AE48KqFYn%2FcDlFAzXF4CX1CRyqlflIKeA8FMLB7L2y8eyQ2WChKiuS\"}]}\r\ncf-ray: a013a7d9f88d8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11135,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"cdbce5faf106c34e36087c23e3515dae","sha1":"e683304801cefe932b78eab4c582abb98bbcf43c","sha256":"9386f4df3ea3c452510727eff2e8e622f8c46544d36b0408998f11a6670d73d6","sha512":"6654f8c9fee470b39c305b39400cbd8bbfe27f655168a5f8c0ce517c35221bf03d8f3ded363e9a13c4f75869f5c0847d750b4ec446a2c24aedb1a657b5d99157","ssdeep":"192:rBwMkg/NLFtR1f2x8WYJKlvlJb4ZNh0xRBGMcT9ByypFjK9ygKLAQf:9JFA1lJEJG2pFGQf","tlshash":"b8321e975ba30842bc2bd7a82fa69b4663398053910ecd787fccba4c8f851d96171f4d","first_seen":"2026-05-25T09:54:19.635348Z","last_seen":"2026-05-25T09:54:19.635348Z","times_seen":1,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"usdgift.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdgift.cc/images/captcha_logo.svg","fqdn":"usdgift.cc","domain":"usdgift.cc","tld":"cc"},"ip":{"addr":"172.67.142.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdgift.cc/","date":"2026-05-25T09:53:54.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdgift.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 22:15:57 GMT","end":"Tue, 18 Aug 2026 22:15:56 GMT"},"fingerprint":{"sha1":"7C:98:5B:8A:C4:8C:1A:5D:1C:9F:74:AD:D3:58:67:3F:10:77:18:47","sha256":"32:00:14:F5:E9:79:E9:80:7E:EE:A9:18:98:BE:1F:F2:2D:A0:C9:64:7C:A5:F9:86:A2:CA:41:3E:11:53:FB:13"}}},"request":{"raw":"GET /images/captcha_logo.svg HTTP/1.1\r\nHost: usdgift.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdgift.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 09:53:54 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 20 May 2026 21:59:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6a0e2eae-495\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2BeQrWccgJLtwituRjP7r%2BBBA8LYzajS9eS3YnnJVXYdiVOfSGNVmr0d272yY%2BBM8mjjSQs1sU36Xo8%2BVflJdEZmIssfZpSCxVZ4Fv70o7wYmsXAdrDr9FilWuIe\"}]}\r\ncf-ray: a013a7d9f88e8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1173,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"402180288cab46988c6a51be04e5c18c","sha1":"08842fcd53e400e18a56b73248c2e9fb00f00348","sha256":"e7bade9fbe3c0d173adef7051c12780179edded69206b59ece8be895faabcffc","sha512":"baa547463406879338463c210c4eb06c99686afd3569f38e8dd6fa2fa23540eb250d85484c4417c8062af601f8517bb28eab7506f3b13c8de52c9826037de356","ssdeep":"","tlshash":"de21eeeda3a86e5c044863e9ff39834c926a77613e808515d6dd1cc2806207d4f03bcd","first_seen":"2023-10-23T06:22:55Z","last_seen":"2026-08-03T13:21:45.60994Z","times_seen":41,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"usdgift.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdgift.cc/images/captcha_arrow.svg","fqdn":"usdgift.cc","domain":"usdgift.cc","tld":"cc"},"ip":{"addr":"172.67.142.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdgift.cc/","date":"2026-05-25T09:53:54.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdgift.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 22:15:57 GMT","end":"Tue, 18 Aug 2026 22:15:56 GMT"},"fingerprint":{"sha1":"7C:98:5B:8A:C4:8C:1A:5D:1C:9F:74:AD:D3:58:67:3F:10:77:18:47","sha256":"32:00:14:F5:E9:79:E9:80:7E:EE:A9:18:98:BE:1F:F2:2D:A0:C9:64:7C:A5:F9:86:A2:CA:41:3E:11:53:FB:13"}}},"request":{"raw":"GET /images/captcha_arrow.svg HTTP/1.1\r\nHost: usdgift.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdgift.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 09:53:54 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 20 May 2026 21:59:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6a0e2eae-1b6\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VgYaIL%2BUqf5aXzE8fEKLkEQsbiQdbp5fPN%2FhN0ShsTBmYxqmEZ8gye%2Fdrq%2BX1I7UW6fNloV8nOSFuJwmLb6B4E7yF5o8TYe0CQsyzCupkoXWQeF1XH2btuXWg2Qj\"}]}\r\ncf-ray: a013a7da08908be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":438,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"57aff6892b787d0ae08162eac03306b1","sha1":"3052b1c7f16cc9ee00bd69fd1903eb862d70b103","sha256":"c833c1ccb809a8c80fd463210632d0eeedf0716595ddac58ac4c0ad7fd3ee85e","sha512":"ab3491205bb51895fa6809b0dc9b6a9fa9e27c95a35915dddfc05ad7142739bcfd76a096b8b0886a78b5875430e02a3ea1e139aafc0aa87dbd0fc16a1dc16b6d","ssdeep":"","tlshash":"29f0f11c42ae4139954a4615f35c35815c2be09b82aac0d6bc8d1c28df18f4538b33ed","first_seen":"2023-10-23T06:22:55Z","last_seen":"2026-08-05T03:16:41.054258Z","times_seen":30,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"usdgift.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdgift.cc/favicon.ico","fqdn":"usdgift.cc","domain":"usdgift.cc","tld":"cc"},"ip":{"addr":"172.67.142.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdgift.cc/","date":"2026-05-25T09:53:54.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdgift.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 22:15:57 GMT","end":"Tue, 18 Aug 2026 22:15:56 GMT"},"fingerprint":{"sha1":"7C:98:5B:8A:C4:8C:1A:5D:1C:9F:74:AD:D3:58:67:3F:10:77:18:47","sha256":"32:00:14:F5:E9:79:E9:80:7E:EE:A9:18:98:BE:1F:F2:2D:A0:C9:64:7C:A5:F9:86:A2:CA:41:3E:11:53:FB:13"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: usdgift.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdgift.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 09:53:55 GMT\r\ncontent-type: text/html\r\npriority: u=6,i=?0\r\nlast-modified: Wed, 20 May 2026 21:59:10 GMT\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q5aYdlz5dJqRx69ObyqwkQzRV9uZEDXCCrdfDSiTyaN1FobQL57HZctTf85pJGDjTNdRIu6ByhETSLvI03v9uMkgBjFjW9xGZ78QzsOnsgqDjn%2FzKtrXnHfDQB6y\"}]}\r\ncf-ray: a013a7de19668be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5347,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"603f5ec918419cbdfec97cea18442f57","sha1":"a97937d22c9fcb42d17f8c9bf68e98645ce9d8af","sha256":"2c841c6cdbe4aaffd2122a95233600f411af54592d4af56965774dbebba031c3","sha512":"2bcc234489a48de75fab0e5e64c3cad2ec8dd9b78d31196c7f07bd9a4770d6315ab073c13459c91749d20a45e51da550e24c1da68eeb96ef787d3b994ae9bf3b","ssdeep":"96:L5vzmMfzH6SEQADdNVpxEdk2WpM/RadG2Mfy1jGSSiEaolWAXv:L8MfmYu2WpM/R2Rtj+","tlshash":"33b1fc626ef40c3305a18bc7275aaf126ae0c043e6d565717bfd43804fe6c92c96b84e","first_seen":"2026-05-25T09:54:19.632253Z","last_seen":"2026-05-25T09:54:19.632253Z","times_seen":1,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"usdgift.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opd6v11tc1zdoo4.fit/api/ip-sync/sync","fqdn":"opd6v11tc1zdoo4.fit","domain":"opd6v11tc1zdoo4.fit","tld":"fit"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://usdgift.cc/gooll/gooll.html","date":"2026-05-25T09:53:57.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opd6v11tc1zdoo4.fit","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 21:49:53 GMT","end":"Tue, 18 Aug 2026 21:49:52 GMT"},"fingerprint":{"sha1":"7E:78:B8:71:38:F8:C1:29:FD:C1:03:6F:C7:CE:99:B5:CB:FC:EA:12","sha256":"6A:50:AB:70:FF:E5:3F:ED:06:91:07:AB:B6:1E:97:9A:AC:83:3A:05:D7:61:1E:94:91:9F:9F:16:13:F8:36:A7"}}},"request":{"raw":"OPTIONS /api/ip-sync/sync HTTP/1.1\r\nHost: opd6v11tc1zdoo4.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://usdgift.cc/\r\nOrigin: https://usdgift.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 25 May 2026 09:53:57 GMT\r\ncontent-type: text/plain charset=UTF-8\r\nserver: cloudflare\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0fh%2FkLqfQYxYWFTHpO9Cg9sslvkZAjTSbNsXApAnlyKjeHxzT4g9WzgWOM999r5wxH1%2BrerJXufRtG0pdq1VCKXJqCg%2BCJMK%2FZh6tRQ2COmWt1IG%2BInCW8PgpDIclvmR%2F67QhsWt\"}]}\r\ncf-ray: a013a7ebfd9e4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T21:03:26.665966Z","times_seen":17731141,"resource_available":true,"data":null}},"time_used":525,"timings":{"blocked":82,"dns":64,"connect":1,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdgift.cc/src/qrcode.min.js","fqdn":"usdgift.cc","domain":"usdgift.cc","tld":"cc"},"ip":{"addr":"172.67.142.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdgift.cc/","date":"2026-05-25T09:53:54.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdgift.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 22:15:57 GMT","end":"Tue, 18 Aug 2026 22:15:56 GMT"},"fingerprint":{"sha1":"7C:98:5B:8A:C4:8C:1A:5D:1C:9F:74:AD:D3:58:67:3F:10:77:18:47","sha256":"32:00:14:F5:E9:79:E9:80:7E:EE:A9:18:98:BE:1F:F2:2D:A0:C9:64:7C:A5:F9:86:A2:CA:41:3E:11:53:FB:13"}}},"request":{"raw":"GET /src/qrcode.min.js HTTP/1.1\r\nHost: usdgift.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdgift.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 09:53:54 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 20 May 2026 21:59:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6a0e2eae-5f3b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z022In8zkuCXhZEPL8hewq0aOUoYSRbu9Pk64cm0NRsSnwMA%2FCnHXfElLk9K0MUhaNx4C9xmivdlY%2Fm61zeFpeVGTt5%2FM25Ox%2B1JPi0yZIqcHzW7%2BOVuasZ4buXd\"}]}\r\ncf-ray: a013a7da08928be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24379,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8054)","md5":"67f585861c1f73b54ed566a8b9f09475","sha1":"50f0d4a394d29702a183a433c7d07a132d52833e","sha256":"8b5f2d84c7194ffbe107dd1f018fa121a8224d8b3dd10b0dc9390b70c33d32c0","sha512":"9a7afb4c796b9bdbf2a8b0ecdee3d60137e753d3ae2eb2ffe23a9b476ae5d54f23181b115b0306f3aae98846d95275b03d720ccc6bd1c43637430a7b9634eb66","ssdeep":"384:15AvBxEpvs/T7yYgO9dPZbiJSWa57TadmURuRJFfrdokWjTKu3gVvkknZxR04Y46:1cBnf9vUSnlTTe8FkWZxLp2rOH4","tlshash":"94b2c6997391716b43af51da046f4046e3fea864282d486cef11e8d778b8d6980f7f38","first_seen":"2026-05-25T09:54:19.640959Z","last_seen":"2026-05-25T09:54:19.640959Z","times_seen":1,"resource_available":true,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"usdgift.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdgift.cc/src/recaptcha.js","fqdn":"usdgift.cc","domain":"usdgift.cc","tld":"cc"},"ip":{"addr":"172.67.142.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdgift.cc/","date":"2026-05-25T09:53:54.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdgift.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 May 2026 22:15:57 GMT","end":"Tue, 18 Aug 2026 22:15:56 GMT"},"fingerprint":{"sha1":"7C:98:5B:8A:C4:8C:1A:5D:1C:9F:74:AD:D3:58:67:3F:10:77:18:47","sha256":"32:00:14:F5:E9:79:E9:80:7E:EE:A9:18:98:BE:1F:F2:2D:A0:C9:64:7C:A5:F9:86:A2:CA:41:3E:11:53:FB:13"}}},"request":{"raw":"GET /src/recaptcha.js HTTP/1.1\r\nHost: usdgift.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdgift.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 09:53:54 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 20 May 2026 21:59:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6a0e2eae-53d2\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WynNxdBAs3sTqq1saSqwhiNUUtFXQk616%2F2r%2BtSO4ZYIEQcaiCGUnj34HMqyZC3uAQCao5qp%2FggqYydwhlAm7%2F%2Fvz6ep7BGfgYW%2FTUU%2FGPD4pCY2EgyjbL9fCrzA\"}]}\r\ncf-ray: a013a7da08938be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21458,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21458), with no line terminators","md5":"886d51ff661e5bf5d632a98701f4ee6a","sha1":"7228ee3c1768ae271b147810731e0f37bf265b61","sha256":"4fdd93edc4d8260186f5b91a3a2c5655e9169baa078bf9bc0d0a1873f804735a","sha512":"62b6356cec58fcfffdf331a2d8221305ee3691d4bb71b69299a71843a93c3ae1993be9f5eb7644993a529246c891db75b32b3ce06565beae412dfc0e27a30882","ssdeep":"384:efbGf6wB9HEWzrQesCOOoeNAhYfQXG5nNxTTCmPBPU4dA8ncBPKSj02Asy0Q:eTGf6wB9kWzrQesCRcUQqPOmPZU2cBSJ","tlshash":"33a297e12e8027416b571f7b7b1bb5d9d6260a2e75c8c825c50eae603fc9203f7a6d34","first_seen":"2026-05-25T09:54:19.643301Z","last_seen":"2026-05-25T09:54:19.643301Z","times_seen":1,"resource_available":true,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"usdgift.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-25","alert":"Phishing Block","trigger":"usdgift.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]}}]}