{"report_id":"4020d0e2-d67e-4802-a9be-cb978b221a25","version":0,"status":"done","tags":[],"date":"2026-10-07T05:42:50Z","url":{"schema":"http","addr":"extragiftcard.com/","fqdn":"extragiftcard.com","domain":"extragiftcard.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"extragiftcard.com/","fqdn":"extragiftcard.com","domain":"extragiftcard.com","tld":"com"},"title":"Claim Your $750 Gift Card","dom":{"size":7350,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7347), with no line terminators","md5":"ed7bbdf6f297e647af727f39a3ce0304","sha1":"df2be62cb1af2bed3f1a16f5886986178f10ad66","sha256":"1d60cb3b6b9055ddfec47caf0ce17d7e6f9cdea709733e22a7d409efb50d5083","sha512":"6203fb716ad9b68937af11d9cc7af66e711e268e5424b0c5d286f020179604a9d9742350c68ee1fd080cda74875598b51e1bac2ab3bf37e91a6ce4611ef258b7","ssdeep":"192:GRS84s4J3M4oeTtHlSRyfAa19Il/pmh9pmo9pmnROO:c4s4JM4oeTtKyfAa19a/pmDpmEpmnQO","tlshash":"27e1859a42454b7f136309fcf5c6b2a6d1b5c20fc3b79a11f6bc013613d9e5684722ac","dom_hash":"domhashf821e87af97b5d7a2b72c031ccaea3d1","first_seen":"2026-10-07T03:56:38.408515Z","last_seen":"2026-10-07T05:42:52.231816Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"extragiftcard.com/","fqdn":"extragiftcard.com","domain":"extragiftcard.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-11T05:42:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"extragiftcard.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"extragiftcard.com","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2018-08-20","domain_rank":0,"first_seen":"2026-10-07T03:56:34.590754Z","last_seen":"2026-10-07T03:56:34.590754Z","alert_count":8,"request_count":8,"received_data":484005,"sent_data":6203,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"extragiftcard.com/~flock.js","fqdn":"extragiftcard.com","domain":"extragiftcard.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-10-12T04:11:11.351415Z","times_seen":18479,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extragiftcard.com/assets/routes-Bb-kaQ3l.js","fqdn":"extragiftcard.com","domain":"extragiftcard.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2437e87333b21571e99b7a2f2368e74","sha1":"f9a90aaafaefd2072525b3660118ea522bf2b5d1","sha256":"3300e8c408a2ca6a4192c2b71defae45ff4fe842844a73188d77e40866fb8ade","sha512":"ee839cee981f9e20e505183879515599c6d8c5b71efc76a320c3572dccd2db9556361a31f5e79a7bc458186443eb1ea82ea11fd6aaebb331a58686957621dd9b","ssdeep":"96:K8SRUpSJSWPaYRlWotwCaQlM1tmcRt7UyI:K8SmpSJSIaYR6BQl8mcRRUyI","tlshash":"a191849af2c5a7eeb6130de8b04ed11eb11fc64cc77b4568f67420112490a957a72bcc","size":4438,"data":"","first_seen":"2026-10-07T03:56:38.411688Z","last_seen":"2026-10-07T05:42:52.253817Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extragiftcard.com/assets/index-HmTZna0K.js","fqdn":"extragiftcard.com","domain":"extragiftcard.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b374da535c98b28134ae577e563ac09","sha1":"f86c24d4cc350911d6bf7ed905bf393ffa0afd2e","sha256":"b7ce42baf456a582d02f1e7a1add3a269b53faa60b7fef826da873b584156da6","sha512":"10c3b79a1da640988a7d2523235de51667ed696e4c923c2cce288e0e405c0ff0c10e5f7fc1eb8b6352cdec893b07287e0f5a5bf29d42206764c3f1bca813ceb2","ssdeep":"6144:GZGpgDFdeEWOE2/jSxqkNsQ5hLyouRSCY8gQROQv:gVX/kNz6HROQv","tlshash":"b7743be83295b5221bd782b6407f1506b3751867280d4820b224fdef76b188995fbffd","size":346133,"data":"","first_seen":"2026-10-07T03:56:38.410163Z","last_seen":"2026-10-07T05:42:52.250573Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"extragiftcard.com/__l5e/assets-v1/0e621586-0926-4320-b143-a2ab0e075cde/costco-gift-card-logo.png","fqdn":"extragiftcard.com","domain":"extragiftcard.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extragiftcard.com/","date":"2026-10-07T05:42:21.453Z","timestamp":1791351741453,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extragiftcard.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 09:31:40 GMT","end":"Mon, 30 Nov 2026 10:31:35 GMT"},"fingerprint":{"sha1":"D4:5A:E5:7D:7E:D4:C5:D8:8C:C8:CD:2D:61:79:DB:4B:5A:04:CE:62","sha256":"FF:32:DB:89:47:96:F5:39:F3:30:A9:75:71:A0:57:A9:31:EA:35:23:F2:45:D5:B2:EA:0C:03:68:5E:F0:0D:2B"}}},"request":{"raw":"GET /__l5e/assets-v1/0e621586-0926-4320-b143-a2ab0e075cde/costco-gift-card-logo.png HTTP/1.1\r\nHost: extragiftcard.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://extragiftcard.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.107ebad4-10e4-445e-bd6d-e3bb79f5c470.1791956540.NI-6-GWf0LOtPXdtw_hkHfMxKOix3dUhmAP2WxuPKlM; __cf_bm=tgULhXPiS.FQSb7mJJ13.JdbQbWkci_WRbjAUM302Rg-1791351740.7366283-1.0.1.1-mRU7P7jWeYTbQgHN.rid9.0YffPQjpl9s71a7RrvRO_Nfp1iwLHs2TE16jMPrV.xgUN3bu0VQukyg55sXelQcOzXHfFWy9Sw3hC3Jf.ixusP73CjHDyCYOds4kgy072W\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.107ebad4-10e4-445e-bd6d-e3bb79f5c470.1791956540.NI-6-GWf0LOtPXdtw_hkHfMxKOix3dUhmAP2WxuPKlM"},{"name":"__cf_bm","value":"tgULhXPiS.FQSb7mJJ13.JdbQbWkci_WRbjAUM302Rg-1791351740.7366283-1.0.1.1-mRU7P7jWeYTbQgHN.rid9.0YffPQjpl9s71a7RrvRO_Nfp1iwLHs2TE16jMPrV.xgUN3bu0VQukyg55sXelQcOzXHfFWy9Sw3hC3Jf.ixusP73CjHDyCYOds4kgy072W"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 07 Oct 2026 05:42:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 20705\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"66e5132d7a064b0f7daa103a08d916cb\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: default-src 'none'; script-src 'none'; object-src 'none'; base-uri 'none'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a46a95001cdb56ae-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20705,"size_decoded":21270,"mime_type":"image/png","magic":"PNG image data, 1920 x 1313, 8-bit/color RGBA, non-interlaced","md5":"66e5132d7a064b0f7daa103a08d916cb","sha1":"e015fcbbe0f54d920af1e614f043fe0ff379bffc","sha256":"d9e2781d5f67d00eb8fe2976d225352d160b6f5610a671103c4e99fd31fc387b","sha512":"22a34d7ab462117c7670538ab6a26aa14497af46f0255093bb0a9003ecf485eb9a2864b17a02f9ea545249bf3cd4b7bef9b7d11ddfb087548035c37e227b30ff","ssdeep":"192:VGF42Xr3D8mv/308TbaiUQyTXXPuq/lx/BwNb5NCnillQ2b5qwkQ:UH8m3hT8blNxpbnillQ2NNz","tlshash":"75927f1692a5ad69fc0c407590d50fea7ab01f18efe4cbab4b309d006e6f7ebd5909c0","first_seen":"2026-10-07T03:56:38.41418Z","last_seen":"2026-10-07T05:42:52.236057Z","times_seen":2,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"extragiftcard.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extragiftcard.com/favicon.png","fqdn":"extragiftcard.com","domain":"extragiftcard.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extragiftcard.com/","date":"2026-10-07T05:42:21.700Z","timestamp":1791351741700,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extragiftcard.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 09:31:40 GMT","end":"Mon, 30 Nov 2026 10:31:35 GMT"},"fingerprint":{"sha1":"D4:5A:E5:7D:7E:D4:C5:D8:8C:C8:CD:2D:61:79:DB:4B:5A:04:CE:62","sha256":"FF:32:DB:89:47:96:F5:39:F3:30:A9:75:71:A0:57:A9:31:EA:35:23:F2:45:D5:B2:EA:0C:03:68:5E:F0:0D:2B"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: extragiftcard.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://extragiftcard.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.107ebad4-10e4-445e-bd6d-e3bb79f5c470.1791956540.NI-6-GWf0LOtPXdtw_hkHfMxKOix3dUhmAP2WxuPKlM; __cf_bm=tgULhXPiS.FQSb7mJJ13.JdbQbWkci_WRbjAUM302Rg-1791351740.7366283-1.0.1.1-mRU7P7jWeYTbQgHN.rid9.0YffPQjpl9s71a7RrvRO_Nfp1iwLHs2TE16jMPrV.xgUN3bu0VQukyg55sXelQcOzXHfFWy9Sw3hC3Jf.ixusP73CjHDyCYOds4kgy072W\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.107ebad4-10e4-445e-bd6d-e3bb79f5c470.1791956540.NI-6-GWf0LOtPXdtw_hkHfMxKOix3dUhmAP2WxuPKlM"},{"name":"__cf_bm","value":"tgULhXPiS.FQSb7mJJ13.JdbQbWkci_WRbjAUM302Rg-1791351740.7366283-1.0.1.1-mRU7P7jWeYTbQgHN.rid9.0YffPQjpl9s71a7RrvRO_Nfp1iwLHs2TE16jMPrV.xgUN3bu0VQukyg55sXelQcOzXHfFWy9Sw3hC3Jf.ixusP73CjHDyCYOds4kgy072W"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 07 Oct 2026 05:42:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 4944\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-deployment-id: psr2.107ebad4-10e4-445e-bd6d-e3bb79f5c470.1791956541.m54jKz2m-Yzvn840wLeGoGpuSVOgXYDSf_apVUDLPV8\r\nserver: cloudflare\r\ncf-ray: a46a9501adec56ae-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4944,"size_decoded":5397,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"b3a0cf8985cbc105fe1c2510b9845b95","sha1":"2467a10fc65141500c7c162a1a81de05ea2c7ac6","sha256":"9bdbf18a0fd0196c3d33942a8e94161b981351ea2b13b538308cf1314b384858","sha512":"b83c06c224d1356d5cb8d2cf272223c737b523601ff72b1560c39566b7b98b9cbc1b451f5b5b17a126bbb9017f951d5e24f7aa17a6d1c8dc232a43293134b9ee","ssdeep":"96:jRyiNsCG6yMqYH8w+pS343a9qFMXTtHtz1bVJK8NB2qN:xl8U8wES34KQaDNlBV8a","tlshash":"fea17f44d190f645e90bca324b9e352bb66a15d9de33013c23a68021a294dc83e179dd","first_seen":"2026-10-07T03:56:38.415603Z","last_seen":"2026-10-07T05:42:52.239711Z","times_seen":2,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"extragiftcard.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extragiftcard.com/~api/analytics","fqdn":"extragiftcard.com","domain":"extragiftcard.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://extragiftcard.com/","date":"2026-10-07T05:42:21.976Z","timestamp":1791351741976,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extragiftcard.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 09:31:40 GMT","end":"Mon, 30 Nov 2026 10:31:35 GMT"},"fingerprint":{"sha1":"D4:5A:E5:7D:7E:D4:C5:D8:8C:C8:CD:2D:61:79:DB:4B:5A:04:CE:62","sha256":"FF:32:DB:89:47:96:F5:39:F3:30:A9:75:71:A0:57:A9:31:EA:35:23:F2:45:D5:B2:EA:0C:03:68:5E:F0:0D:2B"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: extragiftcard.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://extragiftcard.com/\r\nContent-Type: application/json\r\nContent-Length: 338\r\nOrigin: https://extragiftcard.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.107ebad4-10e4-445e-bd6d-e3bb79f5c470.1791956540.NI-6-GWf0LOtPXdtw_hkHfMxKOix3dUhmAP2WxuPKlM; __cf_bm=tgULhXPiS.FQSb7mJJ13.JdbQbWkci_WRbjAUM302Rg-1791351740.7366283-1.0.1.1-mRU7P7jWeYTbQgHN.rid9.0YffPQjpl9s71a7RrvRO_Nfp1iwLHs2TE16jMPrV.xgUN3bu0VQukyg55sXelQcOzXHfFWy9Sw3hC3Jf.ixusP73CjHDyCYOds4kgy072W; session-id=a6680ea2-3c4c-471c-a3c6-779fff94d81e\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.107ebad4-10e4-445e-bd6d-e3bb79f5c470.1791956540.NI-6-GWf0LOtPXdtw_hkHfMxKOix3dUhmAP2WxuPKlM"},{"name":"__cf_bm","value":"tgULhXPiS.FQSb7mJJ13.JdbQbWkci_WRbjAUM302Rg-1791351740.7366283-1.0.1.1-mRU7P7jWeYTbQgHN.rid9.0YffPQjpl9s71a7RrvRO_Nfp1iwLHs2TE16jMPrV.xgUN3bu0VQukyg55sXelQcOzXHfFWy9Sw3hC3Jf.ixusP73CjHDyCYOds4kgy072W"},{"name":"session-id","value":"a6680ea2-3c4c-471c-a3c6-779fff94d81e"}],"method":"POST","post_data":{"size":338,"data":"{\"timestamp\":\"2026-10-07T05:42:21.974Z\",\"action\":\"page_hit\",\"version\":\"1\",\"session_id\":\"a6680ea2-3c4c-471c-a3c6-779fff94d81e\",\"payload\":\"{\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"locale\\\":\\\"en-US\\\",\\\"referrer\\\":\\\"\\\",\\\"pathname\\\":\\\"/\\\",\\\"href\\\":\\\"https://extragiftcard.com/\\\"}\"}"}},"response":{"raw":"HTTP/2 202 \r\ndate: Wed, 07 Oct 2026 05:42:22 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a46a95035ef256ae-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8,"size_decoded":337,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"382ab522931673c11e398ead1b7b1678","sha1":"61a0572c4893ef34311320d84c82df88bea83e11","sha256":"a00fb0c50741f81bb51d35b4475a4357f8039aabd896a21036bc516839401595","sha512":"685c859b43ec0b2f873fb61ff4c48b3748ede3e31bdda719b69b528546f7a1d528216146db9626d1a411dccdd13f3fd155f3d62d3e2ec8090c71f6710ee60641","ssdeep":"","tlshash":"455000003c0000c0000000c000000000c0000000000000c0c000000000c0c000000000","first_seen":"2023-04-11T14:35:59Z","last_seen":"2026-10-12T04:11:11.378159Z","times_seen":8293,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"extragiftcard.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extragiftcard.com/","fqdn":"extragiftcard.com","domain":"extragiftcard.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T05:42:20.571Z","timestamp":1791351740571,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extragiftcard.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 09:31:40 GMT","end":"Mon, 30 Nov 2026 10:31:35 GMT"},"fingerprint":{"sha1":"D4:5A:E5:7D:7E:D4:C5:D8:8C:C8:CD:2D:61:79:DB:4B:5A:04:CE:62","sha256":"FF:32:DB:89:47:96:F5:39:F3:30:A9:75:71:A0:57:A9:31:EA:35:23:F2:45:D5:B2:EA:0C:03:68:5E:F0:0D:2B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: extragiftcard.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 07 Oct 2026 05:42:21 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, must-revalidate, max-age=0\r\nx-deployment-id: psr2.107ebad4-10e4-445e-bd6d-e3bb79f5c470.1791956540.NI-6-GWf0LOtPXdtw_hkHfMxKOix3dUhmAP2WxuPKlM\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __dpl=psr2.107ebad4-10e4-445e-bd6d-e3bb79f5c470.1791956540.NI-6-GWf0LOtPXdtw_hkHfMxKOix3dUhmAP2WxuPKlM; Path=/; Max-Age=86400; SameSite=Lax; Secure\n__cf_bm=tgULhXPiS.FQSb7mJJ13.JdbQbWkci_WRbjAUM302Rg-1791351740.7366283-1.0.1.1-mRU7P7jWeYTbQgHN.rid9.0YffPQjpl9s71a7RrvRO_Nfp1iwLHs2TE16jMPrV.xgUN3bu0VQukyg55sXelQcOzXHfFWy9Sw3hC3Jf.ixusP73CjHDyCYOds4kgy072W; HttpOnly; SameSite=None; Secure; Path=/; Domain=extragiftcard.com; Expires=Wed, 07 Oct 2026 06:12:21 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a46a94fb999456ae-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.107ebad4-10e4-445e-bd6d-e3bb79f5c470.1791956540.NI-6-GWf0LOtPXdtw_hkHfMxKOix3dUhmAP2WxuPKlM","quoted":false,"path":"/","max_age":86400,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"__dpl=psr2.107ebad4-10e4-445e-bd6d-e3bb79f5c470.1791956540.NI-6-GWf0LOtPXdtw_hkHfMxKOix3dUhmAP2WxuPKlM; Path=/; Max-Age=86400; SameSite=Lax; Secure"},{"name":"__cf_bm","value":"tgULhXPiS.FQSb7mJJ13.JdbQbWkci_WRbjAUM302Rg-1791351740.7366283-1.0.1.1-mRU7P7jWeYTbQgHN.rid9.0YffPQjpl9s71a7RrvRO_Nfp1iwLHs2TE16jMPrV.xgUN3bu0VQukyg55sXelQcOzXHfFWy9Sw3hC3Jf.ixusP73CjHDyCYOds4kgy072W","quoted":false,"path":"/","domain":"extragiftcard.com","expires":"2026-10-07T06:12:21Z","raw_expires":"Wed, 07 Oct 2026 06:12:21 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=tgULhXPiS.FQSb7mJJ13.JdbQbWkci_WRbjAUM302Rg-1791351740.7366283-1.0.1.1-mRU7P7jWeYTbQgHN.rid9.0YffPQjpl9s71a7RrvRO_Nfp1iwLHs2TE16jMPrV.xgUN3bu0VQukyg55sXelQcOzXHfFWy9Sw3hC3Jf.ixusP73CjHDyCYOds4kgy072W; HttpOnly; SameSite=None; Secure; Path=/; Domain=extragiftcard.com; Expires=Wed, 07 Oct 2026 06:12:21 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8802,"size_decoded":3987,"mime_type":"text/html; charset=utf-8","magic":"data","md5":"df2fad1ec9ba2b6f3ffb66ac003e9c72","sha1":"d96d62d0e45d78071c7d7cd3bd4c335e8a4546dc","sha256":"7db9e19ebe09eec4e25053fbaf56389fa17495acb5bf90b529da02dac923544c","sha512":"ede606193e6306ae69c212baba91ad0da6f62015734174193cf79c57eb5bf1c2b43d6ee91b7ed03d93bda6e891f09533d34e74686e713a7406c94f64d61ffbc8","ssdeep":"192:iSbR34h/45eTt6lS0yLAa19Il/pmh9pmo9pmnTCbqMS4K9:FR34h/45eTtEyLAa19a/pmDpmEpmnmmp","tlshash":"f102c59742414b7f13b719fcf192b3a6d2b5820ed2b7da58f2bc442623c5e8744722ac","first_seen":"2026-10-07T05:42:52.244485Z","last_seen":"2026-10-07T05:42:52.244485Z","times_seen":1,"resource_available":true,"data":null}},"time_used":643,"timings":{"blocked":-1,"dns":136,"connect":1,"send":0,"wait":484,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"extragiftcard.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extragiftcard.com/assets/styles-CbrFTCjQ.css","fqdn":"extragiftcard.com","domain":"extragiftcard.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://extragiftcard.com/","date":"2026-10-07T05:42:21.443Z","timestamp":1791351741443,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extragiftcard.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 09:31:40 GMT","end":"Mon, 30 Nov 2026 10:31:35 GMT"},"fingerprint":{"sha1":"D4:5A:E5:7D:7E:D4:C5:D8:8C:C8:CD:2D:61:79:DB:4B:5A:04:CE:62","sha256":"FF:32:DB:89:47:96:F5:39:F3:30:A9:75:71:A0:57:A9:31:EA:35:23:F2:45:D5:B2:EA:0C:03:68:5E:F0:0D:2B"}}},"request":{"raw":"GET /assets/styles-CbrFTCjQ.css HTTP/1.1\r\nHost: extragiftcard.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://extragiftcard.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.107ebad4-10e4-445e-bd6d-e3bb79f5c470.1791956540.NI-6-GWf0LOtPXdtw_hkHfMxKOix3dUhmAP2WxuPKlM; __cf_bm=tgULhXPiS.FQSb7mJJ13.JdbQbWkci_WRbjAUM302Rg-1791351740.7366283-1.0.1.1-mRU7P7jWeYTbQgHN.rid9.0YffPQjpl9s71a7RrvRO_Nfp1iwLHs2TE16jMPrV.xgUN3bu0VQukyg55sXelQcOzXHfFWy9Sw3hC3Jf.ixusP73CjHDyCYOds4kgy072W\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.107ebad4-10e4-445e-bd6d-e3bb79f5c470.1791956540.NI-6-GWf0LOtPXdtw_hkHfMxKOix3dUhmAP2WxuPKlM"},{"name":"__cf_bm","value":"tgULhXPiS.FQSb7mJJ13.JdbQbWkci_WRbjAUM302Rg-1791351740.7366283-1.0.1.1-mRU7P7jWeYTbQgHN.rid9.0YffPQjpl9s71a7RrvRO_Nfp1iwLHs2TE16jMPrV.xgUN3bu0VQukyg55sXelQcOzXHfFWy9Sw3hC3Jf.ixusP73CjHDyCYOds4kgy072W"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 07 Oct 2026 05:42:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\nx-deployment-id: psr2.107ebad4-10e4-445e-bd6d-e3bb79f5c470.1791956541.m54jKz2m-Yzvn840wLeGoGpuSVOgXYDSf_apVUDLPV8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a46a95000ccc56ae-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73477,"size_decoded":12834,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65470)","md5":"2074507654241e3e69285aee60c35a50","sha1":"e1ad4f0388c529a838a6905b040d434a1542e669","sha256":"c086b18416451ffb1431768d76bc32ae192ea129cb83c53d4c9e1eb5e81050a9","sha512":"26736f83dd2b19e55eae04a2ee408195e96fac014a4ff3a9991881621f159a4c53bc76ef05a3568ca0a711b5b4a2567ae600266415ed2fcc15f43d9c5e53f4c6","ssdeep":"1536:nSOOjh+aMwyuXNwsWvfJfUDoaNSsMq+WDhXX78TsXpA988R988q:SOOjh+PwywwsWvfpUDzMq+WDhYoXP","tlshash":"4a73e690b229d53f7c33a4f5a38cb89c9119b0c0dd7546e9fb17612256c3bf2adab604","first_seen":"2026-10-07T03:56:38.421833Z","last_seen":"2026-10-07T05:42:52.247814Z","times_seen":2,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"extragiftcard.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extragiftcard.com/assets/index-HmTZna0K.js","fqdn":"extragiftcard.com","domain":"extragiftcard.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extragiftcard.com/","date":"2026-10-07T05:42:21.445Z","timestamp":1791351741445,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extragiftcard.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 09:31:40 GMT","end":"Mon, 30 Nov 2026 10:31:35 GMT"},"fingerprint":{"sha1":"D4:5A:E5:7D:7E:D4:C5:D8:8C:C8:CD:2D:61:79:DB:4B:5A:04:CE:62","sha256":"FF:32:DB:89:47:96:F5:39:F3:30:A9:75:71:A0:57:A9:31:EA:35:23:F2:45:D5:B2:EA:0C:03:68:5E:F0:0D:2B"}}},"request":{"raw":"GET /assets/index-HmTZna0K.js HTTP/1.1\r\nHost: extragiftcard.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://extragiftcard.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.107ebad4-10e4-445e-bd6d-e3bb79f5c470.1791956540.NI-6-GWf0LOtPXdtw_hkHfMxKOix3dUhmAP2WxuPKlM; __cf_bm=tgULhXPiS.FQSb7mJJ13.JdbQbWkci_WRbjAUM302Rg-1791351740.7366283-1.0.1.1-mRU7P7jWeYTbQgHN.rid9.0YffPQjpl9s71a7RrvRO_Nfp1iwLHs2TE16jMPrV.xgUN3bu0VQukyg55sXelQcOzXHfFWy9Sw3hC3Jf.ixusP73CjHDyCYOds4kgy072W\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.107ebad4-10e4-445e-bd6d-e3bb79f5c470.1791956540.NI-6-GWf0LOtPXdtw_hkHfMxKOix3dUhmAP2WxuPKlM"},{"name":"__cf_bm","value":"tgULhXPiS.FQSb7mJJ13.JdbQbWkci_WRbjAUM302Rg-1791351740.7366283-1.0.1.1-mRU7P7jWeYTbQgHN.rid9.0YffPQjpl9s71a7RrvRO_Nfp1iwLHs2TE16jMPrV.xgUN3bu0VQukyg55sXelQcOzXHfFWy9Sw3hC3Jf.ixusP73CjHDyCYOds4kgy072W"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 07 Oct 2026 05:42:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.107ebad4-10e4-445e-bd6d-e3bb79f5c470.1791956541.m54jKz2m-Yzvn840wLeGoGpuSVOgXYDSf_apVUDLPV8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a46a95000cd156ae-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":346133,"size_decoded":107940,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (44052)","md5":"4b374da535c98b28134ae577e563ac09","sha1":"f86c24d4cc350911d6bf7ed905bf393ffa0afd2e","sha256":"b7ce42baf456a582d02f1e7a1add3a269b53faa60b7fef826da873b584156da6","sha512":"10c3b79a1da640988a7d2523235de51667ed696e4c923c2cce288e0e405c0ff0c10e5f7fc1eb8b6352cdec893b07287e0f5a5bf29d42206764c3f1bca813ceb2","ssdeep":"6144:GZGpgDFdeEWOE2/jSxqkNsQ5hLyouRSCY8gQROQv:gVX/kNz6HROQv","tlshash":"b7743be83295b5221bd782b6407f1506b3751867280d4820b224fdef76b188995fbffd","first_seen":"2026-10-07T03:56:38.410163Z","last_seen":"2026-10-07T05:42:52.250573Z","times_seen":2,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"extragiftcard.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extragiftcard.com/assets/routes-Bb-kaQ3l.js","fqdn":"extragiftcard.com","domain":"extragiftcard.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extragiftcard.com/","date":"2026-10-07T05:42:21.447Z","timestamp":1791351741447,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extragiftcard.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 09:31:40 GMT","end":"Mon, 30 Nov 2026 10:31:35 GMT"},"fingerprint":{"sha1":"D4:5A:E5:7D:7E:D4:C5:D8:8C:C8:CD:2D:61:79:DB:4B:5A:04:CE:62","sha256":"FF:32:DB:89:47:96:F5:39:F3:30:A9:75:71:A0:57:A9:31:EA:35:23:F2:45:D5:B2:EA:0C:03:68:5E:F0:0D:2B"}}},"request":{"raw":"GET /assets/routes-Bb-kaQ3l.js HTTP/1.1\r\nHost: extragiftcard.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://extragiftcard.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.107ebad4-10e4-445e-bd6d-e3bb79f5c470.1791956540.NI-6-GWf0LOtPXdtw_hkHfMxKOix3dUhmAP2WxuPKlM; __cf_bm=tgULhXPiS.FQSb7mJJ13.JdbQbWkci_WRbjAUM302Rg-1791351740.7366283-1.0.1.1-mRU7P7jWeYTbQgHN.rid9.0YffPQjpl9s71a7RrvRO_Nfp1iwLHs2TE16jMPrV.xgUN3bu0VQukyg55sXelQcOzXHfFWy9Sw3hC3Jf.ixusP73CjHDyCYOds4kgy072W\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.107ebad4-10e4-445e-bd6d-e3bb79f5c470.1791956540.NI-6-GWf0LOtPXdtw_hkHfMxKOix3dUhmAP2WxuPKlM"},{"name":"__cf_bm","value":"tgULhXPiS.FQSb7mJJ13.JdbQbWkci_WRbjAUM302Rg-1791351740.7366283-1.0.1.1-mRU7P7jWeYTbQgHN.rid9.0YffPQjpl9s71a7RrvRO_Nfp1iwLHs2TE16jMPrV.xgUN3bu0VQukyg55sXelQcOzXHfFWy9Sw3hC3Jf.ixusP73CjHDyCYOds4kgy072W"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 07 Oct 2026 05:42:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nx-deployment-id: psr2.107ebad4-10e4-445e-bd6d-e3bb79f5c470.1791956541.m54jKz2m-Yzvn840wLeGoGpuSVOgXYDSf_apVUDLPV8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a46a95000cd356ae-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4438,"size_decoded":2369,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4435), with no line terminators","md5":"b2437e87333b21571e99b7a2f2368e74","sha1":"f9a90aaafaefd2072525b3660118ea522bf2b5d1","sha256":"3300e8c408a2ca6a4192c2b71defae45ff4fe842844a73188d77e40866fb8ade","sha512":"ee839cee981f9e20e505183879515599c6d8c5b71efc76a320c3572dccd2db9556361a31f5e79a7bc458186443eb1ea82ea11fd6aaebb331a58686957621dd9b","ssdeep":"96:K8SRUpSJSWPaYRlWotwCaQlM1tmcRt7UyI:K8SmpSJSIaYR6BQl8mcRRUyI","tlshash":"a191849af2c5a7eeb6130de8b04ed11eb11fc64cc77b4568f67420112490a957a72bcc","first_seen":"2026-10-07T03:56:38.411688Z","last_seen":"2026-10-07T05:42:52.253817Z","times_seen":2,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"extragiftcard.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extragiftcard.com/~flock.js","fqdn":"extragiftcard.com","domain":"extragiftcard.com","tld":"com"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extragiftcard.com/","date":"2026-10-07T05:42:21.448Z","timestamp":1791351741448,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extragiftcard.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 09:31:40 GMT","end":"Mon, 30 Nov 2026 10:31:35 GMT"},"fingerprint":{"sha1":"D4:5A:E5:7D:7E:D4:C5:D8:8C:C8:CD:2D:61:79:DB:4B:5A:04:CE:62","sha256":"FF:32:DB:89:47:96:F5:39:F3:30:A9:75:71:A0:57:A9:31:EA:35:23:F2:45:D5:B2:EA:0C:03:68:5E:F0:0D:2B"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: extragiftcard.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://extragiftcard.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __dpl=psr2.107ebad4-10e4-445e-bd6d-e3bb79f5c470.1791956540.NI-6-GWf0LOtPXdtw_hkHfMxKOix3dUhmAP2WxuPKlM; __cf_bm=tgULhXPiS.FQSb7mJJ13.JdbQbWkci_WRbjAUM302Rg-1791351740.7366283-1.0.1.1-mRU7P7jWeYTbQgHN.rid9.0YffPQjpl9s71a7RrvRO_Nfp1iwLHs2TE16jMPrV.xgUN3bu0VQukyg55sXelQcOzXHfFWy9Sw3hC3Jf.ixusP73CjHDyCYOds4kgy072W\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__dpl","value":"psr2.107ebad4-10e4-445e-bd6d-e3bb79f5c470.1791956540.NI-6-GWf0LOtPXdtw_hkHfMxKOix3dUhmAP2WxuPKlM"},{"name":"__cf_bm","value":"tgULhXPiS.FQSb7mJJ13.JdbQbWkci_WRbjAUM302Rg-1791351740.7366283-1.0.1.1-mRU7P7jWeYTbQgHN.rid9.0YffPQjpl9s71a7RrvRO_Nfp1iwLHs2TE16jMPrV.xgUN3bu0VQukyg55sXelQcOzXHfFWy9Sw3hC3Jf.ixusP73CjHDyCYOds4kgy072W"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 07 Oct 2026 05:42:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a46a95001cd456ae-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21296,"size_decoded":8697,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-10-12T04:11:11.351415Z","times_seen":18479,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"extragiftcard.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}