{"report_id":"66a84ba9-8965-4371-ae48-f0b4031351ed","version":6,"status":"done","tags":[],"date":"2026-04-04T12:30:26Z","url":{"schema":"http","addr":"whatgift.to","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"ip":{"addr":"104.21.36.125","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"whatgift.to/home","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"title":"WhatGift – AI Gift Finder | Personalized Gift Ideas in Seconds","dom":{"size":101077,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23196)","md5":"eaa47f787b1281182e90911cb0ab28fc","sha1":"66dc7947fa6c2818cb864fbecbb02ddc3295b88e","sha256":"502b50e71de296250c72d71311e7b8871efd66be04d949e4defe69e129a96ac4","sha512":"7338980ec3b9a0e445f8595e702b9ca3d55f52fcd87570479a8a58366b0225bbb2f22047286be317635ff6c87721ffee61ca1cfe4521a1cef08345d35eb269b3","ssdeep":"1536:W5Ak3vvA/Ml5lURz3KC0TOFpULs0EfnhZtxPcE5:AviJ3KW2LPEvhbxkO","tlshash":"f2a3a531c24072263c03daf909e5e7259fe9ceb0de0a5798f7740d4d8bcbaba6199750","dom_hash":"domhash3eb808fac3c9572baab17564401629e3","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"whatgift.to","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"ip":{"addr":"104.21.36.125","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-09T12:30:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"whatgift.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"whatgift.to","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-04T12:30:27.867502Z","last_seen":"2026-04-04T12:30:27.867502Z","alert_count":17,"request_count":17,"received_data":876720,"sent_data":7327,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-29T22:16:18.281815Z","alert_count":0,"request_count":3,"received_data":87526,"sent_data":1576,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-29T22:20:07.848058Z","alert_count":0,"request_count":1,"received_data":9712,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"whatgift.to/","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-04-22T20:10:27.834179Z","times_seen":251432,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatgift.to/chunk-MMW3B2IF.js","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"41951d0861a25c91f6704a67c127fdec","sha1":"450a3cc0259164c47c98873869e71ecc78202341","sha256":"0714e380d868a43f360919bfd22c114d0e1406e2cf1660f9a0c9b551631eae7a","sha512":"6daf5a51519de3c5de271ab668de2c76a682a6e761c5329880435283b3a60c6edbcb953d8de3c345a9c7ee45e3e1850b340b047a6407e5021785a529f7ab9b82","ssdeep":"","tlshash":"fa319be95510f528037fc286985d33c5b2665ca78028da39765ecef848e0fa158bd33d","size":1791,"data":"","first_seen":"2026-04-04T12:30:32.103502Z","last_seen":"2026-04-04T12:30:32.103502Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatgift.to/chunk-VMSQPHPW.js","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"00b90ad9e0d7382093937dc3199656a5","sha1":"9949368f0796cf47dfb91730825d6cab22a19943","sha256":"8b98e291a867ca0a8560b716d9814885e926fb57d2bc9496242417ae4e7ad3ab","sha512":"0e69b63afebde024d2596f8f04a33d4c6868edb509b4736afc2d8c5468e5ef5fb6f8a0d4c4f64ca8583edc3681b62fe78941841a2d2d23077a6f6c068061f0ab","ssdeep":"","tlshash":"f741dfa9badaf746038261b39c331505e33d0ad55c8e046dbe6132c2fc2e446e637b74","size":2195,"data":"","first_seen":"2026-04-04T12:30:32.113171Z","last_seen":"2026-04-04T12:30:32.113171Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatgift.to/chunk-ERQFRE7Y.js","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5fc61dc1f67663731d2dbde8fd350f29","sha1":"b6ecb4f4068b0a3d4b8237097767e1cccb566b9b","sha256":"0ab6c8cdd8dd009d15911ea2243f2400e993f1c91fba474c1df19bce5a4726e5","sha512":"f6e6b0a7489cd5d7bf4cf949021a090394c273facdca85a66274f3b127c68c471ad2985cc4f5aefbcc6be292de1959299540b53d7edbbd1f5c91544c164b44a3","ssdeep":"3072:ZDxUkCD+2kZZ8LI6L3JTQgZ6GBpBH0BeB0uKzFLEuOYFRW6ssO1N:ZK+2kf6dfZhpBH0i0HEuOGGT7","tlshash":"0904b6dc3696b42353ae527640bb0407f36968821c4e082cb168e9ef3d7595da2f7f78","size":184205,"data":"","first_seen":"2026-04-04T12:30:32.112288Z","last_seen":"2026-04-04T12:30:32.112288Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatgift.to/chunk-ACNPU7SO.js","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3035f065f61604827225aa3e28fa80f7","sha1":"8504c5d90dea794c41ce3faf82845c41e6f0af2b","sha256":"d5777f7506d1099fec7f6a352259553b1f2e050e39ce82b211568e2be4786bb7","sha512":"ddaf2b195d5d01b70fd2454cd141c29bd02b6ba53d5a3f1462cc0fbaea3ee5acfb3cd078e4ea8c0ed6cda7508648764b78ed09294664e2bcc4a974ecd959ec79","ssdeep":"","tlshash":"c80110fd3116ea79808945877035c3453d380320be6e8928d78f48f49460dc201efa5e","size":740,"data":"","first_seen":"2026-04-04T12:30:32.101829Z","last_seen":"2026-04-04T12:30:32.101829Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatgift.to/chunk-EWUIDS65.js","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0b0feef25da7029f2b173ea23a622b3a","sha1":"548aff94dd2e8fa9d13c99cd37fa1d8e2dbfb740","sha256":"86e6690965e89f92b75b99444eefc9bf445dd056bfb1f672b3f6e87c64b51b57","sha512":"e48fee77985837ce8a6d7a8e8d92ed2e4daa0edd830dce05e2c20b6edf27c1212fda8206ad93db4d92dc499b90c1b9873ce9f5389a2c4b94dfd2aebb6c3b2c89","ssdeep":"3072:vL9Q+4+KvwTAYhfZtBuznh4QpksrqRW/9Htbti2O2V4hZRStY2btP2J9heJ3K3:G+4+KvwTltBuznh4QpksrqRW/9i9heJC","tlshash":"f6043a14b2503222558ea1fb48f98117ebdd59a0ce0742acf3684cef479ee9d6177bb0","size":180135,"data":"","first_seen":"2026-04-04T12:30:32.113999Z","last_seen":"2026-04-04T12:30:32.113999Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatgift.to/chunk-CPYDLASE.js","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"103a48df4630bcd3022b619560b81d38","sha1":"8d196e73340a4655d251862635581899903e6059","sha256":"00e41dcbc6e948fbb2c27285880b78dcc74a9d239fc80d403c1eed4afb315373","sha512":"e7638f1fddb62d93aa7d8afc8ad52b1a252d29421bb125814f15489e3b88625731388975183c890be87dd887078393c00cbe1d9fba1cc68687d7666c721a5ad8","ssdeep":"768:ZMvJqX76w69/sy062Cf6sqKY0N7oPO6ANxw:mvJqY506qSohANxw","tlshash":"97f208fa7714506db39bc91aa483b64d933dc031c005c79daaaaaa3c91d9bde01f771c","size":37033,"data":"","first_seen":"2026-04-04T12:30:32.099702Z","last_seen":"2026-04-04T12:30:32.099702Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatgift.to/chunk-QDP2RRY7.js","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d902222b42d48ea333c071ca807d9584","sha1":"fa8ca4a85b599b4d82fc28af44b6337185c87738","sha256":"e22be8615581591b0ea3b471700a2a3b44ceb6506fad90d5058bc09c86714e91","sha512":"42161c35289feadcb1dadabaf8e73a1708427780b3952d78bc4e1c9ddc3a108a24ecd37c498050456bf6e56b68c385f276d03e7a33c027b538a34617fc772fc4","ssdeep":"","tlshash":"df41ee0e6196d370818c5dfd58532071c23e07c9662cb1fdb6398ee1bc9cd4ba37696a","size":1907,"data":"","first_seen":"2026-04-04T12:30:32.10979Z","last_seen":"2026-04-04T12:30:32.10979Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatgift.to/main-COKICELL.js","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"99c762e79a114aa3436ac88e8df72dd8","sha1":"f1416c68ca1afa014b809c2650364a35d705489a","sha256":"ec7e654f85d3e402bb992cc67320ee8e638e6cfc9435b5751c638a10332f8b87","sha512":"9eb80fec14c52e6fa96793291397de6639b9e99df3b472c493efd60d4b7997dec7d5e761ebae13659de46b86b398b8090fb0294813d5df19d3610730b4c39594","ssdeep":"1536:2tbAoDjqnl2zn0Fqfa1tZXAmlmiUAslSbrn5tU1tS/4d5QcHPg9f0:2tsIjS74ZPg98","tlshash":"8a8309f13314703a93df42aa80760246b3355a54790a403df9a9edef686cd8a66f3f74","size":81164,"data":"","first_seen":"2026-04-04T12:30:32.106686Z","last_seen":"2026-04-04T12:30:32.106686Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatgift.to/chunk-5EDIK7ML.js","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"41b5e70b5e8f78640c21f92253f23d89","sha1":"859980b8f680718e6d88baa3d9be33e4fdbf97f4","sha256":"ce46179da4c5badb11af82a5667dd9ca2417c29cc4c36776edc20728f4dfae99","sha512":"58ca373f4d6651b64ef747da25613125f9993b090f892e73674b662e42acd3166f1342e5af675fa077bee81c356e94fd9959e3f663d8c8c13e96dc3abb2d6da2","ssdeep":"1536:1jeuYdxOFPfzRMlbg9gaxwVgCH0xbJ+V0kR11Mb:Sg9gaxqgCUxbJ+5Qb","tlshash":"a593e6e83382f16687df11a684754183f23b5cc9608c407cf61cecea2896d4995bbfb9","size":90028,"data":"","first_seen":"2026-04-04T12:30:32.110681Z","last_seen":"2026-04-04T12:30:32.110681Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatgift.to/chunk-UVPTGSQ3.js","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3c65c3282dca8db79965612f36347e22","sha1":"afc2eeccf16b744d5f10d3eae3b5122b7fb06659","sha256":"6cefe8a2d7639531c390f1f880983a926f1a7ee341f956415310d58bffe01843","sha512":"947080673829465b3fd7cf82e660fc3238abf8aa5aac6838f685c7afd246bc3248648f0bdf9a366c4e223de006f95822ba5415153bae24d0004e4b8bdae42715","ssdeep":"384:K0Cs2k+i+UBcLXqd1kzI/7eBYRx16sUs2ZHeQklxBhrz9H0TC/qC6mdtOBZj:K0tB/kzuKexGZ+QixBhrz9Q+tOBV","tlshash":"d282e785b386f863479259e8c06a0a96b34e0445719d883cfd305deb7cd0c869ab3ff9","size":18465,"data":"","first_seen":"2026-04-04T12:30:32.1045Z","last_seen":"2026-04-04T12:30:32.1045Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatgift.to/chunk-PEOTQPXL.js","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0b1d9807d34e07b8f1b00ef444e24d19","sha1":"d23bd9484c43f89a61787f9e955bfdb5b8d08e12","sha256":"36fc0bdf2ff1072d5846674ae07777f4941c6b277e7c0f4c46b4ab3623247fcc","sha512":"3b667862dda2bc95c838b950f1f7a81954fc708226250f260913a49a9ac970d5b88ee1c9541caf4e2526c92f468566b58e0230869717e251d40d2810f9667c67","ssdeep":"384:vTolIVlMU2D+XJJfhix1loMz16/aTD+O3XJAcDiXOB6gkEDoriOiE7yXSYrzylHb:vrfCDVorXSXablQghTuI5Xqn5Y","tlshash":"1913a78ab266f23407d9b05c54768587e31e68d19804402fbab8bcdd29fdc9466bff34","size":41712,"data":"","first_seen":"2026-04-04T12:30:32.114896Z","last_seen":"2026-04-04T12:30:32.114896Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"whatgift.to/chunk-CPYDLASE.js","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whatgift.to/","date":"2026-04-04T12:30:06.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatgift.to","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 19:57:50 GMT","end":"Mon, 22 Jun 2026 19:57:49 GMT"},"fingerprint":{"sha1":"5D:98:3E:96:FA:62:F5:DE:AE:2B:84:E7:6C:D9:2D:98:63:2D:2B:76","sha256":"3E:48:86:82:7B:54:74:FA:31:AD:7F:06:74:48:8A:58:F4:DC:2C:88:90:1A:4D:59:85:9B:DD:CB:7B:9D:04:B5"}}},"request":{"raw":"GET /chunk-CPYDLASE.js HTTP/1.1\r\nHost: whatgift.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whatgift.to/main-COKICELL.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:30:06 GMT\r\ncontent-type: application/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 04 Apr 2027 12:30:06 GMT\r\nlast-modified: Fri, 03 Apr 2026 12:53:14 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fWhCiH6eHnx7Tol7q3Ng%2B3eEVSOGFAvu43RyWIQDPDUjAPUzI8UfwUk%2BxKOEByidE7V6RH4KpTp%2FqYWsxoqEv8aOi7UpTO9kT8bR6kWJQ7cwEimYqFn%2BNoh8j2EVZQ%3D%3D\"}]}\r\netag: W/\"69cfb83a-90a9\"\r\ncontent-encoding: br\r\ncf-ray: 9e70528b7b790b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37033,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (37032)","md5":"103a48df4630bcd3022b619560b81d38","sha1":"8d196e73340a4655d251862635581899903e6059","sha256":"00e41dcbc6e948fbb2c27285880b78dcc74a9d239fc80d403c1eed4afb315373","sha512":"e7638f1fddb62d93aa7d8afc8ad52b1a252d29421bb125814f15489e3b88625731388975183c890be87dd887078393c00cbe1d9fba1cc68687d7666c721a5ad8","ssdeep":"768:ZMvJqX76w69/sy062Cf6sqKY0N7oPO6ANxw:mvJqY506qSohANxw","tlshash":"97f208fa7714506db39bc91aa483b64d933dc031c005c79daaaaaa3c91d9bde01f771c","first_seen":"2026-04-04T12:30:32.099702Z","last_seen":"2026-04-04T12:30:32.099702Z","times_seen":1,"resource_available":true,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"whatgift.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whatgift.to/apple-touch-icon.png","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whatgift.to/","date":"2026-04-04T12:30:06.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatgift.to","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 19:57:50 GMT","end":"Mon, 22 Jun 2026 19:57:49 GMT"},"fingerprint":{"sha1":"5D:98:3E:96:FA:62:F5:DE:AE:2B:84:E7:6C:D9:2D:98:63:2D:2B:76","sha256":"3E:48:86:82:7B:54:74:FA:31:AD:7F:06:74:48:8A:58:F4:DC:2C:88:90:1A:4D:59:85:9B:DD:CB:7B:9D:04:B5"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: whatgift.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whatgift.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:30:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 38402\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"69cfb83a-9602\"\r\nexpires: Sun, 04 Apr 2027 12:30:07 GMT\r\nlast-modified: Fri, 03 Apr 2026 12:53:14 GMT\r\nserver: cloudflare\r\nvia: 1.1 Caddy\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w7dibvWqM7xCn2sr2Lq97x8EdKDFJ5Gyy1uulAwDvSmhJe7RkWCoY%2FJCsZHMrdMu7jt68dwSDU%2BSoVVRloL5gL%2B8hzTVapUrZAyY2rGuI%2B%2BvyErJygN15SgJemjTNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e70528ccc4a0b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38402,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"1c9b423f56566132beee7eb9c950c52a","sha1":"efe92ac0f03b90a3fc5f3e08ada3ba283226bab3","sha256":"55d23fc3c98da6f6a1d099d7b67aa647183d9592eb7dde28e37b4856edba495b","sha512":"133da508d1ab5d17baadebaf654b9c9b64b9fee390a1ad350bf1c537674523ef31c2a79c3ca3a9bf92b7a703367c57cba2a061e094ed8629564e9850e7a878ed","ssdeep":"768:OShEXCoMP9U6fx8OpkfBxhxRsSBoWm2rR6CaMH+tU+rIrvUEAqUP:PmXCoMPeKkfBxj2SLxrCBU+qvUP","tlshash":"ba03f1a35af093cf8ddb508e0f020d5ed592c127196b9aad98374bf9086f1da985cd3c","first_seen":"2026-04-04T12:30:32.100909Z","last_seen":"2026-04-04T12:30:32.100909Z","times_seen":1,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"whatgift.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whatgift.to/chunk-ACNPU7SO.js","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whatgift.to/","date":"2026-04-04T12:30:07.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatgift.to","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 19:57:50 GMT","end":"Mon, 22 Jun 2026 19:57:49 GMT"},"fingerprint":{"sha1":"5D:98:3E:96:FA:62:F5:DE:AE:2B:84:E7:6C:D9:2D:98:63:2D:2B:76","sha256":"3E:48:86:82:7B:54:74:FA:31:AD:7F:06:74:48:8A:58:F4:DC:2C:88:90:1A:4D:59:85:9B:DD:CB:7B:9D:04:B5"}}},"request":{"raw":"GET /chunk-ACNPU7SO.js HTTP/1.1\r\nHost: whatgift.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whatgift.to/chunk-CPYDLASE.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:30:07 GMT\r\ncontent-type: application/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 04 Apr 2027 12:30:07 GMT\r\nlast-modified: Fri, 03 Apr 2026 12:53:14 GMT\r\nserver: cloudflare\r\nvia: 1.1 Caddy\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ACwtenBFvjSq8oV1X6EtPbjXkyHJqniTFrE%2Bj4%2BKDUTDe%2Fv5Ll7vN9nvktUvK9xHx9SEY8u%2Fxk1eGy3Q29FXwKRAEXP2CENxKwyk9V1%2FAUfm6o440HlLJ47QosDMQ%3D%3D\"}]}\r\netag: W/\"69cfb83a-2e4\"\r\ncontent-encoding: br\r\ncf-ray: 9e70528ddcf30b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":740,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (739)","md5":"3035f065f61604827225aa3e28fa80f7","sha1":"8504c5d90dea794c41ce3faf82845c41e6f0af2b","sha256":"d5777f7506d1099fec7f6a352259553b1f2e050e39ce82b211568e2be4786bb7","sha512":"ddaf2b195d5d01b70fd2454cd141c29bd02b6ba53d5a3f1462cc0fbaea3ee5acfb3cd078e4ea8c0ed6cda7508648764b78ed09294664e2bcc4a974ecd959ec79","ssdeep":"","tlshash":"c80110fd3116ea79808945877035c3453d380320be6e8928d78f48f49460dc201efa5e","first_seen":"2026-04-04T12:30:32.101829Z","last_seen":"2026-04-04T12:30:32.101829Z","times_seen":1,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"whatgift.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whatgift.to/","date":"2026-04-04T12:30:07.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://whatgift.to\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whatgift.to/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38404\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 03 Apr 2026 20:19:31 GMT\r\nexpires: Sat, 03 Apr 2027 20:19:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 58236\r\nlast-modified: Wed, 10 Sep 2025 16:48:54 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38404,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38404, version 1.0","md5":"ef05b30d6e5ca86ef9deda8c5bfa599a","sha1":"daeff530b773fd9ef9c50a803021a2cfba76083a","sha256":"e0c764a8e9e1cce92163c55bac4b2ad6cd4cf8c696ce2289ab5c41565e65b7e2","sha512":"0d5b2444bfe9e47a0665b6f25bf8bb161346888f8e5c49f2b8b4a6c4baacf3cde37a95aa8c3d5800d545fb5e684e3833df41582671073df12b60a42bf8ebb331","ssdeep":"768:FwI4wBedSjX1mVXUjvqnWIiYvffoRgF4vY7Ooy263B1kzEj9SSJxE:aIYdSjX+rWIiYXQRS4iTy2637ky0ExE","tlshash":"0603f1cb9b682138e95f513b0b8b13dd56ad112e9591d9a1821d8c0c96f033e5fff31a","first_seen":"2025-09-11T16:59:11.155785Z","last_seen":"2026-04-22T20:12:48.659451Z","times_seen":36835,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatgift.to/chunk-MMW3B2IF.js","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whatgift.to/","date":"2026-04-04T12:30:06.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatgift.to","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 19:57:50 GMT","end":"Mon, 22 Jun 2026 19:57:49 GMT"},"fingerprint":{"sha1":"5D:98:3E:96:FA:62:F5:DE:AE:2B:84:E7:6C:D9:2D:98:63:2D:2B:76","sha256":"3E:48:86:82:7B:54:74:FA:31:AD:7F:06:74:48:8A:58:F4:DC:2C:88:90:1A:4D:59:85:9B:DD:CB:7B:9D:04:B5"}}},"request":{"raw":"GET /chunk-MMW3B2IF.js HTTP/1.1\r\nHost: whatgift.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whatgift.to/main-COKICELL.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:30:06 GMT\r\ncontent-type: application/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 04 Apr 2027 12:30:06 GMT\r\nlast-modified: Fri, 03 Apr 2026 12:53:14 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HVc1%2F%2BMm3Vy6sFAO8JUc7dHEOmpo2xIHLJ4zhaAKs55K4q00sPuIo1poXQpq%2FnxGexseecSbwIkZc9Q%2B39M2zSy9giM0CYqk8GjhHzRbf%2BfWa6dIeFagVdRgPVfmOw%3D%3D\"}]}\r\netag: W/\"69cfb83a-6ff\"\r\ncontent-encoding: br\r\ncf-ray: 9e70528818c90b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1791,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1790)","md5":"41951d0861a25c91f6704a67c127fdec","sha1":"450a3cc0259164c47c98873869e71ecc78202341","sha256":"0714e380d868a43f360919bfd22c114d0e1406e2cf1660f9a0c9b551631eae7a","sha512":"6daf5a51519de3c5de271ab668de2c76a682a6e761c5329880435283b3a60c6edbcb953d8de3c345a9c7ee45e3e1850b340b047a6407e5021785a529f7ab9b82","ssdeep":"","tlshash":"fa319be95510f528037fc286985d33c5b2665ca78028da39765ecef848e0fa158bd33d","first_seen":"2026-04-04T12:30:32.103502Z","last_seen":"2026-04-04T12:30:32.103502Z","times_seen":1,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"whatgift.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whatgift.to/chunk-UVPTGSQ3.js","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whatgift.to/","date":"2026-04-04T12:30:06.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatgift.to","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 19:57:50 GMT","end":"Mon, 22 Jun 2026 19:57:49 GMT"},"fingerprint":{"sha1":"5D:98:3E:96:FA:62:F5:DE:AE:2B:84:E7:6C:D9:2D:98:63:2D:2B:76","sha256":"3E:48:86:82:7B:54:74:FA:31:AD:7F:06:74:48:8A:58:F4:DC:2C:88:90:1A:4D:59:85:9B:DD:CB:7B:9D:04:B5"}}},"request":{"raw":"GET /chunk-UVPTGSQ3.js HTTP/1.1\r\nHost: whatgift.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whatgift.to/main-COKICELL.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:30:06 GMT\r\ncontent-type: application/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 04 Apr 2027 12:30:06 GMT\r\nlast-modified: Fri, 03 Apr 2026 12:53:14 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m13Q6Ssmwyhpp5sjlayIBi1PbXI7%2FPcZ2m57gvxQ0KyDZ477Hfl805mgxMDs1D0tXQf2pF9kCVBprp2egUDSo5DQF9zcXs9PoaTqI4LRX6oeLl4VJxcEttKy8u%2FOtg%3D%3D\"}]}\r\netag: W/\"69cfb83a-4821\"\r\ncontent-encoding: br\r\ncf-ray: 9e70528828d90b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18465,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18112)","md5":"3c65c3282dca8db79965612f36347e22","sha1":"afc2eeccf16b744d5f10d3eae3b5122b7fb06659","sha256":"6cefe8a2d7639531c390f1f880983a926f1a7ee341f956415310d58bffe01843","sha512":"947080673829465b3fd7cf82e660fc3238abf8aa5aac6838f685c7afd246bc3248648f0bdf9a366c4e223de006f95822ba5415153bae24d0004e4b8bdae42715","ssdeep":"384:K0Cs2k+i+UBcLXqd1kzI/7eBYRx16sUs2ZHeQklxBhrz9H0TC/qC6mdtOBZj:K0tB/kzuKexGZ+QixBhrz9Q+tOBV","tlshash":"d282e785b386f863479259e8c06a0a96b34e0445719d883cfd305deb7cd0c869ab3ff9","first_seen":"2026-04-04T12:30:32.1045Z","last_seen":"2026-04-04T12:30:32.1045Z","times_seen":1,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"whatgift.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whatgift.to/home","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://whatgift.to/","date":"2026-04-04T12:30:07.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatgift.to","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 19:57:50 GMT","end":"Mon, 22 Jun 2026 19:57:49 GMT"},"fingerprint":{"sha1":"5D:98:3E:96:FA:62:F5:DE:AE:2B:84:E7:6C:D9:2D:98:63:2D:2B:76","sha256":"3E:48:86:82:7B:54:74:FA:31:AD:7F:06:74:48:8A:58:F4:DC:2C:88:90:1A:4D:59:85:9B:DD:CB:7B:9D:04:B5"}}},"request":{"raw":"GET /home HTTP/1.1\r\nHost: whatgift.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whatgift.to/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:30:07 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Fri, 03 Apr 2026 12:53:14 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Um%2FG9UYqq4gSow3G3P48m3kCGIsqcI%2FQtKDAI7ZtF6RyFA1OOtVMF7PjUa0DYYdCaujJjRHUpXHgTw%2BSNbyGGoG9H7ZcxGXGt0uWGaXnNMRpf3fsN9%2FTZmKGT6hvtQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9e7052920fe40b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18785,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8404)","md5":"3b0e21a62bb4c149b9b415b812016c35","sha1":"466233945ec762d97eccb41ccd2e7c69e2a1289c","sha256":"b97cf1d5ab0cf14d27b22a91c2cf086b8d035d99d65266600590edd446d99264","sha512":"42680d4fcca88d5e10c23ad4b671c87ea554fd3c5741f52099d379f97d2f54a992885e61f62e606b01a55ca1f3a45762aee61745b8e67cbf3583f1b9b1c30b52","ssdeep":"384:QLB6xQfy1/OQ9Nirg2Rf2vZ2b/2s2RS2vU2by2n2RJ2vv2bp2a2RE2vi2bk23UhC:UgafwZ0/xaSwU0y6aJwv0pHaEwi0kZhe","tlshash":"f482852345029359f5534fd610c87e23ed668c90b444273afafe198decabc72b3a9716","first_seen":"2026-04-04T12:30:32.105475Z","last_seen":"2026-04-04T12:30:32.105475Z","times_seen":1,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"whatgift.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whatgift.to/main-COKICELL.js","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whatgift.to/","date":"2026-04-04T12:30:05.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatgift.to","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 19:57:50 GMT","end":"Mon, 22 Jun 2026 19:57:49 GMT"},"fingerprint":{"sha1":"5D:98:3E:96:FA:62:F5:DE:AE:2B:84:E7:6C:D9:2D:98:63:2D:2B:76","sha256":"3E:48:86:82:7B:54:74:FA:31:AD:7F:06:74:48:8A:58:F4:DC:2C:88:90:1A:4D:59:85:9B:DD:CB:7B:9D:04:B5"}}},"request":{"raw":"GET /main-COKICELL.js HTTP/1.1\r\nHost: whatgift.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whatgift.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:30:05 GMT\r\ncontent-type: application/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 04 Apr 2027 12:30:05 GMT\r\nlast-modified: Fri, 03 Apr 2026 12:53:14 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xTA7GqIRQJ%2FUY%2BjUJoYqenP6xx1yVH0GJHUNWZKXfTE5FF8K2Jv8Z9FYCWozMtNNVst9s7cReBLITRuP6%2F5Ov6%2BMxcYlfVFxMIXjh37cC%2BYBA2%2BbpGj%2FfVWLGOtMig%3D%3D\"}]}\r\netag: W/\"69cfb83a-13d0c\"\r\ncontent-encoding: br\r\ncf-ray: 9e705285cf850b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81164,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"99c762e79a114aa3436ac88e8df72dd8","sha1":"f1416c68ca1afa014b809c2650364a35d705489a","sha256":"ec7e654f85d3e402bb992cc67320ee8e638e6cfc9435b5751c638a10332f8b87","sha512":"9eb80fec14c52e6fa96793291397de6639b9e99df3b472c493efd60d4b7997dec7d5e761ebae13659de46b86b398b8090fb0294813d5df19d3610730b4c39594","ssdeep":"1536:2tbAoDjqnl2zn0Fqfa1tZXAmlmiUAslSbrn5tU1tS/4d5QcHPg9f0:2tsIjS74ZPg98","tlshash":"8a8309f13314703a93df42aa80760246b3355a54790a403df9a9edef686cd8a66f3f74","first_seen":"2026-04-04T12:30:32.106686Z","last_seen":"2026-04-04T12:30:32.106686Z","times_seen":1,"resource_available":true,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"whatgift.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Playfair+Display:wght@400;500;600;700\u0026family=Lato:wght@300;400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://whatgift.to/","date":"2026-04-04T12:30:05.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /css2?family=Playfair+Display:wght@400;500;600;700\u0026family=Lato:wght@300;400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whatgift.to/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 04 Apr 2026 12:30:05 GMT\r\ndate: Sat, 04 Apr 2026 12:30:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9026,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"763151e714752854a5332bceb9e7ddc0","sha1":"1aa968fa8b69cb6817200fa2a640dcc544083f0f","sha256":"4dc1370ed1c8e437e35cd248b00eade589b9123c8f540a6fbea864dd5562a745","sha512":"e991417743710576fa6ca6ddf19106ac46984c8a7d9bb378791ba72e54e330b366d09615094367e804b44ccda14a3704b3aa03116971abc051392533e507b635","ssdeep":"192:NRIu71D5MDHr2om/Ur2vrr2btVr26gr2om/7r2vEr2bt2r26Zr2om/er2vNr2btf:OL2R/W2v/2bv26S2R/P2vG2b226F2R/+","tlshash":"8812dea20567a510db474cc223cf7f32ad6e61507085963daffe1cc8ac9bd269365b0d","first_seen":"2025-11-05T01:16:37.809806Z","last_seen":"2026-04-04T12:30:32.107927Z","times_seen":6,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":84,"dns":1,"connect":21,"send":0,"wait":33,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whatgift.to/","date":"2026-04-04T12:30:05.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://whatgift.to\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whatgift.to/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 04 Apr 2026 00:30:45 GMT\r\nexpires: Sun, 04 Apr 2027 00:30:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 43160\r\nlast-modified: Mon, 15 Sep 2025 17:09:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23580,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23580, version 1.0","md5":"e1b3b5908c9cf23dfb2b9c52b9a023ab","sha1":"fcd4136085f2a03481d9958cc6793a5ed98e714c","sha256":"918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537","sha512":"b2da7ef768385707afed62ca1f178efc6aa14519762e3f270129b3afee4d3782cb991e6fa66b3b08a2f81ff7caba0b4c34c726d952198b2ac4a784b36eb2a828","ssdeep":"384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK","tlshash":"91b2e1ce5d546e3a8028213785c17b488273572e9edf42c6dd83a6263a7092cfd3d96e","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-04-22T20:03:21.966959Z","times_seen":196048,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":78,"dns":1,"connect":8,"send":0,"wait":9,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatgift.to/chunk-QDP2RRY7.js","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whatgift.to/","date":"2026-04-04T12:30:06.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatgift.to","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 19:57:50 GMT","end":"Mon, 22 Jun 2026 19:57:49 GMT"},"fingerprint":{"sha1":"5D:98:3E:96:FA:62:F5:DE:AE:2B:84:E7:6C:D9:2D:98:63:2D:2B:76","sha256":"3E:48:86:82:7B:54:74:FA:31:AD:7F:06:74:48:8A:58:F4:DC:2C:88:90:1A:4D:59:85:9B:DD:CB:7B:9D:04:B5"}}},"request":{"raw":"GET /chunk-QDP2RRY7.js HTTP/1.1\r\nHost: whatgift.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whatgift.to/main-COKICELL.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:30:06 GMT\r\ncontent-type: application/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 04 Apr 2027 12:30:06 GMT\r\nlast-modified: Fri, 03 Apr 2026 12:53:14 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vhX1FXG2JZQqjKN9CYi%2FiYQ2w0iBOatSRo8B8BelnsC04%2FwRHqSTYwBJdvcMz9I72t5Xx2cX%2BDPIw0%2FxA9I0IJJaOb0A0JlWpejL70sUrCa7Hr9RsowWYvEon1p9vg%3D%3D\"}]}\r\netag: W/\"69cfb83a-773\"\r\ncontent-encoding: br\r\ncf-ray: 9e70528818ce0b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1907,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1906)","md5":"d902222b42d48ea333c071ca807d9584","sha1":"fa8ca4a85b599b4d82fc28af44b6337185c87738","sha256":"e22be8615581591b0ea3b471700a2a3b44ceb6506fad90d5058bc09c86714e91","sha512":"42161c35289feadcb1dadabaf8e73a1708427780b3952d78bc4e1c9ddc3a108a24ecd37c498050456bf6e56b68c385f276d03e7a33c027b538a34617fc772fc4","ssdeep":"","tlshash":"df41ee0e6196d370818c5dfd58532071c23e07c9662cb1fdb6398ee1bc9cd4ba37696a","first_seen":"2026-04-04T12:30:32.10979Z","last_seen":"2026-04-04T12:30:32.10979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"whatgift.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whatgift.to/chunk-5EDIK7ML.js","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whatgift.to/","date":"2026-04-04T12:30:06.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatgift.to","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 19:57:50 GMT","end":"Mon, 22 Jun 2026 19:57:49 GMT"},"fingerprint":{"sha1":"5D:98:3E:96:FA:62:F5:DE:AE:2B:84:E7:6C:D9:2D:98:63:2D:2B:76","sha256":"3E:48:86:82:7B:54:74:FA:31:AD:7F:06:74:48:8A:58:F4:DC:2C:88:90:1A:4D:59:85:9B:DD:CB:7B:9D:04:B5"}}},"request":{"raw":"GET /chunk-5EDIK7ML.js HTTP/1.1\r\nHost: whatgift.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whatgift.to/main-COKICELL.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:30:06 GMT\r\ncontent-type: application/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 04 Apr 2027 12:30:06 GMT\r\nlast-modified: Fri, 03 Apr 2026 12:53:14 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zzMEnLKGrZTjls8jUvnjYYDhnsu9kk6DwUwWTRBFpqfmUjKE%2FALsChEIqeM1927kEi%2BXMFx1H%2B07o2XhsYnh3Uyy5xDZBqULhfNorf5QrbjaZGj5cjLWHPiqUNsTCg%3D%3D\"}]}\r\netag: W/\"69cfb83a-15fac\"\r\ncontent-encoding: br\r\ncf-ray: 9e70528828d50b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90028,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"41b5e70b5e8f78640c21f92253f23d89","sha1":"859980b8f680718e6d88baa3d9be33e4fdbf97f4","sha256":"ce46179da4c5badb11af82a5667dd9ca2417c29cc4c36776edc20728f4dfae99","sha512":"58ca373f4d6651b64ef747da25613125f9993b090f892e73674b662e42acd3166f1342e5af675fa077bee81c356e94fd9959e3f663d8c8c13e96dc3abb2d6da2","ssdeep":"1536:1jeuYdxOFPfzRMlbg9gaxwVgCH0xbJ+V0kR11Mb:Sg9gaxqgCUxbJ+5Qb","tlshash":"a593e6e83382f16687df11a684754183f23b5cc9608c407cf61cecea2896d4995bbfb9","first_seen":"2026-04-04T12:30:32.110681Z","last_seen":"2026-04-04T12:30:32.110681Z","times_seen":1,"resource_available":true,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"whatgift.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whatgift.to/favicon.svg","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whatgift.to/","date":"2026-04-04T12:30:06.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatgift.to","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 19:57:50 GMT","end":"Mon, 22 Jun 2026 19:57:49 GMT"},"fingerprint":{"sha1":"5D:98:3E:96:FA:62:F5:DE:AE:2B:84:E7:6C:D9:2D:98:63:2D:2B:76","sha256":"3E:48:86:82:7B:54:74:FA:31:AD:7F:06:74:48:8A:58:F4:DC:2C:88:90:1A:4D:59:85:9B:DD:CB:7B:9D:04:B5"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: whatgift.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whatgift.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:30:07 GMT\r\ncontent-type: image/svg+xml\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 04 Apr 2027 12:30:07 GMT\r\nlast-modified: Fri, 03 Apr 2026 12:53:14 GMT\r\nserver: cloudflare\r\nvia: 1.1 Caddy\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aVwYKrLdH%2BLdlRS%2F2ao2SmHfkW%2FW2GOnlQQtvR5MRLylzxHGvJWRhaDLR8zgFTCywkQNd86UaJeYA9hqg5ygCml6crpZ95JaHLMMN%2BA%2FnvtkyewMxvMrVk8nqTZgTA%3D%3D\"}]}\r\netag: W/\"69cfb83a-1660e\"\r\ncontent-encoding: br\r\ncf-ray: 9e70528ccc4d0b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91662,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"45e0a75f669bc76f031fa41737341cc8","sha1":"0e2faff262502a99e3494b0f32d8b0c8a0507e62","sha256":"63592426950113aa6201fd3b46922d958b2e0b6ff37b283d0768913c3901630b","sha512":"2a91429de4bfa526da38615fcf04accfb435f07a780022f0fbca83fc9f493b31e97ff0313e38c73ed7790ac4f1abf3812f609fa82c394487b66c5547521ac742","ssdeep":"1536:NPU1YE5uxbMGeEthBRVf+gtUM9JgrGxLa8gNdu3qniAN0+czzcNHXeKH:NP7E5ibMC5Rd9SmqniANH4g9eKH","tlshash":"3c93127549f92da16f603bdec20c1b95fed30fbe2827e0cb4bf6598b45923694601b08","first_seen":"2026-04-04T12:30:32.11148Z","last_seen":"2026-04-04T12:30:32.11148Z","times_seen":1,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"whatgift.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whatgift.to/chunk-ERQFRE7Y.js","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whatgift.to/","date":"2026-04-04T12:30:06.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatgift.to","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 19:57:50 GMT","end":"Mon, 22 Jun 2026 19:57:49 GMT"},"fingerprint":{"sha1":"5D:98:3E:96:FA:62:F5:DE:AE:2B:84:E7:6C:D9:2D:98:63:2D:2B:76","sha256":"3E:48:86:82:7B:54:74:FA:31:AD:7F:06:74:48:8A:58:F4:DC:2C:88:90:1A:4D:59:85:9B:DD:CB:7B:9D:04:B5"}}},"request":{"raw":"GET /chunk-ERQFRE7Y.js HTTP/1.1\r\nHost: whatgift.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whatgift.to/main-COKICELL.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:30:06 GMT\r\ncontent-type: application/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 04 Apr 2027 12:30:06 GMT\r\nlast-modified: Fri, 03 Apr 2026 12:53:14 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NKUL6DtQbCWPc7KxlGSXNTcJNb0cKz%2BLHIb6y17tiEITnQ%2FyJRGq4YBvn9sYyqHUMtW2MIayS0owKKjBIXsoznJtdOz3%2BIKfVNJLejh7uN3OIhp%2FDDxTfH678Xc3Xg%3D%3D\"}]}\r\netag: W/\"69cfb83a-2cf8d\"\r\ncontent-encoding: br\r\ncf-ray: 9e70528828da0b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":184205,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (35065)","md5":"5fc61dc1f67663731d2dbde8fd350f29","sha1":"b6ecb4f4068b0a3d4b8237097767e1cccb566b9b","sha256":"0ab6c8cdd8dd009d15911ea2243f2400e993f1c91fba474c1df19bce5a4726e5","sha512":"f6e6b0a7489cd5d7bf4cf949021a090394c273facdca85a66274f3b127c68c471ad2985cc4f5aefbcc6be292de1959299540b53d7edbbd1f5c91544c164b44a3","ssdeep":"3072:ZDxUkCD+2kZZ8LI6L3JTQgZ6GBpBH0BeB0uKzFLEuOYFRW6ssO1N:ZK+2kf6dfZhpBH0i0HEuOGGT7","tlshash":"0904b6dc3696b42353ae527640bb0407f36968821c4e082cb168e9ef3d7595da2f7f78","first_seen":"2026-04-04T12:30:32.112288Z","last_seen":"2026-04-04T12:30:32.112288Z","times_seen":1,"resource_available":true,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"whatgift.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whatgift.to/chunk-VMSQPHPW.js","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whatgift.to/","date":"2026-04-04T12:30:06.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatgift.to","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 19:57:50 GMT","end":"Mon, 22 Jun 2026 19:57:49 GMT"},"fingerprint":{"sha1":"5D:98:3E:96:FA:62:F5:DE:AE:2B:84:E7:6C:D9:2D:98:63:2D:2B:76","sha256":"3E:48:86:82:7B:54:74:FA:31:AD:7F:06:74:48:8A:58:F4:DC:2C:88:90:1A:4D:59:85:9B:DD:CB:7B:9D:04:B5"}}},"request":{"raw":"GET /chunk-VMSQPHPW.js HTTP/1.1\r\nHost: whatgift.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whatgift.to/main-COKICELL.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:30:06 GMT\r\ncontent-type: application/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 04 Apr 2027 12:30:06 GMT\r\nlast-modified: Fri, 03 Apr 2026 12:53:14 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Y52iwBHNwEUGkNxN3PLdzA8S4iXZkebE7x2jMn9QUgwZx96SKw1eNKBjhit7ERv70jRohThnxHYOM8zgjFULCXaYeaKHI%2Bx3lBYKE5KOa6eAu1MYdU3eBMmywl2vA%3D%3D\"}]}\r\netag: W/\"69cfb83a-893\"\r\ncontent-encoding: br\r\ncf-ray: 9e70528828d80b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2195,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2194)","md5":"00b90ad9e0d7382093937dc3199656a5","sha1":"9949368f0796cf47dfb91730825d6cab22a19943","sha256":"8b98e291a867ca0a8560b716d9814885e926fb57d2bc9496242417ae4e7ad3ab","sha512":"0e69b63afebde024d2596f8f04a33d4c6868edb509b4736afc2d8c5468e5ef5fb6f8a0d4c4f64ca8583edc3681b62fe78941841a2d2d23077a6f6c068061f0ab","ssdeep":"","tlshash":"f741dfa9badaf746038261b39c331505e33d0ad55c8e046dbe6132c2fc2e446e637b74","first_seen":"2026-04-04T12:30:32.113171Z","last_seen":"2026-04-04T12:30:32.113171Z","times_seen":1,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"whatgift.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whatgift.to/chunk-EWUIDS65.js","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whatgift.to/","date":"2026-04-04T12:30:07.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatgift.to","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 19:57:50 GMT","end":"Mon, 22 Jun 2026 19:57:49 GMT"},"fingerprint":{"sha1":"5D:98:3E:96:FA:62:F5:DE:AE:2B:84:E7:6C:D9:2D:98:63:2D:2B:76","sha256":"3E:48:86:82:7B:54:74:FA:31:AD:7F:06:74:48:8A:58:F4:DC:2C:88:90:1A:4D:59:85:9B:DD:CB:7B:9D:04:B5"}}},"request":{"raw":"GET /chunk-EWUIDS65.js HTTP/1.1\r\nHost: whatgift.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whatgift.to/chunk-CPYDLASE.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:30:07 GMT\r\ncontent-type: application/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 04 Apr 2027 12:30:07 GMT\r\nlast-modified: Fri, 03 Apr 2026 12:53:14 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B41J5ceBN7V8%2F1ZLbgTRBW4gl9fKfEV7tJS%2BqkZS1MtOuE4IL%2B3DuHfyw2dnOYvy%2BVpX4latu73I0PvtSJrxCBVWM4Rz3zBmOdcCz2wRwMz%2FBvCzGSasc2wBPAWopA%3D%3D\"}]}\r\netag: W/\"69cfb83a-2bfa7\"\r\ncontent-encoding: br\r\ncf-ray: 9e70528ddcee0b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":180135,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (33684)","md5":"0b0feef25da7029f2b173ea23a622b3a","sha1":"548aff94dd2e8fa9d13c99cd37fa1d8e2dbfb740","sha256":"86e6690965e89f92b75b99444eefc9bf445dd056bfb1f672b3f6e87c64b51b57","sha512":"e48fee77985837ce8a6d7a8e8d92ed2e4daa0edd830dce05e2c20b6edf27c1212fda8206ad93db4d92dc499b90c1b9873ce9f5389a2c4b94dfd2aebb6c3b2c89","ssdeep":"3072:vL9Q+4+KvwTAYhfZtBuznh4QpksrqRW/9Htbti2O2V4hZRStY2btP2J9heJ3K3:G+4+KvwTltBuznh4QpksrqRW/9i9heJC","tlshash":"f6043a14b2503222558ea1fb48f98117ebdd59a0ce0742acf3684cef479ee9d6177bb0","first_seen":"2026-04-04T12:30:32.113999Z","last_seen":"2026-04-04T12:30:32.113999Z","times_seen":1,"resource_available":true,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"whatgift.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whatgift.to/chunk-PEOTQPXL.js","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whatgift.to/","date":"2026-04-04T12:30:07.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatgift.to","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 19:57:50 GMT","end":"Mon, 22 Jun 2026 19:57:49 GMT"},"fingerprint":{"sha1":"5D:98:3E:96:FA:62:F5:DE:AE:2B:84:E7:6C:D9:2D:98:63:2D:2B:76","sha256":"3E:48:86:82:7B:54:74:FA:31:AD:7F:06:74:48:8A:58:F4:DC:2C:88:90:1A:4D:59:85:9B:DD:CB:7B:9D:04:B5"}}},"request":{"raw":"GET /chunk-PEOTQPXL.js HTTP/1.1\r\nHost: whatgift.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whatgift.to/chunk-CPYDLASE.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:30:07 GMT\r\ncontent-type: application/javascript\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 04 Apr 2027 12:30:07 GMT\r\nlast-modified: Fri, 03 Apr 2026 12:53:14 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RmO%2FdB26Q9PendErDvkZjDJWrVghFEte1IDxvDIK0o0a9wa8V4jeGCk3B6v1XPNx97q25LidZPT0zFhFGFIr%2BU6XQ360CrMwXCbJ5J6s2zAF9Vsb46tFPSk2yt0kQA%3D%3D\"}]}\r\netag: W/\"69cfb83a-a2f0\"\r\ncontent-encoding: br\r\ncf-ray: 9e70528ddcf00b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41712,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41711)","md5":"0b1d9807d34e07b8f1b00ef444e24d19","sha1":"d23bd9484c43f89a61787f9e955bfdb5b8d08e12","sha256":"36fc0bdf2ff1072d5846674ae07777f4941c6b277e7c0f4c46b4ab3623247fcc","sha512":"3b667862dda2bc95c838b950f1f7a81954fc708226250f260913a49a9ac970d5b88ee1c9541caf4e2526c92f468566b58e0230869717e251d40d2810f9667c67","ssdeep":"384:vTolIVlMU2D+XJJfhix1loMz16/aTD+O3XJAcDiXOB6gkEDoriOiE7yXSYrzylHb:vrfCDVorXSXablQghTuI5Xqn5Y","tlshash":"1913a78ab266f23407d9b05c54768587e31e68d19804402fbab8bcdd29fdc9466bff34","first_seen":"2026-04-04T12:30:32.114896Z","last_seen":"2026-04-04T12:30:32.114896Z","times_seen":1,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"whatgift.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whatgift.to/","date":"2026-04-04T12:30:07.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://whatgift.to\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whatgift.to/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23040\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 03 Apr 2026 21:37:47 GMT\r\nexpires: Sat, 03 Apr 2027 21:37:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 53540\r\nlast-modified: Mon, 15 Sep 2025 17:11:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23040,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23040, version 1.0","md5":"de69cf9e514df447d1b0bb16f49d2457","sha1":"2ac78601179c3a63ba3f3f3081556b12ddcaf655","sha256":"c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49","sha512":"4aebb7e54d88827d4a02808f04901c0d09b756c518202b056a6c0f664948f5585221d16967f546e064187c6545acef15d59b68d0a7a59897bd899d3e9dda37b1","ssdeep":"384:adpABC4a0HkBpR1HWtGu06B6lsoAKiwY0HcLKglV6Z+DVb35PJZDdiZeJ1vqYg:0AHa0Ezf2tZn6lsoABwTKK46ZQb3V7wD","tlshash":"fca2e1c05cc1e2d4ae02daf7fda5a4eab4e2f01123a8f65f8f114b75d505993640fe01","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-04-22T20:03:21.942518Z","times_seen":143259,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whatgift.to/","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T12:30:05.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatgift.to","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 19:57:50 GMT","end":"Mon, 22 Jun 2026 19:57:49 GMT"},"fingerprint":{"sha1":"5D:98:3E:96:FA:62:F5:DE:AE:2B:84:E7:6C:D9:2D:98:63:2D:2B:76","sha256":"3E:48:86:82:7B:54:74:FA:31:AD:7F:06:74:48:8A:58:F4:DC:2C:88:90:1A:4D:59:85:9B:DD:CB:7B:9D:04:B5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: whatgift.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 12:30:05 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AuNgPFvhuU80BeKM2z7iFHrU2JpN9jHuVyGDaAaztjfenamgDbJqwC3xXL7sKocK9PPQjz0j1goYsNTiNN77OsuQ%2BHDkzKKMxfWg73VZXDegRPB9vHwQt9Egu3wnVw%3D%3D\"}]}\r\nlast-modified: Fri, 03 Apr 2026 12:53:14 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e705282fdb50b4d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18785,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8404)","md5":"3b0e21a62bb4c149b9b415b812016c35","sha1":"466233945ec762d97eccb41ccd2e7c69e2a1289c","sha256":"b97cf1d5ab0cf14d27b22a91c2cf086b8d035d99d65266600590edd446d99264","sha512":"42680d4fcca88d5e10c23ad4b671c87ea554fd3c5741f52099d379f97d2f54a992885e61f62e606b01a55ca1f3a45762aee61745b8e67cbf3583f1b9b1c30b52","ssdeep":"384:QLB6xQfy1/OQ9Nirg2Rf2vZ2b/2s2RS2vU2by2n2RJ2vv2bp2a2RE2vi2bk23UhC:UgafwZ0/xaSwU0y6aJwv0pHaEwi0kZhe","tlshash":"f482852345029359f5534fd610c87e23ed668c90b444273afafe198decabc72b3a9716","first_seen":"2026-04-04T12:30:32.105475Z","last_seen":"2026-04-04T12:30:32.105475Z","times_seen":1,"resource_available":true,"data":null}},"time_used":353,"timings":{"blocked":53,"dns":37,"connect":1,"send":0,"wait":246,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"whatgift.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whatgift.to/styles-YD7R4KWY.css","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://whatgift.to/","date":"2026-04-04T12:30:05.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatgift.to","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 19:57:50 GMT","end":"Mon, 22 Jun 2026 19:57:49 GMT"},"fingerprint":{"sha1":"5D:98:3E:96:FA:62:F5:DE:AE:2B:84:E7:6C:D9:2D:98:63:2D:2B:76","sha256":"3E:48:86:82:7B:54:74:FA:31:AD:7F:06:74:48:8A:58:F4:DC:2C:88:90:1A:4D:59:85:9B:DD:CB:7B:9D:04:B5"}}},"request":{"raw":"GET /styles-YD7R4KWY.css HTTP/1.1\r\nHost: whatgift.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whatgift.to/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:30:05 GMT\r\ncontent-type: text/css\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 04 Apr 2027 12:30:05 GMT\r\nlast-modified: Fri, 03 Apr 2026 12:53:14 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XlSipoK1pbKCscsV2%2F969QaWgJVpioTGEGYjEVdY%2ByXzBS6TjNIhAyu6eW3g7m1tbHMnP4yTrnfSOg0mtUcW7T44tU88f7BZ9Ya%2B88EtBGqeGDbfLP8Z4VZD2bekFA%3D%3D\"}]}\r\netag: W/\"69cfb83a-2d25\"\r\ncontent-encoding: br\r\ncf-ray: 9e705285cf890b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11557,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11556)","md5":"9f45ab749154c12c6e491ebba4e9c2ba","sha1":"5cc71a6db516cc535faa1c748b5214639bb60614","sha256":"0d8879f14888bf55333ef864b459f23a3b37952205b0d167a61fe0aee9d6ad69","sha512":"715dfa8dec9cf01998118f05aa884d63db676c7fff408f90464560562ad04947dfa2941bebc7aa0c0929a533e508bbe534c0b28364373523d9d3bcd5b570df14","ssdeep":"192:rhMZOR/rt2zbo8D2mjM807heoOph2HQPzXXOaZUeHCk7/dZNkhV9zD73V:uZORDtUbo8DFM807hWO4HOaZUeik7/dk","tlshash":"f8321007d5422365bd650bed91605a91ded48dc5f80037aafa623e49febd870b2ecb03","first_seen":"2026-04-04T12:30:32.116232Z","last_seen":"2026-04-04T12:30:32.116232Z","times_seen":1,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"whatgift.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whatgift.to/assets/images/what-gift-logo.png","fqdn":"whatgift.to","domain":"whatgift.to","tld":"to"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whatgift.to/","date":"2026-04-04T12:30:06.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whatgift.to","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 19:57:50 GMT","end":"Mon, 22 Jun 2026 19:57:49 GMT"},"fingerprint":{"sha1":"5D:98:3E:96:FA:62:F5:DE:AE:2B:84:E7:6C:D9:2D:98:63:2D:2B:76","sha256":"3E:48:86:82:7B:54:74:FA:31:AD:7F:06:74:48:8A:58:F4:DC:2C:88:90:1A:4D:59:85:9B:DD:CB:7B:9D:04:B5"}}},"request":{"raw":"GET /assets/images/what-gift-logo.png HTTP/1.1\r\nHost: whatgift.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whatgift.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 12:30:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 44976\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"69cfb83a-afb0\"\r\nexpires: Sun, 04 Apr 2027 12:30:06 GMT\r\nlast-modified: Fri, 03 Apr 2026 12:53:14 GMT\r\nserver: cloudflare\r\nvia: 1.1 Caddy\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IvoT4bSERfk1lu11wIrgjAReyI0d3jmpbJVxnsZb3Y1Lv4sB%2FoDNeqLqrdzgxGYrzkumR58olRNo0Qa9aRNynI4EYxPvlWCwVRFikqlHym4aOy2nO67qYmezvMhmFA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e70528b2b2c0b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44976,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 356 x 122, 8-bit/color RGBA, non-interlaced","md5":"c8ac03e59edb1faac25f260e8f873c2e","sha1":"867573642da6e0ef9f8997c93b2e0e1509d41ba1","sha256":"3cb49fc4775036fcf4f69eaa26f91158d179cef78eb43de01f54a07d9087478c","sha512":"abe8eb1bddf0b6822a91ed4b3d88f0d32e13e876266b19918889ed64f5030a4eedc71c245f4c15e00cb499821ce2715682248f3ce1a2f0624a8c3f9bb302146b","ssdeep":"768:yQVkx/fBfrI4ngVfjN9xYOZwfEbu/EVcVRYbSt1Gpqzau7j7laCWTwakfIQrDzOE:yQVkx/JfrIKSj9YGMEbusaB+qfldWTwR","tlshash":"6a13f14cc485bea84187c6f6cb27919cd5f2d267d60ae78b0c4aaa6cfc80f937045313","first_seen":"2026-04-04T12:30:32.117471Z","last_seen":"2026-04-04T12:30:32.117471Z","times_seen":1,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"whatgift.to","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}