{"report_id":"84d589ff-ef10-44cb-99b1-85494c22ad9b","version":6,"status":"done","tags":[],"date":"2025-12-07T11:37:11Z","url":{"schema":"http","addr":"giftcardmall.org/","fqdn":"giftcardmall.org","domain":"giftcardmall.org","tld":"org"},"ip":{"addr":"91.92.240.233","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"giftcardmall.org/","fqdn":"giftcardmall.org","domain":"giftcardmall.org","tld":"org"},"title":"GiftCardMall/MyGift — Check Your Balance","dom":{"size":31634,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27701)","md5":"0c85903ff2c2157fc217bedb54f22de3","sha1":"6e077f04d93484afc64bd1143642fed14d30fbd0","sha256":"b73707f3d9d37c225e4dd799152075e61e7242bafe495aff53cebb163ed8aedb","sha512":"df71c474e005138448e545b28670650df70fde7d046e50452e6e6afb69adb8537fed5b838b9ab4df5be94b5355857361dbb35dc29114cdc7a000dd2cf358bcb5","ssdeep":"768:GpAhpe1nBFq81kvxhW2HZeY4XXB8L2Yu+uLYGSYj8bPigxFA3/Oi0cr:IFkvxhzo7+uL/","tlshash":"0ee292311250287f575b0be4fa65373a90bfc28dc61b845cb2bd81b52fc7c99c99a398","dom_hash":"domhash4d624749aef8a2c7268fe4c98ed03316","first_seen":"2025-11-16T03:53:14.025716Z","last_seen":"2025-12-07T11:37:13.544189Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"giftcardmall.org/","fqdn":"giftcardmall.org","domain":"giftcardmall.org","tld":"org"},"ip":{"addr":"91.92.240.233","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-11T11:37:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"giftcardmall.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"giftcardmall.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"giftcardmall.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"giftcardmall.org","ip":{"addr":"91.92.240.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"domain_registered":"2022-12-18","domain_rank":1363563,"first_seen":"2025-11-16T03:53:12.327482Z","last_seen":"2025-11-16T03:53:12.327482Z","alert_count":18,"request_count":6,"received_data":563641,"sent_data":2688,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"giftcardmall.org/assets/index-D_BFbhtZ.js","fqdn":"giftcardmall.org","domain":"giftcardmall.org","tld":"org"},"ip":{"addr":"91.92.240.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"90d90da3066194606ce141d5b01fc5cf","sha1":"6ffc1a56593acf0431d5170c914bc3c17fcd3169","sha256":"39a28d2ba3d0d938c47c0fd7a30a2f9b78ed8a7e0e86190e9c2681893abd65f3","sha512":"9277e1438382ca455a34c802ec08d32df185a85c7f230c197146537008c2e37aca1aad51f57e49433f13acc06d277393a5086173610d7913b1eae35767501589","ssdeep":"6144:LZEkK6kcnw9afXv+nzRsUF6udD90mSXXfj8:IZ3O8","tlshash":"3d246715e140bbeebd6b09d5ed5fa108703f4be8c73a84f1507c64204a689aa7e1b7cd","size":211972,"data":"","first_seen":"2025-11-16T03:53:14.03233Z","last_seen":"2025-12-07T11:37:13.548496Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"giftcardmall.org/assets/react-vendor-CGFlJnet.js","fqdn":"giftcardmall.org","domain":"giftcardmall.org","tld":"org"},"ip":{"addr":"91.92.240.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"importedModule","is_inline":false,"md5":"09f4cbeeaec88a37f0cc0f1a1095ebc5","sha1":"1b6cdbfcb97700f85276e57f3e8feb5283eda73a","sha256":"d0562eadb37dccf6b2eba8c2020dd73876d8f694e356370794ab2cc1890b563c","sha512":"292244596679678621917ff0545f275fecf024af816f8c30f9f6a0c8a8387fe2039f2ff2d2c0a0a7674da5527b0c49283fbfd9c77a83eaa1dc9359fc0be30c47","ssdeep":"1536:FtWhYWvMd/SJPhRbnp39+xj/ZzBp80EMTIsyVTxDXA0ekXW2OdVzE79:fWhYWEaLp39+xVzBp1yV1cMW2Odc","tlshash":"d6f31be83952f5626bb302b710af1817737d191b280d4960a211fdceb4b846db17bfad","size":160046,"data":"","first_seen":"2025-11-16T03:53:14.038375Z","last_seen":"2025-12-07T11:37:13.549527Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"giftcardmall.org/favicon.svg","fqdn":"giftcardmall.org","domain":"giftcardmall.org","tld":"org"},"ip":{"addr":"91.92.240.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://giftcardmall.org/","date":"2025-12-07T11:36:51.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"giftcardmall.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Oct 2025 09:04:01 GMT","end":"Thu, 29 Jan 2026 09:04:00 GMT"},"fingerprint":{"sha1":"94:57:58:D3:D2:59:5A:AE:FB:CC:46:7A:08:E7:91:04:F0:A5:EB:C9","sha256":"85:4B:99:82:D1:88:C5:72:B6:F9:B1:14:51:57:83:BA:09:6E:1D:3E:0C:14:49:97:9E:39:94:C0:26:C0:67:8F"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: giftcardmall.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftcardmall.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 07 Dec 2025 11:36:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 387\r\nlast-modified: Sat, 08 Nov 2025 23:55:53 GMT\r\netag: \"690fd889-183\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":387,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f4e9757df9996b780ec1e892ab2de44","sha1":"f4521fc751cb743cb9d4955f27e85da716221473","sha256":"1ddbe3e8bb5bc34600d481ba9bb7d4e708344b08ca9e3d9df0c3aa09776784e8","sha512":"c3b1ff0abe786a3551e9efc6cc14ce7ea28dc3882dade3f0ed0fc8c31523754ed87dda37aece2ea7d091394683d8e3c05ceaf8ed23526c7cb8f14b830a22c295","ssdeep":"","tlshash":"9ae06844d20cad3ce624411ce73e31b8622aa1c3970d6248a5501c3fb6005debc7b2fc","first_seen":"2025-11-16T03:53:14.040762Z","last_seen":"2025-12-07T11:37:13.545586Z","times_seen":2,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"giftcardmall.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"giftcardmall.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"giftcardmall.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftcardmall.org/","fqdn":"giftcardmall.org","domain":"giftcardmall.org","tld":"org"},"ip":{"addr":"91.92.240.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-07T11:36:49.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"giftcardmall.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Oct 2025 09:04:01 GMT","end":"Thu, 29 Jan 2026 09:04:00 GMT"},"fingerprint":{"sha1":"94:57:58:D3:D2:59:5A:AE:FB:CC:46:7A:08:E7:91:04:F0:A5:EB:C9","sha256":"85:4B:99:82:D1:88:C5:72:B6:F9:B1:14:51:57:83:BA:09:6E:1D:3E:0C:14:49:97:9E:39:94:C0:26:C0:67:8F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: giftcardmall.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 07 Dec 2025 11:36:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-i: 91.90.42.154\r\npragma: no-cache\r\nexpires: 0\r\ncache-control: public, max-age=0 no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-store\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3986,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"49566db7f3a3b9b154ef5b179cac3ed2","sha1":"71c188a40554f56368515bdb05bd1cb017620f5d","sha256":"75ec8986c82c71520b55f1aeb89618ed4d5b2a27744e257b525b6d140f3ffa4d","sha512":"ed5ea0263855d04eea7af5ce1208e041ee824b030dce7cf51b02255bbf958303262a50ff4d1933e066cd5cf19b40ab45b852e9dda140a74c2bc145947ae5d49e","ssdeep":"","tlshash":"5881019acae00c361b2a03705ce97642d53ed64bd7506c0a7a6d203d1fcead9cab735d","first_seen":"2025-11-16T03:53:14.029985Z","last_seen":"2025-12-07T11:37:13.546587Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1228,"timings":{"blocked":463,"dns":24,"connect":146,"send":0,"wait":298,"receive":0,"ssl":294},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"giftcardmall.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"giftcardmall.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"giftcardmall.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftcardmall.org/assets/index-IW3dJtB1.css","fqdn":"giftcardmall.org","domain":"giftcardmall.org","tld":"org"},"ip":{"addr":"91.92.240.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://giftcardmall.org/","date":"2025-12-07T11:36:50.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"giftcardmall.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Oct 2025 09:04:01 GMT","end":"Thu, 29 Jan 2026 09:04:00 GMT"},"fingerprint":{"sha1":"94:57:58:D3:D2:59:5A:AE:FB:CC:46:7A:08:E7:91:04:F0:A5:EB:C9","sha256":"85:4B:99:82:D1:88:C5:72:B6:F9:B1:14:51:57:83:BA:09:6E:1D:3E:0C:14:49:97:9E:39:94:C0:26:C0:67:8F"}}},"request":{"raw":"GET /assets/index-IW3dJtB1.css HTTP/1.1\r\nHost: giftcardmall.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftcardmall.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 07 Dec 2025 11:36:50 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 08 Nov 2025 23:52:14 GMT\r\netag: W/\"690fd7ae-61ef\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25071,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (25070)","md5":"419e9036398e801d14ac33adad61f101","sha1":"af9ee4146a638dad71f984a035dbcee58eabc834","sha256":"60e202e3b6cbb730398cc70e1b78859729048bd7b376a45e7ca4955115b0d703","sha512":"65008c961fa611ceaa38ea796da0267e1207c0f2635910fbd4e7cb31899ac7f64584024e037785fa5d053e36fea24fba040184e01b82f454dd364138d117c3ce","ssdeep":"192:O9JyW9JyyxwOOTNsfTLSDem36QshgaIrYYu8oZNjrhsfDPgsfe9p:kwjXD6QshZ/ZNjrG6","tlshash":"bfb2456d57a0103bbc57e1e5d695b96df62af0c0de3e559aac820214bbe33f74c87a00","first_seen":"2025-11-16T03:53:14.035516Z","last_seen":"2025-12-07T11:37:13.547564Z","times_seen":2,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"giftcardmall.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"giftcardmall.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"giftcardmall.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftcardmall.org/assets/index-D_BFbhtZ.js","fqdn":"giftcardmall.org","domain":"giftcardmall.org","tld":"org"},"ip":{"addr":"91.92.240.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://giftcardmall.org/","date":"2025-12-07T11:36:50.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"giftcardmall.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Oct 2025 09:04:01 GMT","end":"Thu, 29 Jan 2026 09:04:00 GMT"},"fingerprint":{"sha1":"94:57:58:D3:D2:59:5A:AE:FB:CC:46:7A:08:E7:91:04:F0:A5:EB:C9","sha256":"85:4B:99:82:D1:88:C5:72:B6:F9:B1:14:51:57:83:BA:09:6E:1D:3E:0C:14:49:97:9E:39:94:C0:26:C0:67:8F"}}},"request":{"raw":"GET /assets/index-D_BFbhtZ.js HTTP/1.1\r\nHost: giftcardmall.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftcardmall.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 07 Dec 2025 11:36:50 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 10 Nov 2025 00:38:13 GMT\r\netag: W/\"691133f5-33c04\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":211972,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (63525)","md5":"90d90da3066194606ce141d5b01fc5cf","sha1":"6ffc1a56593acf0431d5170c914bc3c17fcd3169","sha256":"39a28d2ba3d0d938c47c0fd7a30a2f9b78ed8a7e0e86190e9c2681893abd65f3","sha512":"9277e1438382ca455a34c802ec08d32df185a85c7f230c197146537008c2e37aca1aad51f57e49433f13acc06d277393a5086173610d7913b1eae35767501589","ssdeep":"6144:LZEkK6kcnw9afXv+nzRsUF6udD90mSXXfj8:IZ3O8","tlshash":"3d246715e140bbeebd6b09d5ed5fa108703f4be8c73a84f1507c64204a689aa7e1b7cd","first_seen":"2025-11-16T03:53:14.03233Z","last_seen":"2025-12-07T11:37:13.548496Z","times_seen":2,"resource_available":true,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"giftcardmall.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"giftcardmall.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"giftcardmall.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftcardmall.org/assets/react-vendor-CGFlJnet.js","fqdn":"giftcardmall.org","domain":"giftcardmall.org","tld":"org"},"ip":{"addr":"91.92.240.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://giftcardmall.org/","date":"2025-12-07T11:36:50.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"giftcardmall.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Oct 2025 09:04:01 GMT","end":"Thu, 29 Jan 2026 09:04:00 GMT"},"fingerprint":{"sha1":"94:57:58:D3:D2:59:5A:AE:FB:CC:46:7A:08:E7:91:04:F0:A5:EB:C9","sha256":"85:4B:99:82:D1:88:C5:72:B6:F9:B1:14:51:57:83:BA:09:6E:1D:3E:0C:14:49:97:9E:39:94:C0:26:C0:67:8F"}}},"request":{"raw":"GET /assets/react-vendor-CGFlJnet.js HTTP/1.1\r\nHost: giftcardmall.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftcardmall.org/assets/index-D_BFbhtZ.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 07 Dec 2025 11:36:50 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 08 Nov 2025 23:52:14 GMT\r\netag: W/\"690fd7ae-2712e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":160046,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (54379)","md5":"09f4cbeeaec88a37f0cc0f1a1095ebc5","sha1":"1b6cdbfcb97700f85276e57f3e8feb5283eda73a","sha256":"d0562eadb37dccf6b2eba8c2020dd73876d8f694e356370794ab2cc1890b563c","sha512":"292244596679678621917ff0545f275fecf024af816f8c30f9f6a0c8a8387fe2039f2ff2d2c0a0a7674da5527b0c49283fbfd9c77a83eaa1dc9359fc0be30c47","ssdeep":"1536:FtWhYWvMd/SJPhRbnp39+xj/ZzBp80EMTIsyVTxDXA0ekXW2OdVzE79:fWhYWEaLp39+xVzBp1yV1cMW2Odc","tlshash":"d6f31be83952f5626bb302b710af1817737d191b280d4960a211fdceb4b846db17bfad","first_seen":"2025-11-16T03:53:14.038375Z","last_seen":"2025-12-07T11:37:13.549527Z","times_seen":2,"resource_available":true,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"giftcardmall.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"giftcardmall.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"giftcardmall.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftcardmall.org/assets/react-vendor-CGFlJnet.js","fqdn":"giftcardmall.org","domain":"giftcardmall.org","tld":"org"},"ip":{"addr":"91.92.240.233","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://giftcardmall.org/","date":"2025-12-07T11:36:51.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"giftcardmall.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Oct 2025 09:04:01 GMT","end":"Thu, 29 Jan 2026 09:04:00 GMT"},"fingerprint":{"sha1":"94:57:58:D3:D2:59:5A:AE:FB:CC:46:7A:08:E7:91:04:F0:A5:EB:C9","sha256":"85:4B:99:82:D1:88:C5:72:B6:F9:B1:14:51:57:83:BA:09:6E:1D:3E:0C:14:49:97:9E:39:94:C0:26:C0:67:8F"}}},"request":{"raw":"GET /assets/react-vendor-CGFlJnet.js HTTP/1.1\r\nHost: giftcardmall.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://giftcardmall.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 07 Dec 2025 11:36:51 GMT\r\ncontent-type: application/javascript; charset=utf8\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 08 Nov 2025 23:52:14 GMT\r\netag: W/\"690fd7ae-2712e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":160046,"size_decoded":0,"mime_type":"application/javascript; charset=utf8","magic":"JavaScript source, ASCII text, with very long lines (54379)","md5":"09f4cbeeaec88a37f0cc0f1a1095ebc5","sha1":"1b6cdbfcb97700f85276e57f3e8feb5283eda73a","sha256":"d0562eadb37dccf6b2eba8c2020dd73876d8f694e356370794ab2cc1890b563c","sha512":"292244596679678621917ff0545f275fecf024af816f8c30f9f6a0c8a8387fe2039f2ff2d2c0a0a7674da5527b0c49283fbfd9c77a83eaa1dc9359fc0be30c47","ssdeep":"1536:FtWhYWvMd/SJPhRbnp39+xj/ZzBp80EMTIsyVTxDXA0ekXW2OdVzE79:fWhYWEaLp39+xVzBp1yV1cMW2Odc","tlshash":"d6f31be83952f5626bb302b710af1817737d191b280d4960a211fdceb4b846db17bfad","first_seen":"2025-11-16T03:53:14.038375Z","last_seen":"2025-12-07T11:37:13.549527Z","times_seen":2,"resource_available":true,"data":null}},"time_used":354,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-07","alert":"Phishing Block","trigger":"giftcardmall.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"giftcardmall.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-07","alert":"Sinkholed","trigger":"giftcardmall.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}