{"report_id":"a9138a53-3744-4979-adda-4dd2e73a9cd7","version":6,"status":"done","tags":[],"date":"2025-10-22T14:56:11Z","url":{"schema":"http","addr":"usdcsavingsb.com","fqdn":"usdcsavingsb.com","domain":"usdcsavingsb.com","tld":"com"},"ip":{"addr":"3.164.206.41","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"usdcsavingsb.com/#/","fqdn":"usdcsavingsb.com","domain":"usdcsavingsb.com","tld":"com"},"title":"USDC Savings"},"submit":{"url":{"schema":"http","addr":"usdcsavingsb.com","fqdn":"usdcsavingsb.com","domain":"usdcsavingsb.com","tld":"com"},"ip":{"addr":"3.164.206.41","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-26T14:56:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"usdcsavingsb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"usdcsavingsb.com","ip":{"addr":"3.167.2.107","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-10-21","domain_rank":0,"first_seen":"2025-10-22T14:56:13.402542Z","last_seen":"2025-10-22T14:56:13.402542Z","alert_count":19,"request_count":19,"received_data":3938429,"sent_data":8575,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"image.providesupport.com","ip":{"addr":"104.20.25.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2003-09-04","domain_rank":225098,"first_seen":"2014-06-19T18:41:57Z","last_seen":"2025-10-15T19:32:26.13245Z","alert_count":0,"request_count":4,"received_data":18248,"sent_data":1972,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"image.providesupport.com/js/0x5jyk2wr4pig17jbcrd1ziv80/safe-standard-sync.js?ps_h=GfzH\u0026ps_t=1761144950853","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"104.20.25.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f773a00c3213f424ac97b25da77925fe","sha1":"780d40dd6f8fe7e57a9d3805e52a3c98bde6c694","sha256":"cf8608d22f47143d9767c07688a494daa18174e69e117670e993cbf78c20f92b","sha512":"0d9025ce19ce370668695b926a21fd904ace7470f16eee59bb419b06a4a5ca1aa1a656aeef9292b47ff8070c755eeadfaf39e9a769ee989ce09ddf706631608b","ssdeep":"","tlshash":"88213077c7349bf51b1a2ae7792f2d2d8233785b8beecb2ac4340491200d7665011ed6","size":1128,"data":"","first_seen":"2025-10-22T14:56:23.018603Z","last_seen":"2025-10-22T14:56:23.018603Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdcsavingsb.com/js/app.7154d82e.js","fqdn":"usdcsavingsb.com","domain":"usdcsavingsb.com","tld":"com"},"ip":{"addr":"3.167.2.107","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f8bb44d0136a4a6a50b444b2b9201448","sha1":"b811f66c08bd13cf0492d49d481221bd0eeb5b74","sha256":"0dd7d289c0d406142100f8ddda0a397af468f07c5f661b6dd8c085ec70e2de91","sha512":"313548789b899607915fcbed785f125ef54cfd54b5af129b3caa5db8e012202000cf6a6ad001896d9f461c6926dbf31566e66267ee5bb1ad41b9abced443893e","ssdeep":"1536:Y3aghjUtzB+6iXTQ7A6DJZy6mJ8dIeZpxmslnxrH/PBILTRuQnPG:oagd2N+6ATQxpxrxInRuP","tlshash":"67a33b163187a57f4c5ab161911f2a21a0703ff6d51dc0427b3c8ea8a6e8ef8533eb5d","size":105612,"data":"","first_seen":"2025-10-22T14:56:22.996543Z","last_seen":"2025-10-31T19:31:05.623302Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdcsavingsb.com/js/chunk-vendors.a4216a5c.js","fqdn":"usdcsavingsb.com","domain":"usdcsavingsb.com","tld":"com"},"ip":{"addr":"3.167.2.107","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7207b28fd8ea4206184ed758d7930a8","sha1":"ddeeac439c01ea6beea6138c1b09692451c69d9d","sha256":"893600c799c437d142f97d1cbf801d19c0af5dfd72002c379c45216ca31c870e","sha512":"c35b37f13de51153a65346135bb87c47a38ff908c073173645a8c3227ce82d9b92684e0f79e4184134ad406a527d2572bf865563f3e3fabb20b97609cc152bdf","ssdeep":"12288:Omwbtukh22agTBnM6nv3PvfllkeEZwI0eYC:JwBK2agTBnTP7P20RC","tlshash":"e615f889b292f061079760e1507f1107f23a7d58744a8098f6b9e8ea7dbda4da137f3c","size":946295,"data":"","first_seen":"2025-10-22T14:56:23.035928Z","last_seen":"2025-10-31T19:31:05.61108Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdcsavingsb.com/#/","fqdn":"usdcsavingsb.com","domain":"usdcsavingsb.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ab7282b09daceadd28845edd1fc372f","sha1":"3ba3877cbe7e174ec7186686d005cb502eaf85d6","sha256":"3fada7ab3325f5fedecba57d248531b7c84ed827c2aaa6ce31b3cbb8840c9287","sha512":"9582fdd4c2e7c9983a137be5f779470bb3d7abdb8583598411a9b98ab73ffb285ef87a7428089a51bd14c9559b63a43fa6eaa12afdc46de080610ac5e8e1538f","ssdeep":"","tlshash":"93e026aa9a229a2847a75046a6dfba41a1a1112c15b2c0454854cce03828ea282aadc5","size":313,"data":"","first_seen":"2025-10-22T14:56:23.041267Z","last_seen":"2025-10-31T19:31:05.621575Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/sjs/static.js","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"104.20.25.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3a91d688e22bd47f0f45bab5508bad2","sha1":"03c4b81027348e06dd37b21862016ee1800136b7","sha256":"c0af938f2039a093489fe896b2f1b2929397f03efa4550f1e3fef67083d23ff2","sha512":"c5a6286cd1b8e4879501793ce5e5bde89461f83077d5dd2f4df0b455a9a1f96d6610fc4cda48ecfa1461f70c4d10600421e1547a2eb5e965f4f2516cb96bcbc3","ssdeep":"384:3EAAirv/1U2XLtfZoYO7YhaJpYy664roz:3EAd9U2XJfZed66+I","tlshash":"8a52d6dd76e6387683a73679e5bf120d30b54c91e98ad890d090e0d0ae35e9c412bf8f","size":14496,"data":"","first_seen":"2025-02-07T21:57:24.227906Z","last_seen":"2026-07-18T09:26:51.459283Z","times_seen":710,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"usdcsavingsb.com/js/app.7154d82e.js","fqdn":"usdcsavingsb.com","domain":"usdcsavingsb.com","tld":"com"},"ip":{"addr":"3.167.2.107","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdcsavingsb.com/","date":"2025-10-22T14:55:50.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdcsavingsb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:33:08:DC:DB:FB:49:E8:09:FA:3E:34:34:85:AC:02:15:9A:E4:1F","sha256":"48:AE:52:AE:B1:AC:28:45:A6:E8:48:AE:59:74:5F:C8:60:1D:F3:39:77:1E:74:7A:BF:60:49:B3:78:32:A8:19"}}},"request":{"raw":"GET /js/app.7154d82e.js HTTP/1.1\r\nHost: usdcsavingsb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdcsavingsb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 08:34:43 GMT\r\ncache-control: max-age=43200\r\nlast-modified: Mon, 01 Sep 2025 14:06:37 GMT\r\ncontent-encoding: br\r\nexpires: Wed, 22 Oct 2025 20:34:43 GMT\r\netag: W/\"68b5a86d-19c8c\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e6220bd7bee9300eb5b87a282645e6ec.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: s2sncbvFj1ALUKfk4G88Y5CVLMP03trqGvUVIhRCsRpuORlqJbw6pw==\r\nage: 22867\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":105612,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64505), with no line terminators","md5":"f8bb44d0136a4a6a50b444b2b9201448","sha1":"b811f66c08bd13cf0492d49d481221bd0eeb5b74","sha256":"0dd7d289c0d406142100f8ddda0a397af468f07c5f661b6dd8c085ec70e2de91","sha512":"313548789b899607915fcbed785f125ef54cfd54b5af129b3caa5db8e012202000cf6a6ad001896d9f461c6926dbf31566e66267ee5bb1ad41b9abced443893e","ssdeep":"1536:Y3aghjUtzB+6iXTQ7A6DJZy6mJ8dIeZpxmslnxrH/PBILTRuQnPG:oagd2N+6ATQxpxrxInRuP","tlshash":"67a33b163187a57f4c5ab161911f2a21a0703ff6d51dc0427b3c8ea8a6e8ef8533eb5d","first_seen":"2025-10-22T14:56:22.996543Z","last_seen":"2025-10-31T19:31:05.623302Z","times_seen":4,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"usdcsavingsb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdcsavingsb.com/css/chunk-vendors.fda3ab26.css","fqdn":"usdcsavingsb.com","domain":"usdcsavingsb.com","tld":"com"},"ip":{"addr":"3.167.2.107","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdcsavingsb.com/","date":"2025-10-22T14:55:50.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdcsavingsb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:33:08:DC:DB:FB:49:E8:09:FA:3E:34:34:85:AC:02:15:9A:E4:1F","sha256":"48:AE:52:AE:B1:AC:28:45:A6:E8:48:AE:59:74:5F:C8:60:1D:F3:39:77:1E:74:7A:BF:60:49:B3:78:32:A8:19"}}},"request":{"raw":"GET /css/chunk-vendors.fda3ab26.css HTTP/1.1\r\nHost: usdcsavingsb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdcsavingsb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 08:34:43 GMT\r\ncache-control: max-age=43200\r\nlast-modified: Mon, 01 Sep 2025 14:06:37 GMT\r\ncontent-encoding: br\r\nexpires: Wed, 22 Oct 2025 20:34:43 GMT\r\netag: W/\"68b5a86d-23baa\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e6220bd7bee9300eb5b87a282645e6ec.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: nQEvU-0x_XyFcR767gjONGMU3KSPnFNv7bSoiDUf0xTcdk9pviM8eg==\r\nage: 22867\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146346,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"54fc4e1853ec79c41fb112fe3c9ce6f4","sha1":"f65ee8672fe4312f18e2799c2f68ec0636968624","sha256":"c6a8c31fb9150fc35ac760d0b127ba3443169f55be40cee43bf9169be7dbf57f","sha512":"c2f6bf0781f38684ac879dfc47feda6dcc93d0d3f8b1d1dfef20b08dc5e5e26b35d6c8b58ed8a5b9f729edb1d3263e1d7f1196429e830150859e206f32c57834","ssdeep":"1536:PTQbFNJ+jqkiHc4rx3WqyrtpqoSWEDZ8Cfq1xn1RVSJf:PWrxmNH9yDzfkZEJf","tlshash":"ede3e62796c0236cb31bcd209fc4a6d8e224d123e5121bf9f1517a2dcfcbb951296b5b","first_seen":"2023-12-20T05:25:30Z","last_seen":"2026-07-27T13:44:37.113863Z","times_seen":83,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"usdcsavingsb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdcsavingsb.com/img/bottom-coin6.da7b1e49.png","fqdn":"usdcsavingsb.com","domain":"usdcsavingsb.com","tld":"com"},"ip":{"addr":"3.167.2.107","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdcsavingsb.com/","date":"2025-10-22T14:55:50.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdcsavingsb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:33:08:DC:DB:FB:49:E8:09:FA:3E:34:34:85:AC:02:15:9A:E4:1F","sha256":"48:AE:52:AE:B1:AC:28:45:A6:E8:48:AE:59:74:5F:C8:60:1D:F3:39:77:1E:74:7A:BF:60:49:B3:78:32:A8:19"}}},"request":{"raw":"GET /img/bottom-coin6.da7b1e49.png HTTP/1.1\r\nHost: usdcsavingsb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdcsavingsb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 197483\r\nserver: nginx\r\ndate: Tue, 21 Oct 2025 17:18:07 GMT\r\nlast-modified: Mon, 01 Sep 2025 14:06:37 GMT\r\naccept-ranges: bytes\r\netag: \"68b5a86d-3036b\"\r\nexpires: Thu, 20 Nov 2025 17:18:07 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e6220bd7bee9300eb5b87a282645e6ec.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: XPkDM8esAo4rBCTPTIXQ1prbRcVql5mG033glgFq5ekH279hOv-GAg==\r\nage: 77863\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":197483,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1728 x 464, 8-bit/color RGBA, non-interlaced","md5":"975719cc3ff1c2dfff5cd535e8ce0f97","sha1":"d17b4908ca0805eceebff748ea64dcb793c9cdda","sha256":"f31f2a44d08b23c8e6d93a2150b3cec09ff74d8bdbf24bdbde2b61f77dea58db","sha512":"4c40800436f8ef897dd97ac80d9f61da200b7882920678fbc214c7d3e9c78105eefb868bf2da17ca333df41260df06f51b8d5a66c13710251cb77b3f8f0ed070","ssdeep":"6144:poKgCgX2LbbxsKmvH84SXwjwfv7dDh8Iy1C5:poPp27xTAb7MfDdDh8IE6","tlshash":"4e14e00bca15257fb4914529774b39e5d235243374a8df9f0fa2607e2e4bba8ec30e61","first_seen":"2025-10-22T14:56:23.002095Z","last_seen":"2026-05-09T00:05:58.74206Z","times_seen":23,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"usdcsavingsb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdcsavingsb.com/css/app.e02feee3.css","fqdn":"usdcsavingsb.com","domain":"usdcsavingsb.com","tld":"com"},"ip":{"addr":"3.167.2.107","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdcsavingsb.com/","date":"2025-10-22T14:55:50.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdcsavingsb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:33:08:DC:DB:FB:49:E8:09:FA:3E:34:34:85:AC:02:15:9A:E4:1F","sha256":"48:AE:52:AE:B1:AC:28:45:A6:E8:48:AE:59:74:5F:C8:60:1D:F3:39:77:1E:74:7A:BF:60:49:B3:78:32:A8:19"}}},"request":{"raw":"GET /css/app.e02feee3.css HTTP/1.1\r\nHost: usdcsavingsb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdcsavingsb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 08:34:43 GMT\r\ncache-control: max-age=43200\r\nlast-modified: Mon, 01 Sep 2025 14:06:37 GMT\r\ncontent-encoding: br\r\nexpires: Wed, 22 Oct 2025 20:34:43 GMT\r\netag: W/\"68b5a86d-4677\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e6220bd7bee9300eb5b87a282645e6ec.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: WGI__2lri-AkXxOiLT_s4C7oYWWRZfMjf27PSoxpu8sAVxW8W6-SxQ==\r\nage: 22867\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18039,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18039), with no line terminators","md5":"3ed5af8e46eaa8265c170079874f6f07","sha1":"fe20257b0bef6215650ec4d072a1a55301905df3","sha256":"2dc209577e801556ca6623c480c2540de380881e028203fde78ad2269587bebd","sha512":"e20a5d6114c48b5305f36757775318b9c39771eab7ba448629684bbeef2848c3336057d21563939fdcc2140d8e11e32b11e5884c8abf95cae440ad8268a92f2f","ssdeep":"384:X24bWudXn26w6n10NRB3YLcG1or2HmIjH1GdX4z2xV:G0hdXn26w6nKNRp8cGC2GaHwN4z2xV","tlshash":"50824231729831a8f53bf06d61906ecf7050bac3d1b3636ae9612635cdcb49f2657368","first_seen":"2025-10-22T14:56:23.004413Z","last_seen":"2025-10-31T19:31:05.606271Z","times_seen":4,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"usdcsavingsb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdcsavingsb.com/img/topbg1.96bdfa74.jpeg","fqdn":"usdcsavingsb.com","domain":"usdcsavingsb.com","tld":"com"},"ip":{"addr":"3.167.2.107","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdcsavingsb.com/","date":"2025-10-22T14:55:50.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdcsavingsb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:33:08:DC:DB:FB:49:E8:09:FA:3E:34:34:85:AC:02:15:9A:E4:1F","sha256":"48:AE:52:AE:B1:AC:28:45:A6:E8:48:AE:59:74:5F:C8:60:1D:F3:39:77:1E:74:7A:BF:60:49:B3:78:32:A8:19"}}},"request":{"raw":"GET /img/topbg1.96bdfa74.jpeg HTTP/1.1\r\nHost: usdcsavingsb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdcsavingsb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 419609\r\nserver: nginx\r\ndate: Tue, 21 Oct 2025 17:18:07 GMT\r\nlast-modified: Mon, 01 Sep 2025 14:06:37 GMT\r\naccept-ranges: bytes\r\netag: \"68b5a86d-66719\"\r\nexpires: Thu, 20 Nov 2025 17:18:07 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e6220bd7bee9300eb5b87a282645e6ec.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: DMkR1fQC79I0PmoLgOG7B8vTQpI5dw5R9318X-YTUN_U9FKdHbrAuQ==\r\nage: 77863\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":419609,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 853x1280, components 3","md5":"0b5fa110ecf45fc6b323b90f7fb410ff","sha1":"5a19c156af79c50faa6d9f55864a0780847fdfd5","sha256":"b2d2c604ff9bba8d524e4d14cda1cbe000e206bc5470ab0ab01a0b05dbe5d539","sha512":"29f895764c976ad7231bbd1292a7d5f1bac589119431ea627cff9800ec7e7630461eec3e9f2b47d3bbf859fb1c95c53c00f9b2e6ce708c3495f24cf36b9ec35d","ssdeep":"12288:mlILucObEVfnxKY2QYYTM7PEi6LixVw4Pgl:Ru1bEVPcYngTElQykK","tlshash":"789401b4eac7f6365f1b15bd91bebc3613049ce500dc562202270856a6aef6bed53338","first_seen":"2025-10-22T14:56:23.007498Z","last_seen":"2025-11-10T01:15:57.476555Z","times_seen":5,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"usdcsavingsb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdcsavingsb.com/img/trust.ca096f9c.png","fqdn":"usdcsavingsb.com","domain":"usdcsavingsb.com","tld":"com"},"ip":{"addr":"3.167.2.107","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdcsavingsb.com/","date":"2025-10-22T14:55:50.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdcsavingsb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:33:08:DC:DB:FB:49:E8:09:FA:3E:34:34:85:AC:02:15:9A:E4:1F","sha256":"48:AE:52:AE:B1:AC:28:45:A6:E8:48:AE:59:74:5F:C8:60:1D:F3:39:77:1E:74:7A:BF:60:49:B3:78:32:A8:19"}}},"request":{"raw":"GET /img/trust.ca096f9c.png HTTP/1.1\r\nHost: usdcsavingsb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdcsavingsb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 256654\r\nserver: nginx\r\ndate: Tue, 21 Oct 2025 17:18:07 GMT\r\nlast-modified: Mon, 01 Sep 2025 14:06:37 GMT\r\naccept-ranges: bytes\r\netag: \"68b5a86d-3ea8e\"\r\nexpires: Thu, 20 Nov 2025 17:18:07 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e6220bd7bee9300eb5b87a282645e6ec.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: UJYdMHa2Uw78Rd2Lr57TD4CipSyjWttoKDviSLtBbTbwd_sGIT-Q7w==\r\nage: 77863\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":256654,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1727 x 575, 8-bit/color RGBA, non-interlaced","md5":"0a7b100afd0417ce5e4159e3a1c878b9","sha1":"efef848556f98220f3eb1d26dc2a96bf158995e2","sha256":"0bcc39d94a2231f5323639f19c0f13a3d6e017114b21b3daba1676db70c98da9","sha512":"4c7977426098a6d4ae054cdb84266c651effbebc03efd87eae112f44c6765ac4f2ba370092780e9ce939e84af0368629b1d62ca8cd82cded608c00dc44b29f3a","ssdeep":"6144:Ylrok6tNXNPXrRNC9RheVJFOzG1D4+wTNb/QR16hCekWlVx/6roy:yoFN9PtNC90JF9FcTi+LkMry","tlshash":"4744e066d7c30cf21ed98f62226704c9856f713afb6f190a03a2a76629bf34d47b441c","first_seen":"2025-10-22T14:56:23.009505Z","last_seen":"2026-05-09T00:05:58.71838Z","times_seen":23,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"usdcsavingsb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdcsavingsb.com/img/okx.1c8c90b1.png","fqdn":"usdcsavingsb.com","domain":"usdcsavingsb.com","tld":"com"},"ip":{"addr":"3.167.2.107","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdcsavingsb.com/","date":"2025-10-22T14:55:50.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdcsavingsb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:33:08:DC:DB:FB:49:E8:09:FA:3E:34:34:85:AC:02:15:9A:E4:1F","sha256":"48:AE:52:AE:B1:AC:28:45:A6:E8:48:AE:59:74:5F:C8:60:1D:F3:39:77:1E:74:7A:BF:60:49:B3:78:32:A8:19"}}},"request":{"raw":"GET /img/okx.1c8c90b1.png HTTP/1.1\r\nHost: usdcsavingsb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdcsavingsb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 64851\r\nserver: nginx\r\ndate: Tue, 21 Oct 2025 17:18:07 GMT\r\nlast-modified: Mon, 01 Sep 2025 14:06:37 GMT\r\naccept-ranges: bytes\r\netag: \"68b5a86d-fd53\"\r\nexpires: Thu, 20 Nov 2025 17:18:07 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e6220bd7bee9300eb5b87a282645e6ec.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: DUD6DMrTWFJbMEoNY2FnMWKzV1UqjyguKcN8Wuu2gmbzd3LxboYNuA==\r\nage: 77863\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":64851,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1727 x 575, 8-bit/color RGBA, non-interlaced","md5":"29bf49b8bcd87f1831317fbebd9764f8","sha1":"c7884139bdf0e93297b1580c4c2f9fe38a348f32","sha256":"465be0b5f0d68ef4ef5753cc7d4499f5cbffe4d1bdcc1ad3c021e5ace27bfd11","sha512":"8598c2bcbbff56e93fe5cc623e8a6ccf66050c9b527831bd9ba1c0597c78acc099e8e0e0d6af04f44660d2de5fb7a63b268ce03c0ec08ee4c237e6a775a47642","ssdeep":"1536:D1Fmx6yxguFxEXPlg2TU2nBo946Ch6GZZerJh8/ZNsvW/jB:xFbyauFxEXPKgEqVQOnQCB","tlshash":"54539ba7dd49794f88128204b38f39e5e2713597ba698f4f0f198035addb0e8f932d64","first_seen":"2025-10-22T14:56:23.011212Z","last_seen":"2026-05-09T00:05:58.719464Z","times_seen":23,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"usdcsavingsb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdcsavingsb.com/img/metamask.417d59b2.png","fqdn":"usdcsavingsb.com","domain":"usdcsavingsb.com","tld":"com"},"ip":{"addr":"3.167.2.107","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdcsavingsb.com/","date":"2025-10-22T14:55:50.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdcsavingsb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:33:08:DC:DB:FB:49:E8:09:FA:3E:34:34:85:AC:02:15:9A:E4:1F","sha256":"48:AE:52:AE:B1:AC:28:45:A6:E8:48:AE:59:74:5F:C8:60:1D:F3:39:77:1E:74:7A:BF:60:49:B3:78:32:A8:19"}}},"request":{"raw":"GET /img/metamask.417d59b2.png HTTP/1.1\r\nHost: usdcsavingsb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdcsavingsb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 265517\r\nserver: nginx\r\ndate: Tue, 21 Oct 2025 17:18:07 GMT\r\nlast-modified: Mon, 01 Sep 2025 14:06:37 GMT\r\naccept-ranges: bytes\r\netag: \"68b5a86d-40d2d\"\r\nexpires: Thu, 20 Nov 2025 17:18:07 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e6220bd7bee9300eb5b87a282645e6ec.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 0SfIMirJ8mJNK5_oyI5_ldxSuQwHYOuGReq9C3_4PRFRTcTcZj5bBw==\r\nage: 77863\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":265517,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1727 x 575, 8-bit/color RGBA, non-interlaced","md5":"6ec5377f934a99066d461d47aca03979","sha1":"3b79d4685181815b7275d7663790c8395942cd6f","sha256":"4586c5cda94e336aea2a35b3f88ed2e3a3e063d7a8cbd4e06871b06614bdd56d","sha512":"5bafff572fc75f6b66f33101836315f38ff64fc4892af76ecc22504a3deb1e1fccea296ee7046d0f4baa1860b7adb37a2bab0d319b9102d8171df529a005b63f","ssdeep":"6144:ixOEunJPmCLZozCLRehn/bi2ZRTLWhD/HCerEWPT:ic7JP1acshnO2ZRTLJewo","tlshash":"9644e166c3c24cf36eed8b2376071441992f6139eb2f4e1647d6b21769ab68917f0e0c","first_seen":"2025-10-22T14:56:23.012832Z","last_seen":"2026-05-09T00:05:58.720028Z","times_seen":23,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"usdcsavingsb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdcsavingsb.com/img/uphold.fce5f40a.png","fqdn":"usdcsavingsb.com","domain":"usdcsavingsb.com","tld":"com"},"ip":{"addr":"3.167.2.107","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdcsavingsb.com/","date":"2025-10-22T14:55:50.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdcsavingsb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:33:08:DC:DB:FB:49:E8:09:FA:3E:34:34:85:AC:02:15:9A:E4:1F","sha256":"48:AE:52:AE:B1:AC:28:45:A6:E8:48:AE:59:74:5F:C8:60:1D:F3:39:77:1E:74:7A:BF:60:49:B3:78:32:A8:19"}}},"request":{"raw":"GET /img/uphold.fce5f40a.png HTTP/1.1\r\nHost: usdcsavingsb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdcsavingsb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 283087\r\nserver: nginx\r\ndate: Tue, 21 Oct 2025 17:18:07 GMT\r\nlast-modified: Mon, 01 Sep 2025 14:06:37 GMT\r\naccept-ranges: bytes\r\netag: \"68b5a86d-451cf\"\r\nexpires: Thu, 20 Nov 2025 17:18:07 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e6220bd7bee9300eb5b87a282645e6ec.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: nlAizLKbf7eXf7Qx7LzC-tVGhWnVCxwyqEau0V-0o9L5r_1WlgvUGg==\r\nage: 77863\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":283087,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1727 x 575, 8-bit/color RGBA, non-interlaced","md5":"32aec61e653ad7c9ae95eeb16d28a7d9","sha1":"be75775095175f67afd2069fddc13f2aa2bf5abc","sha256":"d72f22aa29365ff0be0489722558aa5680c1d3078a0e0be9337c458780cd56cb","sha512":"ce6f9279843597c8e1394969ea05c1ec7d7f8e10a636df161115c1ce0761eb9ef376fc71ccf4140b92bbfdab1bcf329212ab39134e799ad0b0193915c2818c6a","ssdeep":"6144:SMXPh4mk1Dsd3nhQxe4o+1cgoAUyZ+T7lFJxWv3Bqn:SMfAwQO+1cgp/+T7bJxWv3Bqn","tlshash":"34540146de09317fc7d1cf00836718d4c66da4bffd5a0b085b168b163e6b2c9e86896e","first_seen":"2025-10-22T14:56:23.014933Z","last_seen":"2026-05-09T00:05:58.738814Z","times_seen":23,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"usdcsavingsb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdcsavingsb.com/img/fincen2.0cea0e38.png","fqdn":"usdcsavingsb.com","domain":"usdcsavingsb.com","tld":"com"},"ip":{"addr":"3.167.2.107","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdcsavingsb.com/","date":"2025-10-22T14:55:50.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdcsavingsb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:33:08:DC:DB:FB:49:E8:09:FA:3E:34:34:85:AC:02:15:9A:E4:1F","sha256":"48:AE:52:AE:B1:AC:28:45:A6:E8:48:AE:59:74:5F:C8:60:1D:F3:39:77:1E:74:7A:BF:60:49:B3:78:32:A8:19"}}},"request":{"raw":"GET /img/fincen2.0cea0e38.png HTTP/1.1\r\nHost: usdcsavingsb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdcsavingsb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 103202\r\nserver: nginx\r\ndate: Tue, 21 Oct 2025 17:18:07 GMT\r\nlast-modified: Mon, 01 Sep 2025 14:06:37 GMT\r\naccept-ranges: bytes\r\netag: \"68b5a86d-19322\"\r\nexpires: Thu, 20 Nov 2025 17:18:07 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e6220bd7bee9300eb5b87a282645e6ec.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: eOYFxdZTUjVfyupW0A5luW7nyrj7Rt4adPdknlwOBXxlVrRy1Jbbhw==\r\nage: 77863\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":103202,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 760 x 204, 8-bit/color RGBA, non-interlaced","md5":"7b76cef4f2451277886a19f77bdcf97c","sha1":"2f9336aa688912b1619c4d07458a40c1def96872","sha256":"65f308edf24baa8c55253230fcc803279507bf31c7441dfccda24ac7f0878892","sha512":"ba327ccefaf43a99c641a9e4467e99483005e72e7c40e57f707603fb684a1b2f79295565c1890d80712dc08b6d4a8bce4ab5ea2e448293327f61796f1c3dff26","ssdeep":"3072:a9kqUiuZwhj/ZzmGhXdR8qyqYdbvLxuSDdpLD8wmbx:a93U7ZwhjhzmGhXdR8qMgapLDYbx","tlshash":"70a312cbf1733062812041c81bb2e869b536b6b706e9ce51e0d5dee4346d15be8e9a58","first_seen":"2025-10-22T14:56:23.016778Z","last_seen":"2026-05-09T00:05:58.730143Z","times_seen":23,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":33,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"usdcsavingsb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/js/0x5jyk2wr4pig17jbcrd1ziv80/safe-standard-sync.js?ps_h=GfzH\u0026ps_t=1761144950853","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"104.20.25.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdcsavingsb.com/","date":"2025-10-22T14:55:50.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.providesupport.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 09:21:53 GMT","end":"Tue, 20 Jan 2026 09:21:52 GMT"},"fingerprint":{"sha1":"23:9B:51:A8:AE:84:7E:32:EA:9A:B0:2D:CC:C7:5F:C7:DC:39:50:57","sha256":"27:15:E3:50:21:FF:06:D6:CF:96:4C:AF:59:0F:FF:F9:BD:02:11:BB:10:1F:14:CA:A1:19:AF:EE:B3:08:EB:B9"}}},"request":{"raw":"GET /js/0x5jyk2wr4pig17jbcrd1ziv80/safe-standard-sync.js?ps_h=GfzH\u0026ps_t=1761144950853 HTTP/1.1\r\nHost: image.providesupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdcsavingsb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Oct 2025 14:55:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncf-ray: 9929d68769ea568e-OSL\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\np3p: CP=\"NOI CURa ADMa DEVa OUR IND COM NAV\", policyref=\"/w3c/p3p.xml\"\r\nx-instanceid: 30\r\ncache-control: must-revalidate, max-age=0\r\npragma: no-cache\r\nx-psserverid: bp14b, 2025-10-22T10:55:51-04:00\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1128,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1128), with no line terminators","md5":"f773a00c3213f424ac97b25da77925fe","sha1":"780d40dd6f8fe7e57a9d3805e52a3c98bde6c694","sha256":"cf8608d22f47143d9767c07688a494daa18174e69e117670e993cbf78c20f92b","sha512":"0d9025ce19ce370668695b926a21fd904ace7470f16eee59bb419b06a4a5ca1aa1a656aeef9292b47ff8070c755eeadfaf39e9a769ee989ce09ddf706631608b","ssdeep":"","tlshash":"88213077c7349bf51b1a2ae7792f2d2d8233785b8beecb2ac4340491200d7665011ed6","first_seen":"2025-10-22T14:56:23.018603Z","last_seen":"2025-10-22T14:56:23.018603Z","times_seen":1,"resource_available":true,"data":null}},"time_used":577,"timings":{"blocked":78,"dns":63,"connect":1,"send":0,"wait":419,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdcsavingsb.com/","fqdn":"usdcsavingsb.com","domain":"usdcsavingsb.com","tld":"com"},"ip":{"addr":"3.167.2.107","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-22T14:55:48.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdcsavingsb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:33:08:DC:DB:FB:49:E8:09:FA:3E:34:34:85:AC:02:15:9A:E4:1F","sha256":"48:AE:52:AE:B1:AC:28:45:A6:E8:48:AE:59:74:5F:C8:60:1D:F3:39:77:1E:74:7A:BF:60:49:B3:78:32:A8:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: usdcsavingsb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 717\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 14:55:49 GMT\r\nlast-modified: Mon, 01 Sep 2025 14:06:37 GMT\r\naccept-ranges: bytes\r\netag: \"68b5a86d-2cd\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 e6220bd7bee9300eb5b87a282645e6ec.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: gOIUU7nRQ992t1XuVYiE1wED0PY1n8zO8crt3SHQrG_CORnaY1TiIA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":717,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (717), with no line terminators","md5":"2e09127cc4bc190ea15cebdba7d106f8","sha1":"227d5a8b9c8acf803e6c051c142c8c911a4a1c1e","sha256":"14eca98e6c4b7cd2aaec449cb513a12416b524bb906dc26f2de8b77a56418b6b","sha512":"74dfcbcc55e6a24e3d6295bbf90256884b0bb26fe2148bd97065f9d173b11c4df60e325007d0efd6993088f3b44ce9b6b288e6587ef42867882a5b7bb7b28d78","ssdeep":"","tlshash":"80011b83cc14d09ea3205e90bcb1f21e888b2c6d8931ace064b481be48e4fd98e66842","first_seen":"2025-10-22T14:56:23.02012Z","last_seen":"2025-10-31T19:31:05.601707Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1189,"timings":{"blocked":387,"dns":105,"connect":1,"send":0,"wait":415,"receive":0,"ssl":278},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"usdcsavingsb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdcsavingsb.com/img/ico.6232eb12.png","fqdn":"usdcsavingsb.com","domain":"usdcsavingsb.com","tld":"com"},"ip":{"addr":"3.167.2.107","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdcsavingsb.com/","date":"2025-10-22T14:55:50.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdcsavingsb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:33:08:DC:DB:FB:49:E8:09:FA:3E:34:34:85:AC:02:15:9A:E4:1F","sha256":"48:AE:52:AE:B1:AC:28:45:A6:E8:48:AE:59:74:5F:C8:60:1D:F3:39:77:1E:74:7A:BF:60:49:B3:78:32:A8:19"}}},"request":{"raw":"GET /img/ico.6232eb12.png HTTP/1.1\r\nHost: usdcsavingsb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdcsavingsb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 75435\r\nserver: nginx\r\ndate: Tue, 21 Oct 2025 17:18:07 GMT\r\nlast-modified: Mon, 01 Sep 2025 14:06:37 GMT\r\naccept-ranges: bytes\r\netag: \"68b5a86d-126ab\"\r\nexpires: Thu, 20 Nov 2025 17:18:07 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e6220bd7bee9300eb5b87a282645e6ec.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 0cgF5C8KX-Ct880fNJ9TLPiaFAMA1Aix1LmMI_XCbHuYQbShYRGFbg==\r\nage: 77863\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":75435,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 281 x 281, 8-bit/color RGBA, non-interlaced","md5":"e49dc6edab0f4b4a1c25539bc0f8ca8d","sha1":"37cc6607fa3bc84b0c62eeb066188e300d8cbedc","sha256":"7d7c782b9b10648f807a371d4335198517993ed064f21aa01a6d0aa733f33173","sha512":"250eb1f6875bbc81730386df10da4c4023ed92271061f6f9ce1f60ebdcfbf4e9dbee683a8ff4fc1d74be91f5c06b2fabebfe6f8fa00788339fcadfe43a0f1f1d","ssdeep":"1536:kgPPL1dJGFJZv2InL47u9AnGPIKeJvVZidN4EGNlZpKU9yyP:/oFJUInR9AWIRJ75Ea9yE","tlshash":"a173028345091ae1a3e6f29bd3ccf6e58610e7706a5dbc4b60c3b6bfac8f5181115e46","first_seen":"2025-10-22T14:56:23.021656Z","last_seen":"2026-05-09T00:05:58.727629Z","times_seen":23,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"usdcsavingsb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdcsavingsb.com/img/etherscan.6ca0c9a6.png","fqdn":"usdcsavingsb.com","domain":"usdcsavingsb.com","tld":"com"},"ip":{"addr":"3.167.2.107","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdcsavingsb.com/","date":"2025-10-22T14:55:50.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdcsavingsb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:33:08:DC:DB:FB:49:E8:09:FA:3E:34:34:85:AC:02:15:9A:E4:1F","sha256":"48:AE:52:AE:B1:AC:28:45:A6:E8:48:AE:59:74:5F:C8:60:1D:F3:39:77:1E:74:7A:BF:60:49:B3:78:32:A8:19"}}},"request":{"raw":"GET /img/etherscan.6ca0c9a6.png HTTP/1.1\r\nHost: usdcsavingsb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdcsavingsb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 285049\r\nserver: nginx\r\ndate: Tue, 21 Oct 2025 17:18:07 GMT\r\nlast-modified: Mon, 01 Sep 2025 14:06:37 GMT\r\naccept-ranges: bytes\r\netag: \"68b5a86d-45979\"\r\nexpires: Thu, 20 Nov 2025 17:18:07 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e6220bd7bee9300eb5b87a282645e6ec.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: hDnP02I1i1wf0GRdrvWrTG3FWpMi44cnoaZWhM1a1m9q875d3J2uSw==\r\nage: 77863\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":285049,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1727 x 575, 8-bit/color RGBA, non-interlaced","md5":"2771e1993a8192f1bd94cc402484a0ef","sha1":"80e856d482c6b22d3c720e195693c835aff0c741","sha256":"09cf1d2ec401ad5fb5f088f18862a2eda036f72db7f0221622c76b55eb1ca754","sha512":"dfe5b3af7754b070b74b8c1629f70ea2dc2cce52048412a7abe70a3c695d12a90f6597126adeb3c2a61641ed01bfce3ddc8c51eac789122615450e122fb6fb72","ssdeep":"6144:OiyhPqNVMQWdTD4sRjsOkdj1mVM4BXFnjMsIPJ8dSCWJDhm:OxINuQeX1sO+mVMyXt26dS5Dc","tlshash":"0254e07bcbda6deb8c8d026b3113209591bb503753780f0b5f99b22118af6a5f3f1558","first_seen":"2025-10-22T14:56:23.023627Z","last_seen":"2026-05-09T00:05:58.729515Z","times_seen":23,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"usdcsavingsb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdcsavingsb.com/img/defibox.178e85e3.png","fqdn":"usdcsavingsb.com","domain":"usdcsavingsb.com","tld":"com"},"ip":{"addr":"3.167.2.107","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdcsavingsb.com/","date":"2025-10-22T14:55:50.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdcsavingsb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:33:08:DC:DB:FB:49:E8:09:FA:3E:34:34:85:AC:02:15:9A:E4:1F","sha256":"48:AE:52:AE:B1:AC:28:45:A6:E8:48:AE:59:74:5F:C8:60:1D:F3:39:77:1E:74:7A:BF:60:49:B3:78:32:A8:19"}}},"request":{"raw":"GET /img/defibox.178e85e3.png HTTP/1.1\r\nHost: usdcsavingsb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdcsavingsb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 264081\r\nserver: nginx\r\ndate: Tue, 21 Oct 2025 17:18:07 GMT\r\nlast-modified: Mon, 01 Sep 2025 14:06:37 GMT\r\naccept-ranges: bytes\r\netag: \"68b5a86d-40791\"\r\nexpires: Thu, 20 Nov 2025 17:18:07 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e6220bd7bee9300eb5b87a282645e6ec.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: yHHThrP89jZp9usmXW6zPgOsdrlCaX2c5tQ5GdXw8JcZmdOtoM_a1A==\r\nage: 77863\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":264081,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1727 x 575, 8-bit/color RGBA, non-interlaced","md5":"cc4f32e579587738664d3b27be609f1d","sha1":"a9a17964683525ccbb00c6e5edff6e1af1a30c1a","sha256":"c3dae4bd148fd4d9ed51aafb2dade317c2c3012e7abc53af6415cc515ce0182b","sha512":"6a2a3905f4cd4174c6fcc19257cafd2dcdf99b6ae8c2cb57a39956fc8dcada2fc7792a32d98aedec7f65fbd214e93a9b637219dec6a743de206ab6c14693f270","ssdeep":"6144:O6d35rF83w+XgaxOxGBCFgkzn7t8lQmfQ+Ic89mQLtSele4Kpu:O+d+FgkOxfFrXmf2/9me3tH","tlshash":"e844cd36d7c74ee7ac0cab7b725b4008646b21b597be1da311d6fa5418ff9102bf0622","first_seen":"2025-10-22T14:56:23.025683Z","last_seen":"2026-05-09T00:05:58.723608Z","times_seen":23,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"usdcsavingsb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdcsavingsb.com/img/coinbase.c457d3cc.png","fqdn":"usdcsavingsb.com","domain":"usdcsavingsb.com","tld":"com"},"ip":{"addr":"3.167.2.107","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdcsavingsb.com/","date":"2025-10-22T14:55:50.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdcsavingsb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:33:08:DC:DB:FB:49:E8:09:FA:3E:34:34:85:AC:02:15:9A:E4:1F","sha256":"48:AE:52:AE:B1:AC:28:45:A6:E8:48:AE:59:74:5F:C8:60:1D:F3:39:77:1E:74:7A:BF:60:49:B3:78:32:A8:19"}}},"request":{"raw":"GET /img/coinbase.c457d3cc.png HTTP/1.1\r\nHost: usdcsavingsb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdcsavingsb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 330385\r\nserver: nginx\r\ndate: Tue, 21 Oct 2025 17:18:07 GMT\r\nlast-modified: Mon, 01 Sep 2025 14:06:37 GMT\r\naccept-ranges: bytes\r\netag: \"68b5a86d-50a91\"\r\nexpires: Thu, 20 Nov 2025 17:18:07 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e6220bd7bee9300eb5b87a282645e6ec.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: hhmr9lIych_aJ00bA_-ONLNS1h8vDmu143wKFluXEkkp9XzBBiHtyA==\r\nage: 77863\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":330385,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1727 x 575, 8-bit/color RGBA, non-interlaced","md5":"5f1469d95ec2b343c5da5b1b800ffd77","sha1":"d3d8340cfc9b8497283ae84b8855e349e70bd079","sha256":"6f30befb652ba195fd0309230ba65b213589e48d2a1cccc6cb04d428b091f159","sha512":"1ec55ba929919b5bb1093ab8d17f982f87d6aa345df954995636dab05810710bf7155c4e3f4dc9a955932faecc0ba492978e69362f743953d467ce3da2f42999","ssdeep":"6144:B4ps9imOknyz+q+FJj1SzNHCZMa4DpksLLJtwgOCtEtaUn1rFo+bSh8:Bg7m7nNJjaNHCyXLnwg/tEUd++e","tlshash":"74640116ea1a297fc2e18e52539728e1c83c382fbc5e1e860f67676225273ddf061d1c","first_seen":"2025-10-22T14:56:23.028007Z","last_seen":"2026-05-09T00:05:58.728899Z","times_seen":23,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"usdcsavingsb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdcsavingsb.com/api/frontend/public-config?key=service","fqdn":"usdcsavingsb.com","domain":"usdcsavingsb.com","tld":"com"},"ip":{"addr":"3.167.2.107","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdcsavingsb.com/","date":"2025-10-22T14:55:50.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdcsavingsb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:33:08:DC:DB:FB:49:E8:09:FA:3E:34:34:85:AC:02:15:9A:E4:1F","sha256":"48:AE:52:AE:B1:AC:28:45:A6:E8:48:AE:59:74:5F:C8:60:1D:F3:39:77:1E:74:7A:BF:60:49:B3:78:32:A8:19"}}},"request":{"raw":"GET /api/frontend/public-config?key=service HTTP/1.1\r\nHost: usdcsavingsb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdcsavingsb.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 677\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 14:55:50 GMT\r\nx-ratelimit-reset: 60\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nx-ratelimit-limit: 20\r\nx-ratelimit-remaining: 19\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 e6220bd7bee9300eb5b87a282645e6ec.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: kVlEZWQrOp1LOAwSL1n1JMyg71yZDdbUsgHItE1bvHsri6JxbPbCiw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":677,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f5d824f119ddddf021223e3f38041300","sha1":"499cd2171599ade6bd52ead47582496e516ba7f5","sha256":"21220da9bdb934a5d8a452e7ff580111b6363b05aba020b9c3b75ba93efe0c3b","sha512":"00749db8fbcc72ec841604a0bda6a99604ca0b36b6139f40def04c38ec875d97643d45821e2df6af6f7154037b8e0fc74866239c9c25ff3e98f9dc5d1d3b37d9","ssdeep":"","tlshash":"e901f47bec10d7290bb35112bc6fb31950b3113819e6cc8844a0c5e964d1bb45c6bec6","first_seen":"2025-10-22T14:56:23.02962Z","last_seen":"2025-10-31T19:31:05.613813Z","times_seen":4,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"usdcsavingsb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdcsavingsb.com/ico.png","fqdn":"usdcsavingsb.com","domain":"usdcsavingsb.com","tld":"com"},"ip":{"addr":"3.167.2.107","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdcsavingsb.com/","date":"2025-10-22T14:55:50.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdcsavingsb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:33:08:DC:DB:FB:49:E8:09:FA:3E:34:34:85:AC:02:15:9A:E4:1F","sha256":"48:AE:52:AE:B1:AC:28:45:A6:E8:48:AE:59:74:5F:C8:60:1D:F3:39:77:1E:74:7A:BF:60:49:B3:78:32:A8:19"}}},"request":{"raw":"GET /ico.png HTTP/1.1\r\nHost: usdcsavingsb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdcsavingsb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 75435\r\nserver: nginx\r\ndate: Tue, 21 Oct 2025 15:39:55 GMT\r\nlast-modified: Mon, 01 Sep 2025 14:06:37 GMT\r\naccept-ranges: bytes\r\netag: \"68b5a86d-126ab\"\r\nexpires: Thu, 20 Nov 2025 15:39:55 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e6220bd7bee9300eb5b87a282645e6ec.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 1aW6Xq7w5xd0XYkk6l6lRADKCxo2lmg47rREwcYWdPHTx6yFYyOkcw==\r\nage: 83755\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75435,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 281 x 281, 8-bit/color RGBA, non-interlaced","md5":"e49dc6edab0f4b4a1c25539bc0f8ca8d","sha1":"37cc6607fa3bc84b0c62eeb066188e300d8cbedc","sha256":"7d7c782b9b10648f807a371d4335198517993ed064f21aa01a6d0aa733f33173","sha512":"250eb1f6875bbc81730386df10da4c4023ed92271061f6f9ce1f60ebdcfbf4e9dbee683a8ff4fc1d74be91f5c06b2fabebfe6f8fa00788339fcadfe43a0f1f1d","ssdeep":"1536:kgPPL1dJGFJZv2InL47u9AnGPIKeJvVZidN4EGNlZpKU9yyP:/oFJUInR9AWIRJ75Ea9yE","tlshash":"a173028345091ae1a3e6f29bd3ccf6e58610e7706a5dbc4b60c3b6bfac8f5181115e46","first_seen":"2025-10-22T14:56:23.021656Z","last_seen":"2026-05-09T00:05:58.727629Z","times_seen":23,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"usdcsavingsb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/sjs/static.js","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"104.20.25.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdcsavingsb.com/","date":"2025-10-22T14:55:50.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.providesupport.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 09:21:53 GMT","end":"Tue, 20 Jan 2026 09:21:52 GMT"},"fingerprint":{"sha1":"23:9B:51:A8:AE:84:7E:32:EA:9A:B0:2D:CC:C7:5F:C7:DC:39:50:57","sha256":"27:15:E3:50:21:FF:06:D6:CF:96:4C:AF:59:0F:FF:F9:BD:02:11:BB:10:1F:14:CA:A1:19:AF:EE:B3:08:EB:B9"}}},"request":{"raw":"GET /sjs/static.js HTTP/1.1\r\nHost: image.providesupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdcsavingsb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Oct 2025 14:55:50 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nlast-modified: Thu, 11 Sep 2025 22:04:02 GMT\r\netag: W/\"68c34752-38a0\"\r\nx-psserverid: bp12i, 2025-10-22T10:46:49-04:00\r\nage: 541\r\ncache-control: max-age=3600\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 9929d68769f0568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14496,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (524)","md5":"d3a91d688e22bd47f0f45bab5508bad2","sha1":"03c4b81027348e06dd37b21862016ee1800136b7","sha256":"c0af938f2039a093489fe896b2f1b2929397f03efa4550f1e3fef67083d23ff2","sha512":"c5a6286cd1b8e4879501793ce5e5bde89461f83077d5dd2f4df0b455a9a1f96d6610fc4cda48ecfa1461f70c4d10600421e1547a2eb5e965f4f2516cb96bcbc3","ssdeep":"384:3EAAirv/1U2XLtfZoYO7YhaJpYy664roz:3EAd9U2XJfZed66+I","tlshash":"8a52d6dd76e6387683a73679e5bf120d30b54c91e98ad890d090e0d0ae35e9c412bf8f","first_seen":"2025-02-07T21:57:24.227906Z","last_seen":"2026-07-18T09:26:51.459283Z","times_seen":710,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":80,"dns":62,"connect":1,"send":0,"wait":18,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdcsavingsb.com/js/chunk-vendors.a4216a5c.js","fqdn":"usdcsavingsb.com","domain":"usdcsavingsb.com","tld":"com"},"ip":{"addr":"3.167.2.107","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdcsavingsb.com/","date":"2025-10-22T14:55:50.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdcsavingsb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:33:08:DC:DB:FB:49:E8:09:FA:3E:34:34:85:AC:02:15:9A:E4:1F","sha256":"48:AE:52:AE:B1:AC:28:45:A6:E8:48:AE:59:74:5F:C8:60:1D:F3:39:77:1E:74:7A:BF:60:49:B3:78:32:A8:19"}}},"request":{"raw":"GET /js/chunk-vendors.a4216a5c.js HTTP/1.1\r\nHost: usdcsavingsb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdcsavingsb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 08:34:43 GMT\r\ncache-control: max-age=43200\r\nlast-modified: Mon, 01 Sep 2025 14:06:37 GMT\r\ncontent-encoding: br\r\nexpires: Wed, 22 Oct 2025 20:34:43 GMT\r\netag: W/\"68b5a86d-e7077\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e6220bd7bee9300eb5b87a282645e6ec.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: hB8mnSZ2DP4UDTwN0lHtyP2NT4XH3ENWpIMWKBvvnVtnYLWoj2YBtA==\r\nage: 22867\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":946295,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65072), with no line terminators","md5":"d7207b28fd8ea4206184ed758d7930a8","sha1":"ddeeac439c01ea6beea6138c1b09692451c69d9d","sha256":"893600c799c437d142f97d1cbf801d19c0af5dfd72002c379c45216ca31c870e","sha512":"c35b37f13de51153a65346135bb87c47a38ff908c073173645a8c3227ce82d9b92684e0f79e4184134ad406a527d2572bf865563f3e3fabb20b97609cc152bdf","ssdeep":"12288:Omwbtukh22agTBnM6nv3PvfllkeEZwI0eYC:JwBK2agTBnTP7P20RC","tlshash":"e615f889b292f061079760e1507f1107f23a7d58744a8098f6b9e8ea7dbda4da137f3c","first_seen":"2025-10-22T14:56:23.035928Z","last_seen":"2025-10-31T19:31:05.61108Z","times_seen":4,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"usdcsavingsb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdcsavingsb.com/img/secicon.5883af20.png","fqdn":"usdcsavingsb.com","domain":"usdcsavingsb.com","tld":"com"},"ip":{"addr":"3.167.2.107","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdcsavingsb.com/","date":"2025-10-22T14:55:50.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdcsavingsb.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:33:08:DC:DB:FB:49:E8:09:FA:3E:34:34:85:AC:02:15:9A:E4:1F","sha256":"48:AE:52:AE:B1:AC:28:45:A6:E8:48:AE:59:74:5F:C8:60:1D:F3:39:77:1E:74:7A:BF:60:49:B3:78:32:A8:19"}}},"request":{"raw":"GET /img/secicon.5883af20.png HTTP/1.1\r\nHost: usdcsavingsb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdcsavingsb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 90050\r\nserver: nginx\r\ndate: Tue, 21 Oct 2025 17:18:07 GMT\r\nlast-modified: Mon, 01 Sep 2025 14:06:37 GMT\r\naccept-ranges: bytes\r\netag: \"68b5a86d-15fc2\"\r\nexpires: Thu, 20 Nov 2025 17:18:07 GMT\r\ncache-control: max-age=2592000\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e6220bd7bee9300eb5b87a282645e6ec.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: eNMA2LRFGWs_iNFjose4BuO-xSxlfORGcGQr72BDD3hehiQdQLi60w==\r\nage: 77863\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":90050,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 776 x 206, 8-bit/color RGBA, non-interlaced","md5":"81ef2dd41d764a0fc5068cfcfc136a39","sha1":"0bdda3ada51c5b22c99e74a8e3e76ae42e0e1d66","sha256":"03561acac5a03387c94b6a3fef546c33b6a975ac87e7ecccdb53cca702c5f92f","sha512":"722f2d1c9ac6ce3b5cfc2325970c5a1dee53c43e0c99c7b3dc4973ed5769fff97567651c4a7b32bc8f60d506bb0e4e9683f6d93286227c1d1f905fbb2467846c","ssdeep":"1536:mbhN7V1VOoILQHKIyXYFHxhkkSN/sBOVvXWhb15YKFc4F7+M0bBjA+da:i7ROoILu7A/9+pzHFSbL4","tlshash":"6393f263e2c15d62b73e17113af33762a05391c84a3bd1826084c971f7ffde56a8e292","first_seen":"2025-10-22T14:56:23.037486Z","last_seen":"2026-05-09T00:05:58.720651Z","times_seen":23,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"usdcsavingsb.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/image/0x5jyk2wr4pig17jbcrd1ziv80/online-286433161.svg","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"104.20.25.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdcsavingsb.com/","date":"2025-10-22T14:55:51.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.providesupport.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 09:21:53 GMT","end":"Tue, 20 Jan 2026 09:21:52 GMT"},"fingerprint":{"sha1":"23:9B:51:A8:AE:84:7E:32:EA:9A:B0:2D:CC:C7:5F:C7:DC:39:50:57","sha256":"27:15:E3:50:21:FF:06:D6:CF:96:4C:AF:59:0F:FF:F9:BD:02:11:BB:10:1F:14:CA:A1:19:AF:EE:B3:08:EB:B9"}}},"request":{"raw":"GET /image/0x5jyk2wr4pig17jbcrd1ziv80/online-286433161.svg HTTP/1.1\r\nHost: image.providesupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdcsavingsb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Oct 2025 14:55:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\nx-instanceid: 30\r\np3p: CP=\"NOI CURa ADMa DEVa OUR IND COM NAV\", policyref=\"/w3c/p3p.xml\"\r\ncache-control: public, max-age=3600\r\nlast-modified: Thu, 21 Aug 2025 14:48:12 UTC\r\nexpires: Fri, 21 Nov 2025 14:55:51 UTC\r\nx-psserverid: bp14b, 2025-10-22T10:55:51-04:00\r\ncf-cache-status: MISS\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9929d68a0d14568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":752,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"705207f091fc1ee291868c1b27177844","sha1":"75cb671fc16edc1731008b27c620a5dcf25ba76e","sha256":"2ac789eb11e1ccb4174952f59548593b904420294fd7b59d2c1eb27fd274dced","sha512":"05e193c7b9d51f750f0604bd07562321a4fe6cb36f303ab6fe1bc11d220c604eb64acf11ea4bdbd1c48311c89677c52dec3de733ada2264d43933714995e64d5","ssdeep":"","tlshash":"0301f5ed473ae41d919f4c3663fcb3c20e91b8d47204c03a25f80c06ee7995e98808aa","first_seen":"2023-08-17T23:32:46Z","last_seen":"2026-07-17T15:46:52.123703Z","times_seen":81,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":414,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.providesupport.com/cmd/0x5jyk2wr4pig17jbcrd1ziv80.json?ps_t=1761144951364\u0026ps_l=https%3A//usdcsavingsb.com/%23/\u0026ps_r=\u0026ps_s=KjkgbaIXEbLVoZJX","fqdn":"image.providesupport.com","domain":"providesupport.com","tld":"com"},"ip":{"addr":"104.20.25.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdcsavingsb.com/","date":"2025-10-22T14:55:51.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.providesupport.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 09:21:53 GMT","end":"Tue, 20 Jan 2026 09:21:52 GMT"},"fingerprint":{"sha1":"23:9B:51:A8:AE:84:7E:32:EA:9A:B0:2D:CC:C7:5F:C7:DC:39:50:57","sha256":"27:15:E3:50:21:FF:06:D6:CF:96:4C:AF:59:0F:FF:F9:BD:02:11:BB:10:1F:14:CA:A1:19:AF:EE:B3:08:EB:B9"}}},"request":{"raw":"GET /cmd/0x5jyk2wr4pig17jbcrd1ziv80.json?ps_t=1761144951364\u0026ps_l=https%3A//usdcsavingsb.com/%23/\u0026ps_r=\u0026ps_s=KjkgbaIXEbLVoZJX HTTP/1.1\r\nHost: image.providesupport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdcsavingsb.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdcsavingsb.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Oct 2025 14:55:51 GMT\r\ncontent-type: application/json\r\ncf-ray: 9929d68a1d19568e-OSL\r\np3p: CP=\"NOI CURa ADMa DEVa OUR IND COM NAV\", policyref=\"/w3c/p3p.xml\"\r\nx-instanceid: 30\r\ncache-control: no-cache\r\npragma: no-cache\r\naccess-control-allow-origin: https://usdcsavingsb.com\r\nvary: Origin, accept-encoding\r\nx-psserverid: bp14b, 2025-10-22T10:55:51-04:00\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"44abff5c39ba5bcb0d1569ff076ffc12","sha1":"c3d0785b514655ec817dfc8f4a6d16ff902aaa5e","sha256":"a900ae5effad16c7b1fe63fd126fdd864f850c75de6a03f8b3b78d1a77820df2","sha512":"9d3c93e87115205fadee6e41214332e90cba983e0591d4e0d0763829707c32777f496837e9c06471a9894ac7273fb3318196b58b89f432af480ce089fe015c92","ssdeep":"","tlshash":"8a90044044d33475c14045153f403f05cc3c017f70047714f14c040030f73571010003","first_seen":"2025-02-10T20:07:22.145995Z","last_seen":"2026-07-25T07:57:17.662172Z","times_seen":226,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}