{"report_id":"c0b6d9a8-e7ec-495b-9c9c-6c764b5b7157","version":0,"status":"done","tags":[],"date":"2026-09-21T14:34:50Z","url":{"schema":"http","addr":"ususzr.com/","fqdn":"ususzr.com","domain":"ususzr.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":0,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"final":{"url":{"schema":"https","addr":"ususzr.com/#/","fqdn":"ususzr.com","domain":"ususzr.com","tld":"com"},"title":"Amazon Refund Check","dom":{"size":10739,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8139)","md5":"6518cf077c9002e4aa2ba496d7381177","sha1":"12c381469fc8f27f21cfe90d2ef2b5edcd62ff14","sha256":"fb93f8a47d656697830ecdab334e7748afb6e9b80525e7a7a325340cc50f64b8","sha512":"8624feba074b0403bd982566f59645432dd243ee965363656d7265e3980becda1ff24b82452233b59751a8cc06c32dcf8b219a01e6b55608dd52d5994503b36c","ssdeep":"192:yvUiFItHYGCuVjTNwCDG/OO44gSobSZ/MIyri8UjtjDkb3wBTXk4uwNnFXrEVZvi:SFItHYGZ/EOTNWUrGlVBz/2oPAxpKso","tlshash":"a722ac62b04d3c6a2d37a3d4f4636e2964f0f71a820e8c4126f84ae73ed7db1b492755","dom_hash":"domhash3d83446d126295f8b7314e4c538351a3","first_seen":"2026-09-21T14:32:46.105636Z","last_seen":"2026-09-21T14:34:52.154979Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ususzr.com/","fqdn":"ususzr.com","domain":"ususzr.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":0,"asn":48753,"as":"Ava Host Srl","country":"Moldova","country_code":"MD"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-26T14:34:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"ususzr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"ususzr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"ususzr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"ususzr.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ususzr.com","ip":{"addr":"194.102.104.212","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"domain_registered":"2026-08-29","domain_rank":0,"first_seen":"2026-09-21T13:30:38.118143Z","last_seen":"2026-09-21T13:30:38.118143Z","alert_count":36,"request_count":9,"received_data":378352,"sent_data":4224,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.174.83.118","port":443,"asn":0,"as":"","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-09-19T06:40:26.980703Z","alert_count":0,"request_count":1,"received_data":576,"sent_data":545,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ususzr.com/assets/pages-welcome-hub.DJR7x5Kh.js","fqdn":"ususzr.com","domain":"ususzr.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"43750016b5b7d91bf5e3c481858db9ff","sha1":"8f33f296f3b664990f042c03f6c96a0ff7f1a9ff","sha256":"daa9350d8d046412ab727d0480f52610b2fd57afaa3ac79ab0d5184752235fc7","sha512":"94aa7eb24cc5fa6b6060ea1ee6d6a4ed3dd84734914d1a0bf9457eb91e1bbe30f390dbdca9a6bfae2c7894bc95269802436642c3173fd44c6f9aa4a64f8e1ab3","ssdeep":"192:QTUPniszX0fplTIlZPy0H5RrszntsIHZlRurZLDhRK25Ytb+a0b:c6niwmlTIzq0HPWqLDXK2abpy","tlshash":"fd02958a791b8b3e4a67422a76466c1822593fff82580d1345f8cd3527e4ebc3737a5c","size":8305,"data":"","first_seen":"2026-09-21T13:30:47.446997Z","last_seen":"2026-09-21T14:34:52.157279Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ususzr.com/","fqdn":"ususzr.com","domain":"ususzr.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"2d6a78ab53be5bc4a6d37c42e772760b","sha1":"32f076aec75ed16ecb874b48f3d3178d4cb46c81","sha256":"58a225a1053179435184af7a71e45ccce47bc71b3d1bbbf14cbf7135f24f4cf0","sha512":"4bb08b63cfb3a7d5c1f089aea9e41ca1094156c40d54d2d90a9a8ee123e58c35dce223748e88feda2cf532357deb184b1387b3045207766812025c714622ed45","ssdeep":"","tlshash":"26c012545838540200f820b8125f6617b4959a3b835c54e0d114ad7c09b814745e9963","size":183,"data":"","first_seen":"2026-08-10T14:47:35.81771Z","last_seen":"2026-09-21T14:34:52.166625Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ususzr.com/","fqdn":"ususzr.com","domain":"ususzr.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"961e7595024d40c90f464d70c3a5e82b","sha1":"85c527bb76648360756b513c03eb19aaeceff79c","sha256":"85db212b3ea68764f20ff8ae4eeb290337dc9fd7396d03236648b7064066d27f","sha512":"3deade2182eefd1a2f91d83c61d52f49330489e6c8ded5cbd5ca1f0598e4f6519a08dfeb006256e83ea7544555562b77b724647bc2fc009fb5922a1e57e6729e","ssdeep":"","tlshash":"fef05c5c3c62f82337f93b34c223af2f37a21300348354218a8acc2478248ca284ac8e","size":477,"data":"","first_seen":"2026-09-21T13:30:47.457217Z","last_seen":"2026-09-21T14:34:52.167331Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ususzr.com/assets/index-BO0tuFoh.js","fqdn":"ususzr.com","domain":"ususzr.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2a0f263c469f32fb80a9e43da029855","sha1":"2ac253325b8676f08783b36201b9040906843f86","sha256":"e411e75c518ebf42486ec3cd5ebecebc779cd237bc7f865000872cdbebf5a900","sha512":"1122bab4a69710da15112453539e1ac5ff1924d01791fc4beaceb1b88f4f35c7c3a2f1a87afa590095b4286ad91c80ed14d749f52a5bebe849d19619ea635d88","ssdeep":"6144:lfcU6MPOn4FR2Fn+5iznhWTmycta0Vehy96RZQozxcR8HH:lXR21+5iITzcta0Vehk6RZQVG","tlshash":"e23407e93282b03243e609f6507b0506f2392955784e94d4f16ceceb3d7785a92bbf6c","size":231430,"data":"","first_seen":"2026-09-21T13:30:47.452575Z","last_seen":"2026-09-21T14:34:52.166025Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ususzr.com/assets/_plugin-vue_export-helper.DlAUqK2U.js","fqdn":"ususzr.com","domain":"ususzr.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","size":91,"data":"","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-09-21T14:34:52.159174Z","times_seen":26723,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ususzr.com/assets/index-DMl9amc0.css","fqdn":"ususzr.com","domain":"ususzr.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ususzr.com/","date":"2026-09-21T14:34:21.599Z","timestamp":1790001261599,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ususzr.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 16 Sep 2026 09:00:00 GMT","end":"Tue, 15 Dec 2026 08:59:59 GMT"},"fingerprint":{"sha1":"C1:EB:80:E8:D2:E9:72:AF:A5:B5:29:AE:E4:3A:4D:8A:20:F4:1B:49","sha256":"AF:BD:A6:4F:7A:6A:28:9A:4B:44:0B:EC:77:65:9B:DC:A7:A1:2A:5B:EF:52:8F:5F:EF:C7:6E:7E:6E:5E:2E:6A"}}},"request":{"raw":"GET /assets/index-DMl9amc0.css HTTP/1.1\r\nHost: ususzr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ususzr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 14:34:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 20 Sep 2026 11:41:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aafc653-6b51\"\r\nexpires: Tue, 22 Sep 2026 02:34:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27473,"size_decoded":4880,"mime_type":"text/css","magic":"ASCII text, with very long lines (27472)","md5":"b559022718b3f9d9b87cf0da46d9ca37","sha1":"5f5c7844dc90b2a1f9c82b9dcc703b754f5e953f","sha256":"0304ea13c631384e05bf2d61d14091a29f5259597d1855f28f29072a02507217","sha512":"867c3ced4eeb72f64cd86a5e2c01ab9b8ea35f5cf65d7979f93385ee252e5fc52f33f718ec9caf7d87ad7243f4631cad56d7def94a22d20ed8a017e78f9c9d57","ssdeep":"384:FgDzFzaGIK5jBzQxtGkH9213E9z4TYDChl:ODpOEn","tlshash":"10c2eeb2aa503d4be27d8b33ec911768351050a1936313f277a76f9a8d0d65f46633ce","first_seen":"2026-08-18T01:32:15.538392Z","last_seen":"2026-09-21T14:34:52.156607Z","times_seen":10,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"ususzr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"ususzr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"ususzr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"ususzr.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ususzr.com/assets/pages-welcome-hub.DJR7x5Kh.js","fqdn":"ususzr.com","domain":"ususzr.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ususzr.com/","date":"2026-09-21T14:34:22.050Z","timestamp":1790001262050,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ususzr.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 16 Sep 2026 09:00:00 GMT","end":"Tue, 15 Dec 2026 08:59:59 GMT"},"fingerprint":{"sha1":"C1:EB:80:E8:D2:E9:72:AF:A5:B5:29:AE:E4:3A:4D:8A:20:F4:1B:49","sha256":"AF:BD:A6:4F:7A:6A:28:9A:4B:44:0B:EC:77:65:9B:DC:A7:A1:2A:5B:EF:52:8F:5F:EF:C7:6E:7E:6E:5E:2E:6A"}}},"request":{"raw":"GET /assets/pages-welcome-hub.DJR7x5Kh.js HTTP/1.1\r\nHost: ususzr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ususzr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 14:34:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Sep 2026 11:41:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aafc660-2071\"\r\nexpires: Tue, 22 Sep 2026 02:34:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8305,"size_decoded":3931,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8290)","md5":"43750016b5b7d91bf5e3c481858db9ff","sha1":"8f33f296f3b664990f042c03f6c96a0ff7f1a9ff","sha256":"daa9350d8d046412ab727d0480f52610b2fd57afaa3ac79ab0d5184752235fc7","sha512":"94aa7eb24cc5fa6b6060ea1ee6d6a4ed3dd84734914d1a0bf9457eb91e1bbe30f390dbdca9a6bfae2c7894bc95269802436642c3173fd44c6f9aa4a64f8e1ab3","ssdeep":"192:QTUPniszX0fplTIlZPy0H5RrszntsIHZlRurZLDhRK25Ytb+a0b:c6niwmlTIzq0HPWqLDXK2abpy","tlshash":"fd02958a791b8b3e4a67422a76466c1822593fff82580d1345f8cd3527e4ebc3737a5c","first_seen":"2026-09-21T13:30:47.446997Z","last_seen":"2026-09-21T14:34:52.157279Z","times_seen":3,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"ususzr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"ususzr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"ususzr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"ususzr.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ususzr.com/static/site-icon.png","fqdn":"ususzr.com","domain":"ususzr.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ususzr.com/","date":"2026-09-21T14:34:22.120Z","timestamp":1790001262120,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ususzr.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 16 Sep 2026 09:00:00 GMT","end":"Tue, 15 Dec 2026 08:59:59 GMT"},"fingerprint":{"sha1":"C1:EB:80:E8:D2:E9:72:AF:A5:B5:29:AE:E4:3A:4D:8A:20:F4:1B:49","sha256":"AF:BD:A6:4F:7A:6A:28:9A:4B:44:0B:EC:77:65:9B:DC:A7:A1:2A:5B:EF:52:8F:5F:EF:C7:6E:7E:6E:5E:2E:6A"}}},"request":{"raw":"GET /static/site-icon.png HTTP/1.1\r\nHost: ususzr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ususzr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 14:34:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 20 Sep 2026 11:40:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aafc644-1226e\"\r\nexpires: Wed, 21 Oct 2026 14:34:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74350,"size_decoded":73324,"mime_type":"image/png","magic":"PNG image data, 720 x 589, 8-bit/color RGBA, non-interlaced","md5":"4dd91911b613e8a47eefa9744c0eea7c","sha1":"3fdb6505a6674b07a69e7f200f0ffe69c51a8523","sha256":"309d3df30f5aaf77d8c6ed72ce863636634b06192254bc40b0cbed046f0c6020","sha512":"ecfc90f19961e4c2307e9074fd67236bc5c643c6784574bb74533198cf1914255a541b1b6af2fbb2eb0d51fc5f4a15e021e6672afdf6ed1d5470871d7a521ec9","ssdeep":"1536:uPYpDfeCwwCijjJ2UrjO+GEhPIYpoFjpotmNk1ok8Tm1mNN8:uOfeCNrjjsoORjEoppImNk1WmAb8","tlshash":"f0730203db018c5fd6a48d3a04d705897436eca748e6d2a47316fa470afad690cbbf8d","first_seen":"2026-06-24T12:29:43.693944Z","last_seen":"2026-09-21T14:34:52.157976Z","times_seen":48,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"ususzr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"ususzr.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"ususzr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"ususzr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ususzr.com/static/entry/portal-brand-mark.png","fqdn":"ususzr.com","domain":"ususzr.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ususzr.com/","date":"2026-09-21T14:34:22.161Z","timestamp":1790001262161,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ususzr.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 16 Sep 2026 09:00:00 GMT","end":"Tue, 15 Dec 2026 08:59:59 GMT"},"fingerprint":{"sha1":"C1:EB:80:E8:D2:E9:72:AF:A5:B5:29:AE:E4:3A:4D:8A:20:F4:1B:49","sha256":"AF:BD:A6:4F:7A:6A:28:9A:4B:44:0B:EC:77:65:9B:DC:A7:A1:2A:5B:EF:52:8F:5F:EF:C7:6E:7E:6E:5E:2E:6A"}}},"request":{"raw":"GET /static/entry/portal-brand-mark.png HTTP/1.1\r\nHost: ususzr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ususzr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 14:34:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 20 Sep 2026 11:41:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aafc669-382a\"\r\nexpires: Wed, 21 Oct 2026 14:34:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14378,"size_decoded":14872,"mime_type":"image/png","magic":"PNG image data, 542 x 165, 8-bit colormap, non-interlaced","md5":"fadb8e5d1532ae95893aced1c6ee1822","sha1":"d6859963024cdfed23cbbfa3e393b2535afb6844","sha256":"66753e608935e672d8e6b9f1d5be8d8dae426b085589e4952b7f9f93f87a14fa","sha512":"c2ab4329a4a947affc2456278657a156c493b57232fdd7c16d1b94e29bc89946a0307e43f72f6430fb32e924453953be1f284ef5a606bfecb0b1ea48925cf4a0","ssdeep":"384:PIjHPNcsdyvnAMpBnQTiJ8fr5l8YSJov4Fpac2Ly:gjFck2nAMpBnSiJkl8YSU4Fn2+","tlshash":"1652cf2b184bc860ce5ba5a58227d71ef53c835c79d16026e60bec57cf84de12c0e393","first_seen":"2026-08-18T01:32:15.528002Z","last_seen":"2026-09-21T14:34:52.15857Z","times_seen":10,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"ususzr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"ususzr.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"ususzr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"ususzr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ususzr.com/assets/_plugin-vue_export-helper.DlAUqK2U.js","fqdn":"ususzr.com","domain":"ususzr.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ususzr.com/","date":"2026-09-21T14:34:22.051Z","timestamp":1790001262051,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ususzr.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 16 Sep 2026 09:00:00 GMT","end":"Tue, 15 Dec 2026 08:59:59 GMT"},"fingerprint":{"sha1":"C1:EB:80:E8:D2:E9:72:AF:A5:B5:29:AE:E4:3A:4D:8A:20:F4:1B:49","sha256":"AF:BD:A6:4F:7A:6A:28:9A:4B:44:0B:EC:77:65:9B:DC:A7:A1:2A:5B:EF:52:8F:5F:EF:C7:6E:7E:6E:5E:2E:6A"}}},"request":{"raw":"GET /assets/_plugin-vue_export-helper.DlAUqK2U.js HTTP/1.1\r\nHost: ususzr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ususzr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 14:34:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 91\r\nlast-modified: Sun, 20 Sep 2026 11:41:28 GMT\r\netag: \"6aafc668-5b\"\r\nexpires: Tue, 22 Sep 2026 02:34:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91,"size_decoded":608,"mime_type":"application/javascript","magic":"ASCII text","md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-09-21T14:34:52.159174Z","times_seen":26723,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"ususzr.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"ususzr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"ususzr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"ususzr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ususzr.com/assets/welcome-hub-C-o_AcSb.css","fqdn":"ususzr.com","domain":"ususzr.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ususzr.com/","date":"2026-09-21T14:34:22.053Z","timestamp":1790001262053,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ususzr.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 16 Sep 2026 09:00:00 GMT","end":"Tue, 15 Dec 2026 08:59:59 GMT"},"fingerprint":{"sha1":"C1:EB:80:E8:D2:E9:72:AF:A5:B5:29:AE:E4:3A:4D:8A:20:F4:1B:49","sha256":"AF:BD:A6:4F:7A:6A:28:9A:4B:44:0B:EC:77:65:9B:DC:A7:A1:2A:5B:EF:52:8F:5F:EF:C7:6E:7E:6E:5E:2E:6A"}}},"request":{"raw":"GET /assets/welcome-hub-C-o_AcSb.css HTTP/1.1\r\nHost: ususzr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ususzr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 14:34:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 20 Sep 2026 11:41:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aafc667-2119\"\r\nexpires: Tue, 22 Sep 2026 02:34:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8473,"size_decoded":2935,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (8470)","md5":"9ff87ca3738a871998a7c28f82385370","sha1":"15673381760c844c2fb2a8a442e6c1b26a2ee3a9","sha256":"ff69b744996abdc2a806974c53741c2be6c6b712a7bde68491a1eb8ecabd8913","sha512":"4d033c8af1284550a4825bac2f201c6379bdc5bd6833de7425c1714daf00ecae1493703b0b4f4d643bfd22f7ad654017648f606d143f91b2bf47e4582cbefc48","ssdeep":"192:/2CPLhpEmkiO826WDaSSEsp6dqdgCQh5r:OChpdZO0WDaf+p","tlshash":"6502622376a5f138f97bd4b2b9a4069f7050f803a82357dacda3a215c9c72fb5761348","first_seen":"2026-08-30T21:25:42.470253Z","last_seen":"2026-09-21T14:34:52.159702Z","times_seen":9,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"ususzr.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"ususzr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"ususzr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"ususzr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.174.83.118","port":443,"asn":0,"as":"","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ususzr.com/","date":"2026-09-21T14:34:24.891Z","timestamp":1790001264891,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 20 Sep 2026 00:00:00 GMT","end":"Tue, 06 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"4F:35:3A:96:51:3A:BA:A6:46:B8:B9:BC:97:39:74:7E:49:B4:6F:98","sha256":"F8:18:FA:28:6B:ED:A5:CC:73:11:D3:85:FB:0F:80:CA:B3:EF:76:89:C6:F1:62:90:E2:2C:5A:F5:E2:42:57:56"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ususzr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 14:34:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Mon, 21 Sep 2026 15:34:25 GMT\r\ncache-control: max-age=3600\r\nset-cookie: __uni__uid=rBACamqxQHGyN3ZoBAGLAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__uni__uid","value":"rBACamqxQHGyN3ZoBAGLAg==","quoted":false,"path":"/","domain":"dcloud.net.cn","raw_expires":"Thu, 31-Dec-37 23:55:55 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__uni__uid=rBACamqxQHGyN3ZoBAGLAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":576,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-09-21T14:34:52.160364Z","times_seen":20530,"resource_available":false,"data":null}},"time_used":1134,"timings":{"blocked":0,"dns":3,"connect":482,"send":0,"wait":231,"receive":0,"ssl":418},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ususzr.com/","fqdn":"ususzr.com","domain":"ususzr.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-21T14:34:21.167Z","timestamp":1790001261167,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ususzr.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 16 Sep 2026 09:00:00 GMT","end":"Tue, 15 Dec 2026 08:59:59 GMT"},"fingerprint":{"sha1":"C1:EB:80:E8:D2:E9:72:AF:A5:B5:29:AE:E4:3A:4D:8A:20:F4:1B:49","sha256":"AF:BD:A6:4F:7A:6A:28:9A:4B:44:0B:EC:77:65:9B:DC:A7:A1:2A:5B:EF:52:8F:5F:EF:C7:6E:7E:6E:5E:2E:6A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ususzr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 14:34:21 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 20 Sep 2026 11:42:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aafc68e-791\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1937,"size_decoded":1469,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"b25780b7eea53f4735511dc5eb9510a8","sha1":"710d467c623deefb078cc8ccaf7c4911b470613b","sha256":"3e983be4d67517e4e97f608fa637203539a09c8b5027b689fa8ff3d6548dfdef","sha512":"643c20c0a2bd73562546fbe503b1958868c315da014c6811cb738851b0ea3a82a5be13e318b55ac501d0e08cc77af77cefab9958048b3e0ee7406395acaa39a8","ssdeep":"","tlshash":"134186079c10e80762f41734a6a2f61922e5d72783899da4b4c9d03d9ed4bc64cebb6d","first_seen":"2026-09-21T13:30:47.445739Z","last_seen":"2026-09-21T14:34:52.160894Z","times_seen":3,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":44,"connect":53,"send":0,"wait":54,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"ususzr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"ususzr.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"ususzr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"ususzr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ususzr.com/assets/uni.10eeaeb8.css","fqdn":"ususzr.com","domain":"ususzr.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ususzr.com/","date":"2026-09-21T14:34:21.596Z","timestamp":1790001261596,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ususzr.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 16 Sep 2026 09:00:00 GMT","end":"Tue, 15 Dec 2026 08:59:59 GMT"},"fingerprint":{"sha1":"C1:EB:80:E8:D2:E9:72:AF:A5:B5:29:AE:E4:3A:4D:8A:20:F4:1B:49","sha256":"AF:BD:A6:4F:7A:6A:28:9A:4B:44:0B:EC:77:65:9B:DC:A7:A1:2A:5B:EF:52:8F:5F:EF:C7:6E:7E:6E:5E:2E:6A"}}},"request":{"raw":"GET /assets/uni.10eeaeb8.css HTTP/1.1\r\nHost: ususzr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ususzr.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 14:34:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 20 Sep 2026 11:41:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aafc665-1ca8\"\r\nexpires: Tue, 22 Sep 2026 02:34:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7336,"size_decoded":2317,"mime_type":"text/css","magic":"ASCII text, with very long lines (7335)","md5":"bd585bdcd5c970cfbb39fa6a8d400a1b","sha1":"9d158c1cbc185311274d64ca639798288c1c4e65","sha256":"10eeaeb81f6fda8d0e9ef65a69d9e33f08357eafd5e8f7a6c511efe36d4b7cd7","sha512":"dc9933ceb803bfabb9f6b14ec8b1fa52619c25d9b0deb8a7609dcc35970f7ba3840b1d7dbac8d554d4ef20e464ffe7ae54ff2ba35f850b080cd7c77109c730cb","ssdeep":"96:Ubf2Vi8Lg7J0CQLnDSL9LBunNXVAG5MtmD/PFhZKw3:Ujj8LGJ0CQLnWL9MNXVA8MED/Phd","tlshash":"22e18471d440132ef51bcf3e12e2db8e312245b2dd523f28bb6534b48f9a1c6693a786","first_seen":"2026-08-18T01:32:15.533382Z","last_seen":"2026-09-21T14:34:52.165593Z","times_seen":10,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"ususzr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"ususzr.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"ususzr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"ususzr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ususzr.com/assets/index-BO0tuFoh.js","fqdn":"ususzr.com","domain":"ususzr.com","tld":"com"},"ip":{"addr":"194.102.104.212","port":443,"asn":0,"as":"","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ususzr.com/","date":"2026-09-21T14:34:21.597Z","timestamp":1790001261597,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ususzr.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 16 Sep 2026 09:00:00 GMT","end":"Tue, 15 Dec 2026 08:59:59 GMT"},"fingerprint":{"sha1":"C1:EB:80:E8:D2:E9:72:AF:A5:B5:29:AE:E4:3A:4D:8A:20:F4:1B:49","sha256":"AF:BD:A6:4F:7A:6A:28:9A:4B:44:0B:EC:77:65:9B:DC:A7:A1:2A:5B:EF:52:8F:5F:EF:C7:6E:7E:6E:5E:2E:6A"}}},"request":{"raw":"GET /assets/index-BO0tuFoh.js HTTP/1.1\r\nHost: ususzr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ususzr.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 21 Sep 2026 14:34:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 20 Sep 2026 11:41:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aafc652-38806\"\r\nexpires: Tue, 22 Sep 2026 02:34:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":231430,"size_decoded":88354,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (50134)","md5":"a2a0f263c469f32fb80a9e43da029855","sha1":"2ac253325b8676f08783b36201b9040906843f86","sha256":"e411e75c518ebf42486ec3cd5ebecebc779cd237bc7f865000872cdbebf5a900","sha512":"1122bab4a69710da15112453539e1ac5ff1924d01791fc4beaceb1b88f4f35c7c3a2f1a87afa590095b4286ad91c80ed14d749f52a5bebe849d19619ea635d88","ssdeep":"6144:lfcU6MPOn4FR2Fn+5iznhWTmycta0Vehy96RZQozxcR8HH:lXR21+5iITzcta0Vehk6RZQVG","tlshash":"e23407e93282b03243e609f6507b0506f2392955784e94d4f16ceceb3d7785a92bbf6c","first_seen":"2026-09-21T13:30:47.452575Z","last_seen":"2026-09-21T14:34:52.166025Z","times_seen":3,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"ususzr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"ususzr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"ususzr.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"ususzr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}