{"report_id":"d5f2df01-479d-4360-9ccc-b60dba27ddfd","version":6,"status":"done","tags":[],"date":"2026-03-05T00:59:37Z","url":{"schema":"http","addr":"giftyfelix.com","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"giftyfelix.com/app/#/","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"title":"KuCoin","dom":{"size":72627,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65509), with no line terminators","md5":"a80ad7c1f09d9a2030b198dd795e4f14","sha1":"629453efdb035769650e4ab8a8c519ab7b3800eb","sha256":"6469f7d64c6b2ef5f7db736f292514f20ea7bc1fa90b0af6c37993f838b07cf6","sha512":"61ec29de7f8ca6655faf2d4cb156ab353722a4e0159c1b03f79db3fe055d5bc9f46b4ccf6ddc09799af805fcd778e104c80891338a2abd19efa4d0d99148316c","ssdeep":"768:pjYjTmTJEedX3MxxFLDa6qRLMxxFLDa6qROmlgOpWTyLRW2wmre/sr1io5NVvTjN:pjYjSTJEeCVL6fsudK4gkg6NVi+0ushE","tlshash":"356321d2b21110964137e1d0e5286f2a7a63e32f971654d426b846b3efcfeb178390f6","dom_hash":"domhash340ea810c7b04966acc46d73d22d85e2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"giftyfelix.com","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-09T00:59:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"giftyfelix.com","ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-04","domain_rank":0,"first_seen":"2026-03-05T00:59:41.649305Z","last_seen":"2026-03-05T00:59:41.649305Z","alert_count":212,"request_count":53,"received_data":6044504,"sent_data":48356,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]}]},{"fqdn":"www.giftyfelix.com","ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-04","domain_rank":0,"first_seen":"2026-03-04T18:27:07.803713Z","last_seen":"2026-03-04T18:27:07.803713Z","alert_count":21,"request_count":21,"received_data":44625,"sent_data":9932,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.aiccoinus.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-04T18:27:07.801831Z","last_seen":"2026-03-04T18:27:07.801831Z","alert_count":0,"request_count":4,"received_data":0,"sent_data":1804,"comment":"","tags":null,"fingerprints":null},{"fqdn":"at.alicdn.com","ip":{"addr":"47.246.44.178","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"domain_registered":"2008-06-25","domain_rank":96084,"first_seen":"2013-11-28T05:03:29Z","last_seen":"2026-03-04T16:54:30.516291Z","alert_count":0,"request_count":1,"received_data":34001,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"giftyfelix.com/app/clipboard.min.js","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e3e33c5ac117cd77c61dd7f3c8e8a69","sha1":"1f8030e484c4630bdd20017c8a646e138aa24980","sha256":"03a7ffe45e4bea53a73bb08b4ffe77f612aef32fdc0bb44d73f0e94195ce20e2","sha512":"79ca0f59bf25ebceecf25d6d2318c8998392405eb83aab615b1a381a6c7c687214ad995fe43b6e1921dce509ad6454d5a9d707a963bb5b4b7ed27bc3eb9cfed6","ssdeep":"192:80i1RWTek1XVTkAkI/qHnHZ4Ly98Dom53C5GU7oKZoQhoslw/3JAQZu5CpVHa4L1:NivWTeBI/vCc3kHiQ7l83JJu54z9f","tlshash":"d532a64cb28071b196db60ae802f424fb270942570ae90d4b63ae8f16d7ceed5567f3c","size":11023,"data":"","first_seen":"2023-04-05T13:46:29Z","last_seen":"2026-07-27T10:54:16.5164Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/app/layer/layer.js","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0c975e34297f3e44e99c9d83555ffc1","sha1":"7e465bd79e65428cf07e5991196cff512ce44a4b","sha256":"691aad750624d84b17f2fbb73a4982860edd18837f3000c5b660ac82bf408e82","sha512":"1d9dcd7e1afe695e5716ea55f9a5a3e3aa45852722b4e1a2653ebd3f3a85c8b7a34b15264751f5ee26ea56ee49c8683a00d771197d8b32d9ea53d842d6db3b79","ssdeep":"384:41xCih92A3igrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:41EiV3i+WtXItqF13k8","tlshash":"56a2b66a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","size":22104,"data":"","first_seen":"2023-04-05T06:05:22Z","last_seen":"2026-07-27T10:54:16.507302Z","times_seen":6093,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/app/static/tradeview/charting_library/charting_library.min.js","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8cd63cddf0ab72e873d68a2d68ca336","sha1":"2d0b483c39ea41187d9fcb8200bb2819525dbd3b","sha256":"6571ad1a4bb68aacbd4c3a78fc0c26f9c1f1bb34a92164ea3fac2b4532acf88e","sha512":"f3956ab3268f27911de0789fa0858de98e26bcd2736544a6694a225aa61ab5b8ceff26774af62bad71294531d75e4faa198f44ee85a5731ffb26480940f4144d","ssdeep":"192:S4DF7XcEbRi1H0FEKyhWbviztF89xo/g81Qit+0idiiV8M5MSBj5JCWotPSXmYRB:fhoEbizXAoINoWoxSXmBEU3OHQI","tlshash":"18320054df6c2c3205c720fc8d7f288f513de276e895449e388491dc59ed44bbaaba39","size":11663,"data":"","first_seen":"2023-03-07T14:46:31Z","last_seen":"2026-07-27T10:54:16.513959Z","times_seen":260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/app/","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e6e911090fbcd33e48dbeccb9077aa23","sha1":"ef91f4bf159a3600e3115f8ffbd7547cdfd99752","sha256":"59816f36bc587a4d381e80a25f1b7a20e8c8057b0fbd334e12e7f58b2d4372c5","sha512":"4d72b932790c89e48f782f6d1dd1db21bc01d21e0d8298e813c1312c0166f8e28d5223c2eeb2ab01f511ba0c3c495c25cc7235631403783d71416d3c27a801ea","ssdeep":"","tlshash":"2931aa1583a6b778c2c530edba57cc29023a0c19b6e6b7dca417dc40a548c37f624aeb","size":1729,"data":"","first_seen":"2026-02-22T06:36:54.350361Z","last_seen":"2026-07-24T20:31:52.771561Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/app/static/tradeview/datafeeds/udf/dist/polyfills.js","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a24c8424ecaa94595878ee39970c7b46","sha1":"651ecfd5fa247c45b1138bdb2629399882c50384","sha256":"67396f17c514b90f31cbe905241e290c820130be7f55edc770ce81587d37040e","sha512":"6a09a1c41bb241c93b864eda4c57ac14bf91c2b0d0a5323f03d24c31ba266c53af6b9b15580a914aebfca0c825ec6e19cc73e352398fde352c188c604addfe39","ssdeep":"192:/5C5b4rmkiNL70mrZm3KosuxV6/hk3haw5UPQ0wx9B4EhN0xhOU8c:xGegVrZLO3gyP6EhN0xhD","tlshash":"29128588f7e0b472036360b4917f450fb2b53925648e41b8f260d8ea6cbd44d962bf7c","size":9647,"data":"","first_seen":"2023-03-07T14:46:31Z","last_seen":"2026-07-27T10:54:16.510806Z","times_seen":302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/app/jquery.js","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b01a0f793e8811780858bb6919154ee","sha1":"65b42f5118627b51ea31bf2df017d443315b30f7","sha256":"94fb7ad5f871626cf431588ccda297d2d6cb9aca466de0bd902d4d15a120d100","sha512":"ded23391216b2cb519656e436a4f6b09393a83dde75453a02c6cc221f92363ca1d256482458049b24ac193d971452655d2c8581c61ddf57b18f2e70473272b22","ssdeep":"1536:NP10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrJ:o+414Jiz6fh6lTqya98HrJ","tlshash":"4d83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84338,"data":"","first_seen":"2023-03-07T14:46:31Z","last_seen":"2026-07-27T10:54:16.51528Z","times_seen":241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/app/static/tradeview/datafeeds/udf/dist/bundle.js","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd3251e228d9edda60ce01ccb3046f77","sha1":"acea866435eea9c7a0564dd82435bab93c22a9db","sha256":"f016a5c57c09504aea2cca849831255353ad7e56e008fd49a45a23b114b1247d","sha512":"07db2933537e3a704befe64479130db26145597802b80cc9f9c3dcc437aff0823e896626240801ac121e06c25ec986b42580c7d240f900b160646d29c99429ad","ssdeep":"384:kpe0jAoNzmAHgWH4NRZsPA4iCA2PHDJMW:oBiWH4jZsDPA2PHyW","tlshash":"9452a6c97611312182936472e87f380ba139b515688a903c71c8e9de6efdb5dea17f3c","size":13539,"data":"","first_seen":"2023-03-07T14:46:31Z","last_seen":"2026-07-27T10:54:16.508092Z","times_seen":347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/app/js/app.f80e2e7e.js?t=1","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"630df1e9523fb7ee8eb76bfa259acd52","sha1":"12f69ebcfe4f7fb90b04489c7f8dde2a14bac251","sha256":"d9f40653ff2f842555763239e6287bccf40e944e321c9f3723ef48413dd7e1e6","sha512":"9028b26b378f12217a44f4a95868945058fdc8c93aabe5815e4c1fd3f63b7f929a9c1678f54980ed46d5232bcf62f1a5d121059215e0242830f13b0dc9aa76ab","ssdeep":"6144:F9OZ/bAo1IgiJFEl35JL1/J25syTziGo7kk5Vk4v3CFeLIt3tWPA+LhlkNtimMR:cD1LiglJJLnyTzw1qBMA+LvL","tlshash":"d505492da5cae5b98d739142304e2269f3ba3dd4e0154085be7dcac126dcd6da30fb78","size":800317,"data":"","first_seen":"2026-03-04T18:27:14.107589Z","last_seen":"2026-03-05T01:07:01.435127Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/app/js/chunk-vendors.ca353660.js","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"80475393f39f0389340546b51bce1921","sha1":"c13aa3eed35199ab077be13cb0e9ae595baa9a78","sha256":"0d21f8896d7fd11844526d26deb2c5ff6cbd9412c766da3001da7fbe21146b14","sha512":"b01601cc918d0ba9293741df12820f88480665c86b6c8c91f56de8ef56491df9a7912e86d1c8013140b1bab159cd6bdb849eb750c06f7b3ad81ab161860b98c1","ssdeep":"49152:DK4gyeTjvtGoHB/20jDUz2rGghvglKVGMDX1pl/hc2V3icOT:0//nUzeFBpl6s3YT","tlshash":"93952a8d73c4b06643e321b5507f240ba3372958a80e8458b675d8daacbd95e233bf7d","size":1999062,"data":"","first_seen":"2026-03-04T18:27:14.109759Z","last_seen":"2026-03-05T01:07:01.461714Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"giftyfelix.com/api/currency/new_timeshar?_timespan=1772672360090\u0026symbol=LTC%2FUSDT\u0026from=1772067559\u0026to=1772672359\u0026period=1min","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:20.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /api/currency/new_timeshar?_timespan=1772672360090\u0026symbol=LTC%2FUSDT\u0026from=1772067559\u0026to=1772672359\u0026period=1min HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6Imt4S0RLXC9iZERTa1Y0Qkxjd3dOUTZBPT0iLCJ2YWx1ZSI6InpMd2RCXC9rZmZUanVwTWt3ZVIrZ3VNeW9HQ0Z6TWs3dkV1QWpDdEdTc1R4VzB5bG9SV3k3WGdkRlk2andxRkRKOUhBbHM3dUJyV2UxTWNhNHNseWEzZmR0RWxZNHFWdU1jdmpYXC95UWd0U0xXb0o0N01KSGs3SGhqMmlvS2xcL24xIiwibWFjIjoiY2IxZmMxYmVkNmQxYTM1OWZhMTZhNDRjOWMzYmY2YzFlYTY0NzkzMmZjYmNkNGRmNzQ4YTZjM2FlYjI5MmVjZSJ9; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Thu, 05 Mar 2026 00:59:21 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nset-cookie: angela_session=eyJpdiI6ImJGNkNFQ05oVllpZlRyTER4ZEVpMWc9PSIsInZhbHVlIjoia3ZtWXBNaFg3MnVWN3BFZEs4em9FTmgxalRJZlpwTDFRSTBxTVhFS2N0anZ5Q2VoWjQxNTFZQ0tpWk1xNFFhdjZvTmVyM3FXY0JOVXQ1Nlp2aEF6NWs4aTZaUzRiTDhyYms0S3RWbjZiWE5mUFlGU2Q5aUJlNDRIOExTaDBMYmwiLCJtYWMiOiJhMmE2NTExMjlmOTlkZDY3YTEyN2M5ODY3YTc5YTczNmRjMWZlMjIzNTQ4N2Q0MGE4ZmQ0MDYyYzRjOWY5ZDg0In0%3D; expires=Thu, 05-Mar-2026 02:59:20 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=73Zlh0S4Ft0ZK7Xu4Ck0UFlQW3e3Tm7ezv%2FBZVgZeN9xbn4s2egEK3m%2BvmX1YkfBbsO5aYV8sHW%2FBE7ztZAAeOOZ3DNG%2FiURMQ%2BbvNOD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d6adff01525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100058,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5a3fd419aa5ea71bb802c0622c130578","sha1":"1a09d6ebc49f493fbf014422d20a93df47ff9c8d","sha256":"9f3dfdaede979bbd44193038b3a154d07c91abfe84fc9658dc563f6807bd0872","sha512":"2c94662007aa9be9d27417d56695875c5eb43d76e3b6654cc9cc00628dda2b1e4b4262ebe0dee69eab3b861477cbd3520b4b06cafceaa85985ebc224afc3c835","ssdeep":"3072:hRe/dZb/dZrx0kh3dFabW/dZ3IQCqFD5dFkc/C9qVW5/dZ8/dZF/dZO/dZ2/dZtq:hROx0KF84eZTIQ","tlshash":"08a3714066b801f2d07a24d46a936868836f739754c6cfe495bf0dca64e31bbba11d3f","first_seen":"2026-03-05T00:59:45.068464Z","last_seen":"2026-03-05T00:59:45.068464Z","times_seen":1,"resource_available":false,"data":null}},"time_used":953,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":949,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.giftyfelix.com/upload/1712060625686484.png","fqdn":"www.giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:34.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /upload/1712060625686484.png HTTP/1.1\r\nHost: www.giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:34 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nage: 14\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wdtoxPd0xtg10JQlyyFhCvO7baWXG8tuY%2FN5nnBz%2B0%2FaFgq1kF%2F6x%2FOfnX%2BzQmUqEjO3fGMuZiAQhkTAC6G3rmfoQVb25p2Jn8Gjd5XkUpkaKw%3D%3D\"}]}\r\ncf-ray: 9d752dc36a641525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-05T00:59:15.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 05 Mar 2026 00:59:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://giftyfelix.com/app\r\nserver: cloudflare\r\nset-cookie: __e2151edab7457d1b62caa17b2a3d542a=1772672355\n__e2151edab7457d1b62caa17b2a3d542a=1772672355\n__e2151edab7457d1b62caa17b2a3d542a=1772672356\n__e2151edab7457d1b62caa17b2a3d542a=1772672356\n__e2151edab7457d1b62caa17b2a3d542a=1772672356\n__e2151edab7457d1b62caa17b2a3d542a=1772672356\n__e2151edab7457d1b62caa17b2a3d542a=1772672356\n__e2151edab7457d1b62caa17b2a3d542a=1772672356\nangela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D; expires=Thu, 05-Mar-2026 02:59:16 GMT; Max-Age=7200; path=/; httponly\r\ncache-control: no-cache, private\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eMzRrOdwGPltvskV9QxANnUyGsoPC2izjCs0gOCmXVhCht9IdDounlgL%2FgibzUcfEFh7p4Bmmc4i6%2Bo%2BaRpCJxF8qY3KZBFoIngAFuQC\"}]}\r\ncf-ray: 9d752d4d3b474e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3060,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":1632,"timings":{"blocked":69,"dns":42,"connect":1,"send":0,"wait":1494,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/api/appdown?_timespan=1772672359265","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /api/appdown?_timespan=1772672359265 HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Thu, 05 Mar 2026 00:59:19 GMT\r\nset-cookie: angela_session=eyJpdiI6IkhrU2ZOZEtVaWI0QjV0MmhvK090Qnc9PSIsInZhbHVlIjoic2ZCajJSUnM2TGd1R2JVT2M5azFYMU5YWmtDSkZcL2Iwd3dCN1RZUGtuaWhWNnU5cStlQTJqYTh1TzN6bk8wanJFTElscWsyWXY5eE1pMGlucjVSVzlPekRKQjBOd2t0Q1dpN2lMbXltV3ZoZFZ6YW1PNWw5VFlBVVNLTDlnZ3pnIiwibWFjIjoiNTJiZmU5ODdkMzZjMDIzZDY1MjE0ZDE2N2MxZjU4NjRjMWJmMTAyMmY4NjRhZTdlMzFlZjdiNTIzOGM5ZmYzNiJ9; expires=Thu, 05-Mar-2026 02:59:19 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tDPNr2%2FWQ%2Bd7MKWdY42dx7BGAlqi1TDyKWud1ktt5VmT8rxHzUMWLtbljaqKLSDQ%2BLGZ1KYx0uNqu4ZePzGsGveDiB1xW5H3jvn6QcZf\"}]}\r\ncf-ray: 9d752d657f191525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"c48f8e95ec4fffae5b1d8b06a95fcfe1","sha1":"7bcb90f2a5cf05bc8c8db380d6a9f04e1fc2ebd6","sha256":"813bc2c0542db3ac819c278643084132bf86ab99132a73a38bd2c38ac2f1100f","sha512":"3be04b6588b4b82acbae7effb7a3cb93d658cbc300fb040318524f7d2afb605768edb16b4c90cac41004d8729a2a5308dd9a75e84d46dc352ddc14ffe1efccc3","ssdeep":"","tlshash":"d480002b8300c2282a0880e0203caa083a2302ef8880c8e2a0220c28a2228a30800223","first_seen":"2026-03-04T18:27:14.078664Z","last_seen":"2026-03-05T01:07:01.447698Z","times_seen":3,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/app/","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-05T00:59:17.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /app/ HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:17 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 21 Jan 2026 11:44:53 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L1%2BV4MGUF7Mwl3L5%2Bmli8LurC7VkhLwxaVsuoanuITCMA2bQej8AAPxOGb1QzktakzZwghvAOUv4V0j5f3%2FqwWOiZo9BODc86Je9O6l5\"}]}\r\ncf-ray: 9d752d579cf51525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3060,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3060), with no line terminators","md5":"c40bac2ecec1eed40e71f4adcdb691ff","sha1":"60080eda7422edd58827e4fecf79a6490bbd7b20","sha256":"d3b115dafc6161b08ddb36796e2051e63f78a5a3dda2b53788ac710c937922a1","sha512":"2c1e9262d889a0c8c4097358422fa6a78720d7920c51129aea2784d5aa2024cbd7eae94c1d3470f21a22d49a71afc4fcb302c1e3bf08365060697747e32334dc","ssdeep":"","tlshash":"dd517305cb14e3ac86d135ddbd62e81d417b1c0ab971fae8a0a68c105558eaab614e93","first_seen":"2026-03-04T18:27:14.081611Z","last_seen":"2026-03-05T01:07:01.444916Z","times_seen":3,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/app/js/app.f80e2e7e.js?t=1","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:17.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /app/js/app.f80e2e7e.js?t=1 HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 21 Jan 2026 11:44:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6970bc10-c363d\"\r\nexpires: Thu, 05 Mar 2026 12:59:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jIe3%2Fdmi3CeKDEZsb1qq7KWoUzJIlVkzAvoqtHTkZ5M6tjFjFArzOvFvu7WB09R1orSGiBbF01NsvXhiQ01w%2FLuSa1ZYTklOMbmWlBN7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d59ed611525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":800317,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65515), with no line terminators","md5":"5853802a034d0d1fd72b138332cea411","sha1":"9c71f0d9ace2b8e07258bfc7fce8922772c8b674","sha256":"a7d95c78115fcf67a55fb34e1b17ed1e304581c09ab784456509a1f584be5637","sha512":"12b44929bd0c1d7bd6a38bb80c85909ccf85cf297de473caf8f2cfb6e049cb50ca66d0891806a553d0a19dd75996e912f9b0ac7ed58dcb24b1c13ab5b1149954","ssdeep":"6144:F9OZ/bAo1IgiJFEl3R+L1/J25syTziGo7kkaLz5OED3tWPA+LhlkNtimMR:cD1Liglh+LnyTzwzEDMA+LvL","tlshash":"d5053a69e58be3aa8db29191301e2254b2fe3dd7d0054085bf7dcec426dcd68624fb78","first_seen":"2026-03-05T00:59:45.078204Z","last_seen":"2026-03-05T00:59:45.078204Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":665,"receive":468,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/app/img/mobilephone.ad1bd7d1.png","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /app/img/mobilephone.ad1bd7d1.png HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 02 Apr 2024 18:41:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660c514e-c0a5\"\r\nexpires: Sat, 04 Apr 2026 00:59:19 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2FoUZnkGWCshewIk1OJ07Hg%2BE41Gf%2F4IAIgOXxWHqFbAdsyXcLgDeaHC8BRS23TC%2BhUTepGpy2E90vG6TjnJY18WQu0jFAcRoyCw8FhL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d653f0d1525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49317,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 463 x 523, 8-bit/color RGBA, non-interlaced","md5":"ad1bd7d1e173c9656177104c388d30ca","sha1":"47e0070fd570f3d36758c8f1836e7c8263d91ba0","sha256":"e479bfc357911dff83098eced50ca46cf84b18b59f9c640e488e35b1ebe39773","sha512":"eef26c58d8c09581dff35855c9c2679dabecc0400c4f702abe9ca94707210b97e6b342ea34295a2307257c64219e31d2826af77e117834cc47598981a4913226","ssdeep":"768:YeAMWtQsqSZEMA16ZkEyELE+/NrotN8WlOH/5y5hIKDSqt0sNQe31mc3NkJtWFpq:YeADQsqSpOfA+lOHM5hIKFmstFm1w4","tlshash":"0c2302d1e2eef56ac11cc684c630b77b59e002d8a517549599a2c883ef2b5783bf2d13","first_seen":"2023-05-15T15:11:04Z","last_seen":"2026-05-20T05:31:39.746017Z","times_seen":145,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.giftyfelix.com/upload/1712060625686484.png","fqdn":"www.giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:20.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /upload/1712060625686484.png HTTP/1.1\r\nHost: www.giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:20 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NTI6QbsA%2F0UOOMF0jWMdlUy8A2O3j2wiXf0U7rrg6A9CZ%2FxBlPwMgvQ9ljwuuU0zNSKAFYhHEV0HAh86OSmyPehq1fx2HYrfP1d7q%2B%2FqHffgSg%3D%3D\"}]}\r\ncf-ray: 9d752d6e284e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/app/css/chunk-vendors.c6bdcf7b.css","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:17.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /app/css/chunk-vendors.c6bdcf7b.css HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 02 Apr 2024 18:41:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660c514e-365ab\"\r\nexpires: Thu, 05 Mar 2026 12:59:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B1Ab5FB19PVeeaCY9jrwg4dIsBTwaKo9n7NfSzFxAVJHMapWy15VsqdOSZZmIIeiv3dL6DWgyNf9lyeZip2tfxcxst%2B%2F63E8Iiu%2FIiHE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d59ed5e1525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":222635,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0e0cdb1e3eb5eb1f21fd5e50d8d710ca","sha1":"b678ee701bfe3d9821c5efe91054f784b6f05015","sha256":"9646c99434d444f3709ffe0088ebe24b4f0801acc2a778105118e8cd5c87cce0","sha512":"f30697b75c97f4402a60ef21e73290aba507cc574f0fc18b90e0b5e7e068da3101ae600b85b94810a73933894a4bf94f786106e9098420d9374d0a940e965f37","ssdeep":"1536:j6vwSf65WCXkc28Y7SrW3YeWXA1u9w4HCe/l4mAgW9tME+64A8O6iZkJgYu8e2so:j6vLf65WCXklyX6qd/mXQQ83","tlshash":"be24a5109b172427622bdb6db4c0ba896f24c363d8735b3bfd95780cc6e64991227e1f","first_seen":"2023-04-13T23:29:04Z","last_seen":"2026-03-14T08:01:14.305928Z","times_seen":35,"resource_available":false,"data":null}},"time_used":737,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":596,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/api/news/list?_timespan=1772672359265","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"POST /api/news/list?_timespan=1772672359265 HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nlang: en\r\nContent-Length: 14\r\nOrigin: https://giftyfelix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":14,"data":"c_id=5\u0026lang=en"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Thu, 05 Mar 2026 00:59:19 GMT\r\nset-cookie: angela_session=eyJpdiI6IjhLWWk4U0VWN2FvcFNaYTd1TTdTTlE9PSIsInZhbHVlIjoidWd1Y0g0ejRjZWNtUjYzcEpMNVhiVzlQMmtJMVdSWDVLcDdJNmlUeFUrK3ZpTHAycGZ2bG5ESzMwcHdiam80aE1CcExHOGNJY2dPM0RpRHMwVWVqbGdGUUVNT21oaFlqVnRHdmdNXC9iSGZJTEZkc216ajRPYktVdVdlTDZUblpZIiwibWFjIjoiMTc5ZDQ2ZmQ5NTFmZTAwMmI5N2YwMmIyNjUzMTQ2MzcxY2IyNjc5NDQxZjljMjQ0MjY0N2Y2MGUzMTJhMzk4YSJ9; expires=Thu, 05-Mar-2026 02:59:19 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PpCtQ%2F8rVI9gT8rUt1FyUzJQrwVjJMsDM6xucaxAXaHNWCDLs7%2BUrmepP02ZFemqY3cwU%2BWrGj2SORE4BO3TZjLkTk3yLuDU63%2F01THK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d658f1f1525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":311,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1977c16871de6431046bc2cf33b258b7","sha1":"b7e967bbc12a93417f6210de7baa6101a044a11f","sha256":"9121e741c57a60db93c8a6dc9ce9706fbec6652727fdb2df79118d9629b14113","sha512":"3354c7dde287aac407ec1290ef6171e5f8942443188f5719e480deb7b531741daf34cd31929380d279dfa276ccd4c1b5abc01213147f71773022af0b9dacc20a","ssdeep":"","tlshash":"68e07d6a6380c8a8e19401c36058b518b79b2097c68297633a818c88c26c6d1001b223","first_seen":"2026-03-04T18:27:14.04846Z","last_seen":"2026-03-05T01:07:01.433054Z","times_seen":3,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.giftyfelix.com/upload/1711947433250580.png","fqdn":"www.giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /upload/1711947433250580.png HTTP/1.1\r\nHost: www.giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:20 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xvyOo0S8rOLi1xlTzXTDzoMxXKRTF8AzrnPJCYoKG1qCsi6ow0Rx03oWau%2BvlfX3ILZVNYXxx%2BH58dly%2F7plWXRLPVV1modEP9DTjwQaAGgVUQ%3D%3D\"}]}\r\ncf-ray: 9d752d689f9a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":451,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":451,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/api/currency/new_timeshar?_timespan=1772672360089\u0026symbol=ETH%2FUSDT\u0026from=1772067559\u0026to=1772672359\u0026period=1min","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:20.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /api/currency/new_timeshar?_timespan=1772672360089\u0026symbol=ETH%2FUSDT\u0026from=1772067559\u0026to=1772672359\u0026period=1min HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6Imt4S0RLXC9iZERTa1Y0Qkxjd3dOUTZBPT0iLCJ2YWx1ZSI6InpMd2RCXC9rZmZUanVwTWt3ZVIrZ3VNeW9HQ0Z6TWs3dkV1QWpDdEdTc1R4VzB5bG9SV3k3WGdkRlk2andxRkRKOUhBbHM3dUJyV2UxTWNhNHNseWEzZmR0RWxZNHFWdU1jdmpYXC95UWd0U0xXb0o0N01KSGs3SGhqMmlvS2xcL24xIiwibWFjIjoiY2IxZmMxYmVkNmQxYTM1OWZhMTZhNDRjOWMzYmY2YzFlYTY0NzkzMmZjYmNkNGRmNzQ4YTZjM2FlYjI5MmVjZSJ9; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Thu, 05 Mar 2026 00:59:21 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nset-cookie: angela_session=eyJpdiI6IlA5Mk9IS25pVW5UR3NKSmxqTmNHSkE9PSIsInZhbHVlIjoic2hPN1ozbW1LVlIrUXhtZnA2VXA3VFE1bmVzNVEwMkxveXdlalhrK0doTElWbGV0VjlvT0dxRDVPT0ZZVHppOThsQmZ3TGpQTjBpNWhmeVp6UWRuXC9Fd010emJ4ZFwvZmw5d2hVMEhoZlo0eUZhWGltZkk2dzJ0bGlVS1Vob2NERiIsIm1hYyI6ImMzYmEwZDVkM2IzZmFkOTQ1MTE0YzYzYTEzNzVjZjc3NWJkN2Y1ZWU0NDU3MmE4YjJhYTU3MWVlYmEyODY2NTcifQ%3D%3D; expires=Thu, 05-Mar-2026 02:59:20 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nee4vQ%2BDJ9H9lb6nPuZuM7Z9Q9k2pGzE1Lk%2FwHC1FJldRsqypT0hDbc6x3RFmqJtJp1Exb1izHxOR%2BjTTULk%2B1o7qix6V5hlRYWPcjab\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d6aafdc1525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106083,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"072af377a3fe7bf8bf6442c0bea80482","sha1":"359670e6f7ffc80ea2a4fcfc89b57ae959e98be8","sha256":"7d07e45d3d702ad129b09a28b5065e636a4841deca46e22bdf6549a9018a769b","sha512":"5dd5c4ff4037c6dff0ddbebfc5945ea446ac577924e7b5bacfa60fc552222447e72147812fb365e463d1376c100d5dc04dd6a392e2ed2106a7509929dcce8fd2","ssdeep":"3072:WWRJH6KPEoPINjgRrhVcoOJ4dWdNi3XR+:RT6scCaQ0i3XA","tlshash":"85a3704053b901b5d07a64c829d69cac43ae635754c38f6952ff4dca68e12bbb213e3f","first_seen":"2026-03-05T00:59:45.082589Z","last_seen":"2026-03-05T00:59:45.082589Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1001,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":996,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/api/currency/new_timeshar?_timespan=1772672360089\u0026symbol=EOS%2FUSDT\u0026from=1772067559\u0026to=1772672359\u0026period=1min","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:20.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /api/currency/new_timeshar?_timespan=1772672360089\u0026symbol=EOS%2FUSDT\u0026from=1772067559\u0026to=1772672359\u0026period=1min HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6Imt4S0RLXC9iZERTa1Y0Qkxjd3dOUTZBPT0iLCJ2YWx1ZSI6InpMd2RCXC9rZmZUanVwTWt3ZVIrZ3VNeW9HQ0Z6TWs3dkV1QWpDdEdTc1R4VzB5bG9SV3k3WGdkRlk2andxRkRKOUhBbHM3dUJyV2UxTWNhNHNseWEzZmR0RWxZNHFWdU1jdmpYXC95UWd0U0xXb0o0N01KSGs3SGhqMmlvS2xcL24xIiwibWFjIjoiY2IxZmMxYmVkNmQxYTM1OWZhMTZhNDRjOWMzYmY2YzFlYTY0NzkzMmZjYmNkNGRmNzQ4YTZjM2FlYjI5MmVjZSJ9; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Thu, 05 Mar 2026 00:59:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nset-cookie: angela_session=eyJpdiI6IklPem5UbnZoa0ZqMUlFQnU2NDNucGc9PSIsInZhbHVlIjoiRldES01pSGRuN0xiSFhcLzZMRzZYM1VIQXNLWkV5cmJzSldZMndRY3c2cmdpWnk4VitmeGV4ZSt4OUtoXC9cL1pjTThZcllTOWk2bEZVSml6ZFhQKzNibmJYc2xmbTZmdWpQTlJGdUlocjd5dEZxM0U3YzI1WGR5YW5mQU81MkxZcUUiLCJtYWMiOiIyMjNlYTM3ZjNhYmZhNzdhMzM4OGQ1OGEzZWRhM2I2Y2NhZDFiYTQ3MGRlNWZkNTg5NzJmODE0YTZjYjA3NzhmIn0%3D; expires=Thu, 05-Mar-2026 02:59:20 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ZPmyNMdAXH0BCI3g2Fdkeeb7zslZb6NtpjPyfCN6fZD2lCR0W4UP7GUMDD2uQR0VWSnictd%2FwdOL1c9sd%2FIhtKYIRwTkZefGqm5Epzg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d6aafde1525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"136b02255a623f7c44544d5266e21ee6","sha1":"d16732370a4b4c9c029637920cd26afa2d422390","sha256":"fcca40d39e392ed1fed0515a2ed890128e3a461bc12240751cf2df7506160f86","sha512":"cc52574d8ea557037eccc98a0d0831b18956f9f6dc5d9c88dcb4b5a4a5abc88ba79470d35c772cc38bd8bc28159b911093b3375b72634bc6bea5ee8bc1c8e6c2","ssdeep":"","tlshash":"ba8000a2280e2c830c0a38cc880c8b8220e8a0808a200320ce8ea238cb080acb883830","first_seen":"2023-04-07T14:59:17Z","last_seen":"2026-07-23T15:53:23.475087Z","times_seen":219,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/api/currency/new_timeshar?_timespan=1772672360090\u0026symbol=BCH%2FUSDT\u0026from=1772067560\u0026to=1772672360\u0026period=1min","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:20.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /api/currency/new_timeshar?_timespan=1772672360090\u0026symbol=BCH%2FUSDT\u0026from=1772067560\u0026to=1772672360\u0026period=1min HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6Imt4S0RLXC9iZERTa1Y0Qkxjd3dOUTZBPT0iLCJ2YWx1ZSI6InpMd2RCXC9rZmZUanVwTWt3ZVIrZ3VNeW9HQ0Z6TWs3dkV1QWpDdEdTc1R4VzB5bG9SV3k3WGdkRlk2andxRkRKOUhBbHM3dUJyV2UxTWNhNHNseWEzZmR0RWxZNHFWdU1jdmpYXC95UWd0U0xXb0o0N01KSGs3SGhqMmlvS2xcL24xIiwibWFjIjoiY2IxZmMxYmVkNmQxYTM1OWZhMTZhNDRjOWMzYmY2YzFlYTY0NzkzMmZjYmNkNGRmNzQ4YTZjM2FlYjI5MmVjZSJ9; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Thu, 05 Mar 2026 00:59:21 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nset-cookie: angela_session=eyJpdiI6IjVvSXhnZDJhTDQ1MjMwWENKR2Z6TkE9PSIsInZhbHVlIjoickVcL0twbjJIMlU1d3pKUU92eFZSQUZhQm0rWlBiOGRzazl0RWRRbjJIQUtpZStLeHZTd2NoXC8rYkt1czk3cGwrajlqQVVzYWFTcTM5SzdOMDlOdldFb2pheU1lanNmVktyQ1o5WEI5ZXZhWjY1K0hXK2dNSE54TVVZVWdNM05zOSIsIm1hYyI6IjRjMjhlYTQ1YmEwMDRmNmFlMGYwZWE4Yjg2MTgwZDU1OTQyYzA5MjA0MzNmNDEyMGIxY2VmYWM4ZTYyMmQ0ZjcifQ%3D%3D; expires=Thu, 05-Mar-2026 02:59:20 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S2Jkr2GWESwMBlh2NPCKOmMDwXL%2FyjNqAUbiXCGtIjz5WqcG9F7XOZwEOQcNqFodYLshZm9DiSy%2FH7IYGWmmfG%2BSyMJYR%2F7lY52Y5JxG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d6aeff31525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102441,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05e674261f41c5639289815740180b9","sha1":"b62899c9ca6b381c2d4c7720df24aabbae858301","sha256":"aa25e7fdba301137d6339b97383139997980f907bb0626972e25dd47e92071f8","sha512":"56c2abc859082b727f22aa36872dbf31068e2802d3b1bb3f1a827e612d3c43d381ce6ad28e9c0558e9e3986408168862161d3a2a1b812b6d56e0006e58147023","ssdeep":"1536:+ui+HGkqbY+zj9jejZX2rkgu5Ocz1YKFj+c0jYr:Ti+HGkqbLzj9gX2LRKFj+c0jYr","tlshash":"6da38f4057bd02f0c03a74d46d924c6842aea35765c6cf69a1ff1ec668e19bbb212d3f","first_seen":"2026-03-05T00:59:45.084581Z","last_seen":"2026-03-05T00:59:45.084581Z","times_seen":1,"resource_available":false,"data":null}},"time_used":945,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":938,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.giftyfelix.com/wss/socket.io/?EIO=3\u0026transport=polling\u0026t=PoxWQ30\u0026sid=2b4de759356ada41047e0d81","fqdn":"www.giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:20.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /wss/socket.io/?EIO=3\u0026transport=polling\u0026t=PoxWQ30\u0026sid=2b4de759356ada41047e0d81 HTTP/1.1\r\nHost: www.giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://giftyfelix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:20 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 16004\r\nx-xss-protection: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://giftyfelix.com\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=01TYL0267IPN6LVUhkA7UOQZDn0hSXIrPmFKTaIrfqQ3MXHGmwoz3E7QH1He9Ol4fYnzrYsMrSOHuhVPh0uwH0IBD%2FIrIpa5qfIyN095Ig3Kkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d752d6e084a1525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16004,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"ac79e3ddde390a0088fca535e62d0a08","sha1":"7e5c2eb36131ef14984524210aa11ffa1cbd0378","sha256":"c20fa06add7a988fc4cd34da459821c638d8576b65ba16e887a5a3a5ad476f72","sha512":"3b697d1ea79ba56aa04ab9ddc88dacebbfc44c127d7eb7e93a4b31df20ab7d6de437011c0fda05003d6a451218eb7be563d0192ee27cbaaae35938046a6a84f2","ssdeep":"384:tbjjAdKbJG8HlHUOxp3gkU8Mt1aFUrLHlHeNnN9HoHWcuRnR1vgNF3kfHhHb:tvjA8bJTF0wpmgKHF2I2ccgNFUfB7","tlshash":"f372cf1d676a4bf8d9f1e1c0b8c139ac586a130768c389c5c39dae5c82ccba6f305d67","first_seen":"2026-03-05T00:59:45.085885Z","last_seen":"2026-03-05T00:59:45.085885Z","times_seen":1,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":300,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/app/jquery.js","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:17.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /app/jquery.js HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 02 Apr 2024 18:41:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660c514e-14972\"\r\nexpires: Thu, 05 Mar 2026 12:59:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MGYfTjoJGe1f2KfCryBZuCcLPetWX1T9IIAbZFdSGmMw6OglVGjdEcY2DKvlUETMsIU4w%2Bx%2F1XfTlKzz1C%2BDIcJrwloGBlcRUmMUHffW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d59dd551525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":84338,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025)","md5":"3b01a0f793e8811780858bb6919154ee","sha1":"65b42f5118627b51ea31bf2df017d443315b30f7","sha256":"94fb7ad5f871626cf431588ccda297d2d6cb9aca466de0bd902d4d15a120d100","sha512":"ded23391216b2cb519656e436a4f6b09393a83dde75453a02c6cc221f92363ca1d256482458049b24ac193d971452655d2c8581c61ddf57b18f2e70473272b22","ssdeep":"1536:NP10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrJ:o+414Jiz6fh6lTqya98HrJ","tlshash":"4d83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T14:46:31Z","last_seen":"2026-07-27T10:54:16.51528Z","times_seen":241,"resource_available":true,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":591,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/app/clipboard.min.js","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:17.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /app/clipboard.min.js HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 02 Apr 2024 18:41:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660c514e-2b10\"\r\nexpires: Thu, 05 Mar 2026 12:59:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VVqDraA1EEXHFlVL3w7bmjDTaO028BeYUOEAwXzXmFl1fqnQGyj%2BHH5X8WXDUTs%2B2qPxcGUVZ1GNSnJqAUPjm9gP%2Bx3sBIi4uzc7CK24\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d59dd561525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11024,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10808)","md5":"1e3e33c5ac117cd77c61dd7f3c8e8a69","sha1":"1f8030e484c4630bdd20017c8a646e138aa24980","sha256":"03a7ffe45e4bea53a73bb08b4ffe77f612aef32fdc0bb44d73f0e94195ce20e2","sha512":"79ca0f59bf25ebceecf25d6d2318c8998392405eb83aab615b1a381a6c7c687214ad995fe43b6e1921dce509ad6454d5a9d707a963bb5b4b7ed27bc3eb9cfed6","ssdeep":"192:80i1RWTek1XVTkAkI/qHnHZ4Ly98Dom53C5GU7oKZoQhoslw/3JAQZu5CpVHa4L1:NivWTeBI/vCc3kHiQ7l83JJu54z9f","tlshash":"d532a64cb28071b196db60ae802f424fb270942570ae90d4b63ae8f16d7ceed5567f3c","first_seen":"2023-04-05T13:46:29Z","last_seen":"2026-07-27T10:54:16.5164Z","times_seen":140,"resource_available":true,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/app/layer/layer.js","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:17.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /app/layer/layer.js HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 02 Apr 2024 18:41:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660c514e-5664\"\r\nexpires: Thu, 05 Mar 2026 12:59:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=El411odJpjxdKQHpNbn8Z%2F3XSm%2FQB0yz1NPEMTk4tMdhf9xUtBIX1ejmrhc3f2X1cu8wECa8G1KmRSV7PiM3Mfezctsbng97rOpBq9xF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d59dd571525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22116,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22020)","md5":"d0c975e34297f3e44e99c9d83555ffc1","sha1":"7e465bd79e65428cf07e5991196cff512ce44a4b","sha256":"691aad750624d84b17f2fbb73a4982860edd18837f3000c5b660ac82bf408e82","sha512":"1d9dcd7e1afe695e5716ea55f9a5a3e3aa45852722b4e1a2653ebd3f3a85c8b7a34b15264751f5ee26ea56ee49c8683a00d771197d8b32d9ea53d842d6db3b79","ssdeep":"384:41xCih92A3igrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:41EiV3i+WtXItqF13k8","tlshash":"56a2b66a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","first_seen":"2023-04-05T06:05:22Z","last_seen":"2026-07-27T10:54:16.507302Z","times_seen":6093,"resource_available":true,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":467,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/api/news/list?_timespan=1772672359265","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"POST /api/news/list?_timespan=1772672359265 HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nlang: en\r\nContent-Length: 14\r\nOrigin: https://giftyfelix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":14,"data":"c_id=5\u0026lang=en"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Thu, 05 Mar 2026 00:59:19 GMT\r\nset-cookie: angela_session=eyJpdiI6Inp0cEVHR3dGRkZqRVJrSEZJUVNldWc9PSIsInZhbHVlIjoiOGxjbE4wMExsbGFpRnVlUFZwOXNEY2ZcL3NiYjZWUDlCVFlCTkxXQjVGa3ZaTXFZcG80dW1JakFYcE9WdlZ0blVwSTd4V1hSaDZsWWM2V2xMbll0eTd2YjJDS0NhRVBrOVRcL2NHVndNMkM2S2JTb1RjMHRLZHZhaGh1SWV3MEtEYyIsIm1hYyI6IjAyYjY3ODIxNTg4M2VkYzQwZTY3YWJlZjU2YzQ3MmVlMGEyYmQ4YWZkMjUzYWM1NTdjYmFlM2RlMGYxYzAwNTgifQ%3D%3D; expires=Thu, 05-Mar-2026 02:59:19 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ht91pThInHEJX%2FURpdqFFgsKyHv%2F8TQuQqkNo%2BL3HMP%2Bueu%2B1%2FHkLcGGoX1VHZGWIGH1PAf2quvjmrxuOwfJ4g8Z7wgPXlxfvFUadN2h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d658f1e1525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":311,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1977c16871de6431046bc2cf33b258b7","sha1":"b7e967bbc12a93417f6210de7baa6101a044a11f","sha256":"9121e741c57a60db93c8a6dc9ce9706fbec6652727fdb2df79118d9629b14113","sha512":"3354c7dde287aac407ec1290ef6171e5f8942443188f5719e480deb7b531741daf34cd31929380d279dfa276ccd4c1b5abc01213147f71773022af0b9dacc20a","ssdeep":"","tlshash":"68e07d6a6380c8a8e19401c36058b518b79b2097c68297633a818c88c26c6d1001b223","first_seen":"2026-03-04T18:27:14.04846Z","last_seen":"2026-03-05T01:07:01.433054Z","times_seen":3,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/api/currency/new_timeshar?_timespan=1772672360090\u0026symbol=WICC%2FUSDT\u0026from=1772067560\u0026to=1772672360\u0026period=1min","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:20.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /api/currency/new_timeshar?_timespan=1772672360090\u0026symbol=WICC%2FUSDT\u0026from=1772067560\u0026to=1772672360\u0026period=1min HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6Imt4S0RLXC9iZERTa1Y0Qkxjd3dOUTZBPT0iLCJ2YWx1ZSI6InpMd2RCXC9rZmZUanVwTWt3ZVIrZ3VNeW9HQ0Z6TWs3dkV1QWpDdEdTc1R4VzB5bG9SV3k3WGdkRlk2andxRkRKOUhBbHM3dUJyV2UxTWNhNHNseWEzZmR0RWxZNHFWdU1jdmpYXC95UWd0U0xXb0o0N01KSGs3SGhqMmlvS2xcL24xIiwibWFjIjoiY2IxZmMxYmVkNmQxYTM1OWZhMTZhNDRjOWMzYmY2YzFlYTY0NzkzMmZjYmNkNGRmNzQ4YTZjM2FlYjI5MmVjZSJ9; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Thu, 05 Mar 2026 00:59:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nset-cookie: angela_session=eyJpdiI6IkpJTHQ1RlwvTnUrRklXZm1TZ09ZZFF3PT0iLCJ2YWx1ZSI6Imt6ZTZIZ1ZiS08yTkhQYnZLZm5MWkZKbEtFUmE3ODJQUThQVCtoMXV4VThIU1N2WjNXUTZGQUI4TWtKUFdcL2JHQmRKVlpcLzVwNEhsUERDZVwvenl4TlZMd09QYktnN3RtOWJyUWZpeXlveG1PNHBlWGpqR2ExcW5jMFFGaXNiZTA0IiwibWFjIjoiN2VjYWRhZGNmNGY2NjE3OTI4Y2M4NmVlYmZlMzI2OTc4ZGZkMDk4ZjIxYzY2ZWI3ZjExZjY3ZmRmMjVjOGU2NSJ9; expires=Thu, 05-Mar-2026 02:59:20 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dM4tGtWgwKWlToXBleg9B0lZl8HGTHmq1CL2uHr1yrW2Fe5KWhTSeG6xC5mfDLnL9saEJJ7uXopCVBBdijn4UDsx3pqqf07UiOkEod0B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d6aeff81525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"136b02255a623f7c44544d5266e21ee6","sha1":"d16732370a4b4c9c029637920cd26afa2d422390","sha256":"fcca40d39e392ed1fed0515a2ed890128e3a461bc12240751cf2df7506160f86","sha512":"cc52574d8ea557037eccc98a0d0831b18956f9f6dc5d9c88dcb4b5a4a5abc88ba79470d35c772cc38bd8bc28159b911093b3375b72634bc6bea5ee8bc1c8e6c2","ssdeep":"","tlshash":"ba8000a2280e2c830c0a38cc880c8b8220e8a0808a200320ce8ea238cb080acb883830","first_seen":"2023-04-07T14:59:17Z","last_seen":"2026-07-23T15:53:23.475087Z","times_seen":219,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/app/static/tradeview/datafeeds/udf/dist/bundle.js","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:17.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /app/static/tradeview/datafeeds/udf/dist/bundle.js HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 02 Apr 2024 18:41:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660c514e-34e3\"\r\nexpires: Thu, 05 Mar 2026 12:59:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pzRfF09GMSAFrU7DlN%2BumCuyhVdNLbWD6CD%2BSreyWdWAr1AILdGDGkdColnDsBbsXXpgQEb5iI7CI3PrFrAnQfOFXIKjxnwYUNlfC5io\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d59dd581525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13539,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13538)","md5":"fd3251e228d9edda60ce01ccb3046f77","sha1":"acea866435eea9c7a0564dd82435bab93c22a9db","sha256":"f016a5c57c09504aea2cca849831255353ad7e56e008fd49a45a23b114b1247d","sha512":"07db2933537e3a704befe64479130db26145597802b80cc9f9c3dcc437aff0823e896626240801ac121e06c25ec986b42580c7d240f900b160646d29c99429ad","ssdeep":"384:kpe0jAoNzmAHgWH4NRZsPA4iCA2PHDJMW:oBiWH4jZsDPA2PHyW","tlshash":"9452a6c97611312182936472e87f380ba139b515688a903c71c8e9de6efdb5dea17f3c","first_seen":"2023-03-07T14:46:31Z","last_seen":"2026-07-27T10:54:16.508092Z","times_seen":347,"resource_available":true,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":462,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/api/custorm?_timespan=1772672359265","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /api/custorm?_timespan=1772672359265 HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Thu, 05 Mar 2026 00:59:19 GMT\r\nset-cookie: angela_session=eyJpdiI6IjZjUGdzeHJ0bEwyOWVwWWl4OHhETVE9PSIsInZhbHVlIjoiV24xV2Z3QmFGUzU1Vk8yUEV3NDl3c1FQeVwvWmlWd1YwQWFPdWpUblBGdlVQRWVhc2F3QUdOR2M1bFE5dUFKWmdXYlNSZ1M0ZnN1UUs4endEeWFYMEpLUTNMWnVSdmNhNlFubHdodUd4OFZqV1BUQmk2TFwvaHFLeFIzZmNjWFY1cSIsIm1hYyI6IjAxMWY0YzU1NGJhZTMxOTkwMWQ2MWYyMDI2OTVmNzU1ZTMxYTdkZGU5MWZkNGI4OGFhZDcwYmE0YjllZDQ3MTgifQ%3D%3D; expires=Thu, 05-Mar-2026 02:59:19 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LcACuh2H5jVLrKahknZr6wQWP3PE0XNFzbgaa3JR%2F%2FAnSjARL1CtTLAy%2BnY7eTSejL5EIeWCqiyHjvyUR%2BlYNSQlCQUD%2B2Bt8uZLQ4B7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d658f1d1525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5d5a0c8f05e3f17e700aa9a05b39ab3a","sha1":"1e7dd778133b2e32cfc9e81449873f4ed9ddd460","sha256":"92ca0eb0d4421214e34bb402c2a41c167f357528d57d093f3622b548c6b2bd21","sha512":"9d682c4cb2c44f15b2ebb3a2a40678a144eb48b53e681b347bfa7ecd5418959edae6192e13e7c772a031ad188b32c951a1c3e012916e914ec7a7dde9dc1bcbe6","ssdeep":"","tlshash":"c4a001f36680a64426c582d178982bb8a082b1c26c06e40b013942e916dd5b09e691a6","first_seen":"2026-03-04T18:27:14.093851Z","last_seen":"2026-03-05T01:07:01.439287Z","times_seen":3,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.giftyfelix.com/upload/1711947369624854.png","fqdn":"www.giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /upload/1711947369624854.png HTTP/1.1\r\nHost: www.giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:20 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2F0LBO7Fhh1Q0jDCahcQLUt7GYS9eWGAlgJXdSyMdgiYChNkUKSSVy5wYqQuZZx99ORgorM%2Bnwjjc6Aof%2BMJODGFZ7NJEYfH%2FFNezgX2x8BgDw%3D%3D\"}]}\r\ncf-ray: 9d752d689f991525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":472,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":472,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.giftyfelix.com/upload/1711947763464357.png","fqdn":"www.giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /upload/1711947763464357.png HTTP/1.1\r\nHost: www.giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:20 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4%2FSFxQ69Mj1kuDElzQHUkg%2BqfpFisLiY28XlREl8NkDHce72ElxoRBw1udkA3BjuQh1fjtoO0B3TkI0Cot4kOeLDJX3MHIvJ%2B4QQcwfA7giqoA%3D%3D\"}]}\r\ncf-ray: 9d752d68af9c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":465,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":465,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.giftyfelix.com/upload/1711948037220599.png","fqdn":"www.giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /upload/1711948037220599.png HTTP/1.1\r\nHost: www.giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:20 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DAS1BVvvqcMTcZHVpTaWnGy1yBHUdwIdSO6kMiCWYVK6QZjAlfMNyVpvBlXorq4aBrGXouWA02a2xMj6dBmvQKSUJOpeAhOgl7cIQ9gU4vALzQ%3D%3D\"}]}\r\ncf-ray: 9d752d68bfa21525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.giftyfelix.com/upload/1711948071126046.png","fqdn":"www.giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /upload/1711948071126046.png HTTP/1.1\r\nHost: www.giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:20 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RfYjVEYWzJfJgEBl6StJvtuULA9yddy0uAbejleb8uJY5LK9o5%2FYQJV9%2FgDfkfgFcn5I8KrD5fDRdxHSKVaSHZ3t22pQfEwr5LW%2BxQnH8ttZOg%3D%3D\"}]}\r\ncf-ray: 9d752d68bfa31525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":461,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/api/currency/new_timeshar?_timespan=1772672360089\u0026symbol=WICC%2FUSDT\u0026from=1772067559\u0026to=1772672359\u0026period=1min","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:20.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /api/currency/new_timeshar?_timespan=1772672360089\u0026symbol=WICC%2FUSDT\u0026from=1772067559\u0026to=1772672359\u0026period=1min HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6Imt4S0RLXC9iZERTa1Y0Qkxjd3dOUTZBPT0iLCJ2YWx1ZSI6InpMd2RCXC9rZmZUanVwTWt3ZVIrZ3VNeW9HQ0Z6TWs3dkV1QWpDdEdTc1R4VzB5bG9SV3k3WGdkRlk2andxRkRKOUhBbHM3dUJyV2UxTWNhNHNseWEzZmR0RWxZNHFWdU1jdmpYXC95UWd0U0xXb0o0N01KSGs3SGhqMmlvS2xcL24xIiwibWFjIjoiY2IxZmMxYmVkNmQxYTM1OWZhMTZhNDRjOWMzYmY2YzFlYTY0NzkzMmZjYmNkNGRmNzQ4YTZjM2FlYjI5MmVjZSJ9; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Thu, 05 Mar 2026 00:59:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nset-cookie: angela_session=eyJpdiI6IjM2cVJMUkY0STRjNldjeW8zVnd3NGc9PSIsInZhbHVlIjoiS0Q5ZWpnMCtOR1dRWWV3cHNqXC9PU29FUno5b3ZmdnB6OG8wejBFbEQzalBHWkxxSU1GVkhQWTNENmhFaVNYREJuWHhzTjVsYnZINzcyTDh2Nmh3K1YrZEUyaTVwWm9pd0d0WW1Zam16dTFyN3R1eEZEemJvbnVPMFZHbHNRelE3IiwibWFjIjoiNGNmMTFhZWI5NDIxNzY3NmRlMTI3MjY2Yzk4ZjhiM2E4NjZlOTJhMmQxMTdhN2Q0ZjZhYTFiYmUxNmZiZjEzZiJ9; expires=Thu, 05-Mar-2026 02:59:20 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Th5mI7juPh4UKxNCgcfoqvDIcoUwH%2FKJX2i56KW8x0Z0rgM2iwVHotxafWla9dWBJpQoXmXZSPNV74U1ZbSDtycQVnjGK1jQl2ZgwcGk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d6acfe31525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"136b02255a623f7c44544d5266e21ee6","sha1":"d16732370a4b4c9c029637920cd26afa2d422390","sha256":"fcca40d39e392ed1fed0515a2ed890128e3a461bc12240751cf2df7506160f86","sha512":"cc52574d8ea557037eccc98a0d0831b18956f9f6dc5d9c88dcb4b5a4a5abc88ba79470d35c772cc38bd8bc28159b911093b3375b72634bc6bea5ee8bc1c8e6c2","ssdeep":"","tlshash":"ba8000a2280e2c830c0a38cc880c8b8220e8a0808a200320ce8ea238cb080acb883830","first_seen":"2023-04-07T14:59:17Z","last_seen":"2026-07-23T15:53:23.475087Z","times_seen":219,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.giftyfelix.com/upload/1712060625686484.png","fqdn":"www.giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:24.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /upload/1712060625686484.png HTTP/1.1\r\nHost: www.giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:24 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nage: 4\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rWIuw3GBUPZRpmKaG%2BhX3VTYZwkmYn5U6s9SIbpn9T4awFFbplVQAvzMOYWU8Ac8o1gHXGjCkzEX1G339yUo3GVHrXbDhbFdkN7xS0e9UY3trA%3D%3D\"}]}\r\ncf-ray: 9d752d84caeb1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/app/img/index11.510c00a9.svg","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /app/img/index11.510c00a9.svg HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:19 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 02 Apr 2024 18:41:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660c514e-cb2\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5%2FQpFAZTP4iF8ZxtZJCpt0jUmxq5D2ZSlv3BdaK4Q%2BJL6nTNc8vZaK%2BhrXHBIBc81OvK7H3P2lrEVw1t9ll3PHFVoGU7NhcbY7XXVk2E\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d651f081525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3250,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"510c00a9d70e6b32d5b2f57724fc1e59","sha1":"91c87015a86993d41ad80fba675d573ef8897292","sha256":"d57b61094b96aec98285c1e23e4fb7b28dfbd735a6fe7fa32fbe0f1866372c90","sha512":"04b8400ee555ba27eeea1977ce7ba42b82a8c7978b900cb50c465b74c2cf5b29286d4f48f22303dd2d9abb2ff27d28c6b106b1d72ea79bc3c27a6c9646c59d7e","ssdeep":"","tlshash":"4861ee8414fd0069e5054265e3ea386e0e1ab2cb17d5052dbf5c2295df350fa0abf6cf","first_seen":"2023-05-15T15:11:04Z","last_seen":"2026-03-14T08:01:14.292422Z","times_seen":33,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.giftyfelix.com/wss/socket.io/?EIO=3\u0026transport=polling\u0026t=PoxWPzo\u0026sid=2b4de759356ada41047e0d81","fqdn":"www.giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:20.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /wss/socket.io/?EIO=3\u0026transport=polling\u0026t=PoxWPzo\u0026sid=2b4de759356ada41047e0d81 HTTP/1.1\r\nHost: www.giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://giftyfelix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:20 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 15831\r\nx-xss-protection: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://giftyfelix.com\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fei%2F4oFz2pK8vyWfwkcoyIsBlb8A0KgZlqEVNsNs5AQB6qKrMuCoiKKcRuLBENK8GUSuNIO1uqls44Rz%2ByAeYEtwS0xBXiFdMrTOKwqS4NRp3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d752d6bf8101525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15831,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"5c0516f55e37ac1e6061bda64352ad77","sha1":"59d94acba8778859066760956f7f74006d3f738e","sha256":"6141f43367f3737aea4940f30163326e5f8143f09c5cd25275d89995be92ba64","sha512":"34bfb613c53fcfa3526ab1c9cd18748c01a1bc074e6e9dceb363482f00c9d92f5445bb06602271bc7f8d31cbb073b12de7c7484506b72887cae4cec3adf58e0c","ssdeep":"384:xNe73YHGHV3jHCYyKlvReA/+HZ2x/z/V3oDHHCaCpCfHUH7HKP:xNe7Im1TiYyKlvRew+52xjV3oDnCaCpo","tlshash":"d9628f0d57624af4d5e1a3c0a8c27bdc686d238768c34a85d39deeccc2d8766b305d6a","first_seen":"2026-03-05T00:59:45.093627Z","last_seen":"2026-03-05T00:59:45.093627Z","times_seen":1,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":312,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/app/css/app.b4202c87.css","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:17.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /app/css/app.b4202c87.css HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 02 Apr 2024 18:41:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660c514e-33dd1\"\r\nexpires: Thu, 05 Mar 2026 12:59:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zoHeHcI3YrBe4K4s%2FAcyzXVq7Zk1JfKA9RUdvAZXTXJXdxrEqpVG7adyp5AOC6zcWy3Ec%2BvFwQylkFhamQJhBLKC7bR9Cg2vezr1gqIg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d59ed5d1525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":212433,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (58278)","md5":"9a65c3d961568c3dc91fd549e031370e","sha1":"f153ea212c8044573b2f0bf78711335bb6d41f6d","sha256":"b8f47e18571b481fd01b3eb18da702615cdf2818448f1d9a46a1fba5e130dddb","sha512":"5390773f5c162e96f78c5ffdb05de82411762ffcd60c34cec3abad851f26c272885e7660f86ce3910f6fc939542ebea6085b43a01a1227ab950a1d5606033f05","ssdeep":"6144:QkZzwg1sA/kiDT36yo5prSeZ0ITyP6B/3WoCNMeVCJBdvCEQRHY3b:pZzwg1sA/kiDT36yo5prSeZ0ITyPo3W2","tlshash":"6624b621b65c102ab53bc263a4d4bddd3125e767a05216befd82792dcf836d6363330a","first_seen":"2026-03-04T18:27:14.074115Z","last_seen":"2026-03-05T01:07:01.444246Z","times_seen":3,"resource_available":false,"data":null}},"time_used":826,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":673,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/api/currency/new_timeshar?_timespan=1772672360089\u0026symbol=BTC%2FUSDT\u0026from=1772067559\u0026to=1772672359\u0026period=1min","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:20.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /api/currency/new_timeshar?_timespan=1772672360089\u0026symbol=BTC%2FUSDT\u0026from=1772067559\u0026to=1772672359\u0026period=1min HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6Imt4S0RLXC9iZERTa1Y0Qkxjd3dOUTZBPT0iLCJ2YWx1ZSI6InpMd2RCXC9rZmZUanVwTWt3ZVIrZ3VNeW9HQ0Z6TWs3dkV1QWpDdEdTc1R4VzB5bG9SV3k3WGdkRlk2andxRkRKOUhBbHM3dUJyV2UxTWNhNHNseWEzZmR0RWxZNHFWdU1jdmpYXC95UWd0U0xXb0o0N01KSGs3SGhqMmlvS2xcL24xIiwibWFjIjoiY2IxZmMxYmVkNmQxYTM1OWZhMTZhNDRjOWMzYmY2YzFlYTY0NzkzMmZjYmNkNGRmNzQ4YTZjM2FlYjI5MmVjZSJ9; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Thu, 05 Mar 2026 00:59:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nset-cookie: angela_session=eyJpdiI6InlIcGJjbTNoUjhmNk13R2l4K3BHUWc9PSIsInZhbHVlIjoidU4xOVdaMW81NWVyYW1TRW9KRldcL2xZTXdDYkd4cldmNDVPcEx0Tlh1TFR6NWR0SnQ3QlJZRUc1N2NQRUJcLzlPM0M4YVVaKzhOR21FMjk3WVFPUHlOZVh3UTN1SnlYVmU1SUg5UkdQbXd0KzNWdElWTDJpZm5wR2p0c2Y2NDlBcCIsIm1hYyI6IjQ1ZTIyZDQ4ZDExOWJmMmFjYjZlZmM3YjhhMDFkZjRkYWZmYzBjZGIxZGY0ZmVmYzUzN2YxMDg1NGIxODcwNGIifQ%3D%3D; expires=Thu, 05-Mar-2026 02:59:20 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9QcgJroqGZLw%2BVEtccs%2BIfksHEiQqcXfEJ5aIRcAOGeGxV8U9VVvomlbkwolZEWDUWYQhNBXapAeON%2B2N4O6eIkIRAQ%2F3CAk34oNcjJC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d6a9fdb1525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":115769,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1af746db20a48bb23a05e56dd94fc6d0","sha1":"91bba4763eb17239759e702a11d6a1ea1e650926","sha256":"a28ad3e8cefda4bc4675af2210d18dd22bfcd37465db486a86d04437de29b11a","sha512":"9cd5c573d5e4c394e34055be25cb0ede327d6f6e7d5d0991f4a1fdbe635af3bc5f0dbe6065660c6669f43aa02daa8839aa26f145fea9738ed6007d394b72d4b4","ssdeep":"1536:60fAShFsB82fZjv/y08xuDoJckVSwHjB1i3L5t51Nlt8jYD+aSxRwlV5bdC3i3:dfAlmgv/1D+ck7BAL5t7fSQvdCA","tlshash":"68b37140d6b901b1c07e25d47d928868a3ae73a764c38f9891bf1cc675e12bbb211d7f","first_seen":"2026-03-05T00:59:45.100175Z","last_seen":"2026-03-05T00:59:45.100175Z","times_seen":1,"resource_available":false,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":774,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/app/favicon.ico","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:21.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /app/favicon.ico HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6IkxGY2VmU2hlQ0VhbndjNEVkZU8rVXc9PSIsInZhbHVlIjoibHBYaFVpNm5XTTlrTkJUbVBicW9SclNnbnh5ZVlOV1VHd01wb1U4aTJxSmZJSmlydzBKWnlhUmJ5RWhOSTV1ZFFVVVwvTTJWcVVYaXh6XC85OVJENGpIelBhdGRBVVUxb2xpR2ZNVlJscDJhMUg0Qyt3RDA5cG5ObGR2OXJUanh4QSIsIm1hYyI6IjY2ZWUyMWFiNDdkMzRkOGQ5MzJiMjZlMTdmZWIzMGRjMGNjZDJmMjFhMTA3Zjg4YzE3YmMxYWYzMTc2YzRjNGQifQ%3D%3D; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:21 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Tue, 02 Apr 2024 18:41:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"660c514e-423e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MHLmiYueny4yg9uSsDDkMyiXJmJ%2Fd2YlqcwnL4mR2x7rhJoSeUFL7zzvn4Q6MFhYc1jFZr5lbqWb%2FRtojSvEeoJ7POHVyywqCGW3fTjC\"}]}\r\ncf-ray: 9d752d70e8941525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16958,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"25a466ef99ee7a04465cdabe8aec4304","sha1":"1bb340c6397071093e9217d7a6d156ade03622a0","sha256":"edb45550b31ec73ad86bafe028fc9b154208fda425216f38f9739692a6b26319","sha512":"907eb808cc35f38128550270267ea8e10253a08d0ade210ca5ea42add4564528dda54c884c5f6d200f1d3861e8a0b9c3190f27ea903770d3f8488d46bbf46fa7","ssdeep":"48:oIKvyT4CT97K3IE9n9r5clWxfHzG+dR4/n3QDIbMIXxjKFyUF9SJXtGpnacqbDJu:n6Ik9NclSH8n38IB9XvJzhHsj","tlshash":"6972756e21019585cc0f65b2821d912407d0e8279c2e0ffeb8797aca6fe725e3713af4","first_seen":"2026-03-04T18:27:14.070839Z","last_seen":"2026-03-05T01:07:01.450488Z","times_seen":3,"resource_available":false,"data":null}},"time_used":615,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":464,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/app/layer/theme/default/layer.css?v=3.1.1","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:18.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /app/layer/theme/default/layer.css?v=3.1.1 HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 02 Apr 2024 18:41:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660c514e-381f\"\r\nexpires: Thu, 05 Mar 2026 12:59:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uUOjkWtzGh1sI4igZ85kmCOuqkEwO9m7Txkbbh8LU8wvQccaArWfxs6ko2x7c9u6ALWv0J05Fh2UmqVrFDE7tWq6sLPqAe4xKbiPmjXD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d5dddfa1525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14367,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14367), with no line terminators","md5":"3d2e0d91c5c0b96abb8dbdc2234aba77","sha1":"9d55e153b30fd7414fada5718e20918e9c7f65e7","sha256":"e3144d018a6a24f733c6fc2a2ee603fb583f0030585e9d4b71bec471b78e31fc","sha512":"42bf3eff281998d088ce012b9a5910f72951c91715595572bb968fbfc5fa2b1cddacef3ca683a1734eb41114b302b6a4dad8b7432c5877b3563a080a2547ae05","ssdeep":"96:mp+Ntha8qNEp+wRY1vUPXiK6nMLPD2OtLzXyPHL/LztJDzyv2OQ7KGx1jyd2/SWz:1WmLr2OtSrzzt42OQ7KGx1jCWR2b+RcU","tlshash":"2e5221e144811299b0278721d6dc7eba32f88d43e5630daef257381f874c6dba2b6647","first_seen":"2023-04-05T06:05:22Z","last_seen":"2026-07-27T10:54:16.512796Z","times_seen":6778,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.giftyfelix.com/wss/socket.io/?EIO=3\u0026transport=polling\u0026t=PoxWPhP","fqdn":"www.giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /wss/socket.io/?EIO=3\u0026transport=polling\u0026t=PoxWPhP HTTP/1.1\r\nHost: www.giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://giftyfelix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:19 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 106\r\nx-xss-protection: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://giftyfelix.com\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eiyv0VZuzlKxOM%2B5T2dE9ItGujPuHpo1NanSCTUOXyiGh5l2JISb67HLh4MCkFeytoOgZc2DWg8HQQdEG7qg1MPA2z%2FXruwd4%2BxXNcYc3UY2MQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d752d653f111525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"d10264209155010794789fe1734bc7d4","sha1":"f364db3e0981355fd103304908e1d8d06689f6f7","sha256":"07ddb71f1c1ad715f4dd137526a9c57ca3f5268a7be026b801dbe7175f257c28","sha512":"bce56d303d18d12f06852b912d2b0b724e7ca04d0ed510acce2f312005fb18cd9982ec835130e371dde8e1252b71157754e54626fa046c03ebc95a406df87e17","ssdeep":"","tlshash":"9eb092889169f3c5aa70ba81a4f25b196858ba9d8ac90849222915aa058a200a31666b","first_seen":"2026-03-05T00:59:45.106601Z","last_seen":"2026-03-05T00:59:45.106601Z","times_seen":1,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":449,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/app/img/index33.1e416b37.svg","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /app/img/index33.1e416b37.svg HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:19 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 02 Apr 2024 18:41:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660c514e-14e7\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RSy5ZdnmK3EPwNZn585un8%2FEIhFMxrxP20O%2B82DO8fNdGpgraKWKAAZ1o3kETWRws5BcVjXvslxlYajaR2aa8Mg4Jnqwplsyooq74W4C\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d652f0b1525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5351,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1e416b37c5525ac207b9549437317b69","sha1":"e29218e2815b908f1ec9153826865fd19b8b3cb0","sha256":"dd5ab45d54599777fec46db55abf39a1c26925ce2ebcad84676bad817b6f37fd","sha512":"ec9ed16094c85110068389169b575acab862958c111a1c3d3db3f41e547cd7c4ba4af737fbac7e4f36a11ae7bb8cd69595c5833a6cf2b22f8e1566b94abb57ee","ssdeep":"96:expgHICfB2hyLj7jjB7pB9B88cZLhWojtyg2Cs/s:4pHCp2hc7z9B88cZNWoes","tlshash":"39b120d411bd123cf2180278f3ea315d086d315fe7d08568799ca928ef395ae066b2db","first_seen":"2023-05-15T15:11:04Z","last_seen":"2026-03-14T08:01:14.311083Z","times_seen":32,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/api/news/list?_timespan=1772672359265","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"POST /api/news/list?_timespan=1772672359265 HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nlang: en\r\nContent-Length: 7\r\nOrigin: https://giftyfelix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":7,"data":"c_id=25"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Thu, 05 Mar 2026 00:59:19 GMT\r\nset-cookie: angela_session=eyJpdiI6IlBxbnE2Y1ZqK094cDc1bWpJN3BcL3BnPT0iLCJ2YWx1ZSI6Im5RcVNPcDBvYTUzVEZjN242SWcwODVKRm9BMktrTTRFWEFOZ1ZGenZcL1l1aVdyWkdqa3dMWGVUTVNLYVpHYStibXRcL0JhT1BWZkppQmFlczJrWTcxeVRsUE1mSlBZZ2dNSDBEOE9ITFZEdTdoZjBIQTZCSE9rRzc0QkZVS21GN3ciLCJtYWMiOiIyZWY2MWI2Nzk5YThlNDEwZTAxMTg5OGQxYjRkNTE2NjVhYjMwYzY1ZWJjZDQ4ODYzNzQzNDliNWIyZThmYTFlIn0%3D; expires=Thu, 05-Mar-2026 02:59:19 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y5aIOZD4kNRa6kqNcTuGygXfhpnDBRp%2Bsd7fXwifHGhN7b8qZBn3B4bRyBf6xhjltzMug6mPlWpgU2uD0l3Qysf2im9jW5ReIvUQnFTG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d659f251525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":278,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"647d4b28d3825b9c80c120f3ea4b3506","sha1":"f134b5622a46216ebc6e471071fa209e5e36b9ad","sha256":"c04915d58dadc306f5da489d5dd6ce9fbc4afbd12f3642302549aade1da619ae","sha512":"ba359197a380c619726000b8fd8350a716c488f689fe317d04718d7b3ab5aa84742e3f3ade2dc5fac53253d5b3d1dd37f1e2d5117ffe2eb7c97051eb4d750ca8","ssdeep":"","tlshash":"b3d02b7213109def914423d1346db758fd9b5097c640c3572984dcacc30c6d40017777","first_seen":"2026-03-04T18:27:14.036084Z","last_seen":"2026-03-05T01:07:01.456107Z","times_seen":3,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.giftyfelix.com/upload/1711947939820186.png","fqdn":"www.giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /upload/1711947939820186.png HTTP/1.1\r\nHost: www.giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:20 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e3AJJijrseR%2FnbV1V9QBf75jtVOeyRQiUtLVNovTG46KxwMhOcvVTNTsQ3mG%2BhjjdziLHV%2FryAL6VU8TzAptGFNJ3plSUpGSq3bBzxAA68v4Xw%3D%3D\"}]}\r\ncf-ray: 9d752d68af9d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/api/currency/new_timeshar?_timespan=1772672360090\u0026symbol=TRB%2FUSDT\u0026from=1772067560\u0026to=1772672360\u0026period=1min","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:20.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /api/currency/new_timeshar?_timespan=1772672360090\u0026symbol=TRB%2FUSDT\u0026from=1772067560\u0026to=1772672360\u0026period=1min HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6Imt4S0RLXC9iZERTa1Y0Qkxjd3dOUTZBPT0iLCJ2YWx1ZSI6InpMd2RCXC9rZmZUanVwTWt3ZVIrZ3VNeW9HQ0Z6TWs3dkV1QWpDdEdTc1R4VzB5bG9SV3k3WGdkRlk2andxRkRKOUhBbHM3dUJyV2UxTWNhNHNseWEzZmR0RWxZNHFWdU1jdmpYXC95UWd0U0xXb0o0N01KSGs3SGhqMmlvS2xcL24xIiwibWFjIjoiY2IxZmMxYmVkNmQxYTM1OWZhMTZhNDRjOWMzYmY2YzFlYTY0NzkzMmZjYmNkNGRmNzQ4YTZjM2FlYjI5MmVjZSJ9; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Thu, 05 Mar 2026 00:59:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nset-cookie: angela_session=eyJpdiI6InIxcVFFXC9zcTE0Z05mWTcrS0p6bE9RPT0iLCJ2YWx1ZSI6InBEVlRENklCdUhqeklHanpQQUpFb1NnWUhjV2VWYmdcL2k4anFzQW02ZWV2WGF6V08wbThZVjZ5NTEzVVJxcmU2enFJYk5HZDFWNE9POUNLaVd2cFBPRVA1RisrTnFrNFpTNlpuNTVjUHVMMnJZa0lmTklWV3BSMWMwTm9Eb1AwRiIsIm1hYyI6IjY5NGZlOWZmMDlhMTBlMDFmYmNlZGZiNWYzZTRiMzQ2M2NiMzEzOWNhM2ZhNWQ0ZDIxYjhmYjM1ZjI5MGEwYzUifQ%3D%3D; expires=Thu, 05-Mar-2026 02:59:20 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AAzpPBiAcIYxiL6AdHQcS2ayKYcyp9mS6AvJe9x9%2BevXCws3ZI5nhBnH0MNowCsf%2Fgw4v%2Bwkw09voZ8Yd080nfIPMCsN8xjwQkC4yXqZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d6aeff61525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":104768,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"88191f41e0bb9b8bea89493a2ff7f77a","sha1":"c77460b828a575930bc5258df059e87a8b6a1de0","sha256":"c1458728424e5cf31defa8f27eb9e85e38969732e820fc44946d55fca96e2d25","sha512":"c562068ad2f658941acd9c787206231922f32c1b04b81321e6703304d28e1f00d4f2e1ed09db48a1c9a3ee1cec1cdcc5f3fbcf5aa194446ba12e01c72bed46e3","ssdeep":"1536:Hq1myki5JuOs8b2r1wba4ty0jQtYxomKlsb/nVlsZ6gb+eDBmcRmsR6oziHoLFSu:TyQ5Ca4U0jQyxomKlsb/nu6GHzC2S30R","tlshash":"40a3904052b902f1c07f34d46dd248a8a3aa205774c78f5992bf3cca69e567bb206d7f","first_seen":"2026-03-05T00:59:45.111138Z","last_seen":"2026-03-05T00:59:45.111138Z","times_seen":1,"resource_available":false,"data":null}},"time_used":801,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":800,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.aiccoinus.com/upload/02@2x.6ac62dc2.png","fqdn":"www.aiccoinus.com","domain":"aiccoinus.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.230Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/02@2x.6ac62dc2.png HTTP/1.1\r\nHost: www.aiccoinus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/api/currency/quotation_new?_timespan=1772672359265","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /api/currency/quotation_new?_timespan=1772672359265 HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Thu, 05 Mar 2026 00:59:19 GMT\r\nset-cookie: angela_session=eyJpdiI6IkpZaUZOSVwvYUJVR0VQT0k3TU9ldDl3PT0iLCJ2YWx1ZSI6IlNWTktXZUk0VW1MdFdEbXFJTUE0VUhWbFZsdG9ncjNXKzd3Z2N4aW5BOFI5anc2U1VrRG5RRThCanNGejcrd29QdEVWa1JWWEFlbU5jR09oRU5ERks2T2tUXC8rSk92Wmp3OUpTUkYxd3FMdTYrN3lJeTNSSldDZlZTVGViQUlHTCIsIm1hYyI6IjFlZDgxYWE4NmEyZGQ1OTFhMjY1MDZjYzM0OTE3OWQzZTBmOTliNjM0OWFkMGNiNmFkOTYwZjc3M2Y2MDg5MTAifQ%3D%3D; expires=Thu, 05-Mar-2026 02:59:19 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fR3mAul2FkRUN25Gv1oKApmlrXIZvDPA3JU%2FxXtmFkuZb8dCj%2B8Q1QGXRyr1K3NcK4bVzjlkKUUbZvInRhZKApHZx3%2FeGzCRIOvEr8Us\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d658f201525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7237,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7aa03f7c18ea6d8860402acfb6c46349","sha1":"98d8f5c2afd950afbe944292428b04cdf1f6976c","sha256":"7888eb46f40b9add6e4e1830a14be546923d483dffdc1be6c84786410d15a479","sha512":"1238b4b719d296666a4fc2d476fd93075ff85d92b9c4556973cdef8289f2331638d753966ce08e1ae758f542038b20d1e2c0bad1a8a65c250a389ff1def9c174","ssdeep":"192:1Zem/nxrmh49Nthw+0h+pehI4ehlWehnp+mG7ab8zbHBHx:fpdOobDlOJpHx","tlshash":"b6e1b09d321cc978c6f76dc2deda32a93612700badd18f41d3de1fcc429596ad20b612","first_seen":"2026-03-04T18:27:14.034525Z","last_seen":"2026-03-05T01:07:01.438635Z","times_seen":3,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/api/currency/new_timeshar?_timespan=1772672360090\u0026symbol=IOTA%2FUSDT\u0026from=1772067560\u0026to=1772672360\u0026period=1min","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:20.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /api/currency/new_timeshar?_timespan=1772672360090\u0026symbol=IOTA%2FUSDT\u0026from=1772067560\u0026to=1772672360\u0026period=1min HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6Imt4S0RLXC9iZERTa1Y0Qkxjd3dOUTZBPT0iLCJ2YWx1ZSI6InpMd2RCXC9rZmZUanVwTWt3ZVIrZ3VNeW9HQ0Z6TWs3dkV1QWpDdEdTc1R4VzB5bG9SV3k3WGdkRlk2andxRkRKOUhBbHM3dUJyV2UxTWNhNHNseWEzZmR0RWxZNHFWdU1jdmpYXC95UWd0U0xXb0o0N01KSGs3SGhqMmlvS2xcL24xIiwibWFjIjoiY2IxZmMxYmVkNmQxYTM1OWZhMTZhNDRjOWMzYmY2YzFlYTY0NzkzMmZjYmNkNGRmNzQ4YTZjM2FlYjI5MmVjZSJ9; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Thu, 05 Mar 2026 00:59:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nset-cookie: angela_session=eyJpdiI6ImRiZHFFM2ZWazF0OWt0eWpLdW1jcHc9PSIsInZhbHVlIjoiaWNLeTNzU0dmUmFUTXNxWWxURnh4K3RJRWJ6b1g2ZFpPblwvZGlRUm5pbkJYckRRMGxrWXdLQUVRK1lBaWtBK2FPa3RJcEpDOHc4cXdxeVdzQjRlWllYbkRwVCtycjdUWUJwQkl4VThXUVNYWE5vS1dvZ3VOTklQaVZCcHJqbnpjIiwibWFjIjoiNmQ2MDVkYzUwOTFlOTEzMmNjYTBmOTBlMmE3ODFiZTViMzEwN2FiZDYxMTk0ZTA5YTM0YTYxNzNlOTVmZjg4OSJ9; expires=Thu, 05-Mar-2026 02:59:20 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uKUP49VYjZ0lGtONW0wpr8D%2FBs9j5jjPHd1Og1jYUDxXCSa9sZW0FKZaGELI2LhzB1pBuF8lVbLfPlRjx3IGnfM3dnP7xV6NDqfWqtsO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d6aeff51525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":104102,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3c5206216cf08a8932f6f5b1c9b96a60","sha1":"577541a2ff0dc74426c8d90814d9ed6608791988","sha256":"f94308834172bd7f9f419d86028514326501fefdacd27ff881da560676eb436c","sha512":"91d583a7ab88774c02926b3c16849881cc1b6bd3028277e3d9ea848791cf3b008891fa8fac76dccb444033ce08febfe2cd483dc6ad62121bb2190e66177d127b","ssdeep":"1536:sIgeUzmSVsMde2z1vgbs9K1ZnsZrCt/D0dQJ+/iAT:sIgeAmSVsgecgY4Zns0tvJ+6E","tlshash":"69a3e84052bd01b1c07e26e87f9248b8839a655768c38f5852bfccca65e17bbb205d7f","first_seen":"2026-03-05T00:59:45.115523Z","last_seen":"2026-03-05T00:59:45.115523Z","times_seen":1,"resource_available":false,"data":null}},"time_used":547,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":547,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/api/news/list?_timespan=1772672359265","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"POST /api/news/list?_timespan=1772672359265 HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nlang: en\r\nContent-Length: 15\r\nOrigin: https://giftyfelix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":15,"data":"c_id=19\u0026lang=en"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Thu, 05 Mar 2026 00:59:19 GMT\r\nset-cookie: angela_session=eyJpdiI6ImhPUGhKQ2ZWZ0h1UEswcWFrVlVsZFE9PSIsInZhbHVlIjoicDRMSkZmT0ltcXNvNEF5SncwOXF1ZVBHWW9qQ1kxZnBTRG5leXNUejdtY1J3cTM3R3pUN3dvUTFvcE1yREhzNlBrbkluQkMyQisxOG9BV2JSZFQ3M3BnU3Yxd21rUmxQUkdhb1lpaEtjUjI4NTlINEhNbWVXYm1UZzRNRGpKcW8iLCJtYWMiOiIwYzQ0MDU2MWNjYTU2N2RkYWFlMDExNzg3NzI3ZmYxMTU2NDg0YzFmYTJjOTc2NzQ4ZjEyODkzZDExNTJhNWY5In0%3D; expires=Thu, 05-Mar-2026 02:59:19 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QK%2BknMlHev5s7CNQIFoERdGNdCF903GrQc0MAKrQKBnCgxYFtUfi%2FCm12O5ML%2F5RelhSOkVN6ZUjHPU2K%2Bs5K2dAux4Yv3EZ2A2PBoPA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d659f211525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":556,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fd7b54467a982c228bc9145547086785","sha1":"2c2476437e493f02fa70ed9b8c580eaf6af7f6e2","sha256":"de26e92c6f2ddac0883bd13acd9c1c1d0b99dae1a56d646851a5c5afdbb0c443","sha512":"f0aa2e682422cd4e7df2d67d4f16da231c384e36a53f854264d900fa71f6a6bf7a1ac600b7694d050b73c54006ebca743abfd0f3c3f7141d1d2058dea38d1a12","ssdeep":"","tlshash":"50f02b6f73d4c59ae19405d3145bf298b7abe0d74a809aa338814ca8c73c5e64006253","first_seen":"2026-03-04T18:27:14.102213Z","last_seen":"2026-03-05T01:07:01.440001Z","times_seen":3,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/api/currency/new_timeshar?_timespan=1772672360089\u0026symbol=TRB%2FUSDT\u0026from=1772067559\u0026to=1772672359\u0026period=1min","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:20.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /api/currency/new_timeshar?_timespan=1772672360089\u0026symbol=TRB%2FUSDT\u0026from=1772067559\u0026to=1772672359\u0026period=1min HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6Imt4S0RLXC9iZERTa1Y0Qkxjd3dOUTZBPT0iLCJ2YWx1ZSI6InpMd2RCXC9rZmZUanVwTWt3ZVIrZ3VNeW9HQ0Z6TWs3dkV1QWpDdEdTc1R4VzB5bG9SV3k3WGdkRlk2andxRkRKOUhBbHM3dUJyV2UxTWNhNHNseWEzZmR0RWxZNHFWdU1jdmpYXC95UWd0U0xXb0o0N01KSGs3SGhqMmlvS2xcL24xIiwibWFjIjoiY2IxZmMxYmVkNmQxYTM1OWZhMTZhNDRjOWMzYmY2YzFlYTY0NzkzMmZjYmNkNGRmNzQ4YTZjM2FlYjI5MmVjZSJ9; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Thu, 05 Mar 2026 00:59:21 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nset-cookie: angela_session=eyJpdiI6InFvcHNZTG5sVGpoRU5IQ0V5OEFtRXc9PSIsInZhbHVlIjoibXl1ZkFpT0hHU3JNc2taWnNhWmF0MlF6SEZuZFpyaUh2aGxPcHJma0d0THU5SnIzaFVFZGg2WmFwVDRCVUwxYXh5WXhsRTMrdUtuTGxnSmx5cHFYemM1RGd5ZitUalVXT3RjWW8zb2xqQ1hFeDBRK0sxa2NhK05aMUJMb296b2EiLCJtYWMiOiI2M2Y4MGRmNzk2NzEyZGVhYTI2NjU4MWY5NjUxNWUxNWQ1NzY3NDYxMGJiMDNmMWMxOTExNzEwYmFiMmJmNDE3In0%3D; expires=Thu, 05-Mar-2026 02:59:20 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=II%2Fd%2B9dDzmP6%2BOQwZREJZzwFiR%2BOojSuK4gDnLufLxhSVO6z9%2Fhh791AF2XLD1cNUVbP3qdQjdZKBASIcM%2Bx2ay5q0oNUq10H3dQ%2B8rZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d6abfe11525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104768,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"88191f41e0bb9b8bea89493a2ff7f77a","sha1":"c77460b828a575930bc5258df059e87a8b6a1de0","sha256":"c1458728424e5cf31defa8f27eb9e85e38969732e820fc44946d55fca96e2d25","sha512":"c562068ad2f658941acd9c787206231922f32c1b04b81321e6703304d28e1f00d4f2e1ed09db48a1c9a3ee1cec1cdcc5f3fbcf5aa194446ba12e01c72bed46e3","ssdeep":"1536:Hq1myki5JuOs8b2r1wba4ty0jQtYxomKlsb/nVlsZ6gb+eDBmcRmsR6oziHoLFSu:TyQ5Ca4U0jQyxomKlsb/nu6GHzC2S30R","tlshash":"40a3904052b902f1c07f34d46dd248a8a3aa205774c78f5992bf3cca69e567bb206d7f","first_seen":"2026-03-05T00:59:45.111138Z","last_seen":"2026-03-05T00:59:45.111138Z","times_seen":1,"resource_available":false,"data":null}},"time_used":955,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":950,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/api/currency/new_timeshar?_timespan=1772672360089\u0026symbol=IOTA%2FUSDT\u0026from=1772067559\u0026to=1772672359\u0026period=1min","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:20.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /api/currency/new_timeshar?_timespan=1772672360089\u0026symbol=IOTA%2FUSDT\u0026from=1772067559\u0026to=1772672359\u0026period=1min HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6Imt4S0RLXC9iZERTa1Y0Qkxjd3dOUTZBPT0iLCJ2YWx1ZSI6InpMd2RCXC9rZmZUanVwTWt3ZVIrZ3VNeW9HQ0Z6TWs3dkV1QWpDdEdTc1R4VzB5bG9SV3k3WGdkRlk2andxRkRKOUhBbHM3dUJyV2UxTWNhNHNseWEzZmR0RWxZNHFWdU1jdmpYXC95UWd0U0xXb0o0N01KSGs3SGhqMmlvS2xcL24xIiwibWFjIjoiY2IxZmMxYmVkNmQxYTM1OWZhMTZhNDRjOWMzYmY2YzFlYTY0NzkzMmZjYmNkNGRmNzQ4YTZjM2FlYjI5MmVjZSJ9; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Thu, 05 Mar 2026 00:59:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nset-cookie: angela_session=eyJpdiI6IitadXVOcTJTY2VERmZTNGhCcXdhNHc9PSIsInZhbHVlIjoidm5RSGMzYkE5V00wWEdPSERFK0FOXC9QSzRpUHdPYTN2OFYzdERPWHJwcjFYS25BY1pkTGhGTzV0dTBTdnptTGhSc01VdU5tNk9IcDlCd3pjSEpqNHdCREZQenhLMlE4YXRnTEFudHRGWUhCOHBjMko4aVE5UDNBaFEzV1V5UHI4IiwibWFjIjoiZGEyOTRmMDE5MmNmYTM2MjZiNzZiMGQxNTMyMTQzZjQ3OTkyYzc3MjUzNmQwOWUwNzUxZDAyNjA4YWJhYjE0ZCJ9; expires=Thu, 05-Mar-2026 02:59:20 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9lb4DmF5H5MdWMmShtXlzChywODifii5ppfrOifTZUSUlEaR5ozWkQ9WR3iThsoUG%2BItO3090F3Rx26gXGoNHALRoCXrXwlZJWIUmYBv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d6acfe21525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104102,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3c5206216cf08a8932f6f5b1c9b96a60","sha1":"577541a2ff0dc74426c8d90814d9ed6608791988","sha256":"f94308834172bd7f9f419d86028514326501fefdacd27ff881da560676eb436c","sha512":"91d583a7ab88774c02926b3c16849881cc1b6bd3028277e3d9ea848791cf3b008891fa8fac76dccb444033ce08febfe2cd483dc6ad62121bb2190e66177d127b","ssdeep":"1536:sIgeUzmSVsMde2z1vgbs9K1ZnsZrCt/D0dQJ+/iAT:sIgeAmSVsgecgY4Zns0tvJ+6E","tlshash":"69a3e84052bd01b1c07e26e87f9248b8839a655768c38f5852bfccca65e17bbb205d7f","first_seen":"2026-03-05T00:59:45.115523Z","last_seen":"2026-03-05T00:59:45.115523Z","times_seen":1,"resource_available":false,"data":null}},"time_used":552,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":552,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/app","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-05T00:59:16.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /app HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Thu, 05 Mar 2026 00:59:17 GMT\r\ncontent-type: text/html\r\nlocation: https://giftyfelix.com/app/\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nsc0HgerQmVw0N9AFs6rd6T825qLa8EUqe6VvAGcyYzoDWe41mMlSots9Pi6kQUxiepYRpdz8%2FTz8PVAPWrb%2BEV%2FqfY%2Ba4L%2BowlnwEdE\"}]}\r\ncf-ray: 9d752d569f614e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3060,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"at.alicdn.com/t/font_2302506_dnypp4o56e5.css","fqdn":"at.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.178","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:17.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /t/font_2302506_dnypp4o56e5.css HTTP/1.1\r\nHost: at.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: text/css\r\ndate: Tue, 16 Sep 2025 06:11:41 GMT\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Origin\r\nx-oss-request-id: 68C8FF9DB09677323028FF62\r\netag: W/\"DA266D30906B403389BB1C971C7B4CBC\"\r\nlast-modified: Fri, 24 Dec 2021 21:20:51 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8281916514372716533\r\nx-oss-storage-class: Standard\r\ncache-control: max-age=63072000\r\ncontent-md5: 2iZtMJBrQDOJuxyXHHtMvA==\r\nx-oss-server-time: 21\r\nvia: ens-cache1.l2de4[0,0,200-0,H], ens-cache29.l2de4[1,0], ens-cache6.se2[0,0,200-0,H], ens-cache12.se2[1,0]\r\nage: 14669256\r\nali-swift-global-savetime: 1758003101\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Fri, 31 Oct 2025 16:23:24 GMT\r\nx-swift-cachetime: 59147297\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\neagleid: 2ff62ca017726723574776285e\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":33094,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26377)","md5":"da266d30906b403389bb1c971c7b4cbc","sha1":"7a5f12ded3a07d0b84a0aa9a425c161c7556455f","sha256":"072b3cae79ec33622136917427e7df44c9b8d8c1e59210e8e92cf66e916f16d6","sha512":"9d0b4dc7082db77f2e0ef1e5e4860867c291c2492a53921e6f089243ea5cc34d125ff2cc82d621485a5c8ef7470a62333ad1f58dcd20d83e4000dd4ed41ea41f","ssdeep":"768:gGHe/hPuLX7QHVX1jpc6Ic2lefYCG7f0tNI6:gG+ZPuLrQ1X1ye2IfK7q","tlshash":"dae21cf089bd2cb44758d1c12657a714ff18a6a98d8b5c4fe2a37d9ca7f72009093adc","first_seen":"2023-04-13T23:29:04Z","last_seen":"2026-05-31T17:49:49.190657Z","times_seen":165,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":69,"dns":38,"connect":7,"send":0,"wait":9,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/app/js/app.f80e2e7e.js","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:17.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /app/js/app.f80e2e7e.js HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 21 Jan 2026 11:44:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6970bc10-c363d\"\r\nexpires: Thu, 05 Mar 2026 12:59:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zHigoRWKBTKTP5ve%2BpTQw%2FnBDpcHYEmDSm6fhh92vbY2gqtn%2BbwEfn5elryb%2Fz6hYc1h7azLJ0MOYvPTProeOY3bH5eoBATTMOw0AWL2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d59ed5f1525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":800317,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65515), with no line terminators","md5":"5853802a034d0d1fd72b138332cea411","sha1":"9c71f0d9ace2b8e07258bfc7fce8922772c8b674","sha256":"a7d95c78115fcf67a55fb34e1b17ed1e304581c09ab784456509a1f584be5637","sha512":"12b44929bd0c1d7bd6a38bb80c85909ccf85cf297de473caf8f2cfb6e049cb50ca66d0891806a553d0a19dd75996e912f9b0ac7ed58dcb24b1c13ab5b1149954","ssdeep":"6144:F9OZ/bAo1IgiJFEl3R+L1/J25syTziGo7kkaLz5OED3tWPA+LhlkNtimMR:cD1Liglh+LnyTzwzEDMA+LvL","tlshash":"d5053a69e58be3aa8db29191301e2254b2fe3dd7d0054085bf7dcec426dcd68624fb78","first_seen":"2026-03-05T00:59:45.078204Z","last_seen":"2026-03-05T00:59:45.078204Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1053,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":448,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/app/js/chunk-vendors.ca353660.js","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:17.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /app/js/chunk-vendors.ca353660.js HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 02 Apr 2024 18:41:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660c514e-1e80d6\"\r\nexpires: Thu, 05 Mar 2026 12:59:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9HomJAP8WXy7iIieWSh9jct7tpQE%2FiyHvqhnqd1HN5MsSiU9H6WHEAGjLS5Y2RHcaQkopJTEpQ7VjUoq1JGY7qdAe4b5ZXkOUSM%2BtTlE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d59ed601525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1999062,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"b2861f38f8acd03db2c864eb1beb9d5f","sha1":"5a679d30413f5ce0de4cae5776d4ff4129038780","sha256":"697ac46bd01038d920d8ebf73d41800555494257f73b2309d338b0006df947df","sha512":"de2d6b8439956debc723d6592818817fbeb1aefa78cdf530261c85bcbebb8718a02f7b9c11ee40ae2c6d9c2358c690ab10dd63f10c4f00f242846051b366b669","ssdeep":"12288:DK4ih0WHyl8TcUn3b/H+XuG2NHE+/2dzUOEy7QjfjfU112rB:DK4cHHyl8Tj/HtGoHB/20jDUz2rB","tlshash":"d7252a8d72c4b02147e361b1506f250bb3372958a809849cba35e8da6cbd94e637ff7d","first_seen":"2025-08-29T13:29:50.5678Z","last_seen":"2026-03-05T01:07:01.454594Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":612,"receive":652,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.aiccoinus.com/upload/01@2x.65e9ae17.png","fqdn":"www.aiccoinus.com","domain":"aiccoinus.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.228Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/01@2x.65e9ae17.png HTTP/1.1\r\nHost: www.aiccoinus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/app/img/pcmobile.dcd94a60.png","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /app/img/pcmobile.dcd94a60.png HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 02 Apr 2024 18:41:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660c514e-87c8\"\r\nexpires: Sat, 04 Apr 2026 00:59:19 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WQVi1%2Frp437Xq8MtO2OXVTwt443MrbXmGmDHm0vpZWBeC6%2FPgG0ZSlYTHbacTITSw2jpuMtLLtmXSetbODXQChGV3BRtZTeKR0eU%2BC8P\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d653f0f1525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34760,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 674 x 390, 8-bit colormap, non-interlaced","md5":"dcd94a600ff656bd026b6aaf440696ff","sha1":"a9dc5c24614b647d1a4e6d0322856b7c88fa7ea2","sha256":"39d9b812f782f360878809252fdb6d4b7d446155efc7759f985ee22aa52f72d7","sha512":"10600b077cf7a5a65f1a4bd97e1afbd9c5620f692f253d8ae29c37dc8e52f127514b7b58f501a40319521f258204ee0cd942e32d8937b48d222d2ad4d0b22ef7","ssdeep":"768:aRg7JP1ekqT+qPStdlD4Eu4rzC2+ZMLvCwk1UAP:aSNP1ekqT+q0f44rN+ZMtk15P","tlshash":"34f2f1b4253b5ef1a0b1f091864d0ba294d200272ac3d715d903b4496fefe26ea767b6","first_seen":"2023-05-15T15:11:04Z","last_seen":"2026-03-14T08:01:14.297698Z","times_seen":32,"resource_available":false,"data":null}},"time_used":618,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":609,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.giftyfelix.com/upload/1712060625686484.png","fqdn":"www.giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /upload/1712060625686484.png HTTP/1.1\r\nHost: www.giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:20 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vf%2FtyA0%2Bqjxr6Z2qblVBtBWhMAw02MqQzOM4HM3kzA4%2FCisZDSttmDNXrQyztt3sWnJj%2FIQ0ywydZfQhlk1J%2FsYZ0rtwiBhXefBVPyDOMCRrrw%3D%3D\"}]}\r\ncf-ray: 9d752d677f761525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":455,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":454,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/api/currency/new_timeshar?_timespan=1772672360089\u0026symbol=LTC%2FUSDT\u0026from=1772067559\u0026to=1772672359\u0026period=1min","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:20.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /api/currency/new_timeshar?_timespan=1772672360089\u0026symbol=LTC%2FUSDT\u0026from=1772067559\u0026to=1772672359\u0026period=1min HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6Imt4S0RLXC9iZERTa1Y0Qkxjd3dOUTZBPT0iLCJ2YWx1ZSI6InpMd2RCXC9rZmZUanVwTWt3ZVIrZ3VNeW9HQ0Z6TWs3dkV1QWpDdEdTc1R4VzB5bG9SV3k3WGdkRlk2andxRkRKOUhBbHM3dUJyV2UxTWNhNHNseWEzZmR0RWxZNHFWdU1jdmpYXC95UWd0U0xXb0o0N01KSGs3SGhqMmlvS2xcL24xIiwibWFjIjoiY2IxZmMxYmVkNmQxYTM1OWZhMTZhNDRjOWMzYmY2YzFlYTY0NzkzMmZjYmNkNGRmNzQ4YTZjM2FlYjI5MmVjZSJ9; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Thu, 05 Mar 2026 00:59:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nset-cookie: angela_session=eyJpdiI6IjFNYTNcL0JaT1lBRlUzb3RCR3BUZGlnPT0iLCJ2YWx1ZSI6InhLb3V6WTlhVjV2ZmU0bFFrU0JURm5qOGJ0cGluRzdcL25mcXZBNzcwa2w1QXN2ZlFCSUFMY2dyQnlQSzczZG43Q09rc2tzaWRJTkZcL0h6ZUFRK3hFMFl6YmpBK0dhc0YzdHZxRnJkRnZxXC9jMHliYTYwSis4RFlmSHJXWVVRWkVSIiwibWFjIjoiMmZhOWM3MGFmZmNjY2Y1YjU0NzJhMzY4NmVhMjQzMzYzOWI0OTJkYjlkMGFiNjk0MDRiNjI0NzMzZGQxZmI2NyJ9; expires=Thu, 05-Mar-2026 02:59:20 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eN06kioufJX4RVsQ0BDbF7DlvsYKQAKQxxB2UIXEJj8BiZhCTBGsf6TwDxUP2xNJHHn6K8wIMCF27lfTgsC5xxcaj7oirG50jNgLCf4P\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d6aafdd1525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100058,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5a3fd419aa5ea71bb802c0622c130578","sha1":"1a09d6ebc49f493fbf014422d20a93df47ff9c8d","sha256":"9f3dfdaede979bbd44193038b3a154d07c91abfe84fc9658dc563f6807bd0872","sha512":"2c94662007aa9be9d27417d56695875c5eb43d76e3b6654cc9cc00628dda2b1e4b4262ebe0dee69eab3b861477cbd3520b4b06cafceaa85985ebc224afc3c835","ssdeep":"3072:hRe/dZb/dZrx0kh3dFabW/dZ3IQCqFD5dFkc/C9qVW5/dZ8/dZF/dZO/dZ2/dZtq:hROx0KF84eZTIQ","tlshash":"08a3714066b801f2d07a24d46a936868836f739754c6cfe495bf0dca64e31bbba11d3f","first_seen":"2026-03-05T00:59:45.068464Z","last_seen":"2026-03-05T00:59:45.068464Z","times_seen":1,"resource_available":false,"data":null}},"time_used":673,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":673,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.giftyfelix.com/api/qrcode?text=","fqdn":"www.giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /api/qrcode?text= HTTP/1.1\r\nHost: www.giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/api/currency/new_timeshar?_timespan=1772672360089\u0026symbol=NEO%2FUSDT\u0026from=1772067559\u0026to=1772672359\u0026period=1min","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:20.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /api/currency/new_timeshar?_timespan=1772672360089\u0026symbol=NEO%2FUSDT\u0026from=1772067559\u0026to=1772672359\u0026period=1min HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6Imt4S0RLXC9iZERTa1Y0Qkxjd3dOUTZBPT0iLCJ2YWx1ZSI6InpMd2RCXC9rZmZUanVwTWt3ZVIrZ3VNeW9HQ0Z6TWs3dkV1QWpDdEdTc1R4VzB5bG9SV3k3WGdkRlk2andxRkRKOUhBbHM3dUJyV2UxTWNhNHNseWEzZmR0RWxZNHFWdU1jdmpYXC95UWd0U0xXb0o0N01KSGs3SGhqMmlvS2xcL24xIiwibWFjIjoiY2IxZmMxYmVkNmQxYTM1OWZhMTZhNDRjOWMzYmY2YzFlYTY0NzkzMmZjYmNkNGRmNzQ4YTZjM2FlYjI5MmVjZSJ9; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Thu, 05 Mar 2026 00:59:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nset-cookie: angela_session=eyJpdiI6IjNqTUdJZDQ0SzR0RjNmV2lCR1MzcHc9PSIsInZhbHVlIjoiMXh6U0t5Y0FtU213bGpNXC95VW5DMjkwRjA0ZEdNYVc0eDl5MFhcL3crT3l1emFtOTRIUU01Um1WOU8wV1wvcTRmVENcLzJSNXRjUndOeFl4UjhoaWF2YzFtdndXOGZiXC95NEc5WTRqcE1VR0JheDFrQVBFMCs2NlNcLzdXSmFzeUpua0oiLCJtYWMiOiJjMWE3YTg3N2E1ZmZkODg4NTUyMjgxYjg2YmFhYmNhNjFhNWM3NTQyNzFhNGY5NTg1NGVhNGVlNjgxYjc3YWM2In0%3D; expires=Thu, 05-Mar-2026 02:59:20 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PCNME9FzxiVIuZBGS7se0YjmbNEDOGxF5jtSAxckQxFQ1%2FGCgm4V%2FChhEY5c3KkJxI8QKfrBn8rHIG%2BVkReaqRs4psiXM%2FxLz4fgxgEr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d6acfe51525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88173,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6e3719d377d0cdcae7a1b59f2095e7e3","sha1":"70c98ee13898ca41beaeb48c0f6eed7cf7164a89","sha256":"d4034f9bdf5b77b658c4562343d37d165e85ed4851b892946cb8dabf89f52252","sha512":"62fdcfaee3eaa0daa811150175731206d544531b8bd45de3e562051323aa2be5d008c9946f23ade7377e8cefb4cf487fbf74656f7441495ac2ebbe00990aa963","ssdeep":"384:54WMaB7THNimM9FEYJnb6tUgD81dJjVixRBQX:5iaBAB9FEYJWtUQ81dJjVixRBQX","tlshash":"518380c092bf0171e17a58886d97585993fb13976cc2ce58d9bf0cce36e117ab24293b","first_seen":"2026-03-05T00:59:45.132551Z","last_seen":"2026-03-05T00:59:45.132551Z","times_seen":1,"resource_available":false,"data":null}},"time_used":799,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":799,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/api/currency/new_timeshar?_timespan=1772672360090\u0026symbol=ETH%2FUSDT\u0026from=1772067559\u0026to=1772672359\u0026period=1min","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:20.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /api/currency/new_timeshar?_timespan=1772672360090\u0026symbol=ETH%2FUSDT\u0026from=1772067559\u0026to=1772672359\u0026period=1min HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6Imt4S0RLXC9iZERTa1Y0Qkxjd3dOUTZBPT0iLCJ2YWx1ZSI6InpMd2RCXC9rZmZUanVwTWt3ZVIrZ3VNeW9HQ0Z6TWs3dkV1QWpDdEdTc1R4VzB5bG9SV3k3WGdkRlk2andxRkRKOUhBbHM3dUJyV2UxTWNhNHNseWEzZmR0RWxZNHFWdU1jdmpYXC95UWd0U0xXb0o0N01KSGs3SGhqMmlvS2xcL24xIiwibWFjIjoiY2IxZmMxYmVkNmQxYTM1OWZhMTZhNDRjOWMzYmY2YzFlYTY0NzkzMmZjYmNkNGRmNzQ4YTZjM2FlYjI5MmVjZSJ9; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Thu, 05 Mar 2026 00:59:21 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nset-cookie: angela_session=eyJpdiI6InYrS0RBRnJYOXlzUWc4QXBORU5KUGc9PSIsInZhbHVlIjoiajlPcURVNVVPbmxDOFRnK25TcW0wNUwxTlpNTk9MNUFLMGJFeWNtMUJVY3lBd0t2eGs4VFI4cldJZTdRUUI2MnBCMzJXemlROTNFUGtvdTZjYjBXVWdzV0ZcL3IzOHhjS0lOd3d4Sk1cL1ZxMVlKMzJ1OXF4NFBCNVJRTVVRK2dkUyIsIm1hYyI6IjAwMWM5MTYyODMwMWExMTBiODkxYmQ0MTY5YTRmYzFhNTg2YzQ0Y2I1ZmY0MDBmMWZiNjJkZDc1MTIxNmU4NWIifQ%3D%3D; expires=Thu, 05-Mar-2026 02:59:20 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IQDcAVm30JhuOoUu925XrimboX4uC2XS6mea3B9haU1bTjZ1pFI7qb42jE1hUbL42dsRzSh7lMKhbQZvI6CvV%2Bv31FrChRKMElXfpfEF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d6adfef1525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106083,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"072af377a3fe7bf8bf6442c0bea80482","sha1":"359670e6f7ffc80ea2a4fcfc89b57ae959e98be8","sha256":"7d07e45d3d702ad129b09a28b5065e636a4841deca46e22bdf6549a9018a769b","sha512":"5dd5c4ff4037c6dff0ddbebfc5945ea446ac577924e7b5bacfa60fc552222447e72147812fb365e463d1376c100d5dc04dd6a392e2ed2106a7509929dcce8fd2","ssdeep":"3072:WWRJH6KPEoPINjgRrhVcoOJ4dWdNi3XR+:RT6scCaQ0i3XA","tlshash":"85a3704053b901b5d07a64c829d69cac43ae635754c38f6952ff4dca68e12bbb213e3f","first_seen":"2026-03-05T00:59:45.082589Z","last_seen":"2026-03-05T00:59:45.082589Z","times_seen":1,"resource_available":false,"data":null}},"time_used":960,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":955,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/api/currency/new_timeshar?_timespan=1772672360090\u0026symbol=ETC%2FUSDT\u0026from=1772067560\u0026to=1772672360\u0026period=1min","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:20.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /api/currency/new_timeshar?_timespan=1772672360090\u0026symbol=ETC%2FUSDT\u0026from=1772067560\u0026to=1772672360\u0026period=1min HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6Imt4S0RLXC9iZERTa1Y0Qkxjd3dOUTZBPT0iLCJ2YWx1ZSI6InpMd2RCXC9rZmZUanVwTWt3ZVIrZ3VNeW9HQ0Z6TWs3dkV1QWpDdEdTc1R4VzB5bG9SV3k3WGdkRlk2andxRkRKOUhBbHM3dUJyV2UxTWNhNHNseWEzZmR0RWxZNHFWdU1jdmpYXC95UWd0U0xXb0o0N01KSGs3SGhqMmlvS2xcL24xIiwibWFjIjoiY2IxZmMxYmVkNmQxYTM1OWZhMTZhNDRjOWMzYmY2YzFlYTY0NzkzMmZjYmNkNGRmNzQ4YTZjM2FlYjI5MmVjZSJ9; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Thu, 05 Mar 2026 00:59:21 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nset-cookie: angela_session=eyJpdiI6IkxGY2VmU2hlQ0VhbndjNEVkZU8rVXc9PSIsInZhbHVlIjoibHBYaFVpNm5XTTlrTkJUbVBicW9SclNnbnh5ZVlOV1VHd01wb1U4aTJxSmZJSmlydzBKWnlhUmJ5RWhOSTV1ZFFVVVwvTTJWcVVYaXh6XC85OVJENGpIelBhdGRBVVUxb2xpR2ZNVlJscDJhMUg0Qyt3RDA5cG5ObGR2OXJUanh4QSIsIm1hYyI6IjY2ZWUyMWFiNDdkMzRkOGQ5MzJiMjZlMTdmZWIzMGRjMGNjZDJmMjFhMTA3Zjg4YzE3YmMxYWYzMTc2YzRjNGQifQ%3D%3D; expires=Thu, 05-Mar-2026 02:59:20 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r9ECZulVcW4LM7vmyPWpIEPgypBB6o7jr0%2BVqDFpxTMk6xVvRIlGkIwnhAwbCcguMxA83eIuahE1RA%2FdEzzFJ2nrl6flf6NSNKXUKwKI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d6aeff41525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93687,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0c739126fa51e8a47b8759539ab43c41","sha1":"c03eccd5c958018c9d988292989168e62e5d337d","sha256":"3dc9254e06e076a1de1e960b4f013e585f68f2152311dade662e349b4387179b","sha512":"73ade7811bfd9b379424052c897aedabee6b8a3566c26161ac0bff16cd37f7f9b263cb52a1b2c239fa1af97b6f77e74701fa79f4bfe660024ba5ffa5091a16af","ssdeep":"768:ZiyjxgsdZITmw9+9ZB+wcXXeJJHaidZpQ3:ZidgIXFwcHeJJHPdZG","tlshash":"7e93e54053b91162e07a7cd87d93789883da155b68c6cf68d2bf0cdd25e16bbb20293f","first_seen":"2026-03-05T00:59:45.137122Z","last_seen":"2026-03-05T00:59:45.137122Z","times_seen":1,"resource_available":false,"data":null}},"time_used":959,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":959,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.giftyfelix.com/wss/socket.io/?EIO=3\u0026transport=polling\u0026t=PoxWQ2q\u0026sid=2b4de759356ada41047e0d81","fqdn":"www.giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:20.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"POST /wss/socket.io/?EIO=3\u0026transport=polling\u0026t=PoxWQ2q\u0026sid=2b4de759356ada41047e0d81 HTTP/1.1\r\nHost: www.giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: text/plain;charset=UTF-8\r\nContent-Length: 19\r\nOrigin: https://giftyfelix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":19,"data":"16:42[\"login\",null]"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:20 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NlUJm%2BtDFxGcLopoUuKQxHMiOBiN%2BWMxDtM%2Fvr%2B6rODkiv8Et1DlowIOP8%2BrhZgLREsC2xlT322qBRk7T0YJqJtTAbluBlTLKU7%2BNpC6Nb3zlA%3D%3D\"}]}\r\nx-xss-protection: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://giftyfelix.com\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d752d6df8491525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-07-28T17:51:27.701713Z","times_seen":443367,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.giftyfelix.com/upload/1712060625686484.png","fqdn":"www.giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:29.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /upload/1712060625686484.png HTTP/1.1\r\nHost: www.giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:29 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nage: 9\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ag1zOOiQu%2BmbkydzVo4Y228h5vY8ta8Enlkvlgx1jJo7s4xFgnphSBIBzICzfWtuGR%2BwU2uVkSwezCfliJjmKUzi7rrupyaMMe%2BOTIsSR0ldzw%3D%3D\"}]}\r\ncf-ray: 9d752da42e601525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/api/currency/quotation_new?_timespan=1772672359265","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /api/currency/quotation_new?_timespan=1772672359265 HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Thu, 05 Mar 2026 00:59:19 GMT\r\nset-cookie: angela_session=eyJpdiI6ImxiTnlHSEs2OFBySTA3NjJIbk56YlE9PSIsInZhbHVlIjoiNXBxUFd0Y0crazlIdkdUb20wT1QrWmptanpQbWpsSEF3ZytrZFFsamFoVmRydDl0RHQ1MElWZ3Q3VEVtd09qTHJBcXNhYXNCVGNrUFVYcDdleVhHeE5vQ3BvZ3R0RThpSStGakxMcnIrS1VybGhuakRhOGx3dERaNjhBN0ZGeXciLCJtYWMiOiI2NTVlNTE3NjM4Y2JkM2JmMGY0NDgxNzExYzRjY2I2M2I1NzcwYTgxNDZiYTIwOWRmZWM4MmQyMGVmZmRmMjU4In0%3D; expires=Thu, 05-Mar-2026 02:59:19 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CpsSZcEJWTctogm6ekwisdBQrOw%2FispfTnxS1a1uEhE26A5XT1RyjIrFa4or%2FCSgOWZUwwqusv7ORjWJ9Dg9sX2IOGpSBNoZ6IoArbZm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d657f1a1525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7237,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7aa03f7c18ea6d8860402acfb6c46349","sha1":"98d8f5c2afd950afbe944292428b04cdf1f6976c","sha256":"7888eb46f40b9add6e4e1830a14be546923d483dffdc1be6c84786410d15a479","sha512":"1238b4b719d296666a4fc2d476fd93075ff85d92b9c4556973cdef8289f2331638d753966ce08e1ae758f542038b20d1e2c0bad1a8a65c250a389ff1def9c174","ssdeep":"192:1Zem/nxrmh49Nthw+0h+pehI4ehlWehnp+mG7ab8zbHBHx:fpdOobDlOJpHx","tlshash":"b6e1b09d321cc978c6f76dc2deda32a93612700badd18f41d3de1fcc429596ad20b612","first_seen":"2026-03-04T18:27:14.034525Z","last_seen":"2026-03-05T01:07:01.438635Z","times_seen":3,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.giftyfelix.com/upload/1711947689323847.png","fqdn":"www.giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /upload/1711947689323847.png HTTP/1.1\r\nHost: www.giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:20 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ebI8dwWUcEdloJCtzkW8GTtrk2rEnONs4k6uBx55ZYCJdTUbkpFM59eFajDc%2Fd4TMkmbzlYpuR%2BStR%2F7Mb%2Bzjl1c8SdFG9fhWgmVzQZyWI2wRw%3D%3D\"}]}\r\ncf-ray: 9d752d689f9b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":467,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":467,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.giftyfelix.com/upload/1711948006941847.png","fqdn":"www.giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /upload/1711948006941847.png HTTP/1.1\r\nHost: www.giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:20 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3hjREXBdnCD5lyFucHqbZ9aSPV4XJ7FnC7YE83PBovQguUUEk5bRspZpJEtgL%2BzR32SVAn5%2F14KvOeshW4jwaZuoyRkahwdK5nLn5UK%2Fpi8kYw%3D%3D\"}]}\r\ncf-ray: 9d752d68af9e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":460,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":460,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.giftyfelix.com/upload/171194817192494.png","fqdn":"www.giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /upload/171194817192494.png HTTP/1.1\r\nHost: www.giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:20 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ie9zsatIFA1%2BYzQsAM9ixbSQnoWglQBc9wuUiV4Oc2%2Bq4NlR4S2rWAjAxb6GBiVcyCPpPA318ywpvIDLNWF8LYBhneohpAl1kjn4yECuBLPuIQ%3D%3D\"}]}\r\ncf-ray: 9d752d68bfa51525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"www.giftyfelix.com/wss/socket.io/?EIO=3\u0026transport=websocket\u0026sid=2b4de759356ada41047e0d81","fqdn":"www.giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"172.67.202.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:20.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /wss/socket.io/?EIO=3\u0026transport=websocket\u0026sid=2b4de759356ada41047e0d81 HTTP/1.1\r\nHost: www.giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://giftyfelix.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: J0YFprAtx/S6Y88Q2zQRbg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Thu, 05 Mar 2026 00:59:20 GMT\r\nContent-Length: 0\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: v6ID8dRuu22KyCPY1XdeD9GDn3A=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LRtbEg1vHKvTAUyi5GGi9dL0PFDn%2FQrWr3O0QMeq22jU1UzCYfydR1%2BNsH%2FMxzO9xL1A8xF47cfZ7ICAZl6D%2B7cdUPUpu5yjraaay5%2FiqTpTr7XX3OFDhwOiJm68JLcbQ95lSLc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9d752d6c28bb0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1771\u0026min_rtt=790\u0026rtt_var=1109\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3120\u0026recv_bytes=1227\u0026delivery_rate=5098591\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=cad31068fb88a225\u0026ts=491\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":18,"connect":20,"send":0,"wait":480,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/api/news/list?_timespan=1772672359265","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"POST /api/news/list?_timespan=1772672359265 HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nlang: en\r\nContent-Length: 15\r\nOrigin: https://giftyfelix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":15,"data":"c_id=21\u0026lang=en"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Thu, 05 Mar 2026 00:59:19 GMT\r\nset-cookie: angela_session=eyJpdiI6IlhIMjFjb2czSlJnN0tjdlFERkR1OFE9PSIsInZhbHVlIjoibXE1UklER1BCME1wMEhNYTNHbXpNdG9abVRLZzI3a1wvZGlLS1B0ZTNrNkNFeEVTeG0wMmE2cm12bVhqVjQwSEZQOFdHOG12cFY0ZjNUNEd3UmxEMkl6RHlIeXUrRERZbkRFU1Bha1FaakkyVjVkNW54d0gxbGdpTUg5RlZzNDByIiwibWFjIjoiMWZmNDlhMTQwZjgwNjdmOGNiYzU3YzZlYTk1MzkyMjZiZDBkNjNiOTg4YzU5MTFmZDMzNjk5NjE3ZWY2ZTRkMyJ9; expires=Thu, 05-Mar-2026 02:59:19 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FHIefJHT2MJ5xajdcs4VDooPJ15TdcQWeVf5q8uTxTGzkGzTWufkMQJwbuHpSG9Nm%2BF6nen4JqK%2BvgcTyoxb3TwVKIWz3pz5iCBOjT3N\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d659f221525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":223,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ec835c24a11efd8e3f68f2ff1113ae56","sha1":"4b0aa2856743025668bef44165d19f1f60571ba7","sha256":"8129e02f0619caed0b024cc26e08d2e54db44c5b24680c81e12e3805d44b9209","sha512":"300cb2d119db197ff47c72852433509715169ac46af0ac3bb47e85eb4754aff91ec64c5530e3e49c14d4c728b66b7b053db87b3d44b0f40c00c96ecbd5ac433d","ssdeep":"","tlshash":"f4d0223a1a289cff814923c2b89bb68ad8cc8169c2c2c7081fc8dd4cd20c388001334b","first_seen":"2026-03-04T18:27:14.105562Z","last_seen":"2026-03-05T01:07:01.435867Z","times_seen":3,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/api/currency/new_timeshar?_timespan=1772672360090\u0026symbol=BTC%2FUSDT\u0026from=1772067559\u0026to=1772672359\u0026period=1min","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:20.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /api/currency/new_timeshar?_timespan=1772672360090\u0026symbol=BTC%2FUSDT\u0026from=1772067559\u0026to=1772672359\u0026period=1min HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6Imt4S0RLXC9iZERTa1Y0Qkxjd3dOUTZBPT0iLCJ2YWx1ZSI6InpMd2RCXC9rZmZUanVwTWt3ZVIrZ3VNeW9HQ0Z6TWs3dkV1QWpDdEdTc1R4VzB5bG9SV3k3WGdkRlk2andxRkRKOUhBbHM3dUJyV2UxTWNhNHNseWEzZmR0RWxZNHFWdU1jdmpYXC95UWd0U0xXb0o0N01KSGs3SGhqMmlvS2xcL24xIiwibWFjIjoiY2IxZmMxYmVkNmQxYTM1OWZhMTZhNDRjOWMzYmY2YzFlYTY0NzkzMmZjYmNkNGRmNzQ4YTZjM2FlYjI5MmVjZSJ9; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Thu, 05 Mar 2026 00:59:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nset-cookie: angela_session=eyJpdiI6IlB2cjV4cno1QXJaOXpLOTNBcWZTNWc9PSIsInZhbHVlIjoiU0N3eEROam9DT2VJQkJnbzZuN1U1SHZZdHI0NFhNZzNsZFwvakdGMHJsUFl2OVRXNjN1VjM5ZlRLempWVFNsNURMb0IzcFN6RVVlTXh1XC90ODA0ZUhSaWRRZUVRcG9FWUJYMWhqczdnU2tVR0NuYUhMOW52RTJOQUlNb05aR3N4dSIsIm1hYyI6IjVkOGVlNzg1N2NlZTc0OWE5ZDQyMmRlYTg5ODdmMzUwNzA4ODA2YTIzZmQ2NjIyZjg0N2NhOGJjNWFiYjliMzMifQ%3D%3D; expires=Thu, 05-Mar-2026 02:59:20 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s49us%2BpgiBzRGDXmnmO%2ByyBthiQLyeQc%2FCfhhJFqcNm6IQ%2B0yscxaGCo2%2BEDoiUYxrZK7H02K%2BTN6qbSt5fV3%2F1aws6sRQJHZRd0xLg7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d6adfea1525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":115769,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1af746db20a48bb23a05e56dd94fc6d0","sha1":"91bba4763eb17239759e702a11d6a1ea1e650926","sha256":"a28ad3e8cefda4bc4675af2210d18dd22bfcd37465db486a86d04437de29b11a","sha512":"9cd5c573d5e4c394e34055be25cb0ede327d6f6e7d5d0991f4a1fdbe635af3bc5f0dbe6065660c6669f43aa02daa8839aa26f145fea9738ed6007d394b72d4b4","ssdeep":"1536:60fAShFsB82fZjv/y08xuDoJckVSwHjB1i3L5t51Nlt8jYD+aSxRwlV5bdC3i3:dfAlmgv/1D+ck7BAL5t7fSQvdCA","tlshash":"68b37140d6b901b1c07e25d47d928868a3ae73a764c38f9891bf1cc675e12bbb211d7f","first_seen":"2026-03-05T00:59:45.100175Z","last_seen":"2026-03-05T00:59:45.100175Z","times_seen":1,"resource_available":false,"data":null}},"time_used":805,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":798,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/api/currency/new_timeshar?_timespan=1772672360090\u0026symbol=EOS%2FUSDT\u0026from=1772067560\u0026to=1772672360\u0026period=1min","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:20.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /api/currency/new_timeshar?_timespan=1772672360090\u0026symbol=EOS%2FUSDT\u0026from=1772067560\u0026to=1772672360\u0026period=1min HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6Imt4S0RLXC9iZERTa1Y0Qkxjd3dOUTZBPT0iLCJ2YWx1ZSI6InpMd2RCXC9rZmZUanVwTWt3ZVIrZ3VNeW9HQ0Z6TWs3dkV1QWpDdEdTc1R4VzB5bG9SV3k3WGdkRlk2andxRkRKOUhBbHM3dUJyV2UxTWNhNHNseWEzZmR0RWxZNHFWdU1jdmpYXC95UWd0U0xXb0o0N01KSGs3SGhqMmlvS2xcL24xIiwibWFjIjoiY2IxZmMxYmVkNmQxYTM1OWZhMTZhNDRjOWMzYmY2YzFlYTY0NzkzMmZjYmNkNGRmNzQ4YTZjM2FlYjI5MmVjZSJ9; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Thu, 05 Mar 2026 00:59:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nset-cookie: angela_session=eyJpdiI6IkpXWGVrckluVTBpeXplbVNNdEVVVmc9PSIsInZhbHVlIjoieTRFR1pIZ3dqN0tERERHb0NQdDVsazE3T2RoaXZ0XC9aN0hrZmpJSGdlMDdNMEVsQXlyQW9PSjMxUFREaXhRTkxyb3hDVzhrV2hhcm9ZMlp4bTc2elN0R2FzeDhyZlhsQ2NSYThJZVQ4OG9xY3dcLzlXamFLT3lyaTlnRkh6ZllHNyIsIm1hYyI6IjE0MjNmNWMwMTliM2QxMDJmZGQ3OGUzZDFlMTM2ZTZhNmFjM2E4ZmVlNDc0ZjE1MzhlMDY1NjRhMzViOTU0NmUifQ%3D%3D; expires=Thu, 05-Mar-2026 02:59:20 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s13BhShLWyeqoxCyiZuVzDbkSy%2FjxOBdPztUwPuNHyhxX3Xn521G5WPmtNiFlND3vSo%2B06pzGhwmASmfAL80OhY%2BkJDn6opepQFhZmXb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d6aeff21525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"136b02255a623f7c44544d5266e21ee6","sha1":"d16732370a4b4c9c029637920cd26afa2d422390","sha256":"fcca40d39e392ed1fed0515a2ed890128e3a461bc12240751cf2df7506160f86","sha512":"cc52574d8ea557037eccc98a0d0831b18956f9f6dc5d9c88dcb4b5a4a5abc88ba79470d35c772cc38bd8bc28159b911093b3375b72634bc6bea5ee8bc1c8e6c2","ssdeep":"","tlshash":"ba8000a2280e2c830c0a38cc880c8b8220e8a0808a200320ce8ea238cb080acb883830","first_seen":"2023-04-07T14:59:17Z","last_seen":"2026-07-23T15:53:23.475087Z","times_seen":219,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/api/currency/new_timeshar?_timespan=1772672360090\u0026symbol=NEO%2FUSDT\u0026from=1772067560\u0026to=1772672360\u0026period=1min","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:20.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /api/currency/new_timeshar?_timespan=1772672360090\u0026symbol=NEO%2FUSDT\u0026from=1772067560\u0026to=1772672360\u0026period=1min HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6Imt4S0RLXC9iZERTa1Y0Qkxjd3dOUTZBPT0iLCJ2YWx1ZSI6InpMd2RCXC9rZmZUanVwTWt3ZVIrZ3VNeW9HQ0Z6TWs3dkV1QWpDdEdTc1R4VzB5bG9SV3k3WGdkRlk2andxRkRKOUhBbHM3dUJyV2UxTWNhNHNseWEzZmR0RWxZNHFWdU1jdmpYXC95UWd0U0xXb0o0N01KSGs3SGhqMmlvS2xcL24xIiwibWFjIjoiY2IxZmMxYmVkNmQxYTM1OWZhMTZhNDRjOWMzYmY2YzFlYTY0NzkzMmZjYmNkNGRmNzQ4YTZjM2FlYjI5MmVjZSJ9; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Thu, 05 Mar 2026 00:59:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nset-cookie: angela_session=eyJpdiI6IktmTndQYTJzQU5BZXBLSEtwXC9NUVJBPT0iLCJ2YWx1ZSI6IlYzSFcwcUpkaHJlcEwraktHXC9kOFpibG9jMHlwcVpuR2lZOTl5VzhkVkJKVVF6NVRPaVpPTzRCc29TRlVvdFNTeERoR3RsK29nbXpLNDZNWVdhclNwcEt4MFkyc1Z1dHRXSkNxUlNmb3NjQzd0dXo3ZkN3eTRXNXJ2cURnclRyNyIsIm1hYyI6IjE0MDBhOGM1ODI0N2FjNmI3MTc5YzNkMjRiMTcwYWZkMWVhOWJmNzY5OTE0YTgzNzVkZGRkODcyYTYzODhmOGIifQ%3D%3D; expires=Thu, 05-Mar-2026 02:59:20 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lyC%2BAHW01ILyj%2BQRzdSsmygqJD9TGw1YyUYA8wusWJC0nMwMxMRkki7P8oT%2FiMujrZvgGzF61lsKpdEhNfQmhpg656m7kEmjjH7YhZMZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d6aeff91525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88173,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6e3719d377d0cdcae7a1b59f2095e7e3","sha1":"70c98ee13898ca41beaeb48c0f6eed7cf7164a89","sha256":"d4034f9bdf5b77b658c4562343d37d165e85ed4851b892946cb8dabf89f52252","sha512":"62fdcfaee3eaa0daa811150175731206d544531b8bd45de3e562051323aa2be5d008c9946f23ade7377e8cefb4cf487fbf74656f7441495ac2ebbe00990aa963","ssdeep":"384:54WMaB7THNimM9FEYJnb6tUgD81dJjVixRBQX:5iaBAB9FEYJWtUQ81dJjVixRBQX","tlshash":"518380c092bf0171e17a58886d97585993fb13976cc2ce58d9bf0cce36e117ab24293b","first_seen":"2026-03-05T00:59:45.132551Z","last_seen":"2026-03-05T00:59:45.132551Z","times_seen":1,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/app/static/tradeview/charting_library/charting_library.min.js","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:17.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /app/static/tradeview/charting_library/charting_library.min.js HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 02 Apr 2024 18:41:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660c514e-2d8f\"\r\nexpires: Thu, 05 Mar 2026 12:59:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8xtCHi17Ne5dBAabgzn5LMm78jooifs2uf5XC9gmkUlxHcQ3zFa20nJRxbPus5XvtTCzOhtlj2Y7X7SJVzvnKCTutL2IXB3Z40yqufLp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d59dd591525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11663,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2132)","md5":"c8cd63cddf0ab72e873d68a2d68ca336","sha1":"2d0b483c39ea41187d9fcb8200bb2819525dbd3b","sha256":"6571ad1a4bb68aacbd4c3a78fc0c26f9c1f1bb34a92164ea3fac2b4532acf88e","sha512":"f3956ab3268f27911de0789fa0858de98e26bcd2736544a6694a225aa61ab5b8ceff26774af62bad71294531d75e4faa198f44ee85a5731ffb26480940f4144d","ssdeep":"192:S4DF7XcEbRi1H0FEKyhWbviztF89xo/g81Qit+0idiiV8M5MSBj5JCWotPSXmYRB:fhoEbizXAoINoWoxSXmBEU3OHQI","tlshash":"18320054df6c2c3205c720fc8d7f288f513de276e895449e388491dc59ed44bbaaba39","first_seen":"2023-03-07T14:46:31Z","last_seen":"2026-07-27T10:54:16.513959Z","times_seen":260,"resource_available":true,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":467,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/api/currency/quotation_new?_timespan=1772672359265","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /api/currency/quotation_new?_timespan=1772672359265 HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: null\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Thu, 05 Mar 2026 00:59:19 GMT\r\nset-cookie: angela_session=eyJpdiI6IkwxdFhLV3k5d24yK1c1YWZNYlwvN0V3PT0iLCJ2YWx1ZSI6IlVjZ0lYM1J2UEt0YjBDTGExbVJNT0R6OGhPMlBYTUV6b3NnTWcwRnh0M2lPMW9UUWFlXC9RT09La003WnFXNkIwVWNDaHd2bDVPak9cL29hZlBYdFV3b1wvVWhOc1lmTlpNUjdsTXE2R21vTG1MZnV4cXFsMjJ6KzVLZVExbWwwWDNaIiwibWFjIjoiYWUzNmJiODY0MjgzNzM2YWJmOWE2ZmU1MDhlNTBmYTdjNmUzODQyYzE0MmFlNjA3NWQwOThjYTc4ZmFhZTVkNCJ9; expires=Thu, 05-Mar-2026 02:59:19 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WHD8%2BUDlP%2Fn2iu3yc%2BMYr%2BQmINfEjiFsIHukEVIXzw9NPbF4EMfVtqUxAPp9YqODI3k1hZb6b0MoqAMHAS218Oi4w1hQzJh0ZKnH7vyO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d657f161525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7237,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7aa03f7c18ea6d8860402acfb6c46349","sha1":"98d8f5c2afd950afbe944292428b04cdf1f6976c","sha256":"7888eb46f40b9add6e4e1830a14be546923d483dffdc1be6c84786410d15a479","sha512":"1238b4b719d296666a4fc2d476fd93075ff85d92b9c4556973cdef8289f2331638d753966ce08e1ae758f542038b20d1e2c0bad1a8a65c250a389ff1def9c174","ssdeep":"192:1Zem/nxrmh49Nthw+0h+pehI4ehlWehnp+mG7ab8zbHBHx:fpdOobDlOJpHx","tlshash":"b6e1b09d321cc978c6f76dc2deda32a93612700badd18f41d3de1fcc429596ad20b612","first_seen":"2026-03-04T18:27:14.034525Z","last_seen":"2026-03-05T01:07:01.438635Z","times_seen":3,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.giftyfelix.com/upload/1711948133848470.png","fqdn":"www.giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /upload/1711948133848470.png HTTP/1.1\r\nHost: www.giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:20 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OI15v%2BvsfjKP%2BsBiQFu3qAjRT%2FUo5WaT8hbwc4Cs4%2B%2BLCtY%2FoUMTNLuYN4XVZ2weN%2FCxXHe3dIq4iLDbLHBuIvax15pmTBR51UdqLY3sfTusJQ%3D%3D\"}]}\r\ncf-ray: 9d752d68bfa41525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/api/currency/new_timeshar?_timespan=1772672360089\u0026symbol=BCH%2FUSDT\u0026from=1772067559\u0026to=1772672359\u0026period=1min","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:20.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /api/currency/new_timeshar?_timespan=1772672360089\u0026symbol=BCH%2FUSDT\u0026from=1772067559\u0026to=1772672359\u0026period=1min HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6Imt4S0RLXC9iZERTa1Y0Qkxjd3dOUTZBPT0iLCJ2YWx1ZSI6InpMd2RCXC9rZmZUanVwTWt3ZVIrZ3VNeW9HQ0Z6TWs3dkV1QWpDdEdTc1R4VzB5bG9SV3k3WGdkRlk2andxRkRKOUhBbHM3dUJyV2UxTWNhNHNseWEzZmR0RWxZNHFWdU1jdmpYXC95UWd0U0xXb0o0N01KSGs3SGhqMmlvS2xcL24xIiwibWFjIjoiY2IxZmMxYmVkNmQxYTM1OWZhMTZhNDRjOWMzYmY2YzFlYTY0NzkzMmZjYmNkNGRmNzQ4YTZjM2FlYjI5MmVjZSJ9; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Thu, 05 Mar 2026 00:59:21 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nset-cookie: angela_session=eyJpdiI6IjgyMVhqV2k3OXVuaWo3SkQwSHhSNHc9PSIsInZhbHVlIjoicENhWFdlRXp5WG1RWit6Y0JzbFg4Y1VsdFdaUVdOUlwvMkZZYnpOc1JiY0xcL0Q3NU9tbEo2dFZHTmF3SXZnVjNLaW00blNaekJuelQwREJ6OWhWZWRcLzljb3BldkFvWjZZNHhiU2FJQ2pcL3BBc3ZJeWFIYmZCRDJMc2tXRE9zSGFiIiwibWFjIjoiMTMyODQ2YTE5NjgzN2M2ZmI5OTI0NWNlODdkYWZjYWUyOTFhMDk4Y2NjMGRkZDU2NTM3YTc2YzEyZTZlMzY2MyJ9; expires=Thu, 05-Mar-2026 02:59:20 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1hU2fWwf%2BorMhSQjiQqqHxHbVLxIUSWgnLo4Xn%2B8zwd6n2zXPgUGnxY7rFn3bSvRe9haarZBHQd6awIpKyIyottsCyE8aVUe3Ht%2BkxCB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d6aafdf1525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102441,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05e674261f41c5639289815740180b9","sha1":"b62899c9ca6b381c2d4c7720df24aabbae858301","sha256":"aa25e7fdba301137d6339b97383139997980f907bb0626972e25dd47e92071f8","sha512":"56c2abc859082b727f22aa36872dbf31068e2802d3b1bb3f1a827e612d3c43d381ce6ad28e9c0558e9e3986408168862161d3a2a1b812b6d56e0006e58147023","ssdeep":"1536:+ui+HGkqbY+zj9jejZX2rkgu5Ocz1YKFj+c0jYr:Ti+HGkqbLzj9gX2LRKFj+c0jYr","tlshash":"6da38f4057bd02f0c03a74d46d924c6842aea35765c6cf69a1ff1ec668e19bbb212d3f","first_seen":"2026-03-05T00:59:45.084581Z","last_seen":"2026-03-05T00:59:45.084581Z","times_seen":1,"resource_available":false,"data":null}},"time_used":972,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":967,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/api/currency/new_timeshar?_timespan=1772672360089\u0026symbol=ETC%2FUSDT\u0026from=1772067559\u0026to=1772672359\u0026period=1min","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:20.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /api/currency/new_timeshar?_timespan=1772672360089\u0026symbol=ETC%2FUSDT\u0026from=1772067559\u0026to=1772672359\u0026period=1min HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6Imt4S0RLXC9iZERTa1Y0Qkxjd3dOUTZBPT0iLCJ2YWx1ZSI6InpMd2RCXC9rZmZUanVwTWt3ZVIrZ3VNeW9HQ0Z6TWs3dkV1QWpDdEdTc1R4VzB5bG9SV3k3WGdkRlk2andxRkRKOUhBbHM3dUJyV2UxTWNhNHNseWEzZmR0RWxZNHFWdU1jdmpYXC95UWd0U0xXb0o0N01KSGs3SGhqMmlvS2xcL24xIiwibWFjIjoiY2IxZmMxYmVkNmQxYTM1OWZhMTZhNDRjOWMzYmY2YzFlYTY0NzkzMmZjYmNkNGRmNzQ4YTZjM2FlYjI5MmVjZSJ9; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Thu, 05 Mar 2026 00:59:20 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nset-cookie: angela_session=eyJpdiI6IjY4c3VGMngzZ2dPOXNicWZzaUowamc9PSIsInZhbHVlIjoiZGpnT25USnVsQWk0MEVGU0NKOVdSTFhGalZ6SW1hdHp5bGZHcVJJUVV2MGhCRlZQdDRvdkJpbUJkYXczRnpPbXU2b3lheWhrRFVjMHM3dnA2anNPWFlRRXlZbGUxUVMwVDhLSU1jWjRtMTUxUVk3cUFpQUJwMElneXNjM3cwY20iLCJtYWMiOiI3MjAwZmY1MjZjNzRjZTUxODRjMzQ1MzcxNDZjNDFmMDZjMTgxZTUwZWM4ZTBkYzIxZjdiMjE1NzI1ZDY1NjczIn0%3D; expires=Thu, 05-Mar-2026 02:59:20 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F8C79iSN7Pkjn9u8JMl1HjCxf%2FQL89fTfs2eRQC0C884JrF6qTXZy%2Fav9eDDEaVXPpdbDjVzO7VbZ03zOY1jg6f86ooGn7gCnJKf2mmV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d6abfe01525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93687,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0c739126fa51e8a47b8759539ab43c41","sha1":"c03eccd5c958018c9d988292989168e62e5d337d","sha256":"3dc9254e06e076a1de1e960b4f013e585f68f2152311dade662e349b4387179b","sha512":"73ade7811bfd9b379424052c897aedabee6b8a3566c26161ac0bff16cd37f7f9b263cb52a1b2c239fa1af97b6f77e74701fa79f4bfe660024ba5ffa5091a16af","ssdeep":"768:ZiyjxgsdZITmw9+9ZB+wcXXeJJHaidZpQ3:ZidgIXFwcHeJJHPdZG","tlshash":"7e93e54053b91162e07a7cd87d93789883da155b68c6cf68d2bf0cdd25e16bbb20293f","first_seen":"2026-03-05T00:59:45.137122Z","last_seen":"2026-03-05T00:59:45.137122Z","times_seen":1,"resource_available":false,"data":null}},"time_used":810,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":810,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/app/static/tradeview/datafeeds/udf/dist/polyfills.js","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:17.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /app/static/tradeview/datafeeds/udf/dist/polyfills.js HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 02 Apr 2024 18:41:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660c514e-25af\"\r\nexpires: Thu, 05 Mar 2026 12:59:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X7xT8wbqAKY4uqdhsNZ%2BxJbGlMnO1pF70BUQZDEG9O0DUHwSf3ERspzFXPHKQuIppbZg%2BOF4etP17DfWWDsqOcdXKBLuV1%2B0kDO4szqK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d59ed5c1525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9647,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9646)","md5":"a24c8424ecaa94595878ee39970c7b46","sha1":"651ecfd5fa247c45b1138bdb2629399882c50384","sha256":"67396f17c514b90f31cbe905241e290c820130be7f55edc770ce81587d37040e","sha512":"6a09a1c41bb241c93b864eda4c57ac14bf91c2b0d0a5323f03d24c31ba266c53af6b9b15580a914aebfca0c825ec6e19cc73e352398fde352c188c604addfe39","ssdeep":"192:/5C5b4rmkiNL70mrZm3KosuxV6/hk3haw5UPQ0wx9B4EhN0xhOU8c:xGegVrZLO3gyP6EhN0xhD","tlshash":"29128588f7e0b472036360b4917f450fb2b53925648e41b8f260d8ea6cbd44d962bf7c","first_seen":"2023-03-07T14:46:31Z","last_seen":"2026-07-27T10:54:16.510806Z","times_seen":302,"resource_available":true,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":460,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/app/img/logo.8aaab7d9.png","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /app/img/logo.8aaab7d9.png HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 02 Apr 2024 18:41:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660c514e-1866\"\r\nexpires: Sat, 04 Apr 2026 00:59:19 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tZp0uLIuID9bDkZLFXVrjinnca5xnNTvU%2FBIkm9g4dYLiPeclgZEoDRLPkx0sPwkVbBnk1ikgWByqmBm%2BlcEGi%2BFjgYvADhe89EasTCq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d64ef021525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6246,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 55, 8-bit/color RGBA, non-interlaced","md5":"8aaab7d9b4a10a0316f43838f165cbf7","sha1":"bf1f0fc5c9b2dc79779a026e8ae90972a9943cfb","sha256":"8bd4b73e77eaee928b71d4006de8460c015b2f0d4b36ffbd1d91f1c7265366e5","sha512":"9ee01df0fd2d8e85d927c46b49d9b320358364b6949f4af7f1319600c02206ffac0f7a510f7464efb9a8311468350e7a6a22b43f9be56ac7bf10fa456a120777","ssdeep":"96:BllcHitlIxv9vk7C1+I4wWHLihk/xygOXVcAHAUpLSQTEnjra6jZelx7OByJyEa8:iIIHUCD4waUgOlf/LSQTMWx7feWVVv","tlshash":"3ad1bfc61414109b31012767993fff18016de2d9a27d6f2d90ae930ed792fd04e36e3a","first_seen":"2026-03-04T18:27:14.104551Z","last_seen":"2026-03-05T01:07:01.430557Z","times_seen":3,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/app/img/index22.1abc1157.svg","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /app/img/index22.1abc1157.svg HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D; lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 00:59:19 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 02 Apr 2024 18:41:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"660c514e-d08\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yXHoW%2B1CXV6pXiXPEGWP49Tx2PfXJ6GlXesu2GOukpxESrzDBNkfGdphSUTR15kUk90HehrhTelWL1c0T2hp%2BGq%2FbkwH7rNVcVBKLkKR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d651f091525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3336,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1abc11577aae7525b75b719b627326c4","sha1":"dfbdfb539c5fc1be51f4b706d13c9eb24bdc5599","sha256":"b272034ab1f03f285a3a3b0a5f5ab585910189c2e5248af8287eafa5b49a6aff","sha512":"8ee3dd0a7dec5d86a979fb26dc01ec19dab9aa135a331fdc7b58bbabaefa7692df19afaec5da68e27acbc85550abb15089507a71aac32df44fc6d4bca0241c9b","ssdeep":"","tlshash":"9d6121e802fd0029e0608125e7d7b5da5d2f708b97d508acb68c6a29df3112b0e7b56e","first_seen":"2023-05-29T05:20:24Z","last_seen":"2026-03-14T08:01:14.293174Z","times_seen":29,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.aiccoinus.com/upload/03@2x.743bc9dd.png","fqdn":"www.aiccoinus.com","domain":"aiccoinus.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.232Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/03@2x.743bc9dd.png HTTP/1.1\r\nHost: www.aiccoinus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.aiccoinus.com/upload/04@2x.d1045c9a.png","fqdn":"www.aiccoinus.com","domain":"aiccoinus.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.232Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /upload/04@2x.d1045c9a.png HTTP/1.1\r\nHost: www.aiccoinus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T17:56:23.273426Z","times_seen":17584112,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"giftyfelix.com/api/currency/quotation_new?_timespan=1772672359265","fqdn":"giftyfelix.com","domain":"giftyfelix.com","tld":"com"},"ip":{"addr":"104.21.52.180","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://giftyfelix.com/app/","date":"2026-03-05T00:59:19.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"giftyfelix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 18 Jan 2026 02:58:05 GMT","end":"Sat, 18 Apr 2026 01:21:21 GMT"},"fingerprint":{"sha1":"78:24:86:FC:D7:71:F8:FC:EA:D0:28:B7:AC:04:02:35:CC:AD:8B:D4","sha256":"B6:82:5E:FF:87:96:3D:9B:E6:F3:3F:47:17:60:09:7F:C5:C0:24:67:AD:16:8C:F5:3E:4C:66:5E:6B:50:38:D6"}}},"request":{"raw":"GET /api/currency/quotation_new?_timespan=1772672359265 HTTP/1.1\r\nHost: giftyfelix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: null\r\nlang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://giftyfelix.com/app/\r\nCookie: __e2151edab7457d1b62caa17b2a3d542a=1772672356; angela_session=eyJpdiI6ImlCVGJNR3FqUHBXeXNPbzdOQlRuMVE9PSIsInZhbHVlIjoiSEIzMUpoUXdVc1IwNjhMbjhDN2FNdGl3VGRWR21kUHRpNjVDVzV2ZEFnNWcxODZPRGlmXC9RQlwvazRyeW55cHNoZEZRNDhSZmFmY3ZaNFFRSjVhZkdodG8wcXVTNGtsS3k0R1FtanREUGh4amNYN1BTbTJ2SzhKQTFPaFh4V1ROdiIsIm1hYyI6Ijk0YzU0NTc2ZmIwNzMwZjBhYmMxNjA3NWJjYTYxODQ1ODAwYjQ5MDI4MGNkMTJmMmQyOGIwODMyMmNlNGYyMzgifQ%3D%3D; lang=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Thu, 05 Mar 2026 00:59:19 GMT\r\nset-cookie: angela_session=eyJpdiI6Imt4S0RLXC9iZERTa1Y0Qkxjd3dOUTZBPT0iLCJ2YWx1ZSI6InpMd2RCXC9rZmZUanVwTWt3ZVIrZ3VNeW9HQ0Z6TWs3dkV1QWpDdEdTc1R4VzB5bG9SV3k3WGdkRlk2andxRkRKOUhBbHM3dUJyV2UxTWNhNHNseWEzZmR0RWxZNHFWdU1jdmpYXC95UWd0U0xXb0o0N01KSGs3SGhqMmlvS2xcL24xIiwibWFjIjoiY2IxZmMxYmVkNmQxYTM1OWZhMTZhNDRjOWMzYmY2YzFlYTY0NzkzMmZjYmNkNGRmNzQ4YTZjM2FlYjI5MmVjZSJ9; expires=Thu, 05-Mar-2026 02:59:19 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2FwmQIpy7WuEAUSPCwelHqc12bqZoL3ryLZo%2F%2BUJNKQAtDUDXJ9vhNBP%2FgPBSjbxS5MAlOU3FJ9pYEGxt2JjsxZpaTJmYxUdUmke5dwl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d752d657f171525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7237,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7aa03f7c18ea6d8860402acfb6c46349","sha1":"98d8f5c2afd950afbe944292428b04cdf1f6976c","sha256":"7888eb46f40b9add6e4e1830a14be546923d483dffdc1be6c84786410d15a479","sha512":"1238b4b719d296666a4fc2d476fd93075ff85d92b9c4556973cdef8289f2331638d753966ce08e1ae758f542038b20d1e2c0bad1a8a65c250a389ff1def9c174","ssdeep":"192:1Zem/nxrmh49Nthw+0h+pehI4ehlWehnp+mG7ab8zbHBHx:fpdOobDlOJpHx","tlshash":"b6e1b09d321cc978c6f76dc2deda32a93612700badd18f41d3de1fcc429596ad20b612","first_seen":"2026-03-04T18:27:14.034525Z","last_seen":"2026-03-05T01:07:01.438635Z","times_seen":3,"resource_available":false,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"giftyfelix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"giftyfelix.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}