{"report_id":"04b4cf94-374b-4f59-aec1-d0ac4824d275","version":6,"status":"done","tags":[],"date":"2026-02-01T19:53:34Z","url":{"schema":"https","addr":"usdtcasinonoid.com/","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":0,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"usdtcasinonoid.com/","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"title":"USDT Casino No ID 2026 | Top No KYC Tether Casinos With Fast Payouts","dom":{"size":112796,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2649)","md5":"ac60a7a5b33f6809d6ffd8c1475416e9","sha1":"638da34ff822eed7243ce73a0d68b6882601e0bf","sha256":"10176eb439736ca657421de138ec0d1f9d790f24d0354e1f604380e1984f0b6b","sha512":"1499d1693ad6a6f04b70104df6393878b65af442bb32f8f146e09cd34dcbb05b4c9e09ac7127e45044864f74c17242cd93bf29e18c6f21a498ebee94935d182f","ssdeep":"3072:HUeRyyDJs0GtTaCGCBJuK/8tvnoZ8oMuDQpc+GAeyKsMz1cQbgGoQb:w0GkCGCBJutvnm","tlshash":"17b350623d03152a219f11dfa2272b0eb0c0cbd4e613a4e5f5f1d3a86bf4d917be6649","dom_hash":"domhash6d6f0c76768ab05f21584b8d4aa02106","first_seen":"2026-02-01T02:09:30.957984Z","last_seen":"2026-02-01T19:53:41.190818Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"usdtcasinonoid.com/","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":0,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-08T19:53:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"usdtcasinonoid.com","ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-01-07","domain_rank":0,"first_seen":"2026-02-01T02:09:24.527266Z","last_seen":"2026-02-01T02:09:24.527266Z","alert_count":79,"request_count":80,"received_data":3862948,"sent_data":40185,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js%3Fver=4.0.2","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"3819c3569da71daec283a75483735f7e","sha1":"ecd40a5cc6f0b76200c454ca880210dc301cfab8","sha256":"214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0","sha512":"2710655dff46653daeb3a6e3f6d36f885e51d5b375738ee353aca40c6f66ae1a7dece57039d58747012ed9ea2822191143c06f270123b8cc580f6a41b8e8aef4","ssdeep":"192:GngaW9ELBD26z861V/CvJiVKIsvfT+6EdpEsBpP9Qwo7Q4a99RfuzqXppc4mmm9t:Ggz9kBD26861V/wsVKIsvTEdpEsnmwoz","tlshash":"994221493e0724222faf41f9fc1b468a632b013894c584bbb8e4d5dd18f19296f77b78","size":12198,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-08-10T07:04:01.211572Z","times_seen":74413,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-includes/js/jquery/jquery-migrate.min.js%3Fver=3.4.1","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-10T06:49:59.057045Z","times_seen":927785,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/e4b9a2f0c8d17a6b5e3f9d2041b7ac8e.js","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"858f246cdeddcccde76cb980ea622c9a","sha1":"4369c677f957d999e71c04c8420c2d80b69522e8","sha256":"4d6d1fbaa04690cdea71f4bdc6714c1bdbaad4d7760b5c8a447197ee5eb3c3fd","sha512":"db66106ae670b2665810f4989b091df3d409dd83afc93776bd2b92f3087ee79da7164d3ec9692602fd1becef7c6d229c47bb6aaa60ef93bd15abf3081deb2767","ssdeep":"","tlshash":"47700028200022a20003c2038880ce008230028220c080a00000020a0300e8080a3088","size":25,"data":"","first_seen":"2026-02-01T02:09:30.9745Z","last_seen":"2026-02-01T19:53:41.285555Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/elementskit-framework-js-frontend-js-after","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fc7fc18b6d448f2cfeedad66a2c58db","sha1":"4872d4d00b3a10154e69348c3cda312877d19a7e","sha256":"0edf5e50b45fed8a0ba68804789dd051077ec40f91613a5db2fb1f17567fa10b","sha512":"f8169469251b2a99e17cc5356d52cf296cb12be07da7a775d9eadc8c3b7e4f848c78bc686dc6b5653654225c8c6d0dfe42669c7c8081def29505fb19cbf53631","ssdeep":"","tlshash":"ae318cdbe62c0980922f48760f27275fac000850ec548094a437002400f1ce66758687","size":1513,"data":"","first_seen":"2026-02-01T02:09:31.058039Z","last_seen":"2026-02-01T19:53:41.329009Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementskit-lite/libs/framework/assets/js/frontend-script.js%3Fver=2.9.2","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"94d041d462db321cdb888066586f2068","sha1":"717d2f9da7fb9f9e2bf2058a8177a0344f8a8647","sha256":"b8166c5475df6a64ab2456e95f64564164ed697d258e8bfed8cebca40efd6fa5","sha512":"9a320fbc1dbeda1700f54140f814a285d1cdadf947f927db7e1d70a686d15fc74d69530bd13ab7cf9c3a2009791f2ac8f358cd9f748b1c2995eb9712b68dc574","ssdeep":"","tlshash":"6590041c144cf04505775114543773047733745031411043111d71400c1cd351307404","size":40,"data":"","first_seen":"2023-03-07T01:10:33Z","last_seen":"2026-08-10T07:04:44.200597Z","times_seen":29733,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js%3Fver=1.0.0","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fc5780b65b232538a11f05af99fad85","sha1":"adf6c626d961aee3c9590f84940cb0910ff5dc0c","sha256":"c5b8b21392c81f849876a5fa43e830dc2cc0d4b5cb313c7549c7dfce1b8bdde0","sha512":"c2680cd5681a61855db62cb88dbeec868df000c2eed887908c4ce1ca729f066011c9ad75a541e944e2c496c75009d60dca2e9278be6218cbc316bf9045d4a33e","ssdeep":"","tlshash":"88318a06b24369ea566e41b7bf27991eb05756deb00060b87178becf50a1e8037e2773","size":1827,"data":"","first_seen":"2023-03-29T23:32:42Z","last_seen":"2026-08-10T07:19:59.491968Z","times_seen":4011,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js%3Fver=3.16.1","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfd85b5f8b48dcb08c404611f22b6791","sha1":"76ce3c4bb830d21653def68d658b084c5fad982e","sha256":"f0bbcfecb3041385d3ee577aa182361961915616a1a8f6fa25465cab914775c2","sha512":"98f257a007eb430a7dc6db285528181d4e7b514a3747ce28648a460ed6c9f82609a63284304c6fa17db261858608d95d8751c14abd26ddbf2c13d74b236d4abc","ssdeep":"96:BxsNt0jqf9fzgcf8FD0lCjNVobVDPkqflkxwvT8S2:jsNCjw9fsjFDxN4FPkyXgS2","tlshash":"aca141d41b90fc6735e135c8a11aa731752fc1333d1bb8c1fa22dced98e8a9187a9931","size":4997,"data":"","first_seen":"2023-09-12T21:25:06Z","last_seen":"2026-07-16T17:03:26.271444Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js%3Fver=2.9.2","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c087aaba5bcb76bc96366600b854e20","sha1":"6de8049f8f4e6c83300be31ffa9e54d652f10f1a","sha256":"03ca8c38633872b885f1e54e729c4597da2f1c52d06f9a5289ddda7ca3a9930c","sha512":"c8226fe12963b09e5a70e4987d38b20d54aef88fc871f221275f883b68dac1de51799c3edd479778bda958167f30eeb1f8b73e3ae12c13b5d12e407b5369301f","ssdeep":"1536:ZN/eY/j2zmsmCQxPmnG4RaviizVk3P5hDlrQ9C16WQsA+HvsvGNW5BJBQdQh6Pmp:ZN/eY/azm7PmnhG9bsXz06Pmn+nfi","tlshash":"a4d3f94eb340352542dbf17a926f160e7237a51ca607806cb96ad8ea6db8c4d3037f7d","size":137549,"data":"","first_seen":"2023-07-04T09:24:07Z","last_seen":"2026-08-09T14:59:19.495824Z","times_seen":4958,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-includes/js/mediaelement/mediaelement-and-player.min.js%3Fver=4.2.17","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e53ec3d6e21be78115810135f5e956fe","sha1":"523892839b88351523e0498ba881c4431197b54e","sha256":"b15c3ea03d50c2430490e7416733a254feea4237bb60b54181bd3473ebe4149f","sha512":"84b080eaaa043928f038421ceb18bba7483afee5b6480a92ee01992317cde2361a6dd255b16ec036e51e8a1fef46b5379c6a5ff5c9ec69d682f96deaa03a8842","ssdeep":"3072:cWdIxUMz/tGzT3+XtHi2iX6JPMupdggt1YHWyFxAcDHzEJLDnWTnWNBEBysX6qMa:dwhggc1l7","tlshash":"14f31849718473b246c720ee653f1b0e7137ce69d009d060a936faf61eb8f8a512bf65","size":158005,"data":"","first_seen":"2023-03-08T14:26:25Z","last_seen":"2026-08-10T07:08:43.076191Z","times_seen":56590,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/mediaelement-js-extra","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ab43860dfafd71d6201613ab93f955a","sha1":"17395c3e6cb8acabfe5721272fb49cdd3bf493ec","sha256":"d15c29479e00745e4378097207985ef3bae42860ff7d2edb50f83a657fe6df7c","sha512":"f2c0ba15b72ba401324fa21a4341651d7dbdaeac4b1fcab12bfa5aff217460ca23c8a13c775d576be9b9dcd323081a116a380cd73fd770bcf0fc749e3e5be1ea","ssdeep":"","tlshash":"94312e88eb28020002cb893c010a422d854a0ea3c1029d3faeb8686909bae806192e22","size":1615,"data":"","first_seen":"2026-02-01T02:09:31.04493Z","last_seen":"2026-02-01T19:53:41.331141Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-includes/js/dist/vendor/react.min.js%3Fver=18.3.1.1","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b97c19585abe23d7f55603028ab9b80","sha1":"9923fc707c0d8d6c27ed9cf24b0355fb94300fe6","sha256":"32b43e6f80b9818f13f0dbb16baa6b801f4b922babfcdcaa2554d986f5067ce6","sha512":"af3e1a4cdcba84ec1c2255dce52f8f53773127b5a70ca7b82bb861744c5f5afbf0e3036f7167b7ebb5b9b41e672be88de144d484c98c2da776551d05f02cf493","ssdeep":"192:NaXdVaxC6DY81/ZUeXopdQAxiJeHhK/0Sxrl1+MFK:NCkC6DYILUdQeLHkl1+MFK","tlshash":"f722c8d8b492b02557b37572013f601f733e656a3c0d49a4a261e9d97cf88adc117f4e","size":10628,"data":"","first_seen":"2024-11-13T06:33:24.997552Z","last_seen":"2026-08-10T06:13:12.758937Z","times_seen":33615,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-includes/js/jquery/ui/core.min.js%3Fver=1.13.3","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-08-10T06:49:59.097408Z","times_seen":340459,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementskit-lite/widgets/init/assets/js/elementor.js%3Fver=2.9.2","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"0690a2cefe1d06fe211b57d2f5e530c1","sha1":"eec3dc3057eed501d15d6e63f637d53d839be4a3","sha256":"2c34c72649547631a667da33a6f1a5198c7005c5af2cf5ed2631db33150d1a58","sha512":"bd7c6af727f3c59f75b4bd280c3693fe9691870e446799c5b5da57ec5d6b457bc0760aedd77c47d4381ed12876271e4ce46952a8a55ebfc79a415fdbc88c388a","ssdeep":"384:FsCB6KboWQ7WBEwGBM8/IfE4AoCifSM2JemNUS0rDB5evnmc1mtgGMRgGLY1yvtk:FsCB6KboWN2Y8/IfE4AoCifSM2JemNUl","tlshash":"7f829555b25130e201ff649b539f520f72b3286ae5074020f1b7427a4ffed8935aaf2a","size":18458,"data":"","first_seen":"2023-07-04T09:24:07Z","last_seen":"2026-08-08T20:38:52.677252Z","times_seen":898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/elementor-frontend-js-before","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8c03004a55716e49fddec83b85eda3b","sha1":"dd0c9d88199b7b378e7cee022550faeff9915d43","sha256":"fbc6ded070ba0806f093845e6fea02e9651d3f231692dfe7eb6c0fcae17e1935","sha512":"450419215dc66d12fce83c7816034e60c247303baf2322468a8871b14fd37114400c3231985ffcfcf5749776635d4343396c747d3e6a81ff171e3068b8260d24","ssdeep":"","tlshash":"f5818231f5496dbf83e397753817ba02696c0528d041b9b8f4fd487d14f6a74220be87","size":3949,"data":"","first_seen":"2026-02-01T02:09:31.062927Z","last_seen":"2026-02-01T19:53:41.337917Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-includes/js/dist/vendor/react-dom.min.js%3Fver=18.3.1.1","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"bcf32b37005b7ba5c974e2a0b66e457c","sha1":"dd90ef53cfc2512476c873ff69c811ef710ad7ea","sha256":"9ab40ec8c39a41ed1420594767d54ad3752f385ba8019085d32374b10720b427","sha512":"3841445eb59db3644f7faa6d8b234abe7e1e73808e330420a764b34c08fb29590d5f22163d2461f0113c30d06673c602e6eab56f704ed6199af8ca923d344f59","ssdeep":"1536:rfHWBpuaYs8YJaMFQ5RUv+KBGNZm65B8uEKULUIw+hvYYQNk:rvyuas5RUf6NEKULnjQK","tlshash":"37c307e83d96f6a16ab702a700ef1817733c2a1b640c4860a611fd9d75b901eb17bfdd","size":128946,"data":"","first_seen":"2025-04-17T09:49:11.600427Z","last_seen":"2026-08-10T06:13:12.869911Z","times_seen":29781,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-includes/js/dist/element.min.js%3Fver=6a582b0c827fa25df3dd","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b636667a19cd8889e206a9642f0e1406","sha1":"82407000695aa979dcc2d4a653bcf7ef88baa068","sha256":"4b83b03960bc052004c53ab913066a36dcb0e89f3f5c8a8f42c3952ed0c8e233","sha512":"51c0cdaef560b865b3a7d6888ddc53a2a55186136c79e29f1e9a5d282e9816fe5401fdddbccf9b3d2cc8c4e0d1d9973462b51f11dd23a70d966b26cbb31bc042","ssdeep":"192:ZVBtnesPF4WAwfVR4+HcD5zejDNPTPBIQ/DHEHMVOJht4Cew3gKVuvYsijc9fOyY:ZVBtndPF4jwfVCOcDsjDNZyfbtg8siI4","tlshash":"3442e6d5b10078b197db01da90ff400df2bd1422781d94f0f2a9c8f9a4b9696a237fda","size":12112,"data":"","first_seen":"2025-12-02T20:48:36.442522Z","last_seen":"2026-08-10T06:13:12.69159Z","times_seen":11759,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementor/assets/js/frontend.min.js%3Fver=3.16.1","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea3b61cbd43502447e66f4e918597419","sha1":"192e399eed4ee4aed4d763f0e674f523050c170b","sha256":"ea3c85d293176e17bcfa538f7b9ce19ab87c7ad877567284e3744cd5f423371d","sha512":"cd6fa3d43f685793ba53f049a92543348884e7b42d8ce37ce210e838a00edc8edbc4ed030655f380442a8fd0c31e99b1fa95e1963bdbbc5d95c2a1329d4496e8","ssdeep":"768:iRPzjLRkRevx1QEa/A3JSJGfVebVqJj/Q9vEAzBc5GETSebsvTilauUHTSX5aodG:iRP/LRkRQx1QEa3GfV9JgEAzBc53TSeE","tlshash":"5503081271d2d4aa418f48b7b433121cb3664dcdb402b59db2bdace6a4b1e8373b2775","size":40436,"data":"","first_seen":"2023-09-12T21:25:06Z","last_seen":"2026-07-16T17:03:26.362771Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"4e83bce94ac59389191461ec5cc2a502","sha1":"7eafccb2718318ae987f6e89025f2b404217760c","sha256":"40d209d615a0f8add0c9e2edca8773232dd3d73bba33db8acd4109b12584e2cb","sha512":"80e405815f64c25b09aad0318fd072d80c49abfe835514777d005a88d1762329d4aceecfc389cc56d7646a03b3df5d35334ae97475d04548afa7627daf400b64","ssdeep":"96:ZPUeCKlVuD5suHXuLwmJuW63uWiADu3AYZt0JLk14o2aC2SLOkTfk27u8c2foqq/:ZceCKlVY5sCXRmJk3YADu3AgtmdN2SXs","tlshash":"35a1ed903e6e6c6c140bd14f348b7409f4ae9ff49a6634caf477256423ecc507b4e2a2","size":4877,"data":"","first_seen":"2026-02-01T02:09:31.05227Z","last_seen":"2026-02-01T19:53:41.341731Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/template-kit-export/public/assets/js/template-kit-export-public.min.js%3Fver=1.0.21","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"749034f2041f637ed40dcd96f4fd9759","sha1":"0a03f9a53a588426d83008046d855089ac4c85de","sha256":"641991d00eeb0d50ac64f69ca705f8bdc72cb725a60c8d7f7ef5191cefd5a455","sha512":"6d0a3ec65f4a640cc8c48795cc5f6e3463c9a09c35cce0206f8c93c6e8ec936cef8a650df36d5ab6fd44c1b35b00acd09f972b7e8850962ca713c3a4c6904411","ssdeep":"","tlshash":"ed400000300c000c00303303c030030030000000000000000000000000000000000000","size":7,"data":"","first_seen":"2023-03-07T12:04:16Z","last_seen":"2026-08-10T03:20:17.553995Z","times_seen":491,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/mediaelement-core-js-before","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c758cb318cf1d1b1de650d97dc29567a","sha1":"e7bd8561cea4c12a243c138bbb2d5a731432aafa","sha256":"87acaf0d5e0fc61f542ca3d054883b8cb9f6f4f8b1a5ded5b7d73184f5ee2cec","sha512":"89788a81dfe743623ce7daf27c79c6d5c02a84a478458be5396cec2aab589c31ca8d5bab84f46fdf7ce8424077fe671d59059a60039924c108575a18dda32f4b","ssdeep":"","tlshash":"4b71ba1ac006383a07284376bc8a47d685fdcf93e181080399ff4da9b2d7c385137654","size":3765,"data":"","first_seen":"2026-02-01T02:09:31.049618Z","last_seen":"2026-02-01T19:53:41.343685Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-includes/js/mediaelement/mediaelement-migrate.min.js%3Fver=6.9","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"51300497928562f8c86c7aaba99237cd","sha1":"e5826832b85c6afc6502b74cbb8ac5394b04c363","sha256":"6d161e98e47ae150b51211443eef37040fb6269dcf85ad2048548066dca99e6f","sha512":"04bfdf1a41712238902bc6a0e07efaf356217e98560c52fa5d175c29191617c35853382ce2f69966bdd5e1b40114b872d962a5fad26a9e0b7d4fc016a6dcb833","ssdeep":"","tlshash":"c72121daa848111a51c7246c70e7131c32bdd354d0108528b92ee9df29f5bc9647eb70","size":1191,"data":"","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-08-10T07:08:43.01929Z","times_seen":56938,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/metform/public/assets/js/htm.js%3Fver=3.4.1","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f3e4ded5fcbfc63411c814a1c046c45","sha1":"c57bd8ced6a35866606a72f323f2c97d7d9f9a00","sha256":"f442c53b2c4fab835ec757afcf144647a88f9e530ee7eb181e4b2ff5430ca268","sha512":"32b3b6613217277e9e015c81860a3a01dddcf7c0bcbbea9fda752202668f730b23747be057fd03f0e00952d3b1794cc04c192e091187fbe49d2198dc888221ea","ssdeep":"","tlshash":"cd2102f433a1f5b9a05564d0a4b610164789cf266c8d7d4c8e308aeba9215cec2cffa3","size":1264,"data":"","first_seen":"2023-03-07T12:43:11Z","last_seen":"2026-08-09T22:15:59.857089Z","times_seen":1820,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/elementskit-elementor-js-extra","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3bfa40027f89543a35835ef17160e1aa","sha1":"92cbee6baa064f46a764f265edf2c951cf0997ed","sha256":"7c221dec7e349100bc45105c226c459f13a2cc412e15516c526242e33a9cb686","sha512":"ce59cabe7469aa353969b85051f8be7417aee28290a3b69fe0ad864a5b0911612cfd33f374a138c9463141d5de83b582d651034c75cd1b93826405ca287e60d8","ssdeep":"","tlshash":"40312b27efac0fc7415d0ef80662b2bb9d606de9fc5188409e2bd0410230c436db8093","size":1551,"data":"","first_seen":"2026-02-01T02:09:31.066143Z","last_seen":"2026-02-01T19:53:41.345983Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js%3Fver=3.16.1","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a5dea0a705cc2f4cd87dbaaa6666bc6","sha1":"678bc6f750f13adb29bbc158eb0d9cd813b736fa","sha256":"97cf1307c16a437b77b5f7f5c9bc0b985d0745a14be5a279019aca5a3432e264","sha512":"7c19d0edc28fe8733075534de6176483416bb3535f37b7607536aea2ddf9c5591d864225049c9a74735c1daf44c72688d91c1133bb018683ade11f16ea596807","ssdeep":"192:bP6Vw28fajqZFSJtd4fxVOT2iQsVJqYqV5PnX9dUWFjWqh2P9e93f7POD3o:OX8fajqZFwtdykZwRXcoWI2P9o7S3o","tlshash":"0462337b7d000da93cac595852a27d446d4eb32fbb430c6bbdc59de623a23f5719e006","size":15055,"data":"","first_seen":"2023-03-07T01:02:07Z","last_seen":"2026-08-10T04:47:55.898852Z","times_seen":13305,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementskit-lite/widgets/init/assets/js/odometer.min.js%3Fver=2.9.2","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"2adb8c7cf8cfff04c18947e5a30622db","sha1":"243dc868c7f293e0b498e68df30c65dfc5458609","sha256":"36e97e9e660caa53bc8a8d93a1b688ff167853b7757a9bbe670bdc110c5dbf92","sha512":"69a48bbd562cb32345403d85741872d3bbfcf485855f75f9e37730bbeb6f1763cbf42f2658e9e25a9082b347a1669d59909703dfbb578009a58572c136caee97","ssdeep":"192:DbJw+4Hq2qTJEopzrud8ym7LmsMBEZ8SycbvpQzL:vJwXHnqTJpy7LE1g","tlshash":"67129384ff41a638475362a112be0749b7bb596e2401404df37c99debe26c39e11bfb1","size":9702,"data":"","first_seen":"2023-03-12T11:43:32Z","last_seen":"2026-08-09T23:48:07.426547Z","times_seen":888,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/metform-app-js-extra","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"73a95a2380b8c79d437c6bec68b3a582","sha1":"769948c2a52ac7898782f1baa927bde7d4da2bfc","sha256":"2044a6ff56d14114fd214538506d376c6182f46466397e467a063be8557b7140","sha512":"83b37c9fa6016f2c81ffe38eaad6476ef9918849bd44f364b58723a05556f461dc4638b94b67cdf4e9b68a05af9c6a9ea273b035d031b412c1eea2c89cf66f59","ssdeep":"","tlshash":"2c312b03db5d0de04bec4e300098b63e0c050f82fc8220c0192040c400b44d205307c4","size":1523,"data":"","first_seen":"2026-02-01T02:09:31.046443Z","last_seen":"2026-02-01T19:53:41.347886Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementskit-lite/widgets/init/assets/js/animate-circle.min.js%3Fver=2.9.2","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5945db2f3337fd9f1cbef5b07b2a493","sha1":"8a11439d56af9fb27836bb5f2a30aeb35b93bb5a","sha256":"a8642bcd147ba3528345f5bd17f788cd524931e093255b2c1c8344677a1ab505","sha512":"ddfae8040510dca2e41c5f745b2ec8e349053a02409c41cbc3cbf8df1561b7c586f93090974ee6821fc27e19aba68cc6c95fabe9d9321934fb185d20a8da7a12","ssdeep":"","tlshash":"e30128b72f100835527d0a22f35d7708637100c0a60359596c58592d117ccbbd57a7ff","size":681,"data":"","first_seen":"2023-07-04T09:24:07Z","last_seen":"2026-08-10T06:42:18.123485Z","times_seen":26713,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js%3Fver=3.16.1","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8afe565c2d2c1d64d9deee898f18e90","sha1":"2021c167342b84c077bb6de21b73e732e563143d","sha256":"5c3a41f270871578f37ea4185496ab5ba343e41dc53877c5f64f1b2d5df937f6","sha512":"d0b687b66e60b3b9ba68792b27d0be783854f6b3e10bb7fe6592c010799068cb99ba2eb33db90496c4443ea8911c1e28c97b3d9d6475823b400709d6c6d4ff3c","ssdeep":"1536:oeAjA679C+QRCHXC4WHqMPB8Vx8WXwCC4YNIe8HeBHmjkozRNE4cR8+SxpcxID1s:8dmVTCzkbx","tlshash":"f343ea863251b4e74bef40eb602b450af22319e4740eb1987ab8ddf66470d5b237bb35","size":58860,"data":"","first_seen":"2023-09-12T21:25:06Z","last_seen":"2026-07-16T17:03:26.278156Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-includes/js/jquery/jquery.min.js%3Fver=3.7.1","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-10T06:49:59.017356Z","times_seen":1012691,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/e4b9a2f0c8d17a6b5e3f9d2041b7ac8e.js","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"858f246cdeddcccde76cb980ea622c9a","sha1":"4369c677f957d999e71c04c8420c2d80b69522e8","sha256":"4d6d1fbaa04690cdea71f4bdc6714c1bdbaad4d7760b5c8a447197ee5eb3c3fd","sha512":"db66106ae670b2665810f4989b091df3d409dd83afc93776bd2b92f3087ee79da7164d3ec9692602fd1becef7c6d229c47bb6aaa60ef93bd15abf3081deb2767","ssdeep":"","tlshash":"47700028200022a20003c2038880ce008230028220c080a00000020a0300e8080a3088","size":25,"data":"","first_seen":"2026-02-01T02:09:30.9745Z","last_seen":"2026-02-01T19:53:41.285555Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-includes/js/dist/escape-html.min.js%3Fver=6561a406d2d232a6fbd2","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"aef7a048c0e0677cbab0efeefb9dbcc6","sha1":"7c166985c69f2915f8abda5fc88a387db12a8788","sha256":"037171f4a3a999572ccd4332d70596ae631a893eadf47539a7ea530ce884e90d","sha512":"40bbe86f4a0cecec0d8dc8f48f5894fb97c7d294afa55fa2bad966b6b56b4554119492b4c9c2d98b6fc55c89bdaf282c81785cb3fbd6129193d6ae021a289867","ssdeep":"","tlshash":"db11029670e2f998331a5191883e2087f33cdaa012ada1f0f208e0a1397047a2339d2e","size":1000,"data":"","first_seen":"2024-04-05T11:13:46Z","last_seen":"2026-08-10T06:13:12.745093Z","times_seen":28808,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d9fdd286743e49330f2632557d563f4","sha1":"a835d28da1f18f130b58befea09f4feb59d52dbd","sha256":"ea2e00050c3947de2077d672469c40ce5e0addfa7e1d5c66ea01c9f9a0a19f9e","sha512":"4e3dbf2d06a4b5f46e67fd8c4a5bbcb97d9b1015038a33cbbae8437eef08076696d7dea9f13545b806d90a76381cee3e24944684104cffc47a77ff1bd0cb4a17","ssdeep":"96:kvcHtHRA5NTDXnM2E0+1lfYsPHgRhR3S2:xN0LE0+1lfYsvSB","tlshash":"29919796e77a38dbb2f900f2697a0d47eb614435d6c8d038c9bda3141cb5893c274b46","size":4379,"data":"","first_seen":"2026-02-01T02:09:31.047873Z","last_seen":"2026-02-01T19:53:41.350489Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/metform/public/assets/js/app.js%3Fver=3.4.1","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4649ec328756b607381c4e662f234d96","sha1":"c6daa8bdf08e15d34c1e26af04c41dd42dc26b09","sha256":"cece9d84406a9aab31073ebb9112ae1b662687255e07f4a03fb130c6f59c1acc","sha512":"39c8cbc747576d46243843c0ace28a4da76114df5e0afa1e934c55538990eba11667825a488b005da47cd8dd9b3e84d6d5d7239eb994f9c91094bf7d66c3c781","ssdeep":"6144:4Z0pQvJQQyqG98mEHYEtqRT0QCuO8F7FqnqN7WdsagnkZtOTKn:s0qvJQQyqG9X0iO8Zs87WdsagkZvn","tlshash":"46745c897595b43182f761b5502f110af23a1e6d644dd480f635ece86cb8ccea27bf2e","size":356059,"data":"","first_seen":"2023-10-16T18:22:08Z","last_seen":"2026-02-01T19:53:41.352092Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/sticky-header-effects-for-elementor/assets/js/she-header.js%3Fver=1.6.9","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8007fa4c829658bfc60a1aefa68fd739","sha1":"5ff5d8ea91a70aba44f197f1f395041eb4e4cf53","sha256":"c9e6f8785254fe912f5d6bdfc1bbf19d70a39e69c8e48eca6a70f45aff41c9e5","sha512":"f51350fcbae61de208c05be777451fe412894817d467b2f801ecd09a0602590d89301216e59bbe81efb5f1c2b0a5ba71c9cbbd9bb0fc216fd811f1182c816756","ssdeep":"192:D2TMUwi2a/5PqLjLCNCJyXZz0I0y6yDkXc:/elcc","tlshash":"a352251cab7e311641eab16ac26e990c740dc1379254a9237e4c127eefc493ae578fd8","size":14156,"data":"","first_seen":"2023-09-11T23:58:00Z","last_seen":"2026-08-08T22:20:48.918119Z","times_seen":962,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-includes/js/mediaelement/wp-mediaelement.min.js%3Fver=6.9","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a5c9689ae636c452b6808740ba04136","sha1":"8d2c85d7779d00c12aeb6b55a99443952d9a144e","sha256":"79cb399203843f65199bec32bc4abac5dfd20f141d3e4ec1424bf00c7108fa45","sha512":"a80491b5c34e4719b042d1ef0dc8cff0e2ad29343ac8926a3cab36202b02dc360000b430b3141e474fe08bffc54329eb47082d530af6b44727490c4cd0f0ed0c","ssdeep":"","tlshash":"ee11f3d43e84757909d75428a47f0b18a0fb4d76804e0db0ee54b63e7d7cd409196a4a","size":1107,"data":"","first_seen":"2023-03-29T22:52:25Z","last_seen":"2026-08-10T07:08:42.997144Z","times_seen":53659,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-json/metform/v1/forms/views/39","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:12.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"POST /wp-json/metform/v1/forms/views/39 HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usdtcasinonoid.com/\r\nX-WP-Nonce: e14875cbf3\r\nOrigin: https://usdtcasinonoid.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:12 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-10T06:50:49.881573Z","times_seen":547884,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css%3Fver=8.4.5.css","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css%3Fver=8.4.5.css HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 Sep 2023 00:23:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6501011f-4057\"\r\nexpires: Mon, 02 Feb 2026 07:52:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16471,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16214)","md5":"a2431bc290cf34e330e11ec4cfce1247","sha1":"32a53342901fef5f4f4dbb26a555e730f84437a4","sha256":"c57e64fcb72bddafa9c38de574441c3e69ac6c961df96b0cad34da83658bd196","sha512":"87aef045472db25020faead697ec02813ba38d4e313caf437b4ca5cadbb7a7495805ac0b74e5de60cd84ccecab290b76d003eb1fadfcdaa70e650a597658ada9","ssdeep":"192:IbgmUJbiKneTT4bHZ+SKbnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:IdUbeTMbHZ+Vnh2AVfHfA4XYz","tlshash":"fa7234681340282753274f374b71cbb9d9b444d24b93896e91c0ee88d7b6cbd236f6e9","first_seen":"2023-04-05T10:48:11Z","last_seen":"2026-08-10T06:49:58.866666Z","times_seen":140632,"resource_available":true,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/themes/hello-elementor/theme.min.css%3Fver=2.8.1.css","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/theme.min.css%3Fver=2.8.1.css HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 Sep 2023 06:08:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64faba72-32ff\"\r\nexpires: Mon, 02 Feb 2026 07:52:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13055,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13049), with no line terminators","md5":"c56b90c00d61288575a5298b7dd3e575","sha1":"66c9e15cab1fff5bbaa2679285d695e5a9895ebb","sha256":"ab14e945bc72af34e28b188ff288f89d5fff8049ef298cdaeb189af9eaf164e3","sha512":"95220d1285e4d6d84aa3ae63dcba8959d9c2f495d7ca4f5ad5da769f3b97f93de91fee3ec10cc8ed7e05c8f433cc574fefca9f4174f3871e8cf64a7432407441","ssdeep":"192:5VjA/oMJtFo5jpVBbH48vCYL75+zI4vduKH5:zjAZtFo5jKfsgdP","tlshash":"8442626af8e2317c06378a13fbd1479e6079c10ed5075be5a6eac31b45cba012b63b4d","first_seen":"2023-07-06T00:57:07Z","last_seen":"2026-08-10T07:19:59.502446Z","times_seen":2572,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css%3Fver=5.23.0.css","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css%3Fver=5.23.0.css HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 08 Jan 2026 14:57:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695fc5ce-4c4d\"\r\nexpires: Mon, 02 Feb 2026 07:52:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19533,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19487)","md5":"3a6a37459177a9008e8f9d4f9e05f896","sha1":"668201c5507e885715b0f5586534229e1ef77812","sha256":"a8c6ad3d5757eb8b3515d0908037646d134f1fc2eee52450a10a24764763ed44","sha512":"a0566cc4c295bd53f533917501bf9b933a82bac1d1c98b85d23aa98ead0f377c8176ba64f4c6502fa71cfef1c8e453b47284dc6c0a81eb77bebc3065a2a9d50f","ssdeep":"192:q4877iN3iCOy2bvGIdp8khugk8/H6qiMs7HqnFTSZq7RXDlCdkgIg:u7iNyqEpXk8/aq8uFucbrgIg","tlshash":"ac92dae4e46923c87b32c413e745f64c64d9f921cac89d19fa6f850c1ee16a316c6fb8","first_seen":"2026-02-01T02:09:30.996722Z","last_seen":"2026-04-29T17:28:21.25013Z","times_seen":4,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/uploads/2023/09/logo1.png","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/logo1.png HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 09 Sep 2023 09:20:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64fc38e2-896\"\r\nexpires: Tue, 03 Mar 2026 19:52:10 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2198,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 204 x 77, 8-bit/color RGBA, non-interlaced","md5":"f6479de1355ec3c09323047748415ae2","sha1":"def60da3016b2ab3c80557f9f3d0c80f8e14ea29","sha256":"7fb797eae15f6a04bdcbccf191cacdec35b325956dda10ba2f6be6de793c90f6","sha512":"867960030cd3ad012fd8c60f91f7e41e63abacf28ebe081dcaa895c17a21c9a4275fb289d97f7606b3d884ae0cc53a507e32105ba4537de8b51af55a8643659a","ssdeep":"","tlshash":"99413c4f3ba8bfbafc6e89f550cad109c0d215006993d463a8c1c2bc3e0ed1e6709883","first_seen":"2026-02-01T02:09:30.984132Z","last_seen":"2026-02-01T19:53:41.201136Z","times_seen":2,"resource_available":false,"data":null}},"time_used":802,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":802,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-includes/js/dist/escape-html.min.js%3Fver=6561a406d2d232a6fbd2","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-includes/js/dist/escape-html.min.js%3Fver=6561a406d2d232a6fbd2 HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1000\r\nlast-modified: Wed, 03 Apr 2024 06:16:10 GMT\r\netag: \"660cf42a-3e8\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1000,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (965)","md5":"aef7a048c0e0677cbab0efeefb9dbcc6","sha1":"7c166985c69f2915f8abda5fc88a387db12a8788","sha256":"037171f4a3a999572ccd4332d70596ae631a893eadf47539a7ea530ce884e90d","sha512":"40bbe86f4a0cecec0d8dc8f48f5894fb97c7d294afa55fa2bad966b6b56b4554119492b4c9c2d98b6fc55c89bdaf282c81785cb3fbd6129193d6ae021a289867","ssdeep":"","tlshash":"db11029670e2f998331a5191883e2087f33cdaa012ada1f0f208e0a1397047a2339d2e","first_seen":"2024-04-05T11:13:46Z","last_seen":"2026-08-10T06:13:12.745093Z","times_seen":28808,"resource_available":true,"data":null}},"time_used":791,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":783,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/uploads/2023/09/BG-5.png","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:11.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/BG-5.png HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/wp-content/uploads/elementor/css/post-2.css%3Fver=1694608695.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 09 Sep 2023 13:43:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64fc768e-b267\"\r\nexpires: Tue, 03 Mar 2026 19:52:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45671,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 616 x 507, 8-bit colormap, non-interlaced","md5":"aa89bb7bcbcde63991bdcc3c37279a3a","sha1":"0cdf994bcea1c5ebba9c1edfa35e91d1d7a7eff5","sha256":"6cf9c81758723827ea55ba1788d7ff2c2f89e74995157366826c54cad7197053","sha512":"58f11d74978f7af52b86be2de292f6c9b780e5fca2a99ea3883ae780b4f916b09315e57ed04227695adfa70c8a3e1e7c11557d696c6054dc6bbf33e96bc16d0c","ssdeep":"768:cjzU7P1bSmZSdz2g+IQoYzSC5WYb3F4DwHhdWT4+hqNdQaI+HC:E+sbp2LIdYzSC5Fb1hBdWs+sQaIiC","tlshash":"f823012e2a9880d2ac5c0bd846d05ba8d57738dd5f8d316ee04e89f7a81cfca459c09e","first_seen":"2025-12-28T11:52:46.803654Z","last_seen":"2026-02-15T07:23:34.313533Z","times_seen":4,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css%3Fver=3.16.1.css","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css%3Fver=3.16.1.css HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 Sep 2023 00:23:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6501011d-684e\"\r\nexpires: Mon, 02 Feb 2026 07:52:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26702,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26516)","md5":"c55205bce667f5d812354fd1353e7389","sha1":"f22de0af271eba636a022c873c94fbcd81b4c89a","sha256":"c55902832fb84522d02ea1a60a30747403a140d8651fa748f13ba398b0c0df3a","sha512":"89a2e11075b7a7e64d8240ca062e3311f1fe69600c189ec8ee78ea0f78ca9db374bb1e0692e9aedaf8ee23bd58528bf6d0e20f977477daff073be57ee8e81bbd","ssdeep":"192:dP6RT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPbJVR8XD7mycP:0Ral4w0QK+PwK05eavpmgPPeXD7mycP","tlshash":"1ec20665930c60d3a3eef847ba0172a8277577999a864c54f30b7c9c8dc3a5772e8f18","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-08-10T06:57:33.177943Z","times_seen":87941,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementor/assets/js/frontend.min.js%3Fver=3.16.1","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js%3Fver=3.16.1 HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 40436\r\nlast-modified: Wed, 13 Sep 2023 00:23:53 GMT\r\netag: \"65010119-9df4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40436,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (40396)","md5":"ea3b61cbd43502447e66f4e918597419","sha1":"192e399eed4ee4aed4d763f0e674f523050c170b","sha256":"ea3c85d293176e17bcfa538f7b9ce19ab87c7ad877567284e3744cd5f423371d","sha512":"cd6fa3d43f685793ba53f049a92543348884e7b42d8ce37ce210e838a00edc8edbc4ed030655f380442a8fd0c31e99b1fa95e1963bdbbc5d95c2a1329d4496e8","ssdeep":"768:iRPzjLRkRevx1QEa/A3JSJGfVebVqJj/Q9vEAzBc5GETSebsvTilauUHTSX5aodG:iRP/LRkRQx1QEa3GfV9JgEAzBc53TSeE","tlshash":"5503081271d2d4aa418f48b7b433121cb3664dcdb402b59db2bdace6a4b1e8373b2775","first_seen":"2023-09-12T21:25:06Z","last_seen":"2026-07-16T17:03:26.362771Z","times_seen":118,"resource_available":true,"data":null}},"time_used":979,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":774,"receive":205,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/favicon.ico","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:12.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:12 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 10444\r\nlast-modified: Tue, 20 Jan 2026 11:16:28 GMT\r\netag: \"696f640c-28cc\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10444,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 32x32 with \n- PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"0b51bfa2c3b2073524c64a92bbdbe47c","sha1":"416a68ecdfde577303a2356b602d35d5741b577b","sha256":"7a58f5fac3058385380afa1c175cdd6ab5367783fc8065b1f71b03e566d17a09","sha512":"1f80a0b0545193e0daa1aec6f8fde9ca97d9c7aa6e41b3ba633da24e547f73435c5c7a479cf2b9def9e38f35bbdaedabcf79eb60386fb11c2e7ad3a0052d1135","ssdeep":"192:SSUP5ndWQqng8a3tT1SkFYnHGK7c+Zvh1jKo6TWW7BVttYtehwT58wcdFk4:SRdWQMv0Z1SkF+L7cUhczj7BVLYAhwTm","tlshash":"5122ada396ac70e1da384a34d5888565ddfe0e5890fb42683368cfb80a774d1f0a3327","first_seen":"2026-02-01T02:09:30.976841Z","last_seen":"2026-02-01T19:53:41.20835Z","times_seen":2,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/uploads/elementor/css/global.css%3Fver=1694608695.css","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/global.css%3Fver=1694608695.css HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 Sep 2023 12:38:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6501ad37-2e87c\"\r\nexpires: Mon, 02 Feb 2026 07:52:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":190588,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9258), with CRLF, LF line terminators","md5":"90f75fd9c98059f1a2ed93132179ecbf","sha1":"ebf2434daf4ccb0694665089be630afd630e6663","sha256":"36a41e93f3aae9c6da519dae40a0cad92d5e086ea13e437c4af96fc5ff66dda8","sha512":"859144b7181e23cff0f2a46807fe8845180d0d49b21c4f3822f394cda1606c8fa89d1b44a783ef3b839ba69d7331bf5a3328a9efbda314059a730fa11213a59d","ssdeep":"384:AxRD5wN7Ic4U754E2kJW0n702wEqIEM2+We110TpQQM0+N7IFWDnHWDnF:AxRDAJtTZ3VYe1ev4NMWDHWDF","tlshash":"d31465487e22d226bc6b0b7f654be62c284c98c9dc568fd7f85cc10749eef1697391a0","first_seen":"2026-02-01T02:09:30.977545Z","last_seen":"2026-02-01T19:53:41.210889Z","times_seen":2,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css%3Fver=5.15.3.css","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css%3Fver=5.15.3.css HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 Sep 2023 00:23:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6501011d-e238\"\r\nexpires: Mon, 02 Feb 2026 07:52:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57912,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57726)","md5":"eeb705d0bdccfd645d3bbd46dd1fbab3","sha1":"066def290f42ed8c00860e573cc880bd46e9ced4","sha256":"d01a2ba2805c78957e15a2958135de0f3cb88e95159dd0f6c0a032bd76b1b0e9","sha512":"39d11741808e95d8ea504b2e30ab19463f771eddb741196121bf04fd7d2c6f066199ef1e530ea0f2aec077118929a91c05bbfbfbf3d7d067366ed7fb46ef1c64","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzO:0E0PxXE4YXJgndFTfy9lt5C","tlshash":"1843f9b8e54c01cab731c44bef42b2bc61b6f73de5914d95f00e691c2ad26a81185fba","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-08-10T03:20:17.711748Z","times_seen":27919,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementskit-lite/widgets/init/assets/js/elementor.js%3Fver=2.9.2","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/elementskit-lite/widgets/init/assets/js/elementor.js%3Fver=2.9.2 HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 18458\r\nlast-modified: Fri, 08 Sep 2023 06:10:45 GMT\r\netag: \"64fabae5-481a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18458,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (18458), with no line terminators","md5":"0690a2cefe1d06fe211b57d2f5e530c1","sha1":"eec3dc3057eed501d15d6e63f637d53d839be4a3","sha256":"2c34c72649547631a667da33a6f1a5198c7005c5af2cf5ed2631db33150d1a58","sha512":"bd7c6af727f3c59f75b4bd280c3693fe9691870e446799c5b5da57ec5d6b457bc0760aedd77c47d4381ed12876271e4ce46952a8a55ebfc79a415fdbc88c388a","ssdeep":"384:FsCB6KboWQ7WBEwGBM8/IfE4AoCifSM2JemNUS0rDB5evnmc1mtgGMRgGLY1yvtk:FsCB6KboWN2Y8/IfE4AoCifSM2JemNUl","tlshash":"7f829555b25130e201ff649b539f520f72b3286ae5074020f1b7427a4ffed8935aaf2a","first_seen":"2023-07-04T09:24:07Z","last_seen":"2026-08-08T20:38:52.677252Z","times_seen":898,"resource_available":true,"data":null}},"time_used":976,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":770,"receive":206,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/uploads/2023/09/customizable-financial-report-dashboard-ui-kit-2023-08-04-00-02-00-utc.jpg","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:11.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/customizable-financial-report-dashboard-ui-kit-2023-08-04-00-02-00-utc.jpg HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:12 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 09 Sep 2023 09:58:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64fc41b5-ca86\"\r\nexpires: Tue, 03 Mar 2026 19:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51846,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif Standard: [TIFF image data, big-endian, direntries=9, orientation=upper-left, xresolution=2182, yresolution=2190, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows), datetime=2023:08:27 11:42:22], baseline, precision 8, 468x342, components 3","md5":"130f84662376c722abfab4ef0f949714","sha1":"48cc369e456b1af81930949edf7ee8374bd3da07","sha256":"0a9ae19ab32c9b872c40532431a575770694778de3b6b177393303a694379913","sha512":"194d031760ce0d3a4822a62f347adb297972674e7b3eff3cd959b4d9882a0a0742e15f24ea8adfd7c64f07a8ab0095c214ed813a1f386dae07353f7bbab754b7","ssdeep":"1536:+4a/yH4hVKVlTrlS256ywxAKoYJTkL8KJZ:lo6tFt56yJXuTQ","tlshash":"4133be305fb91a81deed18336511c6b447346f904ea33fe2bead272e7715ab24d2c216","first_seen":"2026-02-01T02:09:30.976107Z","last_seen":"2026-02-01T19:53:41.216458Z","times_seen":2,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:12.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:12 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-10T06:50:49.881573Z","times_seen":547884,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:12.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:12 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-10T06:50:49.881573Z","times_seen":547884,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/uploads/2023/09/header-logo.png","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/header-logo.png HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 08 Sep 2023 23:54:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64fbb42f-af9\"\r\nexpires: Tue, 03 Mar 2026 19:52:10 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2809,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 153 x 51, 8-bit/color RGBA, non-interlaced","md5":"2cff4424f1a97ff1698036abde7020b8","sha1":"cd802e6a0b98aecdf698b47334187814ad7e5c49","sha256":"afad952eb770866d85b538f134a725afbbae3574c4897d9fa6b4ade5a9c5e882","sha512":"0bc2c37fd902aa49a54499bbe85e63697cd0e77a0fa7ce75017f67aa853b3a07b142a83366470a6c69a448a302a3a808853e14b3e5e4832c88bcaf1dc128df19","ssdeep":"","tlshash":"53515bc0ef9ce036af96901750835c30489c9ac9290e7d0a86142b3b9c2d1c88f7e398","first_seen":"2026-02-01T02:09:30.965356Z","last_seen":"2026-06-27T20:47:49.159935Z","times_seen":3,"resource_available":false,"data":null}},"time_used":803,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":803,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-includes/js/mediaelement/mediaelement-migrate.min.js%3Fver=6.9","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-includes/js/mediaelement/mediaelement-migrate.min.js%3Fver=6.9 HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1191\r\nlast-modified: Fri, 08 Apr 2022 20:07:18 GMT\r\netag: \"625095f6-4a7\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1191,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ASCII text, with very long lines (1191), with no line terminators","md5":"51300497928562f8c86c7aaba99237cd","sha1":"e5826832b85c6afc6502b74cbb8ac5394b04c363","sha256":"6d161e98e47ae150b51211443eef37040fb6269dcf85ad2048548066dca99e6f","sha512":"04bfdf1a41712238902bc6a0e07efaf356217e98560c52fa5d175c29191617c35853382ce2f69966bdd5e1b40114b872d962a5fad26a9e0b7d4fc016a6dcb833","ssdeep":"","tlshash":"c72121daa848111a51c7246c70e7131c32bdd354d0108528b92ee9df29f5bc9647eb70","first_seen":"2023-03-07T01:06:59Z","last_seen":"2026-08-10T07:08:43.01929Z","times_seen":56938,"resource_available":true,"data":null}},"time_used":795,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":791,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementskit-lite/widgets/init/assets/js/odometer.min.js%3Fver=2.9.2","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/elementskit-lite/widgets/init/assets/js/odometer.min.js%3Fver=2.9.2 HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 9702\r\nlast-modified: Fri, 08 Sep 2023 06:10:45 GMT\r\netag: \"64fabae5-25e6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9702,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (9680)","md5":"2adb8c7cf8cfff04c18947e5a30622db","sha1":"243dc868c7f293e0b498e68df30c65dfc5458609","sha256":"36e97e9e660caa53bc8a8d93a1b688ff167853b7757a9bbe670bdc110c5dbf92","sha512":"69a48bbd562cb32345403d85741872d3bbfcf485855f75f9e37730bbeb6f1763cbf42f2658e9e25a9082b347a1669d59909703dfbb578009a58572c136caee97","ssdeep":"192:DbJw+4Hq2qTJEopzrud8ym7LmsMBEZ8SycbvpQzL:vJwXHnqTJpy7LE1g","tlshash":"67129384ff41a638475362a112be0749b7bb596e2401404df37c99debe26c39e11bfb1","first_seen":"2023-03-12T11:43:32Z","last_seen":"2026-08-09T23:48:07.426547Z","times_seen":888,"resource_available":true,"data":null}},"time_used":793,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":789,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-includes/js/dist/vendor/react-dom.min.js%3Fver=18.3.1.1","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-includes/js/dist/vendor/react-dom.min.js%3Fver=18.3.1.1 HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 128946\r\nlast-modified: Tue, 15 Apr 2025 18:38:19 GMT\r\netag: \"67fea79b-1f7b2\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":128946,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (65295)","md5":"bcf32b37005b7ba5c974e2a0b66e457c","sha1":"dd90ef53cfc2512476c873ff69c811ef710ad7ea","sha256":"9ab40ec8c39a41ed1420594767d54ad3752f385ba8019085d32374b10720b427","sha512":"3841445eb59db3644f7faa6d8b234abe7e1e73808e330420a764b34c08fb29590d5f22163d2461f0113c30d06673c602e6eab56f704ed6199af8ca923d344f59","ssdeep":"1536:rfHWBpuaYs8YJaMFQ5RUv+KBGNZm65B8uEKULUIw+hvYYQNk:rvyuas5RUf6NEKULnjQK","tlshash":"37c307e83d96f6a16ab702a700ef1817733c2a1b640c4860a611fd9d75b901eb17bfdd","first_seen":"2025-04-17T09:49:11.600427Z","last_seen":"2026-08-10T06:13:12.869911Z","times_seen":29781,"resource_available":true,"data":null}},"time_used":997,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":785,"receive":212,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js%3Fver=3.16.1","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js%3Fver=3.16.1 HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 58860\r\nlast-modified: Wed, 13 Sep 2023 00:23:54 GMT\r\netag: \"6501011a-e5ec\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58860,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ISO-8859 text, with very long lines (58819)","md5":"0204eafcdc5c4d133d167e1887c62a7e","sha1":"18855dbbadea03c2b47209cbce862c719f6b9be3","sha256":"66b0549f3eec6bcfcb54c187874876fc0da099b3e57e4fceb403d66239709f1f","sha512":"f3e73b392f487402efd3320f5c050670ffaf96fb9946b893f203fc00ccd64c82c193aececdfb9be6a64c682d335d87279eedbd77fb7dcb2f3f3c42b1f1b1d52a","ssdeep":"1536:oeAjA679C+QRCHXC4WHqMPB8Vx8WXwCC4YNIe8HeBHmjkozRNE4cR8+SxpcxID1W:8dmVTCzkbp","tlshash":"a843ea863251b4e74bef40eb602b450af22319e4740eb1987ab8ddf66470d5b237bb35","first_seen":"2026-02-01T02:09:30.970081Z","last_seen":"2026-02-01T19:53:41.228209Z","times_seen":2,"resource_available":false,"data":null}},"time_used":979,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":775,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2%3F5.23.0","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:11.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2%3F5.23.0 HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css%3Fver=5.23.0.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:11 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 94720\r\nlast-modified: Wed, 13 Sep 2023 00:23:56 GMT\r\netag: \"6501011c-17200\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":94720,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 94720, version 1.0","md5":"f6fe937af0f714e8856c40e5a964a44b","sha1":"27b5c35ded5f586025906e4497fcb5d29a0734ca","sha256":"9434610f03b23074f9ae8ba5dbed66819c052a1d3c8e2256296c50ddeb4fe7f8","sha512":"6850cee48a95fddfe36946fec2077c60367eaee2a0641ec47e7472eb6dff15439883bde8d1ee36aff3becc580124dae0eb027088d43a99c89f2379f2382c8257","ssdeep":"1536:zSAAoasTPypYu5SVfF7liXJOZT21gfeInSzU1HYSkKeHVSyq/Xl3PwM5FJZtypNZ:zSAyXYVfF7oHIWU6SyqPpFfyFWbFk","tlshash":"159312e78ce0bd73839f9806ae21d7b978a4c3e45272e663f5202e4515e6c70277439a","first_seen":"2023-08-05T14:42:31Z","last_seen":"2026-08-10T04:36:34.483231Z","times_seen":2677,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":231,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/uploads/2023/09/money-check-edit.png","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:11.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/money-check-edit.png HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 953\r\nlast-modified: Sat, 09 Sep 2023 10:06:42 GMT\r\netag: \"64fc43b2-3b9\"\r\nexpires: Tue, 03 Mar 2026 19:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":953,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 16-bit gray+alpha, non-interlaced","md5":"edd0d9f88e26b95d6929ef566115d72c","sha1":"5f2f623d1d5c2816563cf7231d7adfc26bc3fb35","sha256":"de6bf08716cf9e1572ea2adc951eef16e8603bb1dff129a67716ef1648376fa4","sha512":"a9043956dbab7e3316ea686c66cac10bdaae060b87a8f4f7e0b31d160191559d4cbdeefc76e47e0ec5725bf0c88c13985ac9befd8fbef1c168b2a11eacd2110a","ssdeep":"","tlshash":"a5110c938394b870ce5a5bb30c0d85516f7241fe26b1d56d02e3911c12146d638c7000","first_seen":"2026-02-01T02:09:31.009149Z","last_seen":"2026-02-01T19:53:41.2327Z","times_seen":2,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css%3Fver=5.15.3.css","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css%3Fver=5.15.3.css HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 653\r\nlast-modified: Thu, 08 Jan 2026 14:57:18 GMT\r\netag: \"695fc5ce-28d\"\r\nexpires: Mon, 02 Feb 2026 07:52:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":653,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (467)","md5":"67717149907933d6b213353a6968212f","sha1":"02803ee62327728017c894c683962894954e3752","sha256":"881bd24c7f18f7f220ada2bfcba4929b38f2c2d71d3300ff29b8d53844a677ac","sha512":"df710745a074a4b2fc3286e38fd84cc6a28aca77ae17c944ea2a8dd2ff16551c47d8d26cb38e8af5e10a134acfd07c56d494eec15b244e5b9275280ae7406c1b","ssdeep":"","tlshash":"2cf0496e4646194141c10e1038d9fa1ded46f0a97c582f33a12adc2d8cf9e5f2179f09","first_seen":"2026-02-01T02:09:31.000615Z","last_seen":"2026-08-09T20:42:10.787369Z","times_seen":10,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/metform/public/assets/js/app.js%3Fver=3.4.1","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/metform/public/assets/js/app.js%3Fver=3.4.1 HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 356059\r\nlast-modified: Fri, 08 Sep 2023 06:11:13 GMT\r\netag: \"64fabb01-56edb\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":356059,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T06:49:09.763777Z","times_seen":17812964,"resource_available":true,"data":null}},"time_used":1194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":780,"receive":414,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/sticky-header-effects-for-elementor/assets/css/she-header-style.css%3Fver=1.6.9.css","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/sticky-header-effects-for-elementor/assets/css/she-header-style.css%3Fver=1.6.9.css HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 Sep 2023 00:24:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6501012c-959\"\r\nexpires: Mon, 02 Feb 2026 07:52:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2393,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"26f3f38956ca6916783bc216f1ac3225","sha1":"2ca8c69541d4d8e93db07929005e2414e6a92245","sha256":"f9e6600d175646cbda90fe364cff9a28f5263013f9612c322209e63bb5cb56d1","sha512":"808fc9265d28e1fc2a75ac30c3a4a9c8f3a015c09903cd8beb2c60333f54252ce8fc0713454fe749dd65c7dedaef510658579060237da993b767ebfb5086e8dc","ssdeep":"","tlshash":"ba4127c1bd563a085333c99ce1d73738ee6d8942d3544c6ff20a1e6f0395ac9916ea62","first_seen":"2023-09-14T07:08:55Z","last_seen":"2026-08-08T22:20:49.063435Z","times_seen":854,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementskit-lite/widgets/init/assets/css/widget-styles.css%3Fver=2.9.2.css","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/elementskit-lite/widgets/init/assets/css/widget-styles.css%3Fver=2.9.2.css HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 08 Jan 2026 14:57:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695fc5ce-6cbf5\"\r\nexpires: Mon, 02 Feb 2026 07:52:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":445429,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e532822c165fac57219aaf26698aa4f7","sha1":"08ca385d552db8b8afdde2fee6cbdf966f9c27ec","sha256":"ebd4a78569ef1fab71b07e0f3e449819623ae220f0080fb6ec59fb66f2f65489","sha512":"3988cbde93d827df7f05267f71c1574fbf50a7a22adc6e7d4580549b08d7c31dbddb98dee6347c76f56b4ae9ece4a11cebb7aaf7d3f69da1c2072d14fb475dce","ssdeep":"3072:TLBd7gV5wO0BrsfOVfjhWpGphoGuuKfefN:TLBd25wO0BQfOVfjhWpGphoGuffefN","tlshash":"ac9464526c923248513f8e1f93dd9a5c1728c193e4630ddeb6c26c1bc74aebd72ea607","first_seen":"2023-07-04T09:24:07Z","last_seen":"2026-08-08T20:38:52.680124Z","times_seen":895,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css%3Fver=5.15.3.css","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css%3Fver=5.15.3.css HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 661\r\nlast-modified: Thu, 08 Jan 2026 14:57:18 GMT\r\netag: \"695fc5ce-295\"\r\nexpires: Mon, 02 Feb 2026 07:52:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":661,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (475)","md5":"50e6921aba79a099ebc39831cf2cd776","sha1":"1135c1c4eb417264258b31a39f2426b731707c47","sha256":"434f3b3daf4efddcecd8a775604342d89e9e660d38d021ec0f761a6985265851","sha512":"9de50207056ed99ee20ae93b24abbd05392ce55259bd4428d6e76d1116743cea43978fc52d5c3e0fd1dd4ee12fe892abdc0cc7ee04678801aaf142dee2afb148","ssdeep":"","tlshash":"f9014eb98799004541910e1038e97b1dbd4a946cbcea7e62e72ade2d0cfa91f11e4f09","first_seen":"2026-02-01T02:09:31.007063Z","last_seen":"2026-04-23T08:43:55.302781Z","times_seen":3,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/uploads/2023/09/avatar.png","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/avatar.png HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 09 Sep 2023 09:08:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64fc35f1-3fbf\"\r\nexpires: Tue, 03 Mar 2026 19:52:10 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16319,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 159 x 63, 8-bit/color RGBA, non-interlaced","md5":"64f1f261e44560dd562757f0dafdce7d","sha1":"a6501950887f3cb88eb64defe995ac390f60acd7","sha256":"989de10bfcd41a372096ca1bd9005d2e77f3d89e4bb19d5b0dafec52e109f15a","sha512":"6d389fcb01be9fbdac3fa0ea00a14069a626ffdaaea3f4c5b47fc345a698d0e0af6ab4a33e7b7876271819fc3dfb78ee08e6a5f4d0d05c4dc254c839e88513e8","ssdeep":"384:P1qE5NWLepTxtp+PmSljGuRnpfrGFAkkbgxEH:53pT+Cufr2NkbqEH","tlshash":"c472d0c9bbe8e1535f5aa31e3c4055e191e2c1c2d977871a8ca918fe2ba10c2b147fcc","first_seen":"2026-02-01T02:09:31.007901Z","last_seen":"2026-02-01T19:53:41.243785Z","times_seen":2,"resource_available":false,"data":null}},"time_used":802,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":802,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/uploads/2023/09/modern-3d-illustration-of-discount-tag-concept-2023-02-07-15-50-53-utc.jpg","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/modern-3d-illustration-of-discount-tag-concept-2023-02-07-15-50-53-utc.jpg HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 10 Sep 2023 02:23:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64fd28ae-d6f4\"\r\nexpires: Tue, 03 Mar 2026 19:52:10 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55028,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif Standard: [TIFF image data, big-endian, direntries=9, orientation=upper-left, xresolution=2182, yresolution=2190, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows), datetime=2023:09:01 22:35:16], baseline, precision 8, 1140x647, components 3","md5":"a9fbb05bf4fac8f492717ec9695c1ab6","sha1":"5e1aa97af77f56799eb1ddb98a4a821c2cf1ac15","sha256":"9fccb23b010d675babfe556c80352c78e553974b68eb06cd5db4b2a44874f2d4","sha512":"ad9dd53dd8442caa28b19456aab4f75c9ed5d7cc55b7ccc63d39e61cdee451073dc12b73027333e83defe0bebd000c284e4ba48ca245200e321ba13ef0918683","ssdeep":"1536:ShKWF4Hk1eHGJHZw325cXHnMYKjExsYTJucBFlVLqMR6JBUzJHA0dA2Hkt9LtXnE:pO4Hk1emJHZL5c3nMYOosYtucBFlVLq6","tlshash":"ae337e262a38fb62e072863919e94e7cf53d5b02b55fbb11f8cf96bd5b21e530483205","first_seen":"2026-02-01T02:09:30.989603Z","last_seen":"2026-02-01T19:53:41.246156Z","times_seen":2,"resource_available":false,"data":null}},"time_used":801,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":801,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-includes/js/dist/element.min.js%3Fver=6a582b0c827fa25df3dd","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-includes/js/dist/element.min.js%3Fver=6a582b0c827fa25df3dd HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 12112\r\nlast-modified: Wed, 03 Dec 2025 07:07:53 GMT\r\netag: \"692fe1c9-2f50\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12112,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (7568)","md5":"b636667a19cd8889e206a9642f0e1406","sha1":"82407000695aa979dcc2d4a653bcf7ef88baa068","sha256":"4b83b03960bc052004c53ab913066a36dcb0e89f3f5c8a8f42c3952ed0c8e233","sha512":"51c0cdaef560b865b3a7d6888ddc53a2a55186136c79e29f1e9a5d282e9816fe5401fdddbccf9b3d2cc8c4e0d1d9973462b51f11dd23a70d966b26cbb31bc042","ssdeep":"192:ZVBtnesPF4WAwfVR4+HcD5zejDNPTPBIQ/DHEHMVOJht4Cew3gKVuvYsijc9fOyY:ZVBtndPF4jwfVCOcDsjDNZyfbtg8siI4","tlshash":"3442e6d5b10078b197db01da90ff400df2bd1422781d94f0f2a9c8f9a4b9696a237fda","first_seen":"2025-12-02T20:48:36.442522Z","last_seen":"2026-08-10T06:13:12.69159Z","times_seen":11759,"resource_available":true,"data":null}},"time_used":796,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":781,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/uploads/2023/09/footer-bg.png","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:11.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/footer-bg.png HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/wp-content/uploads/elementor/css/post-27.css%3Fver=1694564753.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 10 Sep 2023 12:00:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64fdafd6-20ccf\"\r\nexpires: Tue, 03 Mar 2026 19:52:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":134351,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 285, 8-bit/color RGBA, non-interlaced","md5":"a8b06691e5b1d5c2cc651bd1a84e7ab1","sha1":"33106e8ecdc67866872058e0918d6fd0b19f6e34","sha256":"c6dc50400e9aecc4930ee94c60b55efaf10003a3f118b9f3eaeaf2f8ddfac6c1","sha512":"3e597fa4ec5b12a5c40c31aee762bfcada82341505ee95dccc2fccdfc82f45d76815c2adaa84401095c16d28259c57e6390c4065ce2b489205d60e3c36ecb606","ssdeep":"3072:oTnzhwowUI9BthHJmmUhy4it6yIZNOkeHKSbZ59ChjSMZKzQi:oTnz9ozSdtyVkeJ5qmdj","tlshash":"dfd3f07999ffe785d725219962ae3853af67e3716d336f4abcf2940f502852c8c00c98","first_seen":"2025-06-20T01:45:50.988762Z","last_seen":"2026-06-27T20:47:49.287651Z","times_seen":4,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/uploads/elementor/css/post-27.css%3Fver=1694564753.css","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-27.css%3Fver=1694564753.css HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 08 Jan 2026 14:57:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695fc5ce-4062\"\r\nexpires: Mon, 02 Feb 2026 07:52:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16482,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16482), with no line terminators","md5":"64f9908202bc9b42617ccf9b77a545c7","sha1":"b13a8e10ab1b755eff593998032888659bddca96","sha256":"8dbe7aeaf0d1e82cf423c57fdbb1b717b1b2f28553d556733f401df038f05932","sha512":"f4682f213001c126e6dea6a9d9709c0d98aebccd9a7e75baf41f6e2382c21bc48804d0bdb55dced1eade5e637819995e9708420dd0fc879ff8a0f71323b69e81","ssdeep":"384:Nw+3vd4PNa6iLLvMVulHaETzluOvuLzdpPuvtJadMRdVriSHwOE5omRozyahCWA0:Nw+3vd4PNa6iLLvMVulHaETzluOvuLz2","tlshash":"957256877e53c12e757f245f2117a49c242cc8cee87faae2f115425be136e6937e0612","first_seen":"2026-02-01T02:09:31.006167Z","last_seen":"2026-02-01T19:53:41.250391Z","times_seen":2,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/uploads/elementor/css/post-6.css%3Fver=1694564754.css","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-6.css%3Fver=1694564754.css HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 Sep 2023 00:25:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65010192-3159\"\r\nexpires: Mon, 02 Feb 2026 07:52:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12633,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12633), with no line terminators","md5":"d120c884e6981c40c95a48b68db4770a","sha1":"19144e13a426e4ebd0ed06216911eeeb462a6005","sha256":"b5c86bc12dd2d7792b1957cdb042a85be024e1fc73b61156f638b0f7fbe55604","sha512":"0d8a6cc4eaf58ad291a7fcb3d7e1d6b3ad10e54efda5c262cfc02683575cdc3e2d3c0dcb37c82e11c1c85e58d1f31533093e28ac50f5b2c9cdd26c102686bec7","ssdeep":"192:PkqAquLK8qmAB9DztYhLjI/vHF0eEbqbu5AELAw6YT0zQLz5n/evZKJK56O67:8R","tlshash":"2a42d4997f62d026b47b085eaa8bf57c141cd4af0c0e95ffe5198311a5ebb6f921c202","first_seen":"2026-02-01T02:09:31.017316Z","last_seen":"2026-02-01T19:53:41.252477Z","times_seen":2,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementskit-lite/widgets/init/assets/css/responsive.css%3Fver=2.9.2.css","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/elementskit-lite/widgets/init/assets/css/responsive.css%3Fver=2.9.2.css HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 Sep 2023 06:10:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64fabae4-765b\"\r\nexpires: Mon, 02 Feb 2026 07:52:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30299,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30299), with no line terminators","md5":"317fbc87772718eb181ec7feba35e148","sha1":"e08708d82fba6bdb5d2a6826cc5099662f7daab1","sha256":"12c3f7bc60c99d1b6b634d6cd16fbb0e26ae75ddda15d7a6e5106cd5dad83f14","sha512":"12f3e8e96f53d74b1a93f80d1b3f5174879b29588f74c1eae3e67c6bfc76afc0613d4392b3b46b488b5557bf1dcd1752b4fe27e26acfbac2b2f88bf8aed1796a","ssdeep":"768:Lb6v2vjV3zv6vzv2DBsBI6v2njVAjVFSlNBc6vzv2vBe6izi2iBPB5BQzeE8r7va:Lb6v2vjV3zv6vzv2DBsBI6v2njVAjVFk","tlshash":"d5d2121ee93b3699127d8c2e13a2588d3b8480dbd1c329f6ac82de16c79dd70797944f","first_seen":"2023-07-04T09:24:07Z","last_seen":"2026-08-10T04:26:35.009581Z","times_seen":6786,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-includes/js/jquery/jquery.min.js%3Fver=3.7.1","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js%3Fver=3.7.1 HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 87553\r\nlast-modified: Tue, 07 Nov 2023 21:16:04 GMT\r\netag: \"654aa914-15601\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-10T06:49:59.017356Z","times_seen":1012691,"resource_available":true,"data":null}},"time_used":625,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/uploads/2023/09/modern-3d-illustration-of-game-concept-2023-08-31-19-26-26-utc.jpg","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/modern-3d-illustration-of-game-concept-2023-08-31-19-26-26-utc.jpg HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 10 Sep 2023 02:24:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64fd28ca-fec0\"\r\nexpires: Tue, 03 Mar 2026 19:52:10 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65216,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif Standard: [TIFF image data, big-endian, direntries=9, orientation=upper-left, xresolution=2182, yresolution=2190, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows), datetime=2023:09:01 22:38:41], baseline, precision 8, 1140x647, components 3","md5":"b088995336731a2e9ad9f083ef42646f","sha1":"d7f84c140268d26271df30f8ea2c5d373b064e92","sha256":"cab665e083f627fd7eecec09f84213298288e14af7ce961786bbf666079b9c02","sha512":"5b97699bbc0ed44fde9585658ab896f5b63e850798c2c8a21bcb1e10f7c2c4c8bfed92158bf0075c8e78eaf4dfb4341e986b057cc34e303e93fd50c310c30fc9","ssdeep":"768:4lehMm/7YmbNzvLTzaFx7rCM1zhZKUwCA5b1SBnjN2F2Gut9p5GvB8:4lNu5nTmXZZoCAp1wjjGi9/X","tlshash":"b053d2266a75ba52e53493345af88e3cf13d9b02712fbf11b4cfdabd6b21e120847245","first_seen":"2026-02-01T02:09:30.966112Z","last_seen":"2026-02-01T19:53:41.257008Z","times_seen":2,"resource_available":false,"data":null}},"time_used":801,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":801,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-includes/js/jquery/ui/core.min.js%3Fver=1.13.3","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js%3Fver=1.13.3 HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 21464\r\nlast-modified: Tue, 15 Apr 2025 18:38:12 GMT\r\netag: \"67fea794-53d8\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21464,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T06:49:09.763777Z","times_seen":17812964,"resource_available":true,"data":null}},"time_used":979,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":774,"receive":205,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/uploads/elementor/css/post-26.css%3Fver=1694564753.css","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-26.css%3Fver=1694564753.css HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 Sep 2023 00:25:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65010191-49d6\"\r\nexpires: Mon, 02 Feb 2026 07:52:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18902,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10583)","md5":"c6bdf669bb0ccb6d1c5deb794c61ac88","sha1":"5465b84a55bbaabc5d3cebcc8d3af1d07573f062","sha256":"da0c3ac6d86711ca82eba473f0f6740bcda802fe99011c6f385fbb23d56918c1","sha512":"3a5d70b419dd349660842eed90e30bc1ed14ede98ae4225f6d0b604921729f3b4d8637c5bbbb0bcf744c2d3ccf8ff52c397df887705672388a6fd09ebf5b5c08","ssdeep":"384:gIs/Im9CJc0tRn5B5YpYrYhYs2CY2ZjJshpZpvp5p3pEp/pNpHpOpeMpHZ0c+wcM:gIs/dCJHtRn5B5YpYrYhYs2CY2ZjJshT","tlshash":"a182ad86bd23d127b42f245f638be4dc242848ddc92e22d7f1798127b673e6ab7d4901","first_seen":"2026-02-01T02:09:30.962394Z","last_seen":"2026-02-01T19:53:41.259264Z","times_seen":2,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js%3Fver=3.16.1","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js%3Fver=3.16.1 HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 15055\r\nlast-modified: Wed, 13 Sep 2023 00:23:57 GMT\r\netag: \"6501011d-3acf\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15055,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (14869)","md5":"7a5dea0a705cc2f4cd87dbaaa6666bc6","sha1":"678bc6f750f13adb29bbc158eb0d9cd813b736fa","sha256":"97cf1307c16a437b77b5f7f5c9bc0b985d0745a14be5a279019aca5a3432e264","sha512":"7c19d0edc28fe8733075534de6176483416bb3535f37b7607536aea2ddf9c5591d864225049c9a74735c1daf44c72688d91c1133bb018683ade11f16ea596807","ssdeep":"192:bP6Vw28fajqZFSJtd4fxVOT2iQsVJqYqV5PnX9dUWFjWqh2P9e93f7POD3o:OX8fajqZFwtdykZwRXcoWI2P9o7S3o","tlshash":"0462337b7d000da93cac595852a27d446d4eb32fbb430c6bbdc59de623a23f5719e006","first_seen":"2023-03-07T01:02:07Z","last_seen":"2026-08-10T04:47:55.898852Z","times_seen":13305,"resource_available":true,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js%3Fver=1.0.0","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js%3Fver=1.0.0 HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1827\r\nlast-modified: Fri, 08 Sep 2023 06:08:50 GMT\r\netag: \"64faba72-723\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1827,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (1827), with no line terminators","md5":"8fc5780b65b232538a11f05af99fad85","sha1":"adf6c626d961aee3c9590f84940cb0910ff5dc0c","sha256":"c5b8b21392c81f849876a5fa43e830dc2cc0d4b5cb313c7549c7dfce1b8bdde0","sha512":"c2680cd5681a61855db62cb88dbeec868df000c2eed887908c4ce1ca729f066011c9ad75a541e944e2c496c75009d60dca2e9278be6218cbc316bf9045d4a33e","ssdeep":"","tlshash":"88318a06b24369ea566e41b7bf27991eb05756deb00060b87178becf50a1e8037e2773","first_seen":"2023-03-29T23:32:42Z","last_seen":"2026-08-10T07:19:59.491968Z","times_seen":4011,"resource_available":true,"data":null}},"time_used":798,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":795,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js%3Fver=3.16.1","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js%3Fver=3.16.1 HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 4997\r\nlast-modified: Wed, 13 Sep 2023 00:23:56 GMT\r\netag: \"6501011c-1385\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4997,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (4957)","md5":"cfd85b5f8b48dcb08c404611f22b6791","sha1":"76ce3c4bb830d21653def68d658b084c5fad982e","sha256":"f0bbcfecb3041385d3ee577aa182361961915616a1a8f6fa25465cab914775c2","sha512":"98f257a007eb430a7dc6db285528181d4e7b514a3747ce28648a460ed6c9f82609a63284304c6fa17db261858608d95d8751c14abd26ddbf2c13d74b236d4abc","ssdeep":"96:BxsNt0jqf9fzgcf8FD0lCjNVobVDPkqflkxwvT8S2:jsNCjw9fsjFDxN4FPkyXgS2","tlshash":"aca141d41b90fc6735e135c8a11aa731752fc1333d1bb8c1fa22dced98e8a9187a9931","first_seen":"2023-09-12T21:25:06Z","last_seen":"2026-07-16T17:03:26.271444Z","times_seen":115,"resource_available":true,"data":null}},"time_used":979,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":778,"receive":201,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-01T19:52:09.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:09 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 20 Jan 2026 11:16:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696f63f4-1bd80\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":114048,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2649)","md5":"0300d1f9c9be1cda4560a28b0aa8cc99","sha1":"9790baf760612cbcab979e1a847bde5d6dc6b1c5","sha256":"c4fec7f9125bfcaf38c8d8f46f575741125e0a6597437eb2e23f9aaec154ed0c","sha512":"8ecf98b637f2dcf5f294262e2c74c93046d549d6938758276c7b7ef32bee5deb54fa8df1c7ab6cec8d0620f107fd67e5b478a5012fb51d940b57486476df72f3","ssdeep":"3072:zneRyecNAC4TyxG1MQFK/FtviUbDjZ8oMuDQpc+GAeyKsMz1cQbcIGoQN:LAC3xG1MQFaviUbDq","tlshash":"e9b35f623d07242a218f01df62272b0eb0d0dbe4ea13a4d5f5f193ac6bf4d917be5649","first_seen":"2026-02-01T02:09:30.986518Z","last_seen":"2026-02-01T19:53:41.265634Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2131,"timings":{"blocked":858,"dns":443,"connect":205,"send":0,"wait":411,"receive":0,"ssl":211},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/themes/hello-elementor/style.min.css%3Fver=2.8.1.css","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/style.min.css%3Fver=2.8.1.css HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 Sep 2023 06:08:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64faba72-17c2\"\r\nexpires: Mon, 02 Feb 2026 07:52:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6082,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6082), with no line terminators","md5":"37817a568fc14b49609305b05f3b2ab0","sha1":"75cd9de9cf0ca2a6308d86b8ce5c66b8ab73b8ae","sha256":"011426f6c5b5be4d1d609555cb477dc3f139a464526650c11e09dece069936ab","sha512":"b72b98dd240471f65b34c13465821fceb6d261f02187a527f314c18ddce20b0d19731a22c1f2fc7645e8e9717037d2fb099af2a1f947e73ca96d0ef20fc9cbda","ssdeep":"96:vSp/vXYXqXXXu0jSa1I4pIG3PCZBG9Hzkoe3wuFeQWe0OEClZhIwk2t8mj:v4/foyHu0e66sKZBG9HO3wEXEo1Bj","tlshash":"5fc17663971032456933c8393ac17ed47e115621c4336af1e523ddfccbce8675a29b9a","first_seen":"2023-07-04T23:11:13Z","last_seen":"2026-08-10T07:19:59.511131Z","times_seen":2603,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-includes/js/jquery/jquery-migrate.min.js%3Fver=3.4.1","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js%3Fver=3.4.1 HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 13577\r\nlast-modified: Fri, 08 Sep 2023 06:07:16 GMT\r\netag: \"64faba14-3509\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-10T06:49:59.057045Z","times_seen":927785,"resource_available":true,"data":null}},"time_used":806,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":805,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/metform/public/assets/js/htm.js%3Fver=3.4.1","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/metform/public/assets/js/htm.js%3Fver=3.4.1 HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1264\r\nlast-modified: Fri, 08 Sep 2023 06:11:13 GMT\r\netag: \"64fabb01-4f0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1264,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (1264), with no line terminators","md5":"2f3e4ded5fcbfc63411c814a1c046c45","sha1":"c57bd8ced6a35866606a72f323f2c97d7d9f9a00","sha256":"f442c53b2c4fab835ec757afcf144647a88f9e530ee7eb181e4b2ff5430ca268","sha512":"32b3b6613217277e9e015c81860a3a01dddcf7c0bcbbea9fda752202668f730b23747be057fd03f0e00952d3b1794cc04c192e091187fbe49d2198dc888221ea","ssdeep":"","tlshash":"cd2102f433a1f5b9a05564d0a4b610164789cf266c8d7d4c8e308aeba9215cec2cffa3","first_seen":"2023-03-07T12:43:11Z","last_seen":"2026-08-09T22:15:59.857089Z","times_seen":1820,"resource_available":true,"data":null}},"time_used":792,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":788,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/uploads/2023/09/BG-6.png","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:11.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/BG-6.png HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/wp-content/uploads/elementor/css/post-2.css%3Fver=1694608695.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 10 Sep 2023 00:15:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64fd0ab8-26f01\"\r\nexpires: Tue, 03 Mar 2026 19:52:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":159489,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1436, 8-bit colormap, non-interlaced","md5":"251a0386c85c1397630db21c5a33ce3d","sha1":"728dfadd2bcc17c0597e82bd1c74f29dc8eebf0b","sha256":"864d49f9e14950751dfbf670d5026c630b976548a5aea3738042e63b64200f41","sha512":"0cbbdab72588e0465e46bfdf2dcd84a47d621f5051d405695e409a8a060397be46ee231cc7bc86f61d0d5517cb527a290f5215fc611fa4bd37c2887d8bd80fac","ssdeep":"3072:Y1vvz5noyNO6X69CbtAksFC4grM7zyxZNf5OBJ7pbcnFNdksCw:YJFnE9S0F5gIXiNf5CJ7JcnFNp","tlshash":"60f3120bb446a4c9c562df35679c6464bfb5e3b6bf6982976e83c52dcfdc812c004352","first_seen":"2026-02-01T02:09:31.027134Z","last_seen":"2026-02-01T19:53:41.270959Z","times_seen":2,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/css/ekiticons.css%3Fver=2.9.2.css","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/css/ekiticons.css%3Fver=2.9.2.css HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 08 Jan 2026 14:57:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695fc5ce-1e7a7\"\r\nexpires: Mon, 02 Feb 2026 07:52:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":124839,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3c62d2843c3f8c792a57c4f85db28868","sha1":"3c84c74c636c4bc5bf09dd7d1deb046f0a211752","sha256":"fee214dd49eee06212b8ec4c9a978babdb8400cf3e1a0bfac0d31021512a6748","sha512":"45543338fdaa4949db0aca63afba3f121491b274dafdaf115df340a797d24737da8829086811b5d807d04a5cfad4ca3975a77411819e58f3d88cec239f3942ae","ssdeep":"768:mGESYRb1sJrre8pg0jSXgxH1qzCj8NIgb6MpedmxSAhVejh+duFk:mGEh2Sm1qzCj8NcLAhVe6uFk","tlshash":"39c330d4cc4d6ac1ab78c80f4324b609dd5076e29de24c27f4af8d4d0bfaabc64e1656","first_seen":"2026-02-01T02:09:31.039122Z","last_seen":"2026-05-09T23:43:42.597329Z","times_seen":6,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementor/assets/css/frontend-lite.min.css%3Fver=3.16.1.css","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend-lite.min.css%3Fver=3.16.1.css HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 Sep 2023 00:23:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65010115-1c945\"\r\nexpires: Mon, 02 Feb 2026 07:52:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":117061,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65496)","md5":"7b089ccce4b7f003df88915c366619c0","sha1":"13d78da55be03420275658e2e9216166721b1427","sha256":"a4124f7a1076cbe609fac41941288456d0ff78e0dfc4d2bac2a1af43d091201c","sha512":"5a30038c6fd4e8c511b84508889138d4aae6ab8c8acde884b9f115cb79d20679f9a4e4dc681c3cf401aa0758213f15b979fef602f89e79c11048ea072f6623c8","ssdeep":"768:l+nW5Kb3tgnl8T5sZQ8tQfJjCqnf0gMnSla6T8L47YwbuX67:llTtQxWqnfGnSla6T8L47YwbuXw","tlshash":"a6b354923d07622a662f5e3f4a87769c53a445c1de437ad6f442c413d2feee1372a823","first_seen":"2023-09-12T21:25:07Z","last_seen":"2026-07-16T17:03:26.286588Z","times_seen":103,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css%3Fver=5.15.3.css","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css%3Fver=5.15.3.css HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 659\r\nlast-modified: Thu, 08 Jan 2026 14:57:18 GMT\r\netag: \"695fc5ce-293\"\r\nexpires: Mon, 02 Feb 2026 07:52:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":659,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (473)","md5":"3fd3192c92e6e6c51892a23fa0a96d95","sha1":"70cb17087f54878bee60bdcee65ec8e03fb3e675","sha256":"bbfab9cc853db34ac7f320bfd6122673862fc31ae3a967e1634b6b11ac7af6d1","sha512":"fa1de70644539ea407535ce2b6a06b1faf845f9494b607da2227a4be568f58bb728db78f6d3c605153bb894fc409f816809218a516951919dc78f4a83d1cba54","ssdeep":"","tlshash":"eb017da546150005c2820b1636db7e1dad06e2587c19ae63a12fdd2d0cfdd5f11b6f49","first_seen":"2026-02-01T02:09:31.003473Z","last_seen":"2026-08-09T20:42:10.690757Z","times_seen":8,"resource_available":false,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/uploads/2023/09/modern-3d-illustration-of-calculation-concept-2022-09-20-16-08-22-utc.jpg","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/modern-3d-illustration-of-calculation-concept-2022-09-20-16-08-22-utc.jpg HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 10 Sep 2023 02:24:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64fd28e5-e0dc\"\r\nexpires: Tue, 03 Mar 2026 19:52:10 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57564,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif Standard: [TIFF image data, big-endian, direntries=9, orientation=upper-left, xresolution=2182, yresolution=2190, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows), datetime=2023:09:01 22:41:05], baseline, precision 8, 1140x647, components 3","md5":"0dd2503393ed8ebdd32c0ab6bba6631f","sha1":"c8e5a452dc2649507320ad2ac648df3af6fae189","sha256":"e392b557454b98ad88afd71c7ddea5f9667fdc9893b2a195db8b493ad27d78c6","sha512":"a4b111b532dc1c732a696201747b28aebbfa1e346c270118744abd8451ce0526896d936649d297a2bf8bfb6f3527cfda937e3d7a1c573a05e18c62b7cd1166af","ssdeep":"1536:OgwFGbq3C0FSC340xgywvrFB3Ui/zfSbFscmVKxD7OnsDzPLaQ15XtbOqG1ElTua:V9bq3C0FSC34YgywjFB3Ui/7SBscmKxn","tlshash":"d543c2662a34f762d4b2933649a84f7cf12e6b01746fbb11b8cf937e2b61e531487205","first_seen":"2026-02-01T02:09:31.040812Z","last_seen":"2026-02-01T19:53:41.279435Z","times_seen":2,"resource_available":false,"data":null}},"time_used":800,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":800,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-includes/js/mediaelement/wp-mediaelement.min.js%3Fver=6.9","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-includes/js/mediaelement/wp-mediaelement.min.js%3Fver=6.9 HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1107\r\nlast-modified: Tue, 07 Feb 2023 16:00:42 GMT\r\netag: \"63e275aa-453\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1107,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (1107), with no line terminators","md5":"8a5c9689ae636c452b6808740ba04136","sha1":"8d2c85d7779d00c12aeb6b55a99443952d9a144e","sha256":"79cb399203843f65199bec32bc4abac5dfd20f141d3e4ec1424bf00c7108fa45","sha512":"a80491b5c34e4719b042d1ef0dc8cff0e2ad29343ac8926a3cab36202b02dc360000b430b3141e474fe08bffc54329eb47082d530af6b44727490c4cd0f0ed0c","ssdeep":"","tlshash":"ee11f3d43e84757909d75428a47f0b18a0fb4d76804e0db0ee54b63e7d7cd409196a4a","first_seen":"2023-03-29T22:52:25Z","last_seen":"2026-08-10T07:08:42.997144Z","times_seen":53659,"resource_available":true,"data":null}},"time_used":794,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":790,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-includes/js/dist/vendor/react.min.js%3Fver=18.3.1.1","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-includes/js/dist/vendor/react.min.js%3Fver=18.3.1.1 HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 10628\r\nlast-modified: Wed, 13 Nov 2024 06:20:08 GMT\r\netag: \"67344518-2984\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10628,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (10391)","md5":"3b97c19585abe23d7f55603028ab9b80","sha1":"9923fc707c0d8d6c27ed9cf24b0355fb94300fe6","sha256":"32b43e6f80b9818f13f0dbb16baa6b801f4b922babfcdcaa2554d986f5067ce6","sha512":"af3e1a4cdcba84ec1c2255dce52f8f53773127b5a70ca7b82bb861744c5f5afbf0e3036f7167b7ebb5b9b41e672be88de144d484c98c2da776551d05f02cf493","ssdeep":"192:NaXdVaxC6DY81/ZUeXopdQAxiJeHhK/0Sxrl1+MFK:NCkC6DYILUdQeLHkl1+MFK","tlshash":"f722c8d8b492b02557b37572013f601f733e656a3c0d49a4a261e9d97cf88adc117f4e","first_seen":"2024-11-13T06:33:24.997552Z","last_seen":"2026-08-10T06:13:12.758937Z","times_seen":33615,"resource_available":true,"data":null}},"time_used":790,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":786,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementskit-lite/widgets/init/assets/js/animate-circle.min.js%3Fver=2.9.2","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/elementskit-lite/widgets/init/assets/js/animate-circle.min.js%3Fver=2.9.2 HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 681\r\nlast-modified: Fri, 08 Sep 2023 06:10:45 GMT\r\netag: \"64fabae5-2a9\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":681,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ASCII text, with very long lines (681), with no line terminators","md5":"f5945db2f3337fd9f1cbef5b07b2a493","sha1":"8a11439d56af9fb27836bb5f2a30aeb35b93bb5a","sha256":"a8642bcd147ba3528345f5bd17f788cd524931e093255b2c1c8344677a1ab505","sha512":"ddfae8040510dca2e41c5f745b2ec8e349053a02409c41cbc3cbf8df1561b7c586f93090974ee6821fc27e19aba68cc6c95fabe9d9321934fb185d20a8da7a12","ssdeep":"","tlshash":"e30128b72f100835527d0a22f35d7708637100c0a60359596c58592d117ccbbd57a7ff","first_seen":"2023-07-04T09:24:07Z","last_seen":"2026-08-10T06:42:18.123485Z","times_seen":26713,"resource_available":true,"data":null}},"time_used":978,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":773,"receive":205,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/sticky-header-effects-for-elementor/assets/js/she-header.js%3Fver=1.6.9","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/sticky-header-effects-for-elementor/assets/js/she-header.js%3Fver=1.6.9 HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 14156\r\nlast-modified: Wed, 13 Sep 2023 00:24:12 GMT\r\netag: \"6501012c-374c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14156,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text","md5":"8007fa4c829658bfc60a1aefa68fd739","sha1":"5ff5d8ea91a70aba44f197f1f395041eb4e4cf53","sha256":"c9e6f8785254fe912f5d6bdfc1bbf19d70a39e69c8e48eca6a70f45aff41c9e5","sha512":"f51350fcbae61de208c05be777451fe412894817d467b2f801ecd09a0602590d89301216e59bbe81efb5f1c2b0a5ba71c9cbbd9bb0fc216fd811f1182c816756","ssdeep":"192:D2TMUwi2a/5PqLjLCNCJyXZz0I0y6yDkXc:/elcc","tlshash":"a352251cab7e311641eab16ac26e990c740dc1379254a9237e4c127eefc493ae578fd8","first_seen":"2023-09-11T23:58:00Z","last_seen":"2026-08-08T22:20:48.918119Z","times_seen":962,"resource_available":true,"data":null}},"time_used":804,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":804,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/e4b9a2f0c8d17a6b5e3f9d2041b7ac8e.js","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /e4b9a2f0c8d17a6b5e3f9d2041b7ac8e.js HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 25\r\nlast-modified: Tue, 20 Jan 2026 11:16:36 GMT\r\netag: \"696f6414-19\"\r\nexpires: Mon, 02 Feb 2026 07:52:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"858f246cdeddcccde76cb980ea622c9a","sha1":"4369c677f957d999e71c04c8420c2d80b69522e8","sha256":"4d6d1fbaa04690cdea71f4bdc6714c1bdbaad4d7760b5c8a447197ee5eb3c3fd","sha512":"db66106ae670b2665810f4989b091df3d409dd83afc93776bd2b92f3087ee79da7164d3ec9692602fd1becef7c6d229c47bb6aaa60ef93bd15abf3081deb2767","ssdeep":"","tlshash":"47700028200022a20003c2038880ce008230028220c080a00000020a0300e8080a3088","first_seen":"2026-02-01T02:09:30.9745Z","last_seen":"2026-02-01T19:53:41.285555Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1026,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":803,"receive":223,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-includes/js/mediaelement/mediaelement-and-player.min.js%3Fver=4.2.17","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-includes/js/mediaelement/mediaelement-and-player.min.js%3Fver=4.2.17 HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 158005\r\nlast-modified: Thu, 29 Sep 2022 14:21:11 GMT\r\netag: \"6335a9d7-26935\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":158005,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (65266)","md5":"e53ec3d6e21be78115810135f5e956fe","sha1":"523892839b88351523e0498ba881c4431197b54e","sha256":"b15c3ea03d50c2430490e7416733a254feea4237bb60b54181bd3473ebe4149f","sha512":"84b080eaaa043928f038421ceb18bba7483afee5b6480a92ee01992317cde2361a6dd255b16ec036e51e8a1fef46b5379c6a5ff5c9ec69d682f96deaa03a8842","ssdeep":"3072:cWdIxUMz/tGzT3+XtHi2iX6JPMupdggt1YHWyFxAcDHzEJLDnWTnWNBEBysX6qMa:dwhggc1l7","tlshash":"14f31849718473b246c720ee653f1b0e7137ce69d009d060a936faf61eb8f8a512bf65","first_seen":"2023-03-08T14:26:25Z","last_seen":"2026-08-10T07:08:43.076191Z","times_seen":56590,"resource_available":true,"data":null}},"time_used":1011,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":792,"receive":219,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/e4b9a2f0c8d17a6b5e3f9d2041b7ac8e.js","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:11.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /e4b9a2f0c8d17a6b5e3f9d2041b7ac8e.js HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:11 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 25\r\nlast-modified: Tue, 20 Jan 2026 11:16:36 GMT\r\netag: \"696f6414-19\"\r\nexpires: Mon, 02 Feb 2026 07:52:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"858f246cdeddcccde76cb980ea622c9a","sha1":"4369c677f957d999e71c04c8420c2d80b69522e8","sha256":"4d6d1fbaa04690cdea71f4bdc6714c1bdbaad4d7760b5c8a447197ee5eb3c3fd","sha512":"db66106ae670b2665810f4989b091df3d409dd83afc93776bd2b92f3087ee79da7164d3ec9692602fd1becef7c6d229c47bb6aaa60ef93bd15abf3081deb2767","ssdeep":"","tlshash":"47700028200022a20003c2038880ce008230028220c080a00000020a0300e8080a3088","first_seen":"2026-02-01T02:09:30.9745Z","last_seen":"2026-02-01T19:53:41.285555Z","times_seen":2,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/uploads/2023/09/logo2.png","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:11.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/logo2.png HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 09 Sep 2023 09:51:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64fc403b-8a8\"\r\nexpires: Tue, 03 Mar 2026 19:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2216,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 204 x 77, 8-bit/color RGBA, non-interlaced","md5":"6b05e222151cf121940e88871b8d19d1","sha1":"2a512b6ed3b3c71781e16e4c8ad16216ed9de3ff","sha256":"cf798ea0d26034deb4f92943515780e877b85c29b2a57874788c8ee244eba577","sha512":"2742539c91f82593c18981a5960518de635a008f96156210c5f6a4cce7aa24aff0fe29f4f0a2d863690141f67f3c895f02b084f2c4897356beeba7aa94635cb1","ssdeep":"","tlshash":"2b410ac0d23c77e8e4eb0cbcd6756472f167715ee02f74279034152a961a25a0f8a731","first_seen":"2026-02-01T02:09:30.992712Z","last_seen":"2026-02-01T19:53:41.28864Z","times_seen":2,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/uploads/2023/09/logo4.png","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:11.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/logo4.png HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 09 Sep 2023 09:52:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64fc4054-87e\"\r\nexpires: Tue, 03 Mar 2026 19:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2174,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 204 x 77, 8-bit/color RGBA, non-interlaced","md5":"928df690a5deaa5708fbdbe6c1609a2e","sha1":"418c0023ff8dce570e417e1fbc12fb22368e02fd","sha256":"26a05aed20358c17f1efa558d65a15d1451a187dc4b25aec5ae03c0d5548d8cd","sha512":"6d8bbef69dd0d8a043e87da2993df8dd943cc9042d32c82bb90598056ca4fbc7b576de5d8e6acf1a8b6d5195413724e0de043320aaee85cce08b29f06427c8f6","ssdeep":"","tlshash":"714109817a71dc2e3d6324345e1e5f6b60fb156217f09922ccdc852fb8a8e498089157","first_seen":"2026-02-01T02:09:31.037276Z","last_seen":"2026-02-01T19:53:41.291628Z","times_seen":2,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:12.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9 HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:12 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-10T06:50:49.881573Z","times_seen":547884,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css%3Fver=3.16.1.css","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css%3Fver=3.16.1.css HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 08 Jan 2026 14:57:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695fc5ce-e7a0\"\r\nexpires: Mon, 02 Feb 2026 07:52:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59296,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59110)","md5":"174d729270a913d7de597c6433248653","sha1":"6224e64effcea9546a67641c7a4f2de94cd5a608","sha256":"3b4b678668aca9263b64f29522533b1fd495591cbdaf37376cf4ab11a26f8539","sha512":"45ac4ac914900a3b14643530068e38a80028312a110792d9b87207b8bf58c2520de7f53cc692fdcd0dcd705a083cd0f7b174328c49fb631fbd4b53e3c117c0c1","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSz5:0E0PxXE4YXJgndFTfy9lt5V","tlshash":"5743fbb8e54c01c9b731c44bef82b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2024-12-27T12:40:58.188477Z","last_seen":"2026-08-09T09:43:07.281177Z","times_seen":103,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js%3Fver=4.0.2","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js%3Fver=4.0.2 HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 12198\r\nlast-modified: Wed, 13 Sep 2023 00:23:59 GMT\r\netag: \"6501011f-2fa6\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12198,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (12198), with no line terminators","md5":"3819c3569da71daec283a75483735f7e","sha1":"ecd40a5cc6f0b76200c454ca880210dc301cfab8","sha256":"214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0","sha512":"2710655dff46653daeb3a6e3f6d36f885e51d5b375738ee353aca40c6f66ae1a7dece57039d58747012ed9ea2822191143c06f270123b8cc580f6a41b8e8aef4","ssdeep":"192:GngaW9ELBD26z861V/CvJiVKIsvfT+6EdpEsBpP9Qwo7Q4a99RfuzqXppc4mmm9t:Ggz9kBD26861V/wsVKIsvTEdpEsnmwoz","tlshash":"994221493e0724222faf41f9fc1b468a632b013894c584bbb8e4d5dd18f19296f77b78","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-08-10T07:04:01.211572Z","times_seen":74413,"resource_available":true,"data":null}},"time_used":794,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":790,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/uploads/2023/09/BG-1.png","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:11.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/BG-1.png HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/wp-content/uploads/elementor/css/post-2.css%3Fver=1694608695.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 09 Sep 2023 10:15:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64fc45c5-dda9\"\r\nexpires: Tue, 03 Mar 2026 19:52:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56745,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 789, 8-bit colormap, non-interlaced","md5":"cd7782fd7d73c8ce7d7d677c6c60c0bf","sha1":"ef266a6ece9552dd1404be502bbcb7829d35118e","sha256":"67ddc8cabc3eea40b13cf143626cb853d2a36dba327daa8fa02fd46f4b01560c","sha512":"901bb0d44a250ffd790084a21cbdaf71b84255ca3b53c286967a39ef08cf18dfefa11f864b012261070f138f35d696b1b06ad35a0e5daf2d8e28473608e55439","ssdeep":"768:C2oMTGCd2AgPVYsWTRWRac14PY7CvSOvhgUtt5IMKJYjQKZ8IyDFeyCF2OaQqnzL:JoyGi2PV34IiSO9H4FUDVC5NCRcGGu+N","tlshash":"0d43f1024bf7481dc3640ff5dbb56c58c0a1fc2ee8959ce80e232d829dd58b8a91d97a","first_seen":"2026-02-01T02:09:30.971272Z","last_seen":"2026-02-01T19:53:41.301216Z","times_seen":2,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:11.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css%3Fver=5.15.3.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:12 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 13276\r\nlast-modified: Wed, 13 Sep 2023 00:23:58 GMT\r\netag: \"6501011e-33dc\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13276,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13276, version 331.-31261","md5":"f0f8230116992e521526097a28f54066","sha1":"0447c6b10bbf73f97b23dcfd6e6a48510822cb6e","sha256":"8afc6e5e842baab16010c2ce6fcf48ec4ded8e1579a37c1f1bc027e120d04951","sha512":"8d16904f9bff3e0660c960bfc63cfbb649fa656f1e0b24112578da414cdd141bc2ef766612dff765b58497c260e013cbd333c3a75ab2bd2ee861be4c8a538f36","ssdeep":"192:VWXmua5PVVX/EWyrSEnAxzot9ACR1uTa+3u4FcOorKgtwiPDlfjfYbnNPGwmpn:buaGrTAxkt9xKTi4gHtwiRoo5","tlshash":"0452d154054d49cae0086c730246e2a26ff0b4998fb1e9e29c6616836eb2ff40fd7f06","first_seen":"2023-04-05T11:05:25Z","last_seen":"2026-08-10T07:09:58.856816Z","times_seen":53831,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/template-kit-export/public/assets/css/template-kit-export-public.min.css%3Fver=1.0.21.css","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/template-kit-export/public/assets/css/template-kit-export-public.min.css%3Fver=1.0.21.css HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 Sep 2023 06:12:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64fabb30-457\"\r\nexpires: Mon, 02 Feb 2026 07:52:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1111,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (303)","md5":"4ee432d2ea3aac0ac9d01136c784b46b","sha1":"48ba2c95fd24b12d388ec27a79536add8ec639b1","sha256":"1c2665008fa6f6c15056deef5134ca42043ac7df2fc20bb37d5268afafe1bd25","sha512":"3893c355f70a5581238b11c9f6c1d4724c3c3eeccc1cac5f0497ff5fbb5a7ff3382fca467712d69e33166b08d77e79452207c6a60964a19f9dcdfc4584df4705","ssdeep":"","tlshash":"1d211eb30d82a3116637c924f7e49485e4b58c396b811bd3d9e3ea2acf17c6f0978646","first_seen":"2023-07-08T02:54:03Z","last_seen":"2026-08-10T03:20:17.612454Z","times_seen":244,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-list.min.css HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 13 Sep 2023 00:23:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65010115-26c1\"\r\nexpires: Mon, 02 Feb 2026 07:52:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9921,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9881)","md5":"4adbed85d1b84a56c82514494f9a162e","sha1":"3bbd94c9d4ebb4e25eb4623ec5f920eb942a433c","sha256":"1db9fdf021312bf85275fc47f99a1fc35febbb75bd30ad7560eba2cab85d1889","sha512":"2866b96513b11b576315d8f08d05d067bc837a2ef6dc42bfb9760aaaf14c0fa94de978d3604cf6bec527d61fcc443c51da5bb8e0ef478f5787db63f7ae8710d2","ssdeep":"96:BgW9CszCZ1KI/G+tl+A0zbjiviRILvo6kjO6AHReKuLjYvcv5VV:aW9CsCG+tl+A0zb+qi6AHReKuLj6eh","tlshash":"6c22d3817d63814e16ff641b501b184ca1d9d4cde9bbecd5e8a66203c6fbec43b71928","first_seen":"2023-09-13T03:00:50Z","last_seen":"2026-05-20T13:47:47.646212Z","times_seen":44,"resource_available":false,"data":null}},"time_used":797,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":797,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/uploads/2023/09/BG-2.png","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:11.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/BG-2.png HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/wp-content/uploads/elementor/css/post-2.css%3Fver=1694608695.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 09 Sep 2023 10:15:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64fc45d9-1a96f\"\r\nexpires: Tue, 03 Mar 2026 19:52:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":108911,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1003, 8-bit colormap, non-interlaced","md5":"6a17f732fd73fcb2292a876365deb7b1","sha1":"9a37f07474e5a811d0347fe9f06667ae63314440","sha256":"448535b864eda2baf676d1b8bf2cca93d0cda7c5d90b0a950f178f2507015605","sha512":"b4329a73b1407ada3b963cca795a42c8a7cb4d761dc04efdbe6ab0d3a68f600de2e9149fd53a2bf8fe0d146945cdc953f9a5e5f507c95d7360548d50ab6cf378","ssdeep":"1536:VKmef+qFWosq8kMcEu+lnIsq7yFNXf2KxL2ZSLaWta3Cc0Swb3wUr:VXG+qFX78kMcv+tSQ9+1XWoMwi","tlshash":"15b312485ac672b509d350dc154b1063a55dff292b3ec6f3aea1dbb31abd0807e2c1ca","first_seen":"2026-02-01T02:09:31.00464Z","last_seen":"2026-02-01T19:53:41.30797Z","times_seen":2,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/uploads/2023/09/BG-4.png","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:11.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/BG-4.png HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/wp-content/uploads/elementor/css/post-2.css%3Fver=1694608695.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 09 Sep 2023 13:30:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64fc738b-1dc9a\"\r\nexpires: Tue, 03 Mar 2026 19:52:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":122010,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1452 x 386, 8-bit colormap, non-interlaced","md5":"67229e7c732c9bc2f0918cf888ff40f7","sha1":"1587583f2f0344567ac3960906780dd68fe9fca0","sha256":"9e253fe16ed49aa9f067757a21e88f4845d1f1abc553d3577f5c98218eddae9c","sha512":"3ded397503d7b05270785a1907fdbc76e3e4874212ceda89d282c379f6c801c9e0a77e3235f7cb67742b4fd7682bba50f84e0741236216726a7465daeb73013b","ssdeep":"3072:vVOLtaOhAIhDOSvN8Slek+hW8M5WlRn46Lz9:vQaOhAODvN8uek+hZMUnlz9","tlshash":"9bc312b443272274d4a8904582e746e825a246d325a26c3f9fe78f51f7570a2e07f63e","first_seen":"2026-02-01T02:09:30.975273Z","last_seen":"2026-02-01T19:53:41.311469Z","times_seen":2,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:11.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css%3Fver=5.15.3.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:12 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 78196\r\nlast-modified: Wed, 13 Sep 2023 00:23:58 GMT\r\netag: \"6501011e-13174\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78196,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261","md5":"e8a427e15cc502bef99cfd722b37ea98","sha1":"a9922842a120a7f1eaced667480c5e185a106d69","sha256":"d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef","sha512":"113775748a4166c07e58c26cf6db7fed473732dc6124b8ee0f0dcc0d6439eb2ab2c5d9e01c67324fdf9de4105349cf30cc5796a0b0e0ce9a08f337b9d4e10b7b","ssdeep":"1536:1iGQV8Q8UOUMUd5UY3qyCkHQCCz2LL1F+u3MHLGxe3U:QVWuF33qy7HQchFz8HnU","tlshash":"3273121cf567643ef6a8e05f3c38256d4fd5c724e2e68a06748db808c4ce71d90879b6","first_seen":"2023-04-05T08:37:56Z","last_seen":"2026-08-10T06:50:43.681227Z","times_seen":165258,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/uploads/2023/09/logo3.png","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:11.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/logo3.png HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 09 Sep 2023 09:52:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64fc4047-797\"\r\nexpires: Tue, 03 Mar 2026 19:52:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1943,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 204 x 77, 8-bit/color RGBA, non-interlaced","md5":"bb1a557b62b97abea46784560a7b19e5","sha1":"7a83be2adeeded083abf799940ae3d9451521d24","sha256":"8b7610df00127a2470f0e6175ab5a0907d2f621f7af0eeb10a16c3cc3768393e","sha512":"11cc32b6a4bd1c4d1ff69625504971c9950e35315f9cd2aa78b9cca6b6d920aa6a1bee23042d9417fddc4a38d6629dcf8eb894ee7160dff1b406fd1bd2624da1","ssdeep":"","tlshash":"c3415dc83f1038bcca2202b36f558c70be2f93770113807a15ac39412710a6bc3af8ba","first_seen":"2026-02-01T02:09:30.995938Z","last_seen":"2026-02-01T19:53:41.316345Z","times_seen":2,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:12.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5 HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:12 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-10T06:50:49.881573Z","times_seen":547884,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/template-kit-export/public/assets/js/template-kit-export-public.min.js%3Fver=1.0.21","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/template-kit-export/public/assets/js/template-kit-export-public.min.js%3Fver=1.0.21 HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 7\r\nlast-modified: Fri, 08 Sep 2023 06:12:00 GMT\r\netag: \"64fabb30-7\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ASCII text, with no line terminators","md5":"749034f2041f637ed40dcd96f4fd9759","sha1":"0a03f9a53a588426d83008046d855089ac4c85de","sha256":"641991d00eeb0d50ac64f69ca705f8bdc72cb725a60c8d7f7ef5191cefd5a455","sha512":"6d0a3ec65f4a640cc8c48795cc5f6e3463c9a09c35cce0206f8c93c6e8ec936cef8a650df36d5ab6fd44c1b35b00acd09f972b7e8850962ca713c3a4c6904411","ssdeep":"","tlshash":"ed400000300c000c00303303c030030030000000000000000000000000000000000000","first_seen":"2023-03-07T12:04:16Z","last_seen":"2026-08-10T03:20:17.553995Z","times_seen":491,"resource_available":true,"data":null}},"time_used":804,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":804,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/uploads/2023/09/frame.png","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/frame.png HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 09 Sep 2023 08:59:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64fc33e4-e4b\"\r\nexpires: Tue, 03 Mar 2026 19:52:10 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3659,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 891 x 458, 8-bit/color RGBA, non-interlaced","md5":"0aff42967e242f8390870f644d8a48ba","sha1":"2da8d4e6d9830cabc8a052d1b26a7dcef2a3c8dc","sha256":"bacf54a8cf1d1f48495bbaac6003da6dea887a9351918200a24b4aef1720b296","sha512":"2551d68a34f9557f6dbed63e9a62fd2d47c822b314fc81f6cb2e2d90cac130e412997bb7a4b1cf83bd768aa6f4e1b738e44231ef2448a5165cfa425897f75cfb","ssdeep":"","tlshash":"79718db8735c16338cabb302534044dac5d1a9b276925f8f8299107b881b7e4a687b47","first_seen":"2026-02-01T02:09:30.973183Z","last_seen":"2026-02-01T19:53:41.319421Z","times_seen":2,"resource_available":false,"data":null}},"time_used":803,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":803,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/uploads/2023/09/finance-balance-sheet-ui-kit-2023-06-26-16-41-55-utc.jpg","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:11.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/finance-balance-sheet-ui-kit-2023-06-26-16-41-55-utc.jpg HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/wp-content/uploads/elementor/css/post-2.css%3Fver=1694608695.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:11 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 09 Sep 2023 09:01:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64fc3470-11004\"\r\nexpires: Tue, 03 Mar 2026 19:52:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69636,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif Standard: [TIFF image data, big-endian, direntries=9, orientation=upper-left, xresolution=2182, yresolution=2190, resolutionunit=2, software=Adobe Photoshop 21.0 (Windows), datetime=2023:08:27 10:43:05], baseline, precision 8, 891x458, components 3","md5":"110ec6e9c68ca9deebf00d32440c04d2","sha1":"4004c02a5f3ad819a0b14c97d407ecc440755cbd","sha256":"6fb74d5bd8625cbcd3b490cd0745a26f48f5d1409ce48d5da5071b51856262ad","sha512":"61c5f24f77f1b62c760fafa4903be040794516076de622884295b74747d977ff1ec4ee770d2e2b61758e03517819dd3f5a3a02adccb61acec99ba6c3a48d9228","ssdeep":"1536:lW7swppMm8KvvPiFIHIZAvrK0ZDJ6RA33xJXXH+HK10JpU:KppMmlvP0IrrK2DJV33xJXXH+u","tlshash":"be63f3246e2da785cdcb6d332704de7093301fa047a337a7be6c7b09632dd26592562b","first_seen":"2026-02-01T02:09:30.988291Z","last_seen":"2026-02-01T19:53:41.321306Z","times_seen":2,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-includes/css/dist/block-library/style.min.css%3Fver=6.9.css","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css%3Fver=6.9.css HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Dec 2025 07:07:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"692fe1be-1d38f\"\r\nexpires: Mon, 02 Feb 2026 07:52:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":119695,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55871)","md5":"693359d40ab420bb23aa1b4be239f162","sha1":"67719855e95b9befb5e16556455ea78f3b9d7d92","sha256":"b4cd2f5507698b3ebd388e2d1ed31bef9c5704a171ccd53720c27c66df2510c7","sha512":"3ea55e5e2d2cfa21f66701e322928f3199042b8d3eef8f611cae1ee5d931903fb69d39b5cbb72f493e84f477b56f44fb24badc73f2c298785a9f29eb72b6d8a5","ssdeep":"3072:SoeJBCCUQg5MG7x+qehvX02dclkWwbFpPu:mfUQg5MG7x+qehvX02dclkWiF0","tlshash":"7ec3621417b4dcf935ffa73a5e4ee258a107aa41c68a67e6e066d190718ca490cf3f0f","first_seen":"2025-12-02T22:14:51.412485Z","last_seen":"2026-08-10T05:43:23.468733Z","times_seen":21720,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/uploads/elementor/css/post-2.css%3Fver=1694608695.css","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-2.css%3Fver=1694608695.css HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 08 Jan 2026 14:57:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"695fc5ce-29a9e\"\r\nexpires: Mon, 02 Feb 2026 07:52:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":170654,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"07bf1a7a3c50a87092b1acc8298357a8","sha1":"e6c9d27077275ed96cb104505c0d967225a0b0f0","sha256":"d4d955dcdbb276e60936397622c586c426fd6972c4f60c90d568b5f1b715258b","sha512":"2f5cc0ed0f7d1c7c8e66072b8b247ce7b4ecafc421e88f8fcdedf7ba71ed8706c414a81f9fcc86a87504e97204e3368cf92da28d53d6b39e877d9fc40f41d0ac","ssdeep":"3072:RfsHKK+vl1X+Fm9Wzo2pgt2GW9Nrf0j3uSt:RfsHKK+vl1X+Fm9Wzo2pgt2GW9Nrf0jR","tlshash":"4cf3ae8abe13c529742f146fa247f1ad243c88dec92d66e7f4154213b6b7e7ab3d8005","first_seen":"2026-02-01T02:09:30.993589Z","last_seen":"2026-02-01T19:53:41.324244Z","times_seen":2,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/css%3Ffamily=Yeseva+One:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic%7CQuestrial:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600i.css","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /css%3Ffamily=Yeseva+One:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic|Questrial:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600i.css HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-10T06:50:49.881573Z","times_seen":547884,"resource_available":true,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementskit-lite/libs/framework/assets/js/frontend-script.js%3Fver=2.9.2","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/elementskit-lite/libs/framework/assets/js/frontend-script.js%3Fver=2.9.2 HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 40\r\nlast-modified: Fri, 08 Sep 2023 06:10:42 GMT\r\netag: \"64fabae2-28\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with no line terminators","md5":"94d041d462db321cdb888066586f2068","sha1":"717d2f9da7fb9f9e2bf2058a8177a0344f8a8647","sha256":"b8166c5475df6a64ab2456e95f64564164ed697d258e8bfed8cebca40efd6fa5","sha512":"9a320fbc1dbeda1700f54140f814a285d1cdadf947f927db7e1d70a686d15fc74d69530bd13ab7cf9c3a2009791f2ac8f358cd9f748b1c2995eb9712b68dc574","ssdeep":"","tlshash":"6590041c144cf04505775114543773047733745031411043111d71400c1cd351307404","first_seen":"2023-03-07T01:10:33Z","last_seen":"2026-08-10T07:04:44.200597Z","times_seen":29733,"resource_available":true,"data":null}},"time_used":797,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":794,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcasinonoid.com/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js%3Fver=2.9.2","fqdn":"usdtcasinonoid.com","domain":"usdtcasinonoid.com","tld":"com"},"ip":{"addr":"154.95.130.208","port":443,"asn":134175,"as":"UNIT A17,9F SILVERCORP INTL TOWER 707-713 NATHAN RD","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcasinonoid.com/","date":"2026-02-01T19:52:10.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tetherpricechart.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Fri, 09 Jan 2026 14:00:00 GMT","end":"Thu, 09 Apr 2026 13:59:59 GMT"},"fingerprint":{"sha1":"8D:0A:61:00:04:26:BF:08:F6:A7:EE:55:8C:8B:9E:87:00:68:04:A6","sha256":"56:DA:87:58:95:CC:6E:14:B4:4A:E5:0C:71:A2:EE:95:D1:29:A5:B8:55:95:60:88:99:F9:A9:A4:06:85:89:5C"}}},"request":{"raw":"GET /wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js%3Fver=2.9.2 HTTP/1.1\r\nHost: usdtcasinonoid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcasinonoid.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 19:52:10 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 137549\r\nlast-modified: Fri, 08 Sep 2023 06:10:45 GMT\r\netag: \"64fabae5-2194d\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":137549,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (45047)","md5":"6c087aaba5bcb76bc96366600b854e20","sha1":"6de8049f8f4e6c83300be31ffa9e54d652f10f1a","sha256":"03ca8c38633872b885f1e54e729c4597da2f1c52d06f9a5289ddda7ca3a9930c","sha512":"c8226fe12963b09e5a70e4987d38b20d54aef88fc871f221275f883b68dac1de51799c3edd479778bda958167f30eeb1f8b73e3ae12c13b5d12e407b5369301f","ssdeep":"1536:ZN/eY/j2zmsmCQxPmnG4RaviizVk3P5hDlrQ9C16WQsA+HvsvGNW5BJBQdQh6Pmp:ZN/eY/azm7PmnhG9bsXz06Pmn+nfi","tlshash":"a4d3f94eb340352542dbf17a926f160e7237a51ca607806cb96ad8ea6db8c4d3037f7d","first_seen":"2023-07-04T09:24:07Z","last_seen":"2026-08-09T14:59:19.495824Z","times_seen":4958,"resource_available":true,"data":null}},"time_used":1008,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":792,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"usdtcasinonoid.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}