{"report_id":"0ad6586e-47b9-4687-aeb1-e705fb829db1","version":6,"status":"done","tags":[],"date":"2026-02-11T04:18:10Z","url":{"schema":"https","addr":"usdt.snddapp.vip/","fqdn":"usdt.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"104.21.88.118","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"usdt.snddapp.vip/","fqdn":"usdt.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"title":"Mining","dom":{"size":16082,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14617)","md5":"46b37cffa939b168056f005fd6519b41","sha1":"e635cac48969dd5e89fc8f2cab7f65c21a4cf761","sha256":"2d0fa2a7a94de6be932cf85b9d590faac6a046a987fee32d37f4ac73c04c3c89","sha512":"cfcb5519ee3f0675a2237c633968484cceab42552bfbab23e04c63ad158b4ff67b497a83735b6bbff0a8d026da2e4a7f56903fe4649c39d6a5fb9b389fc35fa9","ssdeep":"96:noK+nf3HgJkV+Ku1/XL/6pnTD63tn7S/Ax9cg685RSTxt+GmyNAHUo8SiMiGNofl:o7nPskSXDffSg6tHukl4pVi","tlshash":"a37284b49242013f922bced4b4b0db3db496d38ede57948de2bd42e66bc5cc4dc96218","dom_hash":"domhashc609ce295dd16c284b827beaf10d3dca","first_seen":"2026-02-11T04:18:14.666374Z","last_seen":"2026-02-11T04:18:14.666374Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"usdt.snddapp.vip/","fqdn":"usdt.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"104.21.88.118","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-18T04:18:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"duapi.bictu.vip","ip":{"addr":"38.85.201.30","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"domain_registered":"2026-02-03","domain_rank":0,"first_seen":"2026-02-03T08:52:24.916214Z","last_seen":"2026-02-11T03:13:39.29452Z","alert_count":0,"request_count":11,"received_data":6490,"sent_data":5486,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"usdt.snddapp.vip","ip":{"addr":"172.67.178.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-01","domain_rank":0,"first_seen":"2026-02-11T03:12:59.423273Z","last_seen":"2026-02-11T03:12:59.423273Z","alert_count":0,"request_count":21,"received_data":10378295,"sent_data":9300,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.okx.com","ip":{"addr":"104.18.43.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2001-07-03","domain_rank":29351,"first_seen":"2019-04-12T18:26:11Z","last_seen":"2026-02-10T02:18:43.273946Z","alert_count":0,"request_count":1,"received_data":1314,"sent_data":497,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"usdt.snddapp.vip/assets/index-BY8-VjF5.js","fqdn":"usdt.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"172.67.178.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"765d89ec1fe7bba73c510224b480fef4","sha1":"ed21a32a755cfa5acc3614dd2820b66a526312ef","sha256":"bf45df9c0d04c539cc0b05ba8ae2a8715a7378a4a08ec7bff293274bbf588a6c","sha512":"a4d35e04b75ca6f3e50690bc7b2434a71dd7cacaec1503f3f2131afacc27b2b3fd25106261c6552fcaae4b15faf117fa277871244ed23942a67f8bdaabdd3f9e","ssdeep":"12288:0okV4ijac4lrx3NfWZ6GCSnQuxqH+E1t+l+pvVOW9kWXdohi5eb1j+VsLS5ogLpC:0okV4ijac4lrx3NfWZ6GCSnQuxqH+E1k","tlshash":"78e49152e3d4e6ec174b5fab771ea8f8f45a089da54409dbd1d4fc50b8b9202f2e8630","size":673500,"data":"","first_seen":"2026-02-03T08:52:29.97053Z","last_seen":"2026-02-11T04:19:43.392669Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.snddapp.vip/assets/vendor-modules-ooA4ScDb.js","fqdn":"usdt.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"172.67.178.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a621b4d538e2a03ad4f1c2f5e06c4fd5","sha1":"08fa7101189bdbcc0b513ef8f8c333c322fc5434","sha256":"b831047bc9076a003489d633ac18e3fc6c11d7b8f6af6f98146314468450e48d","sha512":"7178849fcab05a1a4f7eb81973b8debfe2ba04b4b229bce2622db0877a5d65c7b0e0fd80a35e615ba9752a9c1824f4d8b2d87366e8c00a7b77d681c0d49712cc","ssdeep":"49152:svugAY6ba0qa72fGfQ88L+d0KkFzbi4BqVR39ngEQco3/1SIIBuYPOoN38SNHuHN:/CFfjBq41VGuYPOoN3RAqgY+Z1j","tlshash":"ef265b4df760bc32029365da887a3155b3343f2e7514c0e87d9ca4de1b96adad0b2b39","size":4790036,"data":"","first_seen":"2025-12-28T06:38:48.743335Z","last_seen":"2026-02-11T07:08:47.699174Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"wss","addr":"duapi.bictu.vip/socket.io/?EIO=4\u0026transport=websocket","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"38.85.201.30","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:49.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duapi.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 05:16:20 GMT","end":"Thu, 07 May 2026 05:16:19 GMT"},"fingerprint":{"sha1":"B3:50:30:F5:57:0A:5C:D1:2B:B5:D8:62:33:78:32:D9:9F:72:15:DB","sha256":"C7:1C:25:5A:43:77:6F:79:D1:22:DA:4C:A0:2B:61:2A:8F:D0:FD:DD:04:A4:15:01:BC:8A:3B:C4:66:40:4C:51"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://usdt.snddapp.vip\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: ok59BYN+KfLoVGY7q3m5lQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Wed, 11 Feb 2026 04:17:50 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 2FtBBdacWH8Gu6KOcuokRScGOE0=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T15:40:42.100018Z","times_seen":17857324,"resource_available":true,"data":null}},"time_used":1561,"timings":{"blocked":0,"dns":521,"connect":691,"send":0,"wait":171,"receive":0,"ssl":698},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.snddapp.vip/pool.png","fqdn":"usdt.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"172.67.178.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:48.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /pool.png HTTP/1.1\r\nHost: usdt.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.snddapp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:17:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1194\r\nlast-modified: Thu, 04 Dec 2025 20:12:00 GMT\r\nvary: Accept-Encoding\r\netag: \"6931eb10-4aa\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nage: 3909\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fxH5hbZrTE0NHmZmqvTr%2BbzG84ETFwY%2BhPAu3DBs5ekoDzF3YPJg63HkoRuMNw8zK%2Bcp6WZIGcgftGYfO8ZJnP7c7HvtZTKTbUQkHMjoUXU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc109e90bb10731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1194,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 48, 8-bit/color RGBA, non-interlaced","md5":"86177258b97ce77fef7c3006300c8af8","sha1":"e19da3a443ff9d37e606283f24fda13a258d4078","sha256":"97f2e2bd136eb9ca8aa1e60be272d60a815564f731b535cd5e7ec198e5dca6b6","sha512":"da55c58ef2551243370198a57b948d1ea20496698c81e9c56f317735f7611825c4a8a6fed8ed4a4bd7a75a31c1c92bf5bb6717d80d04ea12d1f3b6873ff83132","ssdeep":"","tlshash":"3621da638cd975346300fdf8192772de967333de4445a8560d0cecf9d9819d15da861f","first_seen":"2025-08-21T21:12:17.980703Z","last_seen":"2026-02-11T07:08:47.684868Z","times_seen":19,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.snddapp.vip/serve.png","fqdn":"usdt.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"172.67.178.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:48.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /serve.png HTTP/1.1\r\nHost: usdt.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.snddapp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T15:40:42.100018Z","times_seen":17857324,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.okx.com/api/v5/market/ticker?instId=ETH-USDT","fqdn":"www.okx.com","domain":"okx.com","tld":"com"},"ip":{"addr":"104.18.43.174","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:49.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.okx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 22:11:08 GMT","end":"Tue, 17 Mar 2026 23:11:05 GMT"},"fingerprint":{"sha1":"CC:AB:D8:A7:59:C4:83:2F:DF:88:85:4E:50:6D:A6:91:9D:20:4B:20","sha256":"C3:94:D2:F3:BD:F7:A5:14:7A:9D:97:CA:5A:24:96:2D:A8:0A:FB:42:7B:0A:20:C3:AE:FF:9F:A5:21:91:CA:9F"}}},"request":{"raw":"GET /api/v5/market/ticker?instId=ETH-USDT HTTP/1.1\r\nHost: www.okx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdt.snddapp.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.snddapp.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 04:17:50 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin\r\nb-locale: en_US\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nx-frame-options: SAMEORIGIN, DENY\r\ncontent-security-policy: frame-ancestors 'self'\r\naccess-control-allow-origin: https://usdt.snddapp.vip\r\nx-brokerid: 0\r\ncontent-encoding: gzip\r\nset-cookie: __cf_bm=mg3oZORTmaq0rxksqalCO_ulQobrHBsl.wUkImBDgNE-1770783469.8916588-1.0.1.1-Ae4B.qZPBTLm93JlnWG_zmqOmqA38eQQ8dz81qTCqB93V46blivfQmnqT1i3853wy_FoS3AR5ruKf2S9hacvhNEVynHWUACFaX50zJr9m9jxDjdUQ3W4QHP8L968Tetg; HttpOnly; Secure; Path=/; Domain=okx.com; Expires=Wed, 11 Feb 2026 04:47:50 GMT\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9cc109eede021525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":356,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dc0200af144056b710bcf69a96726011","sha1":"350b9e2861dbb844fd94bbe94ecc547285a1e901","sha256":"f842ba4ff02facddeb47ffcd30217b67c8b2dcd8ba69f56177986d1f0679be85","sha512":"03c97485ee4a85973447dccfdfffcf1525d816ca5071aa02733392c70572d596c08ebe4dbd614ae6288fab7757dd15ef62d46964e2a515460e1990cee9311777","ssdeep":"","tlshash":"97e02613130c3cbab42619c146cdf2d02c5e3ac04d49c0016ece4e42d0c9b7fa6b103a","first_seen":"2026-02-11T04:18:14.668448Z","last_seen":"2026-02-11T04:18:14.668448Z","times_seen":1,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":25,"dns":15,"connect":1,"send":0,"wait":205,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.snddapp.vip/assets/index-Sv8bNMT3.css","fqdn":"usdt.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"172.67.178.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:48.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /assets/index-Sv8bNMT3.css HTTP/1.1\r\nHost: usdt.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.snddapp.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:17:48 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Tue, 03 Feb 2026 13:58:54 GMT\r\netag: W/\"6981ff1e-71f1\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3912\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3K2D1e51tkauP6dPgtMRuly3hZYE1Ug9SYtD1nIcpa3O%2FcifdfN%2FuEHiINsuuoLMnUrIHCaqJ5bMsY6dQBNaL82tI2%2FARr6CqPqeBy3hsw8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc109e3fb720731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29169,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29168)","md5":"852a9ad2984c35508867051b95027d02","sha1":"15c880baf66c49008d1a17900ed267611ff94c5c","sha256":"3eb1931b64a60e25f6587e381297dc3fb35f9747700bc4f139592dfd74f84a72","sha512":"03aa09465e8a6d52c925cef10f83e41a5448fcd179f1da2d2b209ff8a62be45ea143d9201b0fcd5bb297d3d01e0c5eda42d1491543d591b6fff8c9f4102a0a6b","ssdeep":"192:O9JyW9JyyxwO7dGmJRoDsfxsflsfzsfw6L+QHY9mTnonccLKjHiHxu66LJ1TX/Hg:kweGmJRoQQ4G+c5r6STX/Hxrw5","tlshash":"31d2302dab55003b7c6740f5d6e8aa5df21bb0c1df3a6aeabd82112097d23f71c97604","first_seen":"2025-12-28T06:38:48.737428Z","last_seen":"2026-02-11T07:08:47.687838Z","times_seen":16,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.snddapp.vip/flags/1f1fa-1f1f8.png","fqdn":"usdt.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"172.67.178.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:48.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /flags/1f1fa-1f1f8.png HTTP/1.1\r\nHost: usdt.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.snddapp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:17:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 350\r\nlast-modified: Thu, 04 Dec 2025 20:12:00 GMT\r\netag: \"6931eb10-15e\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nage: 3909\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5XrV3A2X0vjH0ItL57HGCDra%2BW2mspcNTZs7RVYXh2Je62kkb5Qb37rM7dkqUValAxR817KwzlquCBqBJVr9%2FU8q8hbUn5h%2B1nH5rKrSYPU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc109e8dbab0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":350,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"8fc9e2f18b56022325cb61f37813b58f","sha1":"35366ecf058d3dd824aab54654796e4167ba8e92","sha256":"f21f8537b9b087805efd4334b8f0904aa547ba84c2c6a647d002fef16f42aa26","sha512":"96bac1f6c0899dbd6147cc9ba8ef66905a464abbd79aa6f0c69f183739f47bc29378b0defd7463a3eb57e6c2adde7e2824b760d54e51ade516fabfcb0506016e","ssdeep":"","tlshash":"1fe020819dd7ee3cc07596ab4d3c1180daa3544af435596330058b5133553c463895cd","first_seen":"2023-07-13T01:52:17Z","last_seen":"2026-08-11T17:56:22.485175Z","times_seen":177,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.snddapp.vip/serve.png","fqdn":"usdt.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"172.67.178.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:49.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /serve.png HTTP/1.1\r\nHost: usdt.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.snddapp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:17:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 1218\r\nlast-modified: Thu, 04 Dec 2025 20:12:00 GMT\r\nvary: Accept-Encoding\r\netag: \"6931eb10-4c2\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nage: 3909\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rk%2F%2B7zKESNeKmbFiwNJ1ZnaOp0SfIqVj5u0wPXW7y360WMlAIFxAT%2Fm%2B5hJni1vNDpYCYdT%2FL5dL%2Fcuva7kiifhirWSuw1hIObB6L7NQylQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc109e93bb90731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1218,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"a6a84267b41d28be4da0212eacd3ad71","sha1":"72e773efd61b38e8377df386dc9a0c96ab608739","sha256":"2721404d226fe6b9692a9588c0f4758c058d7cdff0f30122b73d8071e796fc69","sha512":"5695da79f179bdb54e603fbf4334c998c6cc4915d43788b3e2ecffc3c1304ecb0b5b521f2306979e2140ac8b2d03f20fe5fa4398c5c0f11027c5e033a5a80c7e","ssdeep":"","tlshash":"aa21daf7ca4f29a6c84a52688e223578d256238ec1f11b5617a1bcfd40535db5848705","first_seen":"2025-08-21T21:12:17.998964Z","last_seen":"2026-02-11T07:08:47.692028Z","times_seen":19,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/customer-auth/profile","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"38.85.201.30","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:50.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duapi.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 05:16:20 GMT","end":"Thu, 07 May 2026 05:16:19 GMT"},"fingerprint":{"sha1":"B3:50:30:F5:57:0A:5C:D1:2B:B5:D8:62:33:78:32:D9:9F:72:15:DB","sha256":"C7:1C:25:5A:43:77:6F:79:D1:22:DA:4C:A0:2B:61:2A:8F:D0:FD:DD:04:A4:15:01:BC:8A:3B:C4:66:40:4C:51"}}},"request":{"raw":"GET /api/customer-auth/profile HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdt.snddapp.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.snddapp.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 Unauthorized\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 04:17:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 38\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"26-Thj6zqYdlSIGX4o0BAJmYsb0w18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e1ce50c43a83e3e0d1741f0acb3ed551","sha1":"4e18facea61d9522065f8a3404026662c6f4c35f","sha256":"6b4a8ed5918f886412c6efcecfb8f8519862c1999c5b07a43f03eaaee257614b","sha512":"7d7de2ff0fd0b927f15c144a8cf738c08079bf41a135ca3ac732d5cb6c81d5b79d56b37cf3cac3514ed7b34ebcf02abffe54b0913fef1f3209a1b202deda0f18","ssdeep":"","tlshash":"aa80044400401f145303c4d5314554314051445c03511113470c44c5454341d0313550","first_seen":"2025-07-27T23:56:34.012008Z","last_seen":"2026-08-02T15:15:06.953921Z","times_seen":32,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.snddapp.vip/home1.png","fqdn":"usdt.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"172.67.178.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:48.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /home1.png HTTP/1.1\r\nHost: usdt.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.snddapp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:17:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1068\r\nlast-modified: Thu, 04 Dec 2025 20:12:00 GMT\r\nvary: Accept-Encoding\r\netag: \"6931eb10-42c\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nage: 3909\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tG74gyIiPW3%2B%2FiUbxZb5Ii%2BUdgqxOxCH3FO7PnuVELaVh64ib9xvL9fCPTOM9C6OPLbM%2BOtUK16OXOi4Q7CVVjeHgkjyVTjvCc8MS1BufpI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc109e90bb00731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1068,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ab358df5a5fadd4687ddf8e07d4c51a7","sha1":"0f7960010deafda534489f081be86abd41d9a513","sha256":"bf35f0f4415163816c9593bc726be001fda65a63ab7b8a6b97d27c588d5bd9a6","sha512":"6882952208c4fe767e80630329c7edbb5876cec2bae050d9a4102a4878c370a47fe7ee0257952633e8d0ebdd886a3ad232774e13a1766bb76b50ecdca15931f0","ssdeep":"","tlshash":"4411d80dca9c806893c1455c90f11817fc79c4a8a550333d8dca8fe635ee1ee4ec40ab","first_seen":"2025-08-21T21:12:17.996097Z","last_seen":"2026-02-11T07:08:47.681096Z","times_seen":19,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.snddapp.vip/flags/1f1fa-1f1f8.png","fqdn":"usdt.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"172.67.178.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:48.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /flags/1f1fa-1f1f8.png HTTP/1.1\r\nHost: usdt.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.snddapp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:17:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 350\r\nlast-modified: Thu, 04 Dec 2025 20:12:00 GMT\r\netag: \"6931eb10-15e\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nage: 3909\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8mQKyNwZuDeeT5eK2qeSYhDvGFdWLoLWF%2FpEESdjhahsT3rFtjlB2rKUBeZIA2jrU4YQPrsBkvQRr57Y6S2bCuXi%2BSjtuLA5dB1L7GKlGjg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc109e93bb50731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":350,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"8fc9e2f18b56022325cb61f37813b58f","sha1":"35366ecf058d3dd824aab54654796e4167ba8e92","sha256":"f21f8537b9b087805efd4334b8f0904aa547ba84c2c6a647d002fef16f42aa26","sha512":"96bac1f6c0899dbd6147cc9ba8ef66905a464abbd79aa6f0c69f183739f47bc29378b0defd7463a3eb57e6c2adde7e2824b760d54e51ade516fabfcb0506016e","ssdeep":"","tlshash":"1fe020819dd7ee3cc07596ab4d3c1180daa3544af435596330058b5133553c463895cd","first_seen":"2023-07-13T01:52:17Z","last_seen":"2026-08-11T17:56:22.485175Z","times_seen":177,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/activities/activities","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"38.85.201.30","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:50.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duapi.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 05:16:20 GMT","end":"Thu, 07 May 2026 05:16:19 GMT"},"fingerprint":{"sha1":"B3:50:30:F5:57:0A:5C:D1:2B:B5:D8:62:33:78:32:D9:9F:72:15:DB","sha256":"C7:1C:25:5A:43:77:6F:79:D1:22:DA:4C:A0:2B:61:2A:8F:D0:FD:DD:04:A4:15:01:BC:8A:3B:C4:66:40:4C:51"}}},"request":{"raw":"GET /api/activities/activities HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdt.snddapp.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.snddapp.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 Unauthorized\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 04:17:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 38\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"26-Thj6zqYdlSIGX4o0BAJmYsb0w18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e1ce50c43a83e3e0d1741f0acb3ed551","sha1":"4e18facea61d9522065f8a3404026662c6f4c35f","sha256":"6b4a8ed5918f886412c6efcecfb8f8519862c1999c5b07a43f03eaaee257614b","sha512":"7d7de2ff0fd0b927f15c144a8cf738c08079bf41a135ca3ac732d5cb6c81d5b79d56b37cf3cac3514ed7b34ebcf02abffe54b0913fef1f3209a1b202deda0f18","ssdeep":"","tlshash":"aa80044400401f145303c4d5314554314051445c03511113470c44c5454341d0313550","first_seen":"2025-07-27T23:56:34.012008Z","last_seen":"2026-08-02T15:15:06.953921Z","times_seen":32,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/customer-auth/profile","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"38.85.201.30","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:57.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duapi.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 05:16:20 GMT","end":"Thu, 07 May 2026 05:16:19 GMT"},"fingerprint":{"sha1":"B3:50:30:F5:57:0A:5C:D1:2B:B5:D8:62:33:78:32:D9:9F:72:15:DB","sha256":"C7:1C:25:5A:43:77:6F:79:D1:22:DA:4C:A0:2B:61:2A:8F:D0:FD:DD:04:A4:15:01:BC:8A:3B:C4:66:40:4C:51"}}},"request":{"raw":"GET /api/customer-auth/profile HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdt.snddapp.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.snddapp.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 Unauthorized\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 04:17:57 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 38\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"26-Thj6zqYdlSIGX4o0BAJmYsb0w18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e1ce50c43a83e3e0d1741f0acb3ed551","sha1":"4e18facea61d9522065f8a3404026662c6f4c35f","sha256":"6b4a8ed5918f886412c6efcecfb8f8519862c1999c5b07a43f03eaaee257614b","sha512":"7d7de2ff0fd0b927f15c144a8cf738c08079bf41a135ca3ac732d5cb6c81d5b79d56b37cf3cac3514ed7b34ebcf02abffe54b0913fef1f3209a1b202deda0f18","ssdeep":"","tlshash":"aa80044400401f145303c4d5314554314051445c03511113470c44c5454341d0313550","first_seen":"2025-07-27T23:56:34.012008Z","last_seen":"2026-08-02T15:15:06.953921Z","times_seen":32,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.snddapp.vip/home1.png","fqdn":"usdt.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"172.67.178.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:48.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /home1.png HTTP/1.1\r\nHost: usdt.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.snddapp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:17:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1068\r\nlast-modified: Thu, 04 Dec 2025 20:12:00 GMT\r\nvary: Accept-Encoding\r\netag: \"6931eb10-42c\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nage: 3909\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5yMJiC3khYhGgTyUXMnR%2FYIYAy1z0NbJtE5rmDD84EObk2rVJQqwfZIjnOmvoXZuG9e2xHdfhR3QjIz1coSNI57ctxxbwI943wz4pS%2FTM0g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc109e93bb70731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1068,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ab358df5a5fadd4687ddf8e07d4c51a7","sha1":"0f7960010deafda534489f081be86abd41d9a513","sha256":"bf35f0f4415163816c9593bc726be001fda65a63ab7b8a6b97d27c588d5bd9a6","sha512":"6882952208c4fe767e80630329c7edbb5876cec2bae050d9a4102a4878c370a47fe7ee0257952633e8d0ebdd886a3ad232774e13a1766bb76b50ecdca15931f0","ssdeep":"","tlshash":"4411d80dca9c806893c1455c90f11817fc79c4a8a550333d8dca8fe635ee1ee4ec40ab","first_seen":"2025-08-21T21:12:17.996097Z","last_seen":"2026-02-11T07:08:47.681096Z","times_seen":19,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.snddapp.vip/favicon.ico","fqdn":"usdt.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"172.67.178.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:49.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: usdt.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.snddapp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:17:49 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lkmi%2BtA5SzYA7P9Vx2MJBUooPGcB4HTfaTHItECI6Ffjd4zcF%2FGWDGumM609sqfLRSXX1n03HrtUqhjCHtnkv0XC7Dv1J6GyTLhEdwlFH98%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9cc109e96bbc0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-12T15:40:22.312586Z","times_seen":549923,"resource_available":true,"data":null}},"time_used":700,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":700,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.snddapp.vip/assets/vendor-modules-ooA4ScDb.js","fqdn":"usdt.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"172.67.178.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:48.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /assets/vendor-modules-ooA4ScDb.js HTTP/1.1\r\nHost: usdt.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.snddapp.vip/assets/index-BY8-VjF5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:17:48 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Tue, 03 Feb 2026 13:58:54 GMT\r\netag: W/\"6981ff1e-491714\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3911\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GHk%2F9Ece38RBxTlc54NXXCPPitMgE%2F1o3gmRCkebF96sLZZuaxZ8NaGSLXuYlpUr%2Bzp1j9MvTBIEeNlJ%2B1X%2BfwM6qtp%2BnAG0x2jKzW44YwE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc109e49b7a0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4790036,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ba1497cedf66eeba1d545dec2bcf75d6","sha1":"cfe93b693fffa1daf38c18eb227e223b0308a8e7","sha256":"795978023c24b042a57043c712277225f5df50741d6468da93a2c3752023b170","sha512":"aef2ec2fafc9d3a24c09e83617dab241c45cd6de2891ef9e88bbaa7601f6fb030f9818e1664b3bb423a19c22cf65c7e1d7088a01269fbc446f7ecdc18535ee15","ssdeep":"12288:2aGzsO3SxgA3I6ba0qEesTOMoEUP3GZbKJUdWc1YV+TXapVMj8s+Z:svugAY6ba0qaOM2fGfQ88B","tlshash":"7a254b997651f06147e391ea50bf0001f3386e1d740d8064b6acedee3bb9989a1b7f39","first_seen":"2025-12-28T06:38:48.717459Z","last_seen":"2026-02-11T07:08:47.69139Z","times_seen":16,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.snddapp.vip/user.png","fqdn":"usdt.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"172.67.178.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:49.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /user.png HTTP/1.1\r\nHost: usdt.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.snddapp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:17:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 949\r\nlast-modified: Thu, 04 Dec 2025 20:12:00 GMT\r\netag: \"6931eb10-3b5\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nage: 3909\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XHg6eacHfMXg0sjRlgizukY7HWdcXRcUMlibUVWyEAAFKj18OO3IdePYZqty1l6P%2FT1JjCARJ%2F8eFGyHXq7gizqeJ3cL8iaL%2Bwx904a6hFc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc109e94bbb0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":949,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 49, 8-bit/color RGBA, non-interlaced","md5":"b08aaa6b69cf360ec7ab29460551aba1","sha1":"230cd06e3299fbadeac285a26313a89304043147","sha256":"92ea4f619982dfecf979f76c7bf675894b6bd7bcee221104f723d66a2227a099","sha512":"ae4160032ca26043e6b2caa6a0d86a0b202a0a271c5aaa874004c78cb286b2e804fc7afc1bae8f80d20ccee021b727db91f5591b12a13d007ff668945918d895","ssdeep":"","tlshash":"361188fbd2f7d41cf11312f54a890cdc2d2260b645e1151895713714ef36f1a0e181ab","first_seen":"2025-08-21T21:12:17.991486Z","last_seen":"2026-02-11T07:08:47.689769Z","times_seen":19,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.snddapp.vip/invite.png","fqdn":"usdt.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"172.67.178.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:49.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /invite.png HTTP/1.1\r\nHost: usdt.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.snddapp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:17:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 1272\r\nlast-modified: Thu, 04 Dec 2025 20:12:00 GMT\r\nvary: Accept-Encoding\r\netag: \"6931eb10-4f8\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nage: 3909\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KVXiexyrTd%2ByQO0mc9xBiCBD64NjwwOQe4cHAFedcVgw4s%2F5mOssFAQGd9FC63uLZ019pQUKN1JYcxsfagZC1K41S0dBlxVf%2Bdu6%2B9Yxl90%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc109e94bba0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1272,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 48, 8-bit/color RGBA, non-interlaced","md5":"0da0307dfdc46d5d688aad8ce344ea7d","sha1":"64d1a483d46efc5c28b021a34e44bba820b706c4","sha256":"1a03b8f904b902035af9dddebf8789d4c697be1a008c9aad4c17c583ee907290","sha512":"4af243097d99b3cf323b1a251de17c5339ac225fa13b5a9efdbe819ad4cfb0df669a519a35ec30762cfa7de576d00409acdcd8c2a7097c0ab5f1decd460e58e1","ssdeep":"","tlshash":"92211a13139ec8ec4e818d0ae0701002484edb954e0aacdd0b330950d04dd45880ef87","first_seen":"2025-08-21T21:12:17.973931Z","last_seen":"2026-02-11T07:08:47.685757Z","times_seen":19,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/settings/statistics","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"38.85.201.30","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:49.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duapi.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 05:16:20 GMT","end":"Thu, 07 May 2026 05:16:19 GMT"},"fingerprint":{"sha1":"B3:50:30:F5:57:0A:5C:D1:2B:B5:D8:62:33:78:32:D9:9F:72:15:DB","sha256":"C7:1C:25:5A:43:77:6F:79:D1:22:DA:4C:A0:2B:61:2A:8F:D0:FD:DD:04:A4:15:01:BC:8A:3B:C4:66:40:4C:51"}}},"request":{"raw":"GET /api/settings/statistics HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdt.snddapp.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.snddapp.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 04:17:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 203\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"cb-lDpaEaZvF0eMk8TWri4HREfpu8A\"\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":203,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6c822e686714927f2dd39df15d8422d6","sha1":"943a5a11a66f17478c93c4d6ae2e074447e9bbc0","sha256":"6413a32cd5648ee7934f6e7fab25ce2a64ffc0ec9d0ece39e70266d2e4745230","sha512":"e788db4400bb0af85534ceebc2c2858938fb89fad86e27e4c4739a4d1de705f6177397cea06542b25b0d785986a6575a08c10390f231c3b3936f01b46994b6cc","ssdeep":"","tlshash":"76d023414d210bf59711d6c715931c4385a4507046054455555dd7c4b5bc5063192417","first_seen":"2026-02-11T04:18:14.682711Z","last_seen":"2026-02-11T04:18:14.682711Z","times_seen":1,"resource_available":false,"data":null}},"time_used":934,"timings":{"blocked":387,"dns":61,"connect":158,"send":0,"wait":152,"receive":0,"ssl":171},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.snddapp.vip/assets/index-BY8-VjF5.js","fqdn":"usdt.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"172.67.178.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:48.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /assets/index-BY8-VjF5.js HTTP/1.1\r\nHost: usdt.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.snddapp.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:17:48 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Tue, 03 Feb 2026 13:58:54 GMT\r\netag: W/\"6981ff1e-a46dc\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3912\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UHK7rSqIzy8DjQTCbtdkMKt%2BMEItfKKw38H7n2%2BtiT5hpwc98MTSrHojGyE2mRyPLps%2BOqfnty47mUSLnGddKqtYZKSSbZMntXFSPo93gGg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc109e3fb700731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":673500,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61566), with no line terminators","md5":"1715d27d2ae9c64b2b7feb09a64bab3e","sha1":"c40285352a0b6fe188914cc075c7b0d2137deba5","sha256":"841a5964f7042459ffde5e8f24af3ede4188d2843e993461cf75e8465afd2b68","sha512":"7f6665511fa4471e22af8052101e312e0ec19647263817662710a05c3cbf1a7fb715903dd8d306a50b7a395532d87b1b22372f09d970844ddefb171841438216","ssdeep":"12288:0okV4ijac4lrx3NfWZ6GCSnQuxqH+E1t+l+pvVOW9kWXdohi5eb1j+VsLS5ogLpd:0okV4ijac4lrx3NfWZ6GCSnQuxqH+E1z","tlshash":"81e49242e3d4e6ec134b5fa7771ea8e8f85a489db54809dbd1d4fc50b8b9202f2d9630","first_seen":"2026-02-11T04:18:14.686205Z","last_seen":"2026-02-11T04:18:14.686205Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.snddapp.vip/assets/vendor-modules-BI7Vve6c.css","fqdn":"usdt.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"172.67.178.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:48.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /assets/vendor-modules-BI7Vve6c.css HTTP/1.1\r\nHost: usdt.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.snddapp.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:17:48 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Tue, 03 Feb 2026 13:58:54 GMT\r\netag: W/\"6981ff1e-c5f9\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3912\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Yf%2BK8RfbnXruPawW3jLov51qByKO0crui02q%2FfyI0XDl%2BiHjSbjldsxmHo6yM3SoO7HK0PFAcGb7QqeKaDGlDA6NNr3Uwt1QSWHgI9f9fA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc109e3fb710731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50681,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (50550)","md5":"948d20ec45da4003196b451dc0f7e2d6","sha1":"64aed070e88535d8c4f7f6af10c2db9a5b594ef6","sha256":"5e5c2aea9a1d1b69ebc80cd93ddb913101b1679a623a0e43649168e31f5b7d88","sha512":"41a749b93e32110d05e8d9383ca28dc80ac5678f195377d033096eb6d05f2b5b31324105285c5297d3605df5d6ba3b6b7d00f16fd5ab5adcc10861d6fed1902b","ssdeep":"384:mnRRvYvrYKi8UlNl9aybPdWDN9Lr5Gp56ed283ZcW23qWF7O36YgzQ4lYf1oKPFW:MgqWDPLr5Gp56UJoYgzQISoKPFEwi","tlshash":"b333db49bd1e3e3e7123a33980c094ec134bb75fe9b94397f891664d6d8d384226da39","first_seen":"2025-12-28T06:38:48.726641Z","last_seen":"2026-02-11T07:08:47.690728Z","times_seen":16,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.snddapp.vip/nors-BR_U97rM.png","fqdn":"usdt.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"172.67.178.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:48.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /nors-BR_U97rM.png HTTP/1.1\r\nHost: usdt.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.snddapp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:17:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 9288\r\nlast-modified: Thu, 04 Dec 2025 20:12:00 GMT\r\nvary: Accept-Encoding\r\netag: \"6931eb10-2448\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nage: 3909\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wm%2FbY4PHUGstVF57A0cvuxcxR8Vl1Pt6Oz55WUsnH8yZcR7OhPxN%2FrKNIzlVLNJPZOfFmKw1TetTbmAxjdWjcTNpaR8NuGtTVOQl%2Bq3FqD8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc109e93bb60731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9288,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 204, 8-bit/color RGBA, non-interlaced","md5":"560b36a165bae4d7c70907ac1ad44ec4","sha1":"f27e2ca7c9a41cde369c50ce42c445629ee0cdee","sha256":"9b7b4a3a9d09160dded5e6b0f7e6d7ca52f7bf97321ebdaff205a0910d3ece61","sha512":"d6db05567b6dd5c69754179f1d6738c640c60a885fdca6522e3d850171da7b6a90d3c547a0d7a6ece7d0abc2bf2b9675d8c18f1f0cbb5a78ce1f896a7329bcc3","ssdeep":"192:Qys+/RKG34zIPCJTiQ4riyj0TUohEao5uN7iO8FthD8+JPMHObT4HMN/FZ:Qys+/RKG3/PQuQ4pjMyuN2O8Ff4+h4OT","tlshash":"5c12c07387396aa4b1d79e196d4f5413353b80bcc078bf419bec1b068a863a3434b433","first_seen":"2025-08-21T21:12:17.990433Z","last_seen":"2026-02-11T07:08:47.693661Z","times_seen":19,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/pages/home?lang=en","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"38.85.201.30","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:49.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duapi.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 05:16:20 GMT","end":"Thu, 07 May 2026 05:16:19 GMT"},"fingerprint":{"sha1":"B3:50:30:F5:57:0A:5C:D1:2B:B5:D8:62:33:78:32:D9:9F:72:15:DB","sha256":"C7:1C:25:5A:43:77:6F:79:D1:22:DA:4C:A0:2B:61:2A:8F:D0:FD:DD:04:A4:15:01:BC:8A:3B:C4:66:40:4C:51"}}},"request":{"raw":"GET /api/pages/home?lang=en HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdt.snddapp.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.snddapp.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 04:17:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"c01-Ct/V3mzaO9E6NWn3xh30k/POUmI\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3073,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"30050c435f782d8f940d9a4db83cdfe8","sha1":"0adfd5de6cda3bd13a3569f7c61df493f3ce5262","sha256":"0e5385ba83c4970e321ec65df798b8b3c2643623ae671e2a6cd4d55915160218","sha512":"d710038ea5b1b2f260a0e368c6db86c1396b09d2e9a73bb8d9aa48fb66ba62b5aa619cec924ed30d3fbe2a23f6769b40c90858fd86ac8d4c4ad06f931ae52ee0","ssdeep":"","tlshash":"ac51dd7f0bb5d0ae8aa156c2c8eb7a95d04a7062c9d019e4e7de4f8cc4547b1de0f950","first_seen":"2026-02-03T08:52:29.961842Z","last_seen":"2026-02-11T07:08:47.694263Z","times_seen":15,"resource_available":false,"data":null}},"time_used":965,"timings":{"blocked":402,"dns":62,"connect":170,"send":0,"wait":154,"receive":0,"ssl":175},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.snddapp.vip/","fqdn":"usdt.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"172.67.178.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-11T04:17:47.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: usdt.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 04:17:47 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 03 Feb 2026 13:58:54 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rv5OFOG%2Bx57ZI2uCV5tQVy5YJcXSrO83Z4yA7YF9Xf%2BA8UmgY7f0s8BydaAkz7XG75MZGdmYzUDAOClhoZNUgGhS%2FoPh%2FVsPVx76voCm7rQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cc109defc7dc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":666,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"2eb50a05770b74c95dc372a1bae74096","sha1":"d08c825db0d8a1d3ebc384d9fc1fa83b5f11f28c","sha256":"beb018b84724e4d150e3b80118f6dc90cdf5a26e34bd24b93a8c65f3318c1c3e","sha512":"96968a87d9aabd08e3c7eea4f3bb295e40d355fc6f9ad0f7a779a84541352545aec2cb3cb64a3a9cd4270910cc9fef645394ba6916e663e2b39bd58badec6e4b","ssdeep":"","tlshash":"e601490564e18e0643201754fec1f459aec3b74b8649ae54b1aea0bd1f85b938edf8b8","first_seen":"2026-02-03T08:52:29.96383Z","last_seen":"2026-02-11T04:19:43.382455Z","times_seen":7,"resource_available":false,"data":null}},"time_used":754,"timings":{"blocked":42,"dns":28,"connect":1,"send":0,"wait":666,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.snddapp.vip/assets/vendor-modules-ooA4ScDb.js","fqdn":"usdt.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"172.67.178.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:48.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /assets/vendor-modules-ooA4ScDb.js HTTP/1.1\r\nHost: usdt.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usdt.snddapp.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:17:48 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Tue, 03 Feb 2026 13:58:54 GMT\r\netag: W/\"6981ff1e-491714\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3911\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ISxrU8CaJa7OiCZ%2B5MHw%2Bb4KtmaGDVWbPAcPEsMibJ9K9ak9HgzTAdwQxhxa79j9S0%2Br8V1cbtZ9%2Fsiw%2FBAjZNHbk%2FpX%2F%2Fm8cbagMIKN2Xs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc109e7eba40731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4790036,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ba1497cedf66eeba1d545dec2bcf75d6","sha1":"cfe93b693fffa1daf38c18eb227e223b0308a8e7","sha256":"795978023c24b042a57043c712277225f5df50741d6468da93a2c3752023b170","sha512":"aef2ec2fafc9d3a24c09e83617dab241c45cd6de2891ef9e88bbaa7601f6fb030f9818e1664b3bb423a19c22cf65c7e1d7088a01269fbc446f7ecdc18535ee15","ssdeep":"12288:2aGzsO3SxgA3I6ba0qEesTOMoEUP3GZbKJUdWc1YV+TXapVMj8s+Z:svugAY6ba0qaOM2fGfQ88B","tlshash":"7a254b997651f06147e391ea50bf0001f3386e1d740d8064b6acedee3bb9989a1b7f39","first_seen":"2025-12-28T06:38:48.717459Z","last_seen":"2026-02-11T07:08:47.69139Z","times_seen":16,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.snddapp.vip/user.png","fqdn":"usdt.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"172.67.178.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:48.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /user.png HTTP/1.1\r\nHost: usdt.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.snddapp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:17:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 949\r\nlast-modified: Thu, 04 Dec 2025 20:12:00 GMT\r\netag: \"6931eb10-3b5\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nage: 3909\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UZmhZM4TM6w%2BcHF9t9ImE8C4CkKUnfQS1a%2BqJBUcyMRhfQ9ujRSLkYMOTpM2C2IYXSRZECcCJTczh5fLWmUNAK31ZGQJw2eR5GvKl6U1QRQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc109e91bb40731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":949,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 49, 8-bit/color RGBA, non-interlaced","md5":"b08aaa6b69cf360ec7ab29460551aba1","sha1":"230cd06e3299fbadeac285a26313a89304043147","sha256":"92ea4f619982dfecf979f76c7bf675894b6bd7bcee221104f723d66a2227a099","sha512":"ae4160032ca26043e6b2caa6a0d86a0b202a0a271c5aaa874004c78cb286b2e804fc7afc1bae8f80d20ccee021b727db91f5591b12a13d007ff668945918d895","ssdeep":"","tlshash":"361188fbd2f7d41cf11312f54a890cdc2d2260b645e1151895713714ef36f1a0e181ab","first_seen":"2025-08-21T21:12:17.991486Z","last_seen":"2026-02-11T07:08:47.689769Z","times_seen":19,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/customer-auth/profile","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"38.85.201.30","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:49.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duapi.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 05:16:20 GMT","end":"Thu, 07 May 2026 05:16:19 GMT"},"fingerprint":{"sha1":"B3:50:30:F5:57:0A:5C:D1:2B:B5:D8:62:33:78:32:D9:9F:72:15:DB","sha256":"C7:1C:25:5A:43:77:6F:79:D1:22:DA:4C:A0:2B:61:2A:8F:D0:FD:DD:04:A4:15:01:BC:8A:3B:C4:66:40:4C:51"}}},"request":{"raw":"GET /api/customer-auth/profile HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdt.snddapp.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.snddapp.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 Unauthorized\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 04:17:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 38\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"26-Thj6zqYdlSIGX4o0BAJmYsb0w18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e1ce50c43a83e3e0d1741f0acb3ed551","sha1":"4e18facea61d9522065f8a3404026662c6f4c35f","sha256":"6b4a8ed5918f886412c6efcecfb8f8519862c1999c5b07a43f03eaaee257614b","sha512":"7d7de2ff0fd0b927f15c144a8cf738c08079bf41a135ca3ac732d5cb6c81d5b79d56b37cf3cac3514ed7b34ebcf02abffe54b0913fef1f3209a1b202deda0f18","ssdeep":"","tlshash":"aa80044400401f145303c4d5314554314051445c03511113470c44c5454341d0313550","first_seen":"2025-07-27T23:56:34.012008Z","last_seen":"2026-08-02T15:15:06.953921Z","times_seen":32,"resource_available":false,"data":null}},"time_used":895,"timings":{"blocked":372,"dns":62,"connect":147,"send":0,"wait":149,"receive":0,"ssl":160},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/activities/activities","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"38.85.201.30","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:49.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duapi.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 05:16:20 GMT","end":"Thu, 07 May 2026 05:16:19 GMT"},"fingerprint":{"sha1":"B3:50:30:F5:57:0A:5C:D1:2B:B5:D8:62:33:78:32:D9:9F:72:15:DB","sha256":"C7:1C:25:5A:43:77:6F:79:D1:22:DA:4C:A0:2B:61:2A:8F:D0:FD:DD:04:A4:15:01:BC:8A:3B:C4:66:40:4C:51"}}},"request":{"raw":"GET /api/activities/activities HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdt.snddapp.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.snddapp.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 Unauthorized\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 04:17:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 38\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"26-Thj6zqYdlSIGX4o0BAJmYsb0w18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e1ce50c43a83e3e0d1741f0acb3ed551","sha1":"4e18facea61d9522065f8a3404026662c6f4c35f","sha256":"6b4a8ed5918f886412c6efcecfb8f8519862c1999c5b07a43f03eaaee257614b","sha512":"7d7de2ff0fd0b927f15c144a8cf738c08079bf41a135ca3ac732d5cb6c81d5b79d56b37cf3cac3514ed7b34ebcf02abffe54b0913fef1f3209a1b202deda0f18","ssdeep":"","tlshash":"aa80044400401f145303c4d5314554314051445c03511113470c44c5454341d0313550","first_seen":"2025-07-27T23:56:34.012008Z","last_seen":"2026-08-02T15:15:06.953921Z","times_seen":32,"resource_available":false,"data":null}},"time_used":965,"timings":{"blocked":403,"dns":61,"connect":172,"send":0,"wait":151,"receive":0,"ssl":175},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/activities/activities","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"38.85.201.30","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:52.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duapi.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 05:16:20 GMT","end":"Thu, 07 May 2026 05:16:19 GMT"},"fingerprint":{"sha1":"B3:50:30:F5:57:0A:5C:D1:2B:B5:D8:62:33:78:32:D9:9F:72:15:DB","sha256":"C7:1C:25:5A:43:77:6F:79:D1:22:DA:4C:A0:2B:61:2A:8F:D0:FD:DD:04:A4:15:01:BC:8A:3B:C4:66:40:4C:51"}}},"request":{"raw":"GET /api/activities/activities HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdt.snddapp.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.snddapp.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 Unauthorized\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 04:17:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 38\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"26-Thj6zqYdlSIGX4o0BAJmYsb0w18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e1ce50c43a83e3e0d1741f0acb3ed551","sha1":"4e18facea61d9522065f8a3404026662c6f4c35f","sha256":"6b4a8ed5918f886412c6efcecfb8f8519862c1999c5b07a43f03eaaee257614b","sha512":"7d7de2ff0fd0b927f15c144a8cf738c08079bf41a135ca3ac732d5cb6c81d5b79d56b37cf3cac3514ed7b34ebcf02abffe54b0913fef1f3209a1b202deda0f18","ssdeep":"","tlshash":"aa80044400401f145303c4d5314554314051445c03511113470c44c5454341d0313550","first_seen":"2025-07-27T23:56:34.012008Z","last_seen":"2026-08-02T15:15:06.953921Z","times_seen":32,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/activities/activities","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"38.85.201.30","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:57.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duapi.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 05:16:20 GMT","end":"Thu, 07 May 2026 05:16:19 GMT"},"fingerprint":{"sha1":"B3:50:30:F5:57:0A:5C:D1:2B:B5:D8:62:33:78:32:D9:9F:72:15:DB","sha256":"C7:1C:25:5A:43:77:6F:79:D1:22:DA:4C:A0:2B:61:2A:8F:D0:FD:DD:04:A4:15:01:BC:8A:3B:C4:66:40:4C:51"}}},"request":{"raw":"GET /api/activities/activities HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdt.snddapp.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.snddapp.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 Unauthorized\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 04:17:57 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 38\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"26-Thj6zqYdlSIGX4o0BAJmYsb0w18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e1ce50c43a83e3e0d1741f0acb3ed551","sha1":"4e18facea61d9522065f8a3404026662c6f4c35f","sha256":"6b4a8ed5918f886412c6efcecfb8f8519862c1999c5b07a43f03eaaee257614b","sha512":"7d7de2ff0fd0b927f15c144a8cf738c08079bf41a135ca3ac732d5cb6c81d5b79d56b37cf3cac3514ed7b34ebcf02abffe54b0913fef1f3209a1b202deda0f18","ssdeep":"","tlshash":"aa80044400401f145303c4d5314554314051445c03511113470c44c5454341d0313550","first_seen":"2025-07-27T23:56:34.012008Z","last_seen":"2026-08-02T15:15:06.953921Z","times_seen":32,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.snddapp.vip/nors-BR_U97rM.png","fqdn":"usdt.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"172.67.178.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:48.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /nors-BR_U97rM.png HTTP/1.1\r\nHost: usdt.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.snddapp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:17:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 9288\r\nlast-modified: Thu, 04 Dec 2025 20:12:00 GMT\r\nvary: Accept-Encoding\r\netag: \"6931eb10-2448\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nage: 3909\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ihUQjm6w9E5BMg5cRq91jFbbio50mN4E2adJXpixN8gurfWFlm4b9Vb2t7nUu7D1Y0EkP7CmvhkCR4T56SvPFXSqOmOQeA1hg7MLcla5BVk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc109e90baf0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9288,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 204, 8-bit/color RGBA, non-interlaced","md5":"560b36a165bae4d7c70907ac1ad44ec4","sha1":"f27e2ca7c9a41cde369c50ce42c445629ee0cdee","sha256":"9b7b4a3a9d09160dded5e6b0f7e6d7ca52f7bf97321ebdaff205a0910d3ece61","sha512":"d6db05567b6dd5c69754179f1d6738c640c60a885fdca6522e3d850171da7b6a90d3c547a0d7a6ece7d0abc2bf2b9675d8c18f1f0cbb5a78ce1f896a7329bcc3","ssdeep":"192:Qys+/RKG34zIPCJTiQ4riyj0TUohEao5uN7iO8FthD8+JPMHObT4HMN/FZ:Qys+/RKG3/PQuQ4pjMyuN2O8Ff4+h4OT","tlshash":"5c12c07387396aa4b1d79e196d4f5413353b80bcc078bf419bec1b068a863a3434b433","first_seen":"2025-08-21T21:12:17.990433Z","last_seen":"2026-02-11T07:08:47.693661Z","times_seen":19,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.snddapp.vip/invite.png","fqdn":"usdt.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"172.67.178.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:48.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /invite.png HTTP/1.1\r\nHost: usdt.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.snddapp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:17:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1272\r\nlast-modified: Thu, 04 Dec 2025 20:12:00 GMT\r\nvary: Accept-Encoding\r\netag: \"6931eb10-4f8\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nage: 3909\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uZCd%2F4J5WWNbxVsWUtr3qr8AxVW%2Bq%2F2RSNh81jV0820Tw%2Fl6CjDEd521TjgmBe9XBXYzHbrm3aIFVgQPNxGakR6KaHk1u3ib1fCVvmRUkR8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc109e91bb30731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1272,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 48, 8-bit/color RGBA, non-interlaced","md5":"0da0307dfdc46d5d688aad8ce344ea7d","sha1":"64d1a483d46efc5c28b021a34e44bba820b706c4","sha256":"1a03b8f904b902035af9dddebf8789d4c697be1a008c9aad4c17c583ee907290","sha512":"4af243097d99b3cf323b1a251de17c5339ac225fa13b5a9efdbe819ad4cfb0df669a519a35ec30762cfa7de576d00409acdcd8c2a7097c0ab5f1decd460e58e1","ssdeep":"","tlshash":"92211a13139ec8ec4e818d0ae0701002484edb954e0aacdd0b330950d04dd45880ef87","first_seen":"2025-08-21T21:12:17.973931Z","last_seen":"2026-02-11T07:08:47.685757Z","times_seen":19,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt.snddapp.vip/pool.png","fqdn":"usdt.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"172.67.178.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:49.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /pool.png HTTP/1.1\r\nHost: usdt.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.snddapp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:17:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1194\r\nlast-modified: Thu, 04 Dec 2025 20:12:00 GMT\r\nvary: Accept-Encoding\r\netag: \"6931eb10-4aa\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nage: 3909\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qzBY29NvEYjZNHC%2B%2FH%2B0r8a9%2BVA5aCFkX8EH523SDsCYrx%2BfT9dWcROSgEsjGLxz1CzzfvVJElcgr6ZhCBJAWyWEjAhyDyxjzn2azDKZc68%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc109e93bb80731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1194,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 48, 8-bit/color RGBA, non-interlaced","md5":"86177258b97ce77fef7c3006300c8af8","sha1":"e19da3a443ff9d37e606283f24fda13a258d4078","sha256":"97f2e2bd136eb9ca8aa1e60be272d60a815564f731b535cd5e7ec198e5dca6b6","sha512":"da55c58ef2551243370198a57b948d1ea20496698c81e9c56f317735f7611825c4a8a6fed8ed4a4bd7a75a31c1c92bf5bb6717d80d04ea12d1f3b6873ff83132","ssdeep":"","tlshash":"3621da638cd975346300fdf8192772de967333de4445a8560d0cecf9d9819d15da861f","first_seen":"2025-08-21T21:12:17.980703Z","last_seen":"2026-02-11T07:08:47.684868Z","times_seen":19,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/customer-auth/profile","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"38.85.201.30","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt.snddapp.vip/","date":"2026-02-11T04:17:52.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duapi.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 05:16:20 GMT","end":"Thu, 07 May 2026 05:16:19 GMT"},"fingerprint":{"sha1":"B3:50:30:F5:57:0A:5C:D1:2B:B5:D8:62:33:78:32:D9:9F:72:15:DB","sha256":"C7:1C:25:5A:43:77:6F:79:D1:22:DA:4C:A0:2B:61:2A:8F:D0:FD:DD:04:A4:15:01:BC:8A:3B:C4:66:40:4C:51"}}},"request":{"raw":"GET /api/customer-auth/profile HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdt.snddapp.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt.snddapp.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 Unauthorized\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 04:17:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 38\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"26-Thj6zqYdlSIGX4o0BAJmYsb0w18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e1ce50c43a83e3e0d1741f0acb3ed551","sha1":"4e18facea61d9522065f8a3404026662c6f4c35f","sha256":"6b4a8ed5918f886412c6efcecfb8f8519862c1999c5b07a43f03eaaee257614b","sha512":"7d7de2ff0fd0b927f15c144a8cf738c08079bf41a135ca3ac732d5cb6c81d5b79d56b37cf3cac3514ed7b34ebcf02abffe54b0913fef1f3209a1b202deda0f18","ssdeep":"","tlshash":"aa80044400401f145303c4d5314554314051445c03511113470c44c5454341d0313550","first_seen":"2025-07-27T23:56:34.012008Z","last_seen":"2026-08-02T15:15:06.953921Z","times_seen":32,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}