{"report_id":"10077019-d240-497a-b97c-aa33f38908e2","version":6,"status":"done","tags":["suspicious","telegram_bot"],"date":"2026-04-28T14:08:26Z","url":{"schema":"https","addr":"bep20-usdt-one.vercel.app","fqdn":"bep20-usdt-one.vercel.app","domain":"bep20-usdt-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"bep20-usdt-one.vercel.app/","fqdn":"bep20-usdt-one.vercel.app","domain":"bep20-usdt-one.vercel.app","tld":"vercel.app"},"title":"Transfer Trust Wallet","dom":{"size":6068,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"c8544efb8f3194346a709265230ebc85","sha1":"34d0ee12315d05f96d31822d5a6f0c4726b102d3","sha256":"ba327879111bd63104d50611b765e796b9749b732180093b020a24f053cedcb8","sha512":"397c6f1f2b7494ef4b00bb1d3712e26a0cdcdc1c9e7cf6d4f68b13b3fefd831f972def23526fb7d8e9133fad3cf9c0c11f1611b1b059faddbdf0d1eb67af0a85","ssdeep":"96:3dvWqO3uuau9WCWaJ9mkow/LqA36ReBL2hBOdkKEBsuXDXOqVOHMP5tDfeLO+mE:3dvWq8uuau9WCWaJAkow/LXQj15tDfev","tlshash":"a6c1c675f8e21aa6704381b72ae6b51ebda8e61bc10fd84c71ecc5d61fc7c698d93008","dom_hash":"domhashcc886e875a3ed81ebe0d4ec0525589d6","first_seen":"2026-04-24T13:51:15.10722Z","last_seen":"2026-04-28T14:08:34.027725Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bep20-usdt-one.vercel.app","fqdn":"bep20-usdt-one.vercel.app","domain":"bep20-usdt-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-02T14:08:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-04-28","alert":"Detects file containing Telegram Bot API","trigger":"bep20-usdt-one.vercel.app/main.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"bep20-usdt-one.vercel.app","ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":3,"request_count":8,"received_data":51145,"sent_data":3635,"comment":"","tags":null,"fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-04-26T22:35:53.043088Z","alert_count":0,"request_count":1,"received_data":761324,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"bep20-usdt-one.vercel.app/main.js","fqdn":"bep20-usdt-one.vercel.app","domain":"bep20-usdt-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"md5":"db6c835479348c0063e75afd637f7f92","sha1":"c91d7d93472ddab4e3e5021c8d70c4769a6900d8","sha256":"22c25f97a461219bf3d7b1e735bd19754a5852c3024c31892b89a8a55f4bd11d","sha512":"ef7ccff4fac6eadc087d6db1f8a41985d1f60a2212fdf8be08f3de5c003455dde862e706f3228dfb3c5d671ee6683dab63710cc31cae4cd86d8a542c0b0ad6e0","size":11661,"token":"8454709623:AAE70RyG3TAJLBKx9kcqq_fAHqypiof833M","is_revoked":false,"bot":{"token":"8454709623:AAE70RyG3TAJLBKx9kcqq_fAHqypiof833M","user_id":"8454709623","username":"Akash1122_bot","first_name":"Hanuman","last_name":"","chat":{"chat_id":"","title":"","type":"","bot_is":"","total_users":0,"active_members":null,"admins":null},"pending_messages":0}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"bep20-usdt-one.vercel.app/","fqdn":"bep20-usdt-one.vercel.app","domain":"bep20-usdt-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4436be55e435cdb4ce98fb721a4df4b1","sha1":"80be671b3a4a1cf8a12217a5ff787935373605df","sha256":"b420646d06a9bb2ebfd720cd33e1f35f7b7fd470a7d59b08f5271183ccded372","sha512":"c31b409f5eb10c447d267733eeecaa909e0c4ed2b17a46f7d81d1105edfbed7a0e574c32627768d5c01f93bb0f5d98a9c2829aef5c949ed3530558bb845cad1f","ssdeep":"","tlshash":"06c012597020696604ce787d4ccf088ebe269412a20849c99ddcd8547fb2e6c42e484c","size":192,"data":"","first_seen":"2025-09-07T13:20:24.46413Z","last_seen":"2026-06-07T04:15:54.83152Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bep20-usdt-one.vercel.app/","fqdn":"bep20-usdt-one.vercel.app","domain":"bep20-usdt-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"244c00a5237c5494404ae3f7c6598bc7","sha1":"cbe3e6cd97aa3dc6bfbb4c1f1865f57e23f32910","sha256":"461381816f1b8115ad7b1f00c3df6f478550bf1826611d32142d394836597239","sha512":"91215761296966edf0162e3102719faf7933e000a1068cb02ad7d2e879924226899fe7405975a70201b3c6d8b4e71676b425896df4c95fd887d46f874bb0e87a","ssdeep":"","tlshash":"b4c08c70481426a13ba86073165d3298f57e0a3e0a05980030d2882f061371eede08ee","size":150,"data":"","first_seen":"2025-10-13T04:46:01.718064Z","last_seen":"2026-06-07T04:15:13.64048Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bep20-usdt-one.vercel.app/config.js","fqdn":"bep20-usdt-one.vercel.app","domain":"bep20-usdt-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"077a511041107738eaf1cc8fec1dbe7e","sha1":"3c7a4d3c086361321534057fa15c8e1dc42f03a1","sha256":"fe6473c2f35b63f3b7d5410f0be8fde0da196e471bcb91473465586ab76fd638","sha512":"03732fdc27ca0d4b98ded88d8ad638d1a7270883b37233dfb5cbbb48703d0494a2aae16e57acbb29250c10fdd8d1f688eeb485abf3eee3b51c9bbde93e4f2b52","ssdeep":"","tlshash":"f61112961b38628215460093ab8ef46178abc27fa508a413346bdf841eb1eb18a770cf","size":1045,"data":"","first_seen":"2026-04-28T14:08:34.032572Z","last_seen":"2026-04-28T14:08:34.032572Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bep20-usdt-one.vercel.app/","fqdn":"bep20-usdt-one.vercel.app","domain":"bep20-usdt-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0c35bf9470068913b5b35a1b0ca83855","sha1":"81b9c77d79c53b7eb5ec95290f959a97707fd555","sha256":"4cecbf49ba9750627d73987c6f521098de15c918c28320e59909806a38385425","sha512":"07e99c7c0ccebf622e67a1503cfb137e659f5cd6efd9ef0fb30ed902bc446ba4d876dbd7e7af8b2a40aa0502575ca53d9d88432a7ff9d25ae7e0d28dc847fbb1","ssdeep":"","tlshash":"e0d0a774446499a57e7c20371b3d3944b97e023a8d1ef44131e7883e465263a95e44ea","size":233,"data":"","first_seen":"2026-04-24T13:51:15.121305Z","last_seen":"2026-04-28T14:08:34.040109Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@5.7.2/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","size":760171,"data":"","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-08-16T22:48:21.134989Z","times_seen":3811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bep20-usdt-one.vercel.app/main.js","fqdn":"bep20-usdt-one.vercel.app","domain":"bep20-usdt-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"db6c835479348c0063e75afd637f7f92","sha1":"c91d7d93472ddab4e3e5021c8d70c4769a6900d8","sha256":"22c25f97a461219bf3d7b1e735bd19754a5852c3024c31892b89a8a55f4bd11d","sha512":"ef7ccff4fac6eadc087d6db1f8a41985d1f60a2212fdf8be08f3de5c003455dde862e706f3228dfb3c5d671ee6683dab63710cc31cae4cd86d8a542c0b0ad6e0","ssdeep":"192:PSPL+bPDgCGoCY7f4ycxmr1ceXekB3kn9DX5YwIAGQ3h8E8rCXp1z:PSPL+bBravN5J8E93","tlshash":"f432b56e167ba060095ba17b2bcb20513137505f7a08ec5137de83510fa9c699af3bfd","size":11661,"data":"","first_seen":"2026-04-28T14:08:34.034053Z","last_seen":"2026-04-28T14:08:34.034053Z","times_seen":1,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-04-28","alert":"Detects file containing Telegram Bot API","trigger":"bep20-usdt-one.vercel.app/main.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bep20-usdt-one.vercel.app/","fqdn":"bep20-usdt-one.vercel.app","domain":"bep20-usdt-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-28T14:08:04.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bep20-usdt-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 22923\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 28 Apr 2026 14:08:04 GMT\r\netag: W/\"3fc1d038e1ea8017ca92a6e934ba8d82\"\r\nlast-modified: Tue, 28 Apr 2026 07:46:00 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jgj2x-1777385284535-eb5390c46c3d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":6426,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"3fc1d038e1ea8017ca92a6e934ba8d82","sha1":"f6096718d3f2b5eec0d83615b5df5654298cbe40","sha256":"3731b693ae51efb04eaeb2605721f11a1960747fbdee87a41c3434b91c306ac4","sha512":"48fb3f53e62608283cbbab6548f504762e9c11ed84e2acc72d1f64f5bae8862e6b275cf81bc4445a657b1454e530fd9f6015b55e20c97c539edb610e818d6770","ssdeep":"96:Wqs/7MmkoR/L35Y5euqxfDfYdO3ApDX9JwYy18YPUeDmWIOeB:WqUNkoR/LYVQjUeDmWIP","tlshash":"d0d1877574c21e666073c3b66aa2b65efa64d21bc30bd94c30eca6971ff3c298d43448","first_seen":"2026-04-24T13:51:15.110859Z","last_seen":"2026-04-28T14:08:34.029443Z","times_seen":2,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":27,"dns":4,"connect":1,"send":0,"wait":10,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"bep20-usdt-one.vercel.app/IMG2.jpg","fqdn":"bep20-usdt-one.vercel.app","domain":"bep20-usdt-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bep20-usdt-one.vercel.app/","date":"2026-04-28T14:08:04.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /IMG2.jpg HTTP/1.1\r\nHost: bep20-usdt-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bep20-usdt-one.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19902\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"IMG2.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Apr 2026 14:08:04 GMT\r\netag: \"156b2a9147afab1dfc7c4e0c951aad95\"\r\nlast-modified: Tue, 28 Apr 2026 08:36:22 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::76pjd-1777385284802-9f1b285225b9\r\ncontent-length: 3706\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3706,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, description=Screenshot, orientation=upper-left, xresolution=110, yresolution=118, resolutionunit=2, datetime=2026:02:06 14:30:43], baseline, precision 8, 63x59, components 3","md5":"156b2a9147afab1dfc7c4e0c951aad95","sha1":"171a60278156f523f6741cca7a7aa80f8b29ec2e","sha256":"f5a9272c70ca8498fc3d46f8762afd2debdb4a8d0993b8b8ceee06144fa5088d","sha512":"96f92a6ed53d434b863790ed87e4956dfad35c6cce3cb58dec35d01677fbca5f41c1ce956da0f32041e445ba53cf1bcdc490ace1c484776e11e6f56da57915c3","ssdeep":"","tlshash":"3b713b25bf0166b4cc5356b7f9639b51e27eeef197a8430b65d000e54f806c1b63b405","first_seen":"2026-04-24T13:51:15.11687Z","last_seen":"2026-08-12T06:37:44.70021Z","times_seen":14,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bep20-usdt-one.vercel.app/IMG_1830%203.jpg","fqdn":"bep20-usdt-one.vercel.app","domain":"bep20-usdt-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bep20-usdt-one.vercel.app/","date":"2026-04-28T14:08:04.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /IMG_1830%203.jpg HTTP/1.1\r\nHost: bep20-usdt-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bep20-usdt-one.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19901\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"IMG_1830 3.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Apr 2026 14:08:04 GMT\r\netag: \"5f44fa69215d0817b8a851d49b5dbbd2\"\r\nlast-modified: Tue, 28 Apr 2026 08:36:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qbndn-1777385284802-67c8cfc2d2b9\r\ncontent-length: 4061\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":4061,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, description=Screenshot, orientation=upper-left, xresolution=110, yresolution=118, resolutionunit=2, datetime=2026:02:06 12:29:13], baseline, precision 8, 74x73, components 3","md5":"5f44fa69215d0817b8a851d49b5dbbd2","sha1":"937417d55a443efb03afb98e76c8232e6889e962","sha256":"27591bbad96e55282b7520f7f30cb4dd1933dfd9fba44e5f06c6d0221a089b7c","sha512":"b102f836c1cda980805aba929140531d4ae66e7e1fddb7fb0838bc482644a210024c32a9391ca61a80d3a09521af9b3c832fa08c0ac461c4b83ff6479675328a","ssdeep":"","tlshash":"1a814b6d77c3ee54e8a308f18963c312d3ddfe62d5a82f93a6d420e847429c5e63d109","first_seen":"2026-04-24T13:51:15.117862Z","last_seen":"2026-08-16T19:56:23.640205Z","times_seen":16,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@5.7.2/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bep20-usdt-one.vercel.app/","date":"2026-04-28T14:08:04.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/ethers@5.7.2/dist/ethers.umd.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bep20-usdt-one.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 14:08:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 168432\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.7.2\r\nx-jsd-version-type: version\r\netag: W/\"b996b-tlFUVYf2JXNF3D3p3apESxDe3z4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220026-FRA, cache-bma-essb1270058-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 3488617\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2JOBrDtpdLC7xQ8MYbrHb1XxgC4WFWtTtmCfFa4jhhSxkveYdV%2FsSZShiqJXOdlXobtydehQqHRTMnRVrQk9kmU1Y%2BsghF8BzmX3iP0M4luIDUn%2FyanrJFgba%2BPFjT6zHNY%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9f36a30e1f4b712b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":760171,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-08-16T22:48:21.134989Z","times_seen":3811,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":6,"dns":1,"connect":1,"send":0,"wait":8,"receive":8,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bep20-usdt-one.vercel.app/config.js","fqdn":"bep20-usdt-one.vercel.app","domain":"bep20-usdt-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bep20-usdt-one.vercel.app/","date":"2026-04-28T14:08:04.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /config.js HTTP/1.1\r\nHost: bep20-usdt-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bep20-usdt-one.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 22814\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"config.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 28 Apr 2026 14:08:04 GMT\r\netag: \"bac32274c22e7360419683fa6db4b96f\"\r\nlast-modified: Tue, 28 Apr 2026 07:47:50 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::f78vn-1777385284806-53fbca61af4b\r\ncontent-length: 709\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1045,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"077a511041107738eaf1cc8fec1dbe7e","sha1":"3c7a4d3c086361321534057fa15c8e1dc42f03a1","sha256":"fe6473c2f35b63f3b7d5410f0be8fde0da196e471bcb91473465586ab76fd638","sha512":"03732fdc27ca0d4b98ded88d8ad638d1a7270883b37233dfb5cbbb48703d0494a2aae16e57acbb29250c10fdd8d1f688eeb485abf3eee3b51c9bbde93e4f2b52","ssdeep":"","tlshash":"f61112961b38628215460093ab8ef46178abc27fa508a413346bdf841eb1eb18a770cf","first_seen":"2026-04-28T14:08:34.032572Z","last_seen":"2026-04-28T14:08:34.032572Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bep20-usdt-one.vercel.app/main.js","fqdn":"bep20-usdt-one.vercel.app","domain":"bep20-usdt-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bep20-usdt-one.vercel.app/","date":"2026-04-28T14:08:04.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /main.js HTTP/1.1\r\nHost: bep20-usdt-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bep20-usdt-one.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"main.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 28 Apr 2026 14:08:04 GMT\r\netag: \"67e77fd2c582cf4961eb97f416f84571\"\r\nlast-modified: Tue, 28 Apr 2026 14:08:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dpt87-1777385284806-cae2e4a47bb9\r\ncontent-length: 3730\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11667,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"db6c835479348c0063e75afd637f7f92","sha1":"c91d7d93472ddab4e3e5021c8d70c4769a6900d8","sha256":"22c25f97a461219bf3d7b1e735bd19754a5852c3024c31892b89a8a55f4bd11d","sha512":"ef7ccff4fac6eadc087d6db1f8a41985d1f60a2212fdf8be08f3de5c003455dde862e706f3228dfb3c5d671ee6683dab63710cc31cae4cd86d8a542c0b0ad6e0","ssdeep":"192:PSPL+bPDgCGoCY7f4ycxmr1ceXekB3kn9DX5YwIAGQ3h8E8rCXp1z:PSPL+bBravN5J8E93","tlshash":"f432b56e167ba060095ba17b2bcb20513137505f7a08ec5137de83510fa9c699af3bfd","first_seen":"2026-04-28T14:08:34.034053Z","last_seen":"2026-04-28T14:08:34.034053Z","times_seen":1,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-04-28","alert":"Detects file containing Telegram Bot API","trigger":"bep20-usdt-one.vercel.app/main.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"bep20-usdt-one.vercel.app/style.css","fqdn":"bep20-usdt-one.vercel.app","domain":"bep20-usdt-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bep20-usdt-one.vercel.app/","date":"2026-04-28T14:08:04.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: bep20-usdt-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bep20-usdt-one.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"style.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Tue, 28 Apr 2026 14:08:05 GMT\r\netag: \"fcf933728bd26caa3b83e8fd04a1ff38\"\r\nlast-modified: Tue, 28 Apr 2026 14:08:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zht5w-1777385284801-247bb6818eec\r\ncontent-length: 3869\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":16465,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"a415aac7ffeb8678f276930aaafa57b3","sha1":"9bd4f4a252125122743053f891491663d9e4c872","sha256":"d4ce296fb2399d842b732cd930898f96004144ef16fbb061eeb56a509fc72b20","sha512":"0e539a4ec64370cc318b8640e2966c88397ed96fb7c8033b8cba4e99c53977a9f504e0e7565ca849c2fe91eb8401add1d10e7d2ad95c56792ad7acd9941c6bbf","ssdeep":"192:kAfP5BgAgAfP5BgAjBAuiDb1LKquuMU7sN1OwSHsfjkEHOlL7D/8PMeDNEWAw6qd:/BgADBgAZFOhLP/K5Nz","tlshash":"11722014960295026f338ffab3d6a60bfb2b40abcf22a17db6c451058ff557059d1e8d","first_seen":"2025-09-21T18:52:40.582545Z","last_seen":"2026-08-16T09:03:58.845986Z","times_seen":104,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bep20-usdt-one.vercel.app/IMG1.jpg","fqdn":"bep20-usdt-one.vercel.app","domain":"bep20-usdt-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bep20-usdt-one.vercel.app/","date":"2026-04-28T14:08:04.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /IMG1.jpg HTTP/1.1\r\nHost: bep20-usdt-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bep20-usdt-one.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19902\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"IMG1.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Apr 2026 14:08:04 GMT\r\netag: \"ab5f5ab78706b058f689db803ec36737\"\r\nlast-modified: Tue, 28 Apr 2026 08:36:22 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5vd88-1777385284801-840d4b1422c5\r\ncontent-length: 3450\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3450,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, description=Screenshot, orientation=upper-left, xresolution=110, yresolution=118, resolutionunit=2, datetime=2026:02:06 12:28:44], baseline, precision 8, 63x64, components 3","md5":"ab5f5ab78706b058f689db803ec36737","sha1":"9055257461c278d641fc637fa27621ea2801b336","sha256":"0a864113271a5601da09aac1c19155593efbd052573ed6c4f4172a64c2d9f926","sha512":"04ecf09e97cd4e507f0f8c4e1cde066ca8288573f68be6f2eda2de70ff2a9be4dc7f987f4a23436558362939004aaa7a8fbd619930e315df80bd6a2a3f0fdd26","ssdeep":"","tlshash":"05613b53b3a1271cc9c596b6a4610b12d1aeeb51ffa8278be4c037d6b9a04c27e1e641","first_seen":"2026-04-24T13:51:15.111857Z","last_seen":"2026-08-12T06:37:44.699597Z","times_seen":14,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bep20-usdt-one.vercel.app/favicon.ico","fqdn":"bep20-usdt-one.vercel.app","domain":"bep20-usdt-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bep20-usdt-one.vercel.app/","date":"2026-04-28T14:08:05.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bep20-usdt-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bep20-usdt-one.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Tue, 28 Apr 2026 14:08:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::76pjd-1777385285233-f34dc31181c9\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"1ffea6f862b4b1ce794362e1563bc075","sha1":"dee427de7a436c3887d1fc400680635570c5ad8e","sha256":"b2eaedf006d1b2f70e2ad44fde6127f32993f17a27e7ed31c3382a9d520a3133","sha512":"ac434b65fd69afd5f44e3f56c533a4e4cb05a067555bc4155cc95539bb6ee64258fba443184f6b520ce215785efa2c36da60563e785a73871a88f689365f55b9","ssdeep":"","tlshash":"f1a0112f20888e0eb3c808c022220a3a00208233aab0ee00a8c82a28200c2cea308080","first_seen":"2026-04-28T14:08:34.03778Z","last_seen":"2026-04-28T14:08:34.03778Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}