{"report_id":"2c314fb3-8376-4fc3-b045-6e2b28941a7a","version":6,"status":"done","tags":["scam","fraud","crypto"],"date":"2026-02-19T06:36:47Z","url":{"schema":"https","addr":"tether-confirmation.com/checking.html","fqdn":"tether-confirmation.com","domain":"tether-confirmation.com","tld":"com"},"ip":{"addr":"104.21.83.194","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"tether-confirmation.com/checking.html","fqdn":"tether-confirmation.com","domain":"tether-confirmation.com","tld":"com"},"title":"Wallet Check - AML Check","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T23:47:09.405404Z","times_seen":17680682,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"tether-confirmation.com/checking.html","fqdn":"tether-confirmation.com","domain":"tether-confirmation.com","tld":"com"},"ip":{"addr":"104.21.83.194","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-26T06:36:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null},{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]},"summary":[{"fqdn":"min-api.cryptocompare.com","ip":{"addr":"20.4.130.154","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"domain_registered":"2013-11-03","domain_rank":433733,"first_seen":"2017-01-31T12:53:23Z","last_seen":"2026-02-14T04:58:39.948009Z","alert_count":0,"request_count":1,"received_data":762,"sent_data":533,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-15T22:17:53.373077Z","alert_count":0,"request_count":1,"received_data":25422,"sent_data":554,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-15T22:14:55.382377Z","alert_count":0,"request_count":3,"received_data":148101,"sent_data":1689,"comment":"","tags":null,"fingerprints":null},{"fqdn":"tether-confirmation.com","ip":{"addr":"172.67.181.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":17,"request_count":17,"received_data":8484589,"sent_data":8162,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"tether-confirmation.com/assets/w-loader.js","fqdn":"tether-confirmation.com","domain":"tether-confirmation.com","tld":"com"},"ip":{"addr":"172.67.181.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b64ec349c7eeb4324f4e7c20eb7fc98","sha1":"c09046d05daa28ef73e4bf3b58bd6518ce98a271","sha256":"801d62fc02f89e7c1b414392e066dcda139ea3154cb3a48da721ff9a9df49f1f","sha512":"e92c61f409b0a56e41654c1f867089473bed649bf3a8d7167fd1a179993295863f20d0a63b20c5e2c20ba6ee55dab82802c06591cd39d188489a479deefc8b23","ssdeep":"768:sCoOXPhfU4Ui8YG7uOFQgauwF4ifTSQoc8S:SOXXwYG7XQTd4irgS","tlshash":"5b13b8f957a0a8f089a787d5aa131e09fa159c77c7624315f2bc274dbfd2e0cc806e91","size":41716,"data":"","first_seen":"2023-10-17T15:07:19Z","last_seen":"2026-08-01T08:27:41.615572Z","times_seen":403,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tether-confirmation.com/assets/w-modal.js","fqdn":"tether-confirmation.com","domain":"tether-confirmation.com","tld":"com"},"ip":{"addr":"172.67.181.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eed7d4b80780bb8adee3cbc67d7f98ff","sha1":"20f450d0eaf88312c005763e9036aeed80a225a0","sha256":"5e0ebe3158a15aba5a5e00e9bb2327769203ed6c28b6fd7aca2155d7e05cadc4","sha512":"66c43c8d29392d3e8435d8273fa23c2653e3cf4a36d875f97195100121e59ba73c1b8c7430c41a01a765893f4f0b97b3c153ede123d688ba3f00fcbe7fd74d96","ssdeep":"384:yuWDxb0OzbJ3vF/ll0blqHuCUCaDr/S1ziayMkrN21GecFZPtDQseaTrHyhfdsG2:KV39Nl08O/CaDbS1/k97rShZFc/","tlshash":"acf286f02bec12b4853f434376592d74bb1114fa9ebabf4575fe1a828f96e0c412a4d2","size":37639,"data":"","first_seen":"2024-05-02T20:25:27Z","last_seen":"2026-08-01T08:27:41.607923Z","times_seen":207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tether-confirmation.com/tronkit.js","fqdn":"tether-confirmation.com","domain":"tether-confirmation.com","tld":"com"},"ip":{"addr":"172.67.181.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9f698bd28170018bd9d7eb3efcef7f0","sha1":"c1821a109da13253cfb342bcc04bd5da3b9ad5b3","sha256":"1eaedccd3be949fbb1457059f607934460949605e13c02082b6a4087960560a9","sha512":"71f56ffcdae9948336855e07f565893aa5ae44fdb6af3159f684fe96bd9546989ec6dcd066f8a604ae641ecec7a9b881266bba9b15833cf20d8c7359398840ec","ssdeep":"24576:Dfprpums3V0sg7+pgWbuHW8rbw9pfFeH2s1B:Dfprpums3V0sg7+pgWbuHW8rbw9pfFeF","tlshash":"384593496ef750315a27b07d5b1bd405b338d8072009de58be9c97a06f859388afaff8","size":1166811,"data":"","first_seen":"2026-02-06T23:10:02.444442Z","last_seen":"2026-02-19T06:36:59.58372Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tether-confirmation.com/assets/modulepreload-polyfill-B5Qt9EMX.js","fqdn":"tether-confirmation.com","domain":"tether-confirmation.com","tld":"com"},"ip":{"addr":"172.67.181.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ecade416f429813a6fa1e1d969883c66","sha1":"7a2613dd8fe3b82021cf37b0845cb73de5a3ee38","sha256":"d2a32840421496e872ade591618d2fa5c33797605d1aec04301717e5a90757d0","sha512":"6b54ce8b3c94e8aa8f5fb503f48c0f0385b455f1475e178aecfebc45d366351b74d4bda0fa378e8b7198cfdf4de0778096d92ab538dc2d1c14edc7e8c3a3930b","ssdeep":"","tlshash":"4201c0e83496e106115a0eadf1b3c618fa94345238a6e4c0d05c2cd9a76bcc0a5a5d4d","size":711,"data":"","first_seen":"2023-05-24T13:14:00Z","last_seen":"2026-08-02T19:24:39.732742Z","times_seen":2061,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tether-confirmation.com/assets/checking-BjPLURPq.js","fqdn":"tether-confirmation.com","domain":"tether-confirmation.com","tld":"com"},"ip":{"addr":"172.67.181.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"91fc1d7818271abda08c164720f96b44","sha1":"bbb88d55d5ef48876a86e8f8d16a88540e56ac7c","sha256":"e51ba6a4fff56a926f4bb036c24a6c6749eea311187ef3b34bac0ccbcd729862","sha512":"6e51e8c1bbb88d101362537fabf95e01ee5dfb4ae059b852fed8bb8cc9e255d16a2d7821b0f1c9395fddf9bae2a2d432d0bf2381e945c8c3ba0e71362c81f45a","ssdeep":"","tlshash":"5281d9722229553212ea02a51369775437b50c40390608fc2bfe48f5e6b5fc7ed7bbd6","size":3916,"data":"","first_seen":"2026-02-06T23:10:02.426036Z","last_seen":"2026-02-19T06:36:59.578171Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tether-confirmation.com/assets/main.js","fqdn":"tether-confirmation.com","domain":"tether-confirmation.com","tld":"com"},"ip":{"addr":"172.67.181.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"090a0a08d0efe445603ebe07068ccc9e","sha1":"82e1b8f38d16efe0d0023988ffbdaa1042e4208c","sha256":"7bc303e8ce22cc2bd8d70754b78ffb9be23b18b97a1f3a003f1f0de96d6d08e3","sha512":"96719689b1d40d314e495defd58fd52da7ab14d5816d1a9222f783c38efdcb296571553fe756ecd0884f4124a37405074f3585473e663bbbe47771b38923042f","ssdeep":"3072:1fj9pumWj4ySX7fx0cdwflmt5Jc5INUZ8OSvacVf2vRxv+:1fhpW3SX7fx0cdwNZHM3","tlshash":"9ce45592b1423dd90c09773f352a5651643ee483a24eb475f7dc9facaceca422f907a1","size":666503,"data":"","first_seen":"2026-02-06T23:10:02.442252Z","last_seen":"2026-02-19T06:36:59.582933Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tether-confirmation.com/assets/modules.js","fqdn":"tether-confirmation.com","domain":"tether-confirmation.com","tld":"com"},"ip":{"addr":"172.67.181.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd7888c17d986b6122e6a9397cf907d6","sha1":"b4d8de352083413f9352fdb221525c81540a6a0a","sha256":"e531262f2af00276370279551348f4949a9d28b26af6be5f9a64cc496ac0b78a","sha512":"79f4a147849ba685e56a07f91c574d9970c5cb743ef6081fd2b4760e8656f760b92ead577d55004ab46158599d8c7cf554c3d53304070bf47b2ae97a2c944854","ssdeep":"49152:BC0EJoL7vMPaypp3JZ4CQmB0Rcj206bYF2Xi/Mf4hPGnN9EYtwkak9CGglx:Mmy3zQkA6mEwtwyjax","tlshash":"ff567dd073a0b0a5439752d0442bd005f339a82a644c449ff6efe8e76fa9e899537f39","size":6101525,"data":"","first_seen":"2025-05-16T16:12:44.565992Z","last_seen":"2026-08-01T08:27:41.697502Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tether-confirmation.com/checking.html","date":"2026-02-19T06:36:26.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://tether-confirmation.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 07:08:14 GMT\r\nexpires: Sat, 13 Feb 2027 07:08:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 516492\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-02T23:46:43.449682Z","times_seen":251397,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":61,"dns":0,"connect":7,"send":0,"wait":9,"receive":11,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tether-confirmation.com/evm/","fqdn":"tether-confirmation.com","domain":"tether-confirmation.com","tld":"com"},"ip":{"addr":"172.67.181.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tether-confirmation.com/checking.html","date":"2026-02-19T06:36:26.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tether-confirmation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:31:48 GMT","end":"Mon, 11 May 2026 17:30:22 GMT"},"fingerprint":{"sha1":"D2:97:27:FA:DD:37:82:70:4A:CA:7A:FA:C6:7C:A0:CC:19:92:41:D7","sha256":"3B:7E:62:51:48:21:87:F0:56:8A:57:79:06:3E:02:2F:55:AC:F6:95:ED:3D:DC:1D:BB:CE:EE:5E:25:1B:86:03"}}},"request":{"raw":"POST /evm/ HTTP/1.1\r\nHost: tether-confirmation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tether-confirmation.com/checking.html\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 519\r\nOrigin: https://tether-confirmation.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":519,"data":"v=150725\u0026s=1\u0026r=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"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:36:26 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"b390-RhfMWlFHFOWUkUkX19bkJZfGVu0\"\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b7ZSAWwzIU04s3BpmGlRyIrORzrez0UjIn6kP9MSxfQPzZS08v%2BFGhinuZgokfiEyul8xAGoI6ubkh%2BfmuG2qTXk23bY6cMdPdL4yNmalOtOBHeUGpzt\"}]}\r\ncf-ray: 9d03bff89dbddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45968,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with very long lines (45968), with no line terminators","md5":"b951d7775e1cc5397db0bd2ea2b1e8cd","sha1":"4617cc5a514714e594914917d7d6e42597c656ed","sha256":"b4ed8191af11a999cc38e1f6ac1fbf5f2ebe50ab8cfcc92679a86501b082fc43","sha512":"d991eb4f74abb53529743890dd5ac2aa28a5192bcb8bbf8ef4b50997614226b3e1360cbc366d3a6b8fff95e2f3923fbf5f97afd6341fbdff7027b146640a9788","ssdeep":"384:/AEqBSSa6RE/Q6y4wXdX6OMoh6RJeJPJ3JDJf6TJ8FS6n+3SaIYnGS+zJJtoLAlb:/rqBSqfqf0eGdocWkqWwoTsSx","tlshash":"eb23ac79b9893ce153aec62bd6ece5a8e65257f0448b804c435a52f02323e5dfe64c27","first_seen":"2026-02-06T23:10:02.439164Z","last_seen":"2026-02-19T06:36:59.56961Z","times_seen":3,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"tether-confirmation.com/assets/modules.js","fqdn":"tether-confirmation.com","domain":"tether-confirmation.com","tld":"com"},"ip":{"addr":"172.67.181.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tether-confirmation.com/checking.html","date":"2026-02-19T06:36:23.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tether-confirmation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:31:48 GMT","end":"Mon, 11 May 2026 17:30:22 GMT"},"fingerprint":{"sha1":"D2:97:27:FA:DD:37:82:70:4A:CA:7A:FA:C6:7C:A0:CC:19:92:41:D7","sha256":"3B:7E:62:51:48:21:87:F0:56:8A:57:79:06:3E:02:2F:55:AC:F6:95:ED:3D:DC:1D:BB:CE:EE:5E:25:1B:86:03"}}},"request":{"raw":"GET /assets/modules.js HTTP/1.1\r\nHost: tether-confirmation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tether-confirmation.com/checking.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:36:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Ed%2B7kfDUuaE64wG3tE6E6a2i7BbAuvkOBi5SKZGbIV85SW4oUUjDts5uW4vLQq8jRmQa8A%2BVV9avhgOpGe1GXW%2BGNMLLwyc5ls3QU2%2BZfAVEPpv7Bcx\"}]}\r\nlast-modified: Mon, 02 Feb 2026 00:53:13 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"697ff579-5d1a20\"\r\ncf-ray: 9d03bfe6bad4dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6101536,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"3b213a32f63e7967e9c2a5535806df09","sha1":"2198e24da34b883543f6b2bb3b3e315cfc5452b0","sha256":"1c56392da634c53a1450bcebb75428d63339a9bdc0e7e4602c0b674dbf27696f","sha512":"1a44f17a2865c14c3570dffb931bdcf07e5d8b7670fcb5154d1088d6fd10d4406acab0e00d666528882f9d91abc635f96b139f64a467c540b695c2c69a70f8a3","ssdeep":"12288:BMGk0Eqoh8EYL7qjs30amseucfju2ZAyppl:BZk0EJGEYL7v0F7Payppl","tlshash":"c9254a8473a1f076439725a4543f100af239b86c384d446cf768eceb7da9989963bf39","first_seen":"2025-07-27T10:34:55.50581Z","last_seen":"2026-08-02T06:31:06.766652Z","times_seen":167,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":326,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"min-api.cryptocompare.com/data/pricemulti?fsyms=ETH,BNB,MATIC,AVAX,ARB,FTM,OP\u0026tsyms=USD","fqdn":"min-api.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"20.4.130.154","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tether-confirmation.com/checking.html","date":"2026-02-19T06:36:25.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"min-api.cryptocompare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 16:51:02 GMT","end":"Sat, 09 May 2026 16:51:01 GMT"},"fingerprint":{"sha1":"0F:6D:F3:9D:A3:B2:69:AD:D0:53:45:D7:4F:B0:14:DB:D5:02:E7:FB","sha256":"18:DF:3C:73:28:AD:76:02:F3:5C:88:EC:50:60:3B:37:05:36:33:9C:D1:26:9A:21:C7:9D:52:35:B4:0A:2C:92"}}},"request":{"raw":"GET /data/pricemulti?fsyms=ETH,BNB,MATIC,AVAX,ARB,FTM,OP\u0026tsyms=USD HTTP/1.1\r\nHost: min-api.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tether-confirmation.com/\r\nOrigin: https://tether-confirmation.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 19 Feb 2026 06:36:25 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Security-Policy: frame-ancestors 'none'\r\nAccess-Control-Allow-Origin: https://tether-confirmation.com\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type, Cookie, Set-Cookie, Authorization\r\nAccess-Control-Allow-Credentials: true\r\nCache-Control: public, max-age=10\r\nX-CryptoCompare-Cache-HIT: false\r\nX-CryptoCompare-Server-Id: cc-api-min-v2-10\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":151,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b3161c7bde881fd14be1dea7945a03b7","sha1":"46cb6a77f9ad7dbf4f3c618c308d851a8c863dfa","sha256":"d645ecc1f61f0045a3f9f6704e1cb2cb9e652646397ce35cbdffda1781b11ea6","sha512":"f923cbd9b89af0900d6f77d53a7a4eb8a619999bf3b7dd9ba3b48d502d74613af8bef889c71f7e9a4300a545f7132052bceed2f1216a81be2c92a91add418f39","ssdeep":"","tlshash":"45c02b49ccdd60f85302fc0b3cc0f0f080004424c3004218d0151f6dced40cf40cc011","first_seen":"2026-02-19T06:36:59.571155Z","last_seen":"2026-02-19T06:36:59.571155Z","times_seen":1,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":91,"dns":22,"connect":18,"send":0,"wait":37,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tether-confirmation.com/api/visit","fqdn":"tether-confirmation.com","domain":"tether-confirmation.com","tld":"com"},"ip":{"addr":"172.67.181.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tether-confirmation.com/checking.html","date":"2026-02-19T06:36:25.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tether-confirmation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:31:48 GMT","end":"Mon, 11 May 2026 17:30:22 GMT"},"fingerprint":{"sha1":"D2:97:27:FA:DD:37:82:70:4A:CA:7A:FA:C6:7C:A0:CC:19:92:41:D7","sha256":"3B:7E:62:51:48:21:87:F0:56:8A:57:79:06:3E:02:2F:55:AC:F6:95:ED:3D:DC:1D:BB:CE:EE:5E:25:1B:86:03"}}},"request":{"raw":"POST /api/visit HTTP/1.1\r\nHost: tether-confirmation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tether-confirmation.com/checking.html\r\nContent-Type: application/json\r\nContent-Length: 110\r\nOrigin: https://tether-confirmation.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":110,"data":"{\"type\":\"enter\",\"device\":\"desktop\",\"screen\":\"1280x1024\",\"url\":\"https://tether-confirmation.com/checking.html\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:36:25 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wdq1cYYTmv3OnZZ3Q2t5%2BT6JV%2BtSlkO8KbqteM2NS01%2BDC9M3twLN0G%2BxZqUFDVIrTKTtw1ifVbx7m1gwy39tzFPUsuupTNjk0mfbsFJ5GKj0wR4oS0X\"}]}\r\npriority: u=4,i=?0\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccess-control-allow-origin: https://tether-confirmation.com\r\nvary: Origin\r\netag: W/\"b-Ai2R8hgEarLmHKwesT1qcY913ys\"\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d03bff33cccdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"82380d1e263b6093f3c7535690fcdd75","sha1":"022d91f218046ab2e61cac1eb13d6a718f75df2b","sha256":"4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93","sha512":"180ea3cf6e7a00cb12ecff7ce095b8cef1921621de681a64e5e53e3efc0cf6053e557205f2bdb9b9d5af4de3d54c79d1c9b1c474b83897590c647b1e92d9c93a","ssdeep":"","tlshash":"2a500003000c0030c00003000300ff30000300300000000c000c3000033000c0003c03","first_seen":"2023-04-05T15:24:10Z","last_seen":"2026-08-02T22:28:55.784325Z","times_seen":17360,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"tether-confirmation.com/evm/","fqdn":"tether-confirmation.com","domain":"tether-confirmation.com","tld":"com"},"ip":{"addr":"172.67.181.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tether-confirmation.com/checking.html","date":"2026-02-19T06:36:25.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tether-confirmation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:31:48 GMT","end":"Mon, 11 May 2026 17:30:22 GMT"},"fingerprint":{"sha1":"D2:97:27:FA:DD:37:82:70:4A:CA:7A:FA:C6:7C:A0:CC:19:92:41:D7","sha256":"3B:7E:62:51:48:21:87:F0:56:8A:57:79:06:3E:02:2F:55:AC:F6:95:ED:3D:DC:1D:BB:CE:EE:5E:25:1B:86:03"}}},"request":{"raw":"POST /evm/ HTTP/1.1\r\nHost: tether-confirmation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tether-confirmation.com/checking.html\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 503\r\nOrigin: https://tether-confirmation.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":503,"data":"v=150725\u0026s=1\u0026r=08142705345e3f1d0f5f59042204271437353f140c3a3b5f373b541d372e241e24003f1b0f3a2b1d0f04245b24033f01092a05010e045c070f5f58000c35271934353f1d0f5f5918345f541924041a04095f54140c5f3b14355f010624071d18093a151e212e275c0e5f3b14355f010624071d18093a151e212e271937352317343a0901355e3f172407021523170e1523290a1422390a5c23290e5e212e27070c2a2b5d355f3f05092a2804220037050f252301212e275e343a151e37353f0b343a3f060e003b170e14245b0f033b1e0f2e1a040e2a2b14092a58010e015405372a3f143735231724071d00343a151737355d50"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:36:25 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"48-bP3lhuKTKG3q3+7uWIR7507Y35U\"\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2sJ77axJrn%2FclRkxIfv0b9k1bV73CfickdPX8utr%2BGAmLhfaemiuhEGTzLdv7etkislmrco120xlnAnkpXgrQZ0g1dwLV5fe2DAAz%2BvuF8Kv2Ui2nwp%2F\"}]}\r\ncf-ray: 9d03bff54d23dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":72,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"d712b775d05222d942b7df2ed83bd018","sha1":"6cfde586e293286deadfeeee58847be74ed8df95","sha256":"9820e62d89e1a3888b4eefe8eb886680ccf25ea8e66f0b234a6aa7384dac55be","sha512":"702e5808f0f649e419e4cfbe8168c730f92c0f9b5e9e11058c18350f90d07cc104c1a199fa221d2d22357f3db319a2bff6624e72707d5cc60efa38a1932c3777","ssdeep":"","tlshash":"87a02200f0c800fb008bc0038b0023b8a03ce2c0028bc20c833303f80828e000c0aaa0","first_seen":"2026-02-19T06:36:59.573176Z","last_seen":"2026-02-19T06:36:59.573176Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tether-confirmation.com/checking.html","date":"2026-02-19T06:36:26.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://tether-confirmation.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 07:08:14 GMT\r\nexpires: Sat, 13 Feb 2027 07:08:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 516492\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-02T23:46:43.449682Z","times_seen":251397,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":67,"dns":1,"connect":8,"send":0,"wait":16,"receive":6,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tether-confirmation.com/checking.css","fqdn":"tether-confirmation.com","domain":"tether-confirmation.com","tld":"com"},"ip":{"addr":"172.67.181.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tether-confirmation.com/checking.html","date":"2026-02-19T06:36:23.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tether-confirmation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:31:48 GMT","end":"Mon, 11 May 2026 17:30:22 GMT"},"fingerprint":{"sha1":"D2:97:27:FA:DD:37:82:70:4A:CA:7A:FA:C6:7C:A0:CC:19:92:41:D7","sha256":"3B:7E:62:51:48:21:87:F0:56:8A:57:79:06:3E:02:2F:55:AC:F6:95:ED:3D:DC:1D:BB:CE:EE:5E:25:1B:86:03"}}},"request":{"raw":"GET /checking.css HTTP/1.1\r\nHost: tether-confirmation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tether-confirmation.com/checking.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:36:23 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NSARrHGlx4k3fkSHaxCmH3%2BhU3VkjlpP7DAs0xZufzHos1g5dZDSyHwviJ6nvlk5GEByxp2xmb1z6AG8WbqTwQa%2FIm5IQL8KWIilbSL4nYmB5vcrE%2FMQ\"}]}\r\nlast-modified: Mon, 02 Feb 2026 06:14:40 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"698040d0-1c03\"\r\ncf-ray: 9d03bfe6aacadfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7171,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f98349e0c536f075be8772c60bfec150","sha1":"b098d066e209626a792e33ef0da8185f7618510b","sha256":"5dd814504903dabef7f0af781a25269f3553cf44b9f1fd82c9346657821f1d44","sha512":"d9e854a8c53e685eaeb89177a4e9f7d824300e4e44508ff793d541c5a7ccc9e8a6eb43a8f7aedd26b9ef9267a12591eb4fa844ed5090d2c239ec45992a412021","ssdeep":"96:X8HDiB/9JIPG0WLMHv71sxn5PedBq3Cdi:X8HDiB/9JINWSv71sxn9edBqL","tlshash":"42e1233737146445b30b95687f646bdbc70e5422ae0e4ffe99a1197cc1cd18528b2bce","first_seen":"2026-02-06T23:10:02.439998Z","last_seen":"2026-02-19T06:36:59.574425Z","times_seen":3,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"tether-confirmation.com/networks/erc-logo.png","fqdn":"tether-confirmation.com","domain":"tether-confirmation.com","tld":"com"},"ip":{"addr":"172.67.181.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tether-confirmation.com/checking.html","date":"2026-02-19T06:36:23.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tether-confirmation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:31:48 GMT","end":"Mon, 11 May 2026 17:30:22 GMT"},"fingerprint":{"sha1":"D2:97:27:FA:DD:37:82:70:4A:CA:7A:FA:C6:7C:A0:CC:19:92:41:D7","sha256":"3B:7E:62:51:48:21:87:F0:56:8A:57:79:06:3E:02:2F:55:AC:F6:95:ED:3D:DC:1D:BB:CE:EE:5E:25:1B:86:03"}}},"request":{"raw":"GET /networks/erc-logo.png HTTP/1.1\r\nHost: tether-confirmation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tether-confirmation.com/checking.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:36:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 160579\r\nlast-modified: Mon, 02 Feb 2026 00:52:36 GMT\r\npriority: u=4,i=?0\r\netag: \"697ff554-27343\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YtVGEe04%2FasmqH2kA1gFCiIon5i40VaZoYZVcY8MtAHKGNOx6Z7LnK0EEo0iv5yxXkx6GSd4OSXFYzzqSCisB18SdhYoUXQItrD%2B9V9PZbeZ0InEXDIF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d03bfe6bacfdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":160579,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3258 x 3258, 8-bit/color RGBA, non-interlaced","md5":"86b356aa4636232f3e200c65d2a8b6b4","sha1":"3f415cd75e8a755a032ae16a3406c41dcc2d667a","sha256":"7af0cf14f1d0a35e2446b1ad8db4fc424c6735c4ca2ded1410f8d3ad69456913","sha512":"a2e8a2b8039b0a0f3fbd8d4a89554b313f7cab24530426eafc2d9a1b63e5c126fb419b61826894a2cc5f42f2c298151cec05d0e73aae55f419da60ad02b45a38","ssdeep":"1536:oU+xMzsj5wW0nmkkIX0fJNWuimucyv/QqBqdXi532C6yeoGBtAtFpj9j8GgG8cSx:3+az2GRnb3p/532RFK7ph8GZ2qiXK+","tlshash":"59f34beb9f2bccf9856a317f7baf0c2296d1db656395928653c1c11f7f8d0200a05a8c","first_seen":"2023-05-21T17:02:57Z","last_seen":"2026-08-02T16:40:36.981503Z","times_seen":1518,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"tether-confirmation.com/assets/w-modal.js","fqdn":"tether-confirmation.com","domain":"tether-confirmation.com","tld":"com"},"ip":{"addr":"172.67.181.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tether-confirmation.com/checking.html","date":"2026-02-19T06:36:23.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tether-confirmation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:31:48 GMT","end":"Mon, 11 May 2026 17:30:22 GMT"},"fingerprint":{"sha1":"D2:97:27:FA:DD:37:82:70:4A:CA:7A:FA:C6:7C:A0:CC:19:92:41:D7","sha256":"3B:7E:62:51:48:21:87:F0:56:8A:57:79:06:3E:02:2F:55:AC:F6:95:ED:3D:DC:1D:BB:CE:EE:5E:25:1B:86:03"}}},"request":{"raw":"GET /assets/w-modal.js HTTP/1.1\r\nHost: tether-confirmation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tether-confirmation.com/checking.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:36:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WHFAv17eYjGAqilxUfprUHAPWy8AC83NkBCRmBOQsdCyjnbv1PVCCN08DG4ojL7nocSUvbaUIwhjh%2FnDQPwhqe64VMhLLVq90G9rqt%2F6q1WrBuZ2qdDF\"}]}\r\nlast-modified: Mon, 02 Feb 2026 00:51:39 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"697ff51b-9307\"\r\ncf-ray: 9d03bfe6bad2dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37639,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (2304), with CRLF line terminators","md5":"eed7d4b80780bb8adee3cbc67d7f98ff","sha1":"20f450d0eaf88312c005763e9036aeed80a225a0","sha256":"5e0ebe3158a15aba5a5e00e9bb2327769203ed6c28b6fd7aca2155d7e05cadc4","sha512":"66c43c8d29392d3e8435d8273fa23c2653e3cf4a36d875f97195100121e59ba73c1b8c7430c41a01a765893f4f0b97b3c153ede123d688ba3f00fcbe7fd74d96","ssdeep":"384:yuWDxb0OzbJ3vF/ll0blqHuCUCaDr/S1ziayMkrN21GecFZPtDQseaTrHyhfdsG2:KV39Nl08O/CaDbS1/k97rShZFc/","tlshash":"acf286f02bec12b4853f434376592d74bb1114fa9ebabf4575fe1a828f96e0c412a4d2","first_seen":"2024-05-02T20:25:27Z","last_seen":"2026-08-01T08:27:41.607923Z","times_seen":207,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"tether-confirmation.com/assets/modulepreload-polyfill-B5Qt9EMX.js","fqdn":"tether-confirmation.com","domain":"tether-confirmation.com","tld":"com"},"ip":{"addr":"172.67.181.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tether-confirmation.com/checking.html","date":"2026-02-19T06:36:23.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tether-confirmation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:31:48 GMT","end":"Mon, 11 May 2026 17:30:22 GMT"},"fingerprint":{"sha1":"D2:97:27:FA:DD:37:82:70:4A:CA:7A:FA:C6:7C:A0:CC:19:92:41:D7","sha256":"3B:7E:62:51:48:21:87:F0:56:8A:57:79:06:3E:02:2F:55:AC:F6:95:ED:3D:DC:1D:BB:CE:EE:5E:25:1B:86:03"}}},"request":{"raw":"GET /assets/modulepreload-polyfill-B5Qt9EMX.js HTTP/1.1\r\nHost: tether-confirmation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tether-confirmation.com/assets/checking-BjPLURPq.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:36:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CLilnJdU2zcgqk9qZ%2FCPnKoQ4ABWI3joIyb293WNtafjjjPg45RgjX%2FqFA9Hqg4sbagwo5aEJr6MeEQp4mOB9QWTbU0r3A0ZADexQnjkRnRg6uAhspHh\"}]}\r\nlast-modified: Mon, 02 Feb 2026 06:14:44 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"698040d4-2c7\"\r\ncf-ray: 9d03bfe74af5dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":711,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (710)","md5":"ecade416f429813a6fa1e1d969883c66","sha1":"7a2613dd8fe3b82021cf37b0845cb73de5a3ee38","sha256":"d2a32840421496e872ade591618d2fa5c33797605d1aec04301717e5a90757d0","sha512":"6b54ce8b3c94e8aa8f5fb503f48c0f0385b455f1475e178aecfebc45d366351b74d4bda0fa378e8b7198cfdf4de0778096d92ab538dc2d1c14edc7e8c3a3930b","ssdeep":"","tlshash":"4201c0e83496e106115a0eadf1b3c618fa94345238a6e4c0d05c2cd9a76bcc0a5a5d4d","first_seen":"2023-05-24T13:14:00Z","last_seen":"2026-08-02T19:24:39.732742Z","times_seen":2061,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026family=Nunito:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tether-confirmation.com/checking.html","date":"2026-02-19T06:36:25.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026family=Nunito:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tether-confirmation.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 19 Feb 2026 06:36:25 GMT\r\ndate: Thu, 19 Feb 2026 06:36:25 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24736,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c98488a0e7e032c7dd0338081f4ff8cd","sha1":"e6f277a559e5a1f4f671563b94f8108726967033","sha256":"b3fd86bf7ad0824ddd5f83d983b11464bdef5e2399638740642123195ed4a9fe","sha512":"1313d2b3133f9e610c98209fb3a4da9039e062783597d7fc6badcfc5ef22f3d924228eea9938820bbec7af6b4a7a6ba70f0a960587d3dbc7266855bf281c1f37","ssdeep":"384:vXuM0p2+bb2vbfoMS2kbqBVd2VbhG6c2SbUP5l7QFDPeo:P","tlshash":"79b2ca92001be500ab872cc227cf7e3aed8e61557455c579abfd4cc8acabd631364b1e","first_seen":"2025-09-19T04:34:09.043423Z","last_seen":"2026-08-01T08:27:41.616604Z","times_seen":146,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":103,"dns":1,"connect":15,"send":0,"wait":34,"receive":0,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tether-confirmation.com/checking.html","date":"2026-02-19T06:36:26.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://tether-confirmation.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 07:08:14 GMT\r\nexpires: Sat, 13 Feb 2027 07:08:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 516492\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-02T23:46:43.449682Z","times_seen":251397,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":131,"dns":1,"connect":21,"send":0,"wait":8,"receive":3,"ssl":112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tether-confirmation.com/assets/checking-BjPLURPq.js","fqdn":"tether-confirmation.com","domain":"tether-confirmation.com","tld":"com"},"ip":{"addr":"172.67.181.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tether-confirmation.com/checking.html","date":"2026-02-19T06:36:23.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tether-confirmation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:31:48 GMT","end":"Mon, 11 May 2026 17:30:22 GMT"},"fingerprint":{"sha1":"D2:97:27:FA:DD:37:82:70:4A:CA:7A:FA:C6:7C:A0:CC:19:92:41:D7","sha256":"3B:7E:62:51:48:21:87:F0:56:8A:57:79:06:3E:02:2F:55:AC:F6:95:ED:3D:DC:1D:BB:CE:EE:5E:25:1B:86:03"}}},"request":{"raw":"GET /assets/checking-BjPLURPq.js HTTP/1.1\r\nHost: tether-confirmation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tether-confirmation.com/checking.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:36:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m4zZjL2rtAZp66ssRGlRMDSKIWPsCLTl9PSeLdqgyZ8PQ2hcxmcY%2BJx2r7OJGFhG6uS6zbGctdPknPoc%2BId8bRTyMyfllG0ZkSleYLr8%2FHa0tkGWzR1t\"}]}\r\nlast-modified: Mon, 02 Feb 2026 06:14:43 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"698040d3-f4c\"\r\ncf-ray: 9d03bfe6bacddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3916,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1900)","md5":"91fc1d7818271abda08c164720f96b44","sha1":"bbb88d55d5ef48876a86e8f8d16a88540e56ac7c","sha256":"e51ba6a4fff56a926f4bb036c24a6c6749eea311187ef3b34bac0ccbcd729862","sha512":"6e51e8c1bbb88d101362537fabf95e01ee5dfb4ae059b852fed8bb8cc9e255d16a2d7821b0f1c9395fddf9bae2a2d432d0bf2381e945c8c3ba0e71362c81f45a","ssdeep":"","tlshash":"5281d9722229553212ea02a51369775437b50c40390608fc2bfe48f5e6b5fc7ed7bbd6","first_seen":"2026-02-06T23:10:02.426036Z","last_seen":"2026-02-19T06:36:59.578171Z","times_seen":3,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"tether-confirmation.com/networks/tron-trx-logo.png","fqdn":"tether-confirmation.com","domain":"tether-confirmation.com","tld":"com"},"ip":{"addr":"172.67.181.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tether-confirmation.com/checking.html","date":"2026-02-19T06:36:23.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tether-confirmation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:31:48 GMT","end":"Mon, 11 May 2026 17:30:22 GMT"},"fingerprint":{"sha1":"D2:97:27:FA:DD:37:82:70:4A:CA:7A:FA:C6:7C:A0:CC:19:92:41:D7","sha256":"3B:7E:62:51:48:21:87:F0:56:8A:57:79:06:3E:02:2F:55:AC:F6:95:ED:3D:DC:1D:BB:CE:EE:5E:25:1B:86:03"}}},"request":{"raw":"GET /networks/tron-trx-logo.png HTTP/1.1\r\nHost: tether-confirmation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tether-confirmation.com/checking.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:36:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 103975\r\nlast-modified: Mon, 02 Feb 2026 00:53:03 GMT\r\npriority: u=4,i=?0\r\netag: \"697ff56f-19627\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P629QaAsOZIQMlvBmxWjmGfx0GVnu%2BgQJvEHp60Hy%2FOLUvp8kBeNZnsukzE9yvKAZosoAF115%2F2QfZIiwDjbyWaFDEjxylopANXBgl7RciJ%2FJVOD56ht\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d03bfe6bacedfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103975,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"de3064d6f2b2153aacb6a854038c3a79","sha1":"841f3d1f868a3d71a01649b4307b9a1c1259e399","sha256":"79b386dbf889eb7356ab585421267aebc58e152268253865be5596ba2a2ce36b","sha512":"5c8c4b45222de6310002170dc4a51c033d9153409362fe8ca6841c26f30d467b52542703fc2f078289983a115257086fd1f96c062a7b72fb0449bd4f8607f88e","ssdeep":"3072:cTN3VFvbRgzj0eMqMGc+zfbTYkyA4FI+Tjqr0Zz:6pVFvNM0ea+sTIeqcz","tlshash":"8ea3028e4407eec2cd75d478d41d0f3a762a19f86b893bf79335d1b22db17a19a2800d","first_seen":"2023-05-31T01:01:47Z","last_seen":"2026-08-02T03:55:04.165415Z","times_seen":564,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"tether-confirmation.com/networks/bnb-logo.png","fqdn":"tether-confirmation.com","domain":"tether-confirmation.com","tld":"com"},"ip":{"addr":"172.67.181.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tether-confirmation.com/checking.html","date":"2026-02-19T06:36:23.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tether-confirmation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:31:48 GMT","end":"Mon, 11 May 2026 17:30:22 GMT"},"fingerprint":{"sha1":"D2:97:27:FA:DD:37:82:70:4A:CA:7A:FA:C6:7C:A0:CC:19:92:41:D7","sha256":"3B:7E:62:51:48:21:87:F0:56:8A:57:79:06:3E:02:2F:55:AC:F6:95:ED:3D:DC:1D:BB:CE:EE:5E:25:1B:86:03"}}},"request":{"raw":"GET /networks/bnb-logo.png HTTP/1.1\r\nHost: tether-confirmation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tether-confirmation.com/checking.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:36:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 129297\r\nlast-modified: Mon, 02 Feb 2026 00:52:32 GMT\r\npriority: u=4,i=?0\r\netag: \"697ff550-1f911\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wudJX3SuKNb4uK51lbljkzmO4ECZ9055sbO9xdldFMSXLkOZL10g%2BKC1dCnsU%2FepypUL6PcdOinhd1LLav8k6PVMuio%2BC%2BpzhDtWIBRcDuLVEAGA7ofw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d03bfe6bad0dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129297,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2048 x 2048, 8-bit/color RGBA, non-interlaced","md5":"088ea5063e5ea41228bb5a32aa262544","sha1":"3cdb103525c89aba746551aa3c5c963d3d15d03d","sha256":"c3fd877a9148bd78491dd734a7b15228173330c8c9b87a88efadf4be4197cecc","sha512":"f071a45433787d141feba142857103ea68f129703cebf44ce48230ab96110431faf4d01b360d4f6f5d13a2cea49560a3a8ffba85df1095ceef0ac649facafaa8","ssdeep":"3072:YKAsfzdIkI8gm1xttBNSdHwsOV9kgGpT/FGDGl5:YK97dIT3m1auzGpJGDGl5","tlshash":"10c301559e892df6e580ba31d8fe8b14368fadbb9072229703b5c088fd957ccd9485cc","first_seen":"2024-10-21T00:57:36.667818Z","last_seen":"2026-05-20T17:35:46.27267Z","times_seen":7,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"tether-confirmation.com/logo.svg","fqdn":"tether-confirmation.com","domain":"tether-confirmation.com","tld":"com"},"ip":{"addr":"172.67.181.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tether-confirmation.com/checking.html","date":"2026-02-19T06:36:24.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tether-confirmation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:31:48 GMT","end":"Mon, 11 May 2026 17:30:22 GMT"},"fingerprint":{"sha1":"D2:97:27:FA:DD:37:82:70:4A:CA:7A:FA:C6:7C:A0:CC:19:92:41:D7","sha256":"3B:7E:62:51:48:21:87:F0:56:8A:57:79:06:3E:02:2F:55:AC:F6:95:ED:3D:DC:1D:BB:CE:EE:5E:25:1B:86:03"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: tether-confirmation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tether-confirmation.com/checking.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:36:24 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vqP6XFo2bEPOKbiePzONuY8KeSIp4FPReAGoNqvjZtj7DZsiZOBcwgPJkzE8NyjrOOgDOuFNuBe3lNpVhJp7szmCuQDYdu4vGgUj5KojxYQMqMIf5ovb\"}]}\r\nlast-modified: Mon, 02 Feb 2026 06:14:41 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"698040d1-311\"\r\ncf-ray: 9d03bfecfbfcdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":785,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"64dc7fd05704328516911f9df946ffc8","sha1":"a2f63f7354bfda00eecaaa5361b3f9b706047908","sha256":"acf5a7c6056ad6e2cdeb66aad25a688862a74939d5945f2e5f0ab788de9c695b","sha512":"54b3ed5de6d4b06e766ffcb277a9bd807dcc329d738ca3b8a876a0a4d1f4a7323fcf039f7280f9e4ddfeb20410f754b5d097e41680ca25f1fe041bf7adecfe7d","ssdeep":"","tlshash":"f401bdfe93907294d819d368e33b5456711a39f1aea3877d01889c25b10315ef45d9d0","first_seen":"2026-02-06T23:09:55.753683Z","last_seen":"2026-02-20T18:28:54.370497Z","times_seen":6,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"tether-confirmation.com/assets/modulepreload-polyfill-B5Qt9EMX.js","fqdn":"tether-confirmation.com","domain":"tether-confirmation.com","tld":"com"},"ip":{"addr":"172.67.181.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tether-confirmation.com/checking.html","date":"2026-02-19T06:36:25.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tether-confirmation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:31:48 GMT","end":"Mon, 11 May 2026 17:30:22 GMT"},"fingerprint":{"sha1":"D2:97:27:FA:DD:37:82:70:4A:CA:7A:FA:C6:7C:A0:CC:19:92:41:D7","sha256":"3B:7E:62:51:48:21:87:F0:56:8A:57:79:06:3E:02:2F:55:AC:F6:95:ED:3D:DC:1D:BB:CE:EE:5E:25:1B:86:03"}}},"request":{"raw":"GET /assets/modulepreload-polyfill-B5Qt9EMX.js HTTP/1.1\r\nHost: tether-confirmation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tether-confirmation.com/checking.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:36:25 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RBwDqIfnrrwefmqL6CsCJjlRuX0s%2F7zvIKonr11nbOBroAxm3mOPOmF36v6H05BkdRn1lTERg9w0TygpQRpn%2BWlIhu5BRGqnRkcLgeCTxrWMA3HXggHW\"}]}\r\nlast-modified: Mon, 02 Feb 2026 06:14:44 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"698040d4-2c7\"\r\ncf-ray: 9d03bff32cc6dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":711,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (710)","md5":"ecade416f429813a6fa1e1d969883c66","sha1":"7a2613dd8fe3b82021cf37b0845cb73de5a3ee38","sha256":"d2a32840421496e872ade591618d2fa5c33797605d1aec04301717e5a90757d0","sha512":"6b54ce8b3c94e8aa8f5fb503f48c0f0385b455f1475e178aecfebc45d366351b74d4bda0fa378e8b7198cfdf4de0778096d92ab538dc2d1c14edc7e8c3a3930b","ssdeep":"","tlshash":"4201c0e83496e106115a0eadf1b3c618fa94345238a6e4c0d05c2cd9a76bcc0a5a5d4d","first_seen":"2023-05-24T13:14:00Z","last_seen":"2026-08-02T19:24:39.732742Z","times_seen":2061,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"tether-confirmation.com/checking.html","fqdn":"tether-confirmation.com","domain":"tether-confirmation.com","tld":"com"},"ip":{"addr":"172.67.181.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-19T06:36:23.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tether-confirmation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:31:48 GMT","end":"Mon, 11 May 2026 17:30:22 GMT"},"fingerprint":{"sha1":"D2:97:27:FA:DD:37:82:70:4A:CA:7A:FA:C6:7C:A0:CC:19:92:41:D7","sha256":"3B:7E:62:51:48:21:87:F0:56:8A:57:79:06:3E:02:2F:55:AC:F6:95:ED:3D:DC:1D:BB:CE:EE:5E:25:1B:86:03"}}},"request":{"raw":"GET /checking.html HTTP/1.1\r\nHost: tether-confirmation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 19 Feb 2026 06:36:23 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Feb 2026 06:14:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xStLtqf5UZZMrGQROAgN%2BWMQeXgO5IsQYrVRNyJVGVTQCiyQ1mw4eAp4mCrLapCmFXtoAsp8q4%2BS322%2BhT4YZ%2BGlTlD%2FP3rtMsxL5KG2iB8e2g4nS5Hm\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d03bfe50a2a8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5142,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (632)","md5":"e2086951c51addff9417a89530804004","sha1":"5171e5c10e3465c44ca76b37f28a0dfd02fcbd85","sha256":"4553ed705bf81e93c6100d16e9a502abf78fa539272450d2f03c2fd97461e57a","sha512":"895aee28354bc6ec3955058f206343531d4ceea1fa91b2a69d37e4db4071cb6b42df92102bc2416df067446bf56390b312bc91f792f915e5f8423a5e50b709d4","ssdeep":"96:eW6nDuM8+cT2o7HpyY4xB3N/sNnuvg6bpHPC+Qt6Mhdp6:/Mz8+cT2o7HkY4xB3N/sNuvg6b5PjQtO","tlshash":"9cb1f16141ac6d7b422543cbb0617ba574ef9d36eb2794fdf2fb46a013c2c84f81a492","first_seen":"2026-02-06T23:10:02.441466Z","last_seen":"2026-02-19T06:36:59.581219Z","times_seen":3,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":46,"dns":28,"connect":1,"send":0,"wait":67,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"tether-confirmation.com/tronkit.js","fqdn":"tether-confirmation.com","domain":"tether-confirmation.com","tld":"com"},"ip":{"addr":"172.67.181.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tether-confirmation.com/checking.html","date":"2026-02-19T06:36:23.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tether-confirmation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:31:48 GMT","end":"Mon, 11 May 2026 17:30:22 GMT"},"fingerprint":{"sha1":"D2:97:27:FA:DD:37:82:70:4A:CA:7A:FA:C6:7C:A0:CC:19:92:41:D7","sha256":"3B:7E:62:51:48:21:87:F0:56:8A:57:79:06:3E:02:2F:55:AC:F6:95:ED:3D:DC:1D:BB:CE:EE:5E:25:1B:86:03"}}},"request":{"raw":"GET /tronkit.js HTTP/1.1\r\nHost: tether-confirmation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tether-confirmation.com/checking.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:36:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J23%2BwVgGCokszyBqjbeCAF0yeXVp3ExbgOyIuzbjhk2QIqiFbPi6JAnexGuz0ZFCPr%2FXWuoMTNFXi%2F7vy%2B1ua%2FudVF8ViFa7k5q%2FCalK3OjOIsmsul7G\"}]}\r\nlast-modified: Mon, 02 Feb 2026 00:51:31 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"697ff513-11cddb\"\r\ncf-ray: 9d03bfe6bad1dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1166811,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (571)","md5":"1fbcee24fe6e97cb80357e8226bd13aa","sha1":"a2defda7cd48f9a9c83474f1bb74828fb6a7116b","sha256":"040b883e31993084ce7d6f742325ad7e96ab0eecc375160f897b2d51b374f2b7","sha512":"cfaeaca0c4c7403419ef168bc5a8b942dc1588a113eefd834f0ed0e8843eb47584dbe92c509ce758f1e731f1cd62a4be7cf432565d70c61640285486d4eedbe0","ssdeep":"24576:Dfprpums3V0sg7+pgWbuHW8rbw9pfFeH2sY:Dfprpums3V0sg7+pgWbuHW8rbw9pfFeS","tlshash":"542594496ef760215627f07d5b1bd405b338d8072009de58be9c97a06f859388afaff8","first_seen":"2025-12-23T22:20:27.062265Z","last_seen":"2026-02-19T06:36:59.581809Z","times_seen":14,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":152,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"tether-confirmation.com/assets/w-loader.js","fqdn":"tether-confirmation.com","domain":"tether-confirmation.com","tld":"com"},"ip":{"addr":"172.67.181.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tether-confirmation.com/checking.html","date":"2026-02-19T06:36:23.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tether-confirmation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:31:48 GMT","end":"Mon, 11 May 2026 17:30:22 GMT"},"fingerprint":{"sha1":"D2:97:27:FA:DD:37:82:70:4A:CA:7A:FA:C6:7C:A0:CC:19:92:41:D7","sha256":"3B:7E:62:51:48:21:87:F0:56:8A:57:79:06:3E:02:2F:55:AC:F6:95:ED:3D:DC:1D:BB:CE:EE:5E:25:1B:86:03"}}},"request":{"raw":"GET /assets/w-loader.js HTTP/1.1\r\nHost: tether-confirmation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tether-confirmation.com/checking.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:36:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ONyw1vOHL9lfmXQz3iQLPLgDv1rnhlP04XR3hDB%2FYC0kWh%2FH%2FClcth1MhXeGY8u4RaUamrzZFpZLwr7n9i4c8%2BT5vUWvNLYXGBPQ8aXC4F02EHYXaOy4\"}]}\r\nlast-modified: Mon, 02 Feb 2026 00:51:38 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"697ff51a-a2f4\"\r\ncf-ray: 9d03bfe6bad3dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41716,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2342), with CRLF line terminators","md5":"4b64ec349c7eeb4324f4e7c20eb7fc98","sha1":"c09046d05daa28ef73e4bf3b58bd6518ce98a271","sha256":"801d62fc02f89e7c1b414392e066dcda139ea3154cb3a48da721ff9a9df49f1f","sha512":"e92c61f409b0a56e41654c1f867089473bed649bf3a8d7167fd1a179993295863f20d0a63b20c5e2c20ba6ee55dab82802c06591cd39d188489a479deefc8b23","ssdeep":"768:sCoOXPhfU4Ui8YG7uOFQgauwF4ifTSQoc8S:SOXXwYG7XQTd4irgS","tlshash":"5b13b8f957a0a8f089a787d5aa131e09fa159c77c7624315f2bc274dbfd2e0cc806e91","first_seen":"2023-10-17T15:07:19Z","last_seen":"2026-08-01T08:27:41.615572Z","times_seen":403,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"tether-confirmation.com/assets/main.js","fqdn":"tether-confirmation.com","domain":"tether-confirmation.com","tld":"com"},"ip":{"addr":"172.67.181.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tether-confirmation.com/checking.html","date":"2026-02-19T06:36:23.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tether-confirmation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 16:31:48 GMT","end":"Mon, 11 May 2026 17:30:22 GMT"},"fingerprint":{"sha1":"D2:97:27:FA:DD:37:82:70:4A:CA:7A:FA:C6:7C:A0:CC:19:92:41:D7","sha256":"3B:7E:62:51:48:21:87:F0:56:8A:57:79:06:3E:02:2F:55:AC:F6:95:ED:3D:DC:1D:BB:CE:EE:5E:25:1B:86:03"}}},"request":{"raw":"GET /assets/main.js HTTP/1.1\r\nHost: tether-confirmation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tether-confirmation.com/checking.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 19 Feb 2026 06:36:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gEZZ1hWgVPJvCz2BeUy1BCR3sj6dAzQvPLf42a3LlnciLxkN9nhHiFp4eRWHmL6s6FEI1WFPgmS0an6mU0TAbnlvMVtuGc3rrv1Y4OvfH6dySBEqDWWa\"}]}\r\nlast-modified: Mon, 02 Feb 2026 01:04:04 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"697ff804-a2b87\"\r\ncf-ray: 9d03bfe6bad5dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":666503,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"090a0a08d0efe445603ebe07068ccc9e","sha1":"82e1b8f38d16efe0d0023988ffbdaa1042e4208c","sha256":"7bc303e8ce22cc2bd8d70754b78ffb9be23b18b97a1f3a003f1f0de96d6d08e3","sha512":"96719689b1d40d314e495defd58fd52da7ab14d5816d1a9222f783c38efdcb296571553fe756ecd0884f4124a37405074f3585473e663bbbe47771b38923042f","ssdeep":"3072:1fj9pumWj4ySX7fx0cdwflmt5Jc5INUZ8OSvacVf2vRxv+:1fhpW3SX7fx0cdwNZHM3","tlshash":"9ce45592b1423dd90c09773f352a5651643ee483a24eb475f7dc9facaceca422f907a1","first_seen":"2026-02-06T23:10:02.442252Z","last_seen":"2026-02-19T06:36:59.582933Z","times_seen":3,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}}]}
