{"report_id":"2c60c073-0a65-411e-8de4-53c429fdddf5","version":6,"status":"done","tags":[],"date":"2026-03-29T12:46:22Z","url":{"schema":"http","addr":"www.pay-usdt.org","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"172.67.197.174","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.pay-usdt.org/","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"title":"泰达⽀付｜數字貨幣加密⽀付系統公司｜USDT第三⽅⽀付接⼝平台","dom":{"size":49287,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (391)","md5":"772f85af03c3b04237df0abf78a96fdf","sha1":"ea636bc9ea4037ab3520736a77adfe5662f3b6e6","sha256":"803dc5cc2252036291c588ce15f9d15f397490c457051dd175debb28e558ba18","sha512":"c394674ce8a4a30fb6bd74bd471fa47dfe01acf3092d4cd1b2ea8484043c44fdc525741b21a466acf7279dd3b394d1a3f9a72bd0d650455bcc392d71d7762e51","ssdeep":"384:h0FSF+xxOzDRDLa0+IwLVSHUMBGv4nUn9i083S81n+02nA:h0FSF+xxWmMBGv4U9Sv1n/","tlshash":"8f23732454f28566017350a2aea14b2b3e82d517ca1f5e007afc0f99bfc6ee5cd5738e","dom_hash":"domhash918e05bfbc2a2434342bd1514e5acf31","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.pay-usdt.org","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"172.67.197.174","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-03T12:46:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.pay-usdt.org","ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":48,"received_data":2172856,"sent_data":22343,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:1.7.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Tidio","description":"Tidio is a customer communication product. It provides multi-channel support so users can communicate with customers on the go. Live chat, messenger, or email are all supported.","website":"https://www.tidio.com","common_platform_enumeration":"","icon":"Tidio.svg","categories":["Live chat"]}]},{"fqdn":"code.tidio.co","ip":{"addr":"172.67.73.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-06-01","domain_rank":120056,"first_seen":"2014-11-27T09:26:14Z","last_seen":"2026-03-25T21:15:05.100648Z","alert_count":0,"request_count":2,"received_data":1223,"sent_data":876,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.pay-usdt.org/","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d3e8c503080ca09065466a5c2a104ca3","sha1":"e2f703aac446a8656ce0123c764e9ca98fbadccc","sha256":"059e299d515d126ef01e74f7252f8b5931ee610b33814887a83b207f9a549fad","sha512":"fcf7ab7e98e344f3a45cb1fe8d82760e9b1f04f6ef4816dab40835228cea44375d2f0b5ee27522ab1253bdc919e9bbcf9d37a2043e4cac39d621fdba983938e0","ssdeep":"","tlshash":"69d08c8c269b8c7080b73a864b7f6200b4866123a0a05d723d0eb344cf70e27d744a48","size":233,"data":"","first_seen":"2026-03-29T12:46:31.442027Z","last_seen":"2026-03-29T12:46:42.535712Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3f41cc23815bfd2389e4bdbb3f4a783f","sha1":"c312afef3fa20d8a1e35d6e76cefc66b18edfdff","sha256":"fb37e424fb5f95b5c89ee62a806e94feaff92be00a1401f1b8fa5bd6ce78fa2b","sha512":"b60b374c2b4dab29abf97931e2328411571fd6958a7bdcd18220fc39e3c1b94114628c1e131d0389b29aa209b72280836d5984dba3f7b95f366910b95257a705","ssdeep":"","tlshash":"8af0555f68b320290ab7343b0b6f11ac359a24172800dc00bd8dc1a85f60a950a65bac","size":597,"data":"","first_seen":"2026-03-29T12:46:31.443289Z","last_seen":"2026-03-29T12:46:42.53714Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/gtag/js.js?id=G-F7KR5PF0GC","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ba8ced0bc92ddfa850880f10ce2e23e","sha1":"fce23c063ca80c37b806036f81fb53ef767efa3a","sha256":"77b2b258003e2832b7155b7ae78b73ab2f99680bd606b902f3285b670fc2a56e","sha512":"83c21799c50b1fe5d1869afca6336d6aae9ca5fd05d3557371a6eb20e231054d4d61c4373ecd07d4c483d7a2d45513decc8cb0489c9b80acdbcfe6d4b453c2f2","ssdeep":"3072:IR+3z4s01if4Gk8x0ljeKqD8ESkJE3WFMPD2aWMeN8x/tWA5ke:9j4s01if4GSjQ8ESkJE3kgDj6N8ltT","tlshash":"b11406c97787742682a6b478543f014ba67b6ca6f44ccc98f189d4d02eb8a9d407bf7c","size":194799,"data":"","first_seen":"2026-03-29T12:46:31.395585Z","last_seen":"2026-03-29T12:46:42.51717Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/templates/wpzf/static/js/jquery-1.7.2.min.js","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bfc74ed9463d634081ab798ab1fe0e5f","sha1":"25b327059bcb96d459052aa42078f95fd274639c","sha256":"e3ad4b0323011fce0eee9679721e0a667e141385ace0d33cfd6596ccb1c68ac8","sha512":"40be94cf526856f53fa2c88c02add9d5ca619986c6d8639d14eedb84d027fa81d141ff5aeb385f930e4b546fd3b462e658d8253a796bd87414aa9d2dc2e9a819","ssdeep":"1536:8YRKUfAjtledhTmtaFyQHGvCXsedOgRc9izzr4yff8teLvHHEjam7W5X3yzSiLno:VUb6GvCu09s2o2skAiee","tlshash":"d293e7d9b2d67123c7b731b850af510bb17698aa784c8c50f068d8e4be74a48907bf7d","size":94879,"data":"","first_seen":"2023-03-07T22:17:14Z","last_seen":"2026-06-20T18:48:56.386548Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-26T21:51:36.172489Z","times_seen":407069,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3ca36f3c493138fdbb1dbac923a6a509","sha1":"55fbc3ddf865d6fa1f11cad6126c207dba7833c8","sha256":"5da61610413672a037c19e27e0b0ff7a91d4881e1e1360175918af2bcdf86b28","sha512":"258bb3d5b4d34c3b34f33492f05e85fae7c082575939ea97c9d1e8006602af856059d7aafaee9b1e436fe1105ea2a9e91c781106be1f76aeab3f4c5fcfb6428e","ssdeep":"48:PKDtdSebsCN/zHXVBM+dOxgRtzEwWl+XgVBM+IRIcgtAmAit+Z:PIhlBMXiImoBMfIP2nv","tlshash":"2891ce17a23109a40973706f5a5f4a30b4614a1b8e594e14bc1c4efc7f6da7983e1e3e","size":4456,"data":"","first_seen":"2026-03-29T12:46:31.444319Z","last_seen":"2026-03-29T12:46:42.538238Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/templates/wpzf/static/js/swiper.min.js","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"10ad6473484630a85272174de546fa21","sha1":"ea40634dc07be2074345cdc14f6844d3cf3f02bd","sha256":"36231d9ccbf4581029b3733c99c07b587ce56a7113b74ae7c0c0a083aec38029","sha512":"547b0d695d42e176e02927363b4ad90e69143a130a3e0feb222f1a6d7f6a4da543cd5267ac31871672e70a7b8f999ddc362d674099be7f326d05b654f72442c3","ssdeep":"1536:MOgAc1fFOszeCOG3RxCK8Yi/Glq+dBZDUiOMRLMGpukRRgj8evHgZsUgeAq5qV8h:uQCL7ji/udoxKRRtYHgZsUgeAq5qOsJu","tlshash":"fbd3094eb39061a551e36257525e8241a3b72409b80ad0ac35b68cd7adbde4c13bfffc","size":140929,"data":"","first_seen":"2023-03-07T01:24:40Z","last_seen":"2026-07-26T07:47:40.124694Z","times_seen":6384,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.pay-usdt.org/templates/wpzf/static/css/index.css","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:01.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /templates/wpzf/static/css/index.css HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 18 May 2022 16:52:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6285243e-a84b\"\r\nexpires: Mon, 30 Mar 2026 00:46:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V3%2FZt9GUPpdLhUZZa3u2f56ZLn5CM6ydB%2BvayuwTfxrEOuFKhC5EHAKquFjMpACMXDEErjXZBlZHbLGKIxiTWTTeHH1EH8yELy6VoB11KTN9ZKkf5vAcyPpKZXhf%2BZ4kHZCM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3ef99e0a225a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43083,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"fac25c6192cef858c30c0a732ece9cf9","sha1":"55dc2b54f7d1935d10924a0ab482de7770142077","sha256":"f589f22aa8c5b1b60acd4ebe317990610e373bf316f3a16afb2dc7060520c3c4","sha512":"324c7032d7e54cf2bdcd449fca5ccf482197494c62d94c62a7c761cd90419b1bf401fa06af1e0224879391f8e8443151d2bb00426a9ae83ffb74169225fe92d9","ssdeep":"384:tt9sFhFnJW/2TcsCs+Dd5FOL6FflNCFkH:tt9sFhFnJW/2TcsCs+Dd5FOL6FflNCFe","tlshash":"8f135a66026316089d2b4c100f9d5f3251bad4e7418ee1fa79c299488faf8dc76e376f","first_seen":"2026-03-29T12:46:31.387194Z","last_seen":"2026-03-29T12:46:42.534628Z","times_seen":2,"resource_available":false,"data":null}},"time_used":849,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":848,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/templates/wpzf/static/img/logo.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:01.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /templates/wpzf/static/img/logo.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 22025\r\nlast-modified: Wed, 18 May 2022 16:52:07 GMT\r\netag: \"62852437-5609\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BXF%2F8f5Tpoz99PJPr46YlSwhJ4LdrBf1HbwgtJ3tFxkme0fEI8Y0%2BeNcQMqg9cRMkgGLkNq%2BlJPa4HxpwVQztaxFnBySMh%2BcztfntK5F%2F%2B22j9KmzoXy7FbeJnJrh0bjAmXy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e1a295a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22025,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"3922b460f20db3d47617bae431ac758c","sha1":"c0a030b8cb0468cb639127c6dd93285c4a9b0c8b","sha256":"08f0d4ab61cf59539eecc00b8baed2cd8169905c38c1638a75d6a59d87a1690b","sha512":"727073eefa2d85284605664382f2f5702d3197523d820ae8b3cfedfb0fabb9830b85d94164665685f3c2297a04644a03df5a6e082735d57164c9cd31c9f30a0d","ssdeep":"384:qiM7GClL24ORAo2UmkH8vs9Dk84Xlt+5Zi2FZHgTSUO9vDMToK+bic:qiCXZ211980Dk84Vt+iyZHgGRvVh","tlshash":"08a2ae37c1342843f0f46b75486947a148b86cdc28bf348a81da3e16abbd3cdf99a148","first_seen":"2026-03-29T12:46:31.388206Z","last_seen":"2026-03-29T12:46:42.501336Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":841,"receive":278,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/upfile/2021/01/20210113093914_981.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:01.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /upfile/2021/01/20210113093914_981.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 3008\r\nlast-modified: Wed, 18 May 2022 16:51:19 GMT\r\netag: \"62852407-bc0\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uLNGMMDhBxG76KinNLXhBMKAvAI7itYSG4JthmODWRw6ySYf%2BohZuuXJx3haKDmJ%2BshMLSKtFUrn3%2B6LYVzjriDfh7f0i%2F%2FyWeKKtPBVGzl0%2BUy3d6j%2BzutIceL0D3%2BHAkfC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e2a2e5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3008,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 91 x 92, 8-bit/color RGBA, non-interlaced","md5":"650a7fbe7cb4fd51df24feb7f14179e3","sha1":"a862cc079fbcf9ef20cde625b369ea5d5cd44e25","sha256":"20ffeee4b02f702e877471b1667ef8067be6e48d0f16541bc7c110af41ba1a6a","sha512":"eb47401b5461b43cef27fdedddefdb4be86f5e51411d47d66911b476e35898ec23f664fbc8010b57faa1b4e1e2e115d2da92ad5b05b7d87e7f2d1708c9e999f1","ssdeep":"","tlshash":"c4513a6f461312a958aea6e36d1ee41be68a8024d2106c7f6413fff4a4814807296cef","first_seen":"2026-03-29T12:46:31.389395Z","last_seen":"2026-06-03T03:56:38.81852Z","times_seen":3,"resource_available":false,"data":null}},"time_used":828,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":828,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/upfile/2021/01/20210113094247_294.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:01.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /upfile/2021/01/20210113094247_294.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 2787\r\nlast-modified: Wed, 18 May 2022 16:51:22 GMT\r\netag: \"6285240a-ae3\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UanTjN6h%2B17AZbAfMqOOvVrffpMHjEbTAmUioGaqimijq0O9lAhGvWBwoONbxYj0UoRuaeQzVo6WW4Jxmqh9UCTdpaLuvcrem7Jy%2BfTfUvti0oPaNrXxUUtwdoVL1H6oguWI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e2a345a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2787,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 62 x 61, 8-bit/color RGBA, non-interlaced","md5":"a4219fd5ed3032e9a906d390b66ef6d7","sha1":"c047cbc1b409acb65f81b740d354984c2cefabd6","sha256":"68894217ba15d86b3953c9cebc02115da1446931b94040f592d5fd043506bb4b","sha512":"4ebea686a97cddb93e5571118e8ec655a0b8d31ad1cc6cd1497797fde6cdec492dec33e6b128fd27382eb08ddad8ffd45202a3008caa4a1db75d00bcb21c8ce9","ssdeep":"","tlshash":"95514bd1a9745b2f2d727e78b4d4010feda6ae78619c68480f80e45f8270caf916f836","first_seen":"2026-03-29T12:46:31.39049Z","last_seen":"2026-06-03T03:56:38.723897Z","times_seen":3,"resource_available":false,"data":null}},"time_used":833,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":833,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/upfile/2021/02/20210203112042_840.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:02.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /upfile/2021/02/20210203112042_840.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 20263\r\nlast-modified: Wed, 18 May 2022 16:51:12 GMT\r\netag: \"62852400-4f27\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pu8brIzhs2yZEFfQgjBhGN2GTXIYFLxqofB%2BISewtTibN%2BPKcwQN9cvBqTixgiS5M%2BceEmSCdjBWhDKq9baO%2Fjb411jh%2FAY3Iz9UUQNa5q4asPC4sPGSqwVfSTVV3Ub0iYoJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e3a3d5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20263,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 551 x 394, 8-bit/color RGBA, non-interlaced","md5":"ba194126825616c45692f184a749deee","sha1":"11665530a58bbf28d64152d161cc4af3018d1a5c","sha256":"80a24749d458371d70cb4b1c97937fdbab6e9d0ee4b58bd8c9f89498088d59cc","sha512":"990bc0f36c4f19f55f3aad7bd9cf4fd29d7721b4c77f3cf87299afbddb2cf69eedcae49caf5e0fee041263e9b638944e6760724b0bbce93e1fe4a14586922071","ssdeep":"384:5mPgUahwwaMPtE7WOQ38v9BhhmKYN+clIK62Y:0OCwnA9AcBhTK+cl0t","tlshash":"cb92e1cd2d12040e9f3a39985b34691a0719aa7ed3a171f12cf5ce32ba0ff8b5255785","first_seen":"2026-03-29T12:46:31.391481Z","last_seen":"2026-06-03T03:56:38.682294Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":834,"receive":269,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/templates/wpzf/static/img/back2.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:03.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /templates/wpzf/static/img/back2.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 24860\r\nlast-modified: Wed, 18 May 2022 16:51:56 GMT\r\netag: \"6285242c-611c\"\r\nexpires: Tue, 28 Apr 2026 12:46:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LF%2B9s%2F3Dk5kEOP7gFkBSY5dunzT63GE0%2BboLwbeBfBLWycD%2BmbHUaEoTxgu4ZG3%2FzUyStnG%2BLh1%2FkwuBUWXH7eWP3cB6dSbmzAB09UuY6R6V51rMwn8mmaOyw5AMeXlJz5a0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef9a77b725a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24860,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1670, 8-bit/color RGBA, non-interlaced","md5":"69d16c84755a284278a40a6b925d2a67","sha1":"d93c67cc1132826140c03fa1679e5af4af1bc98a","sha256":"d78697d290a7918370890ca98f7c38c859c63bf3c87662077c1989728b535d14","sha512":"6b5d24a0e556a5cbf021d47a7f22000c7f13b844316139927b14be65ec04501ca3e55fa9903ed0f2ac2e1b710e4968b020054eefa57ed32b834c3447929c5539","ssdeep":"192:NbOtxheScVxJDw9qUjL4/dLGcAjND6e+gIYjnfdhwzP8gtDsjWlfZkhKVkMeYz9G:FOtTeTfURuKcSNvzIYjVy6jGZpMwF9k","tlshash":"96b2fd85d97319edc90c957aeaeb2f7633784fe93580432a977df2602e663b6dc00058","first_seen":"2026-03-29T12:46:31.392594Z","last_seen":"2026-03-29T12:46:42.5335Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":826,"receive":278,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/upfile/2021/01/20210113094848_398.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:02.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /upfile/2021/01/20210113094848_398.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 3977\r\nlast-modified: Wed, 18 May 2022 16:51:25 GMT\r\netag: \"6285240d-f89\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5hU1SfF%2BksWs0Ao%2BTE3Vr2fqeL9dbstjdO33eCh9dkPEtAchW9ff3tcnrxABD2szJbJbuC1su%2FXHcVcZHmHU%2F6o8RQ%2FNAhfK13EPWG%2B6dbKDetd0z5BQuXaNyoqIkJP1GDA5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e4a3f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3977,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"81aede532b2cb0f77ffc75e75d0942c8","sha1":"20ab6c61728309ddaaca7d10331137c1739abcd8","sha256":"e1030e1fa3f730b94c3adad0246b22e5e5eba7098808174a37eea89ebaa8fb49","sha512":"85eb654137daeec696dfc7c9ed694db45fd201d4456f9faf1d45806209c2af9b4721437ddb9bae3f906260437b51c81cfb2753cba0c3e6d032a61e380fb4c7b3","ssdeep":"","tlshash":"87819e5a1ba3d22a618d2730c5f8cc05f7034e192ba9e54c17d14c983d78aa7dd222ed","first_seen":"2026-03-29T12:46:31.393668Z","last_seen":"2026-06-03T03:56:38.738317Z","times_seen":3,"resource_available":false,"data":null}},"time_used":851,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":851,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/upfile/2021/01/20210113095641_457.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:02.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /upfile/2021/01/20210113095641_457.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 1552\r\nlast-modified: Wed, 18 May 2022 16:51:28 GMT\r\netag: \"62852410-610\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jYstOA8ZsvkY1F5xKI%2F6NOOND4eg0JyrfNUFrFYxwNNnLsqsS6L3i3aIhZVkX602w7h%2B8MLjnZB8%2FhIZRXwXLK96m0wEogwBjHx1q%2BCBvKKxJfCrSMetd4pRlq5yoMcZhBuR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e4a445a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1552,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 94, 8-bit/color RGBA, non-interlaced","md5":"5b5380174f5907367634e3aa12721db4","sha1":"2f95158196bb065ed71fbfb47c76270dcefaf350","sha256":"932be5a023ea488c1ad5678ff19c2bd8f307ab4ada2389b5e5678e887e8cd529","sha512":"d95375e68eaf5ed39cb61565d6438fb98933e7f43b5888b6fa21e4ddd150fc0383dbf3650e4a8d180392b855a9c3dba4f0dcbc39da601c15eb2dcb1fc482b097","ssdeep":"","tlshash":"5131eacb91044ad798bc41b322fa30d5b30b9e5324381911a25b2b360c0db75ddceeb1","first_seen":"2026-03-29T12:46:31.394603Z","last_seen":"2026-06-03T03:56:38.684747Z","times_seen":3,"resource_available":false,"data":null}},"time_used":832,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":831,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/gtag/js.js?id=G-F7KR5PF0GC","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:02.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /gtag/js.js?id=G-F7KR5PF0GC HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 18 May 2022 16:52:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62852446-2f8ef\"\r\nexpires: Mon, 30 Mar 2026 00:46:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5gbBgFf5ES8BCQqk35zqtIbixDw%2BJVqTpqVMJ9eq4d%2FYXBUCaPrOVyyyZzyzGca9SBMNchsRDfWffRig64zRnnj6sbCIPIKvhDS2gbke5MhqqOR%2FZvxOLePQV8M%2FfF5YOsDA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3ef99e5a4b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":194799,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11257)","md5":"0ba8ced0bc92ddfa850880f10ce2e23e","sha1":"fce23c063ca80c37b806036f81fb53ef767efa3a","sha256":"77b2b258003e2832b7155b7ae78b73ab2f99680bd606b902f3285b670fc2a56e","sha512":"83c21799c50b1fe5d1869afca6336d6aae9ca5fd05d3557371a6eb20e231054d4d61c4373ecd07d4c483d7a2d45513decc8cb0489c9b80acdbcfe6d4b453c2f2","ssdeep":"3072:IR+3z4s01if4Gk8x0ljeKqD8ESkJE3WFMPD2aWMeN8x/tWA5ke:9j4s01if4GSjQ8ESkJE3kgDj6N8ltT","tlshash":"b11406c97787742682a6b478543f014ba67b6ca6f44ccc98f189d4d02eb8a9d407bf7c","first_seen":"2026-03-29T12:46:31.395585Z","last_seen":"2026-03-29T12:46:42.51717Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1108,"receive":279,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/templates/wpzf/static/img/next.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:03.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /templates/wpzf/static/img/next.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/templates/wpzf/static/css/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 1480\r\nlast-modified: Wed, 18 May 2022 16:52:08 GMT\r\netag: \"62852438-5c8\"\r\nexpires: Tue, 28 Apr 2026 12:46:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ncZSLQkvLjACspHzQRQZzJnyPsk3NPeXtYb%2B8TF8S%2BIvCtutzxr5U%2Fm5oxMhRKgv33Dar6sHi1fNqQVpcevkO%2FQHglwTuLqm%2BxxcDnidXFQCJQSzJsysSmKnyj48ooosn%2BW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef9a77b745a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1480,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"712567fd68a2f7b1101f9b10bcbd9e47","sha1":"ef4debdbd899cd6078a43acc9ed6e60d01b58dc3","sha256":"071fcc1bb8ebd53078e97ac3aab5506344af6ecbaec92ebe110c5d8d36c8a9d5","sha512":"29e1475c20238d3202c01de1eeab0459304c110aac37224aca1c82966f4a23106932233205e13296ca73eb39f1d28e1fa7d376707977b21529d208af7b9596c2","ssdeep":"","tlshash":"1831f9c386d310654efe907d1b650f61e850f21d1d8915edaa7c0f638a75e800d8939d","first_seen":"2026-03-29T12:46:31.396747Z","last_seen":"2026-06-03T03:56:38.814459Z","times_seen":3,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-29T12:46:00.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 12:46:01 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 18 May 2022 16:51:04 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IlVSaRue%2FDTwJ6%2Fg2dy9%2BndaCniIoi07Q1THG41yZtWKA%2BlysehjKINwbykKN13FQf2Y8I9gZ2dWJyWiJPqzmjnPx%2Bjosiz8vjR5%2FflFWed3EBOm%2FpjUC2%2BnRwkWeGf0786f\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e3ef9954f22712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:1.7.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Tidio","description":"Tidio is a customer communication product. It provides multi-channel support so users can communicate with customers on the go. Live chat, messenger, or email are all supported.","website":"https://www.tidio.com","common_platform_enumeration":"","icon":"Tidio.svg","categories":["Live chat"]}],"data":{"size":47221,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (391)","md5":"b165b471d2ade4e75609f95dbf1bc44f","sha1":"e22d083dcdde19cce2443d0a27c7057af897d22d","sha256":"1704ca951ecde470876f8dbeb2d36e35f9c9d45b3c078125b4f7148b43070fd3","sha512":"e119bd13b139757e3ef972ac84ca4ce729f6c56293dfdd71ebea41db6dd5ea2c2eb5c678c8939f7c3659c5443a731fbb3640434c04811c71ccf243085bab6d53","ssdeep":"384:9RcxxOoRDLa0+IwLVSHUMFGv4nUn9i08XS81nKsB02ncM:96xxNmMFGv4U9yv1nn","tlshash":"e323742454f2856a017350a2aea14b2b3e92d617c91f5e007afc0f99bfc6ed5cd5338e","first_seen":"2026-03-29T12:46:31.39808Z","last_seen":"2026-03-29T12:46:31.39808Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1322,"timings":{"blocked":65,"dns":41,"connect":2,"send":0,"wait":1191,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/templates/wpzf/static/img/skype.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:02.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /templates/wpzf/static/img/skype.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 12305\r\nlast-modified: Wed, 18 May 2022 16:52:10 GMT\r\netag: \"6285243a-3011\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QPGFByA8ARyoPGh8BDZdx4b0mti7IO1X8q6Jk0NITaExzzb4sa%2FSiFzybNJHxDpqL2JLkH4%2BnkDyOHVn0W6KA2BAAytuj2ALW9L2u366xoZVF4%2Fd7cgTnC2Eo4wtXrFHstGX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e5a4d5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12305,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 224, 8-bit/color RGBA, non-interlaced","md5":"b3f1c5762248150ba086dfb1ed23cfe9","sha1":"0e6f4cb6d16597b8182e70cab7525f62b2aeb3cd","sha256":"b59c0ac454ebb56ed7dbf4cd4fc69ed4bbb82ca467c954909eee70fe7a582447","sha512":"00393b2c33bef5961c3109cc6deb037b2bd0c6cb60f9728f7e02c5c12279e08bcb2149e62f14e881bbde2290f2e1e8909c1c87abac8f74e035c642b95bec2d63","ssdeep":"384:RTjoIGnQjZc9qSEwagPdIr4Y5ACca6RP7RLXcuYhDu:1jLjZc9q5wLqEcAgIlTdYVu","tlshash":"2f42bfac64d845f05e342cc547e89eaabae32c940e83f13d89b00533c9b924e1ee598c","first_seen":"2026-03-29T12:46:31.39894Z","last_seen":"2026-03-29T12:46:42.475529Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":836,"receive":273,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/templates/wpzf/static/css/base.css","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:01.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /templates/wpzf/static/css/base.css HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 18 May 2022 16:52:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 30 Mar 2026 00:46:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6285243d-39c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1gtjCJhVj8BmnZPS5t%2FiwuhYJSn%2BY5IkdoiBgLBLUS7XkIls1PcK6iGTJhuY7T8ojAOeNGApryX%2FHdfIcpIbmxfGhsU7%2BepR%2BHpYRraSo5IDjN6mbfJdUdkdkvnd%2BeqR3GAF\"}]}\r\ncf-ray: 9e3ef99e0a215a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":924,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"eb8efd6ef979eaa4c69f062ab245430b","sha1":"c0d107182a441b476e2c4ce843b697ff2eea8380","sha256":"040c6b70538d73d388e42f8db24079839739563acf85273aa0aabb37a8736470","sha512":"cd6aa6f60a48c4dce9a08d59cd3b73a5940df4339ad987ce893ed004691ca8315408d769091612537a5804b325e1e4e9b17d0b63143ac9f574aef7b0b27863ea","ssdeep":"","tlshash":"e911845221009203a4a74f2230bf1c8e4d5f1272fcb182bc7a02a6a0d4de7af4712bb9","first_seen":"2026-03-29T12:46:31.399806Z","last_seen":"2026-06-03T03:56:38.816475Z","times_seen":3,"resource_available":false,"data":null}},"time_used":847,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":847,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/templates/wpzf/static/img/lng-1.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:01.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /templates/wpzf/static/img/lng-1.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 3972\r\nlast-modified: Wed, 18 May 2022 16:52:04 GMT\r\netag: \"62852434-f84\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dXOliTnYH4OYc1AUIciMgUAZ9H8DabxVwBnjaEw6es9FeNKOCphw6Sm1y%2FeyYYz5fs9qqO37Uoi70B03bLO1RJL5Uk3qWkOmWQciB8ByaS132r91Uj7xD3Q5ShMr23s6cVdY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e1a275a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3972,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x212, components 3","md5":"0a8e58b59c067ccb0233ecb086974319","sha1":"a6c261f97ed15cbd316069476bb4b37f42f743dc","sha256":"f2158bb80e3affeb12969f9f9672e9cd3a69b370fd79c86236126eacd0381c69","sha512":"c82d0acae91de932c2df77c8e91f9348a8966d1d846860c970cb785ce9b5d95921c9c0ad6beb128775ab3dce19dbd47d5b64f9eea839b9416a7e7a6978bed5cd","ssdeep":"","tlshash":"3b81f91b1618c385d854c2de3c4b7f6a9743bf8db8d61f7a54718a9fcd200a819cd51e","first_seen":"2026-03-29T12:46:31.401129Z","last_seen":"2026-06-03T03:56:38.741402Z","times_seen":3,"resource_available":false,"data":null}},"time_used":833,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":833,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/templates/wpzf/static/img/down1.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:01.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /templates/wpzf/static/img/down1.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 124\r\nlast-modified: Wed, 18 May 2022 16:52:03 GMT\r\netag: \"62852433-7c\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cKqpkJbgvg4AxL3Hh0jhwHA5ygOcFb7JJhj2XZAM0aT2g48NNaoaGB%2BOfFdo1DxHCjleTJeYW8N5Xsh3cXjbS6FtBaZjFzJ002FANtgl1iRwIFQGPrUg1gLdxtM52gKc7UgM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e1a285a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":124,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 6 x 5, 8-bit/color RGBA, non-interlaced","md5":"da374c09905eaa28bc267b4cb71ce456","sha1":"4b4937f9c8eb35bb53bf25436c5b1b180aa46a3d","sha256":"3295fc56a5f9b5c40dc683fc7653a19a57b680fc0fda72e0b81a913740027234","sha512":"d61ea0ca53761421b042a2a96cc310b26295971131d7212ef0edfab5fe9ae0889239d428f2612129c74949d34573300765f027c676fb5805ff14fae6f71b515b","ssdeep":"","tlshash":"c8b022a223a08cf8c088033f82022a8ca0b0220a8228020e0c0a3b3300a2c2088c02ea","first_seen":"2026-03-29T12:46:31.402045Z","last_seen":"2026-06-03T03:56:38.765861Z","times_seen":3,"resource_available":false,"data":null}},"time_used":835,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":835,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/templates/wpzf/static/img/my.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:01.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /templates/wpzf/static/img/my.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 1180\r\nlast-modified: Wed, 18 May 2022 16:52:07 GMT\r\netag: \"62852437-49c\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mCEs9bpclWkcOJRzcLxdUADAWOQa6MoKYHR%2B2oCEDgyZ%2BaYKQHmlkgYhEeHkITQf%2FvPqWtFMWDrrXJlAgZSji935g6JpqTIGMLiw7S3DzbbpGUn8iM%2FMCglF1APWOYVf1Oh5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e1a2a5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1180,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced","md5":"97b00caae411db8d39d90d698804ff8a","sha1":"e2c186e06ad497ce28b22bdd7a221bc008211a91","sha256":"c39842273853c2e3a69c90b5c7f687ad10041abe65be9f115a28cf4c3664c7ea","sha512":"bbfd2b18474073b47d845cf22e1f798046f648a3073093c102502b95764f4b501e6d0ed6760f251a3d3544a836e2bbb3067a0a8b622fa68afa150407b825a79a","ssdeep":"","tlshash":"ea21d7da921e88ebc48dbba654ec0d93ac7036d195032b3cc289b36077173a02c556e3","first_seen":"2026-03-29T12:46:31.402937Z","last_seen":"2026-06-03T03:56:38.783749Z","times_seen":3,"resource_available":false,"data":null}},"time_used":820,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":820,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/upfile/2021/01/20210113094010_681.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:01.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /upfile/2021/01/20210113094010_681.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 3423\r\nlast-modified: Wed, 18 May 2022 16:51:21 GMT\r\netag: \"62852409-d5f\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ArMPYrNIt7JKvttBmNTVFIb2bkAh9BXSZhIE2Nhtkq4CsDXCy9Xkf7N4ZNK338pl%2FuZ5zHKKWVXLBrPWakhiCQ6eGrkQAr4DmbDvf%2FyWKi6DAfJdzgBpPfK3CpvZBCin2oNx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e2a315a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3423,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 91 x 92, 8-bit/color RGBA, non-interlaced","md5":"24fe770ff601e154ff340529d4780b10","sha1":"c8b28e067fe05db31089c982e9f958bbfc49554d","sha256":"cb1d6d782b1c6a7c153af45472d509a850c6f193490008aae6f0ea4fc80a8e6c","sha512":"a950d1487623ce002e285b9f0b78904af85f3684ac9d10f661e5b0413ae75322722b83f5a4dafff978151cfa4617df933bc62d0f4767f4fdf9c916112488547b","ssdeep":"","tlshash":"61616ffd94fbd2edc1cdfe7144d9a382287c31b852719721611d95f4461b707abd5011","first_seen":"2026-03-29T12:46:31.403978Z","last_seen":"2026-06-03T03:56:38.718842Z","times_seen":3,"resource_available":false,"data":null}},"time_used":806,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":802,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/upfile/2021/01/20210113094331_736.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:01.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /upfile/2021/01/20210113094331_736.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 2196\r\nlast-modified: Wed, 18 May 2022 16:51:24 GMT\r\netag: \"6285240c-894\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=baM8oDnab5T7FWPQ1owVSG1M0GKQWtMDXhddDciaSsuxwGSTvNYGkbhfHeuWvJs7MNhUDeYKK4aPCSmWUizKCZA%2FdAIYwGYbWK%2Fv1fjgM9keh%2B2Etel1IcIHC%2BWTnKydsgBC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e2a375a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2196,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 62 x 61, 8-bit/color RGBA, non-interlaced","md5":"7b471b718050de499ee5dfc53163edb2","sha1":"417770c9b11973c233fe7d52460c84ee256744c9","sha256":"f359a2aaa0fe45b093f081167706a84879d177d139a9ab711e7d0b2f79a693e9","sha512":"f26dddab0cf03a37c26c830d3e05d808b12a8b3b735cca40d04bc3f167841346ea633fd21f31bb0d1a4339f7c4567560c8e293d4c8348c993cbff20098a5ae57","ssdeep":"","tlshash":"0e412b7d63c19ee097c3090a9770813bdd2306fe4e3ea764626cb7906c0f29048bc847","first_seen":"2026-03-29T12:46:31.404969Z","last_seen":"2026-06-03T03:56:38.791731Z","times_seen":3,"resource_available":false,"data":null}},"time_used":903,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":902,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/templates/wpzf/static/img/fh.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:03.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /templates/wpzf/static/img/fh.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/templates/wpzf/static/css/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 1488\r\nlast-modified: Wed, 18 May 2022 16:52:04 GMT\r\netag: \"62852434-5d0\"\r\nexpires: Tue, 28 Apr 2026 12:46:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=phi043NAWfx6cVdnJvYLLFm5V7GVC3B7uVgBpzuileytNAZuSlBJ%2B8uTRprWj1nokxLDN9GOxqCLnVYRPMXpIjSiyFYUJciNkY8jxBZpUsReNRWOckkqiox61U03UW9F6Uqo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef9a77b735a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1488,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced","md5":"8e26457de547ab8fb19f49f5c9433476","sha1":"50a5f3745a277c9a70bb0a00cd98999c04a9c194","sha256":"e1f243b3e150ce0f3613499e8e140ae40eebc754f91223e1d8c28c814ac50248","sha512":"b8d132184f094288d0949cfd1cb04b26161ec5fa5d304dd18ef525dbd3f66276b001dace13200c959c57e39dcdd04b6d21e8a205fb2ddbebd38f6071ef8050df","ssdeep":"","tlshash":"be31e9c66d533a6af8a803bd626b873c70524eb5101a9a2f31cd9ce12073db4dc6cb49","first_seen":"2026-03-29T12:46:31.40587Z","last_seen":"2026-06-03T03:56:38.821239Z","times_seen":3,"resource_available":false,"data":null}},"time_used":835,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":835,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/templates/wpzf/static/img/back5.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:03.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /templates/wpzf/static/img/back5.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 33693\r\nlast-modified: Wed, 18 May 2022 16:52:00 GMT\r\netag: \"62852430-839d\"\r\nexpires: Tue, 28 Apr 2026 12:46:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r0SsuYwh5Bck2yAm4nypfXC9L64s%2FlQE2Xxcxb%2B7EQyoZT6jlYLekm2vwmZSt7Bdug0jxQe3NfIJhsPuK%2BvTnEv%2Byfy1vZ6D4l0ZZWerfe0eyYZ0B4ZEC64UwtIFQaSC9MBg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef9a77b765a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33693,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 2590, 8-bit/color RGBA, non-interlaced","md5":"d3bef93d85eaf3623126954bcb9a7c0b","sha1":"610b74ae0211c9cbd2b59825973e8e5b967194b8","sha256":"f2f5f9f1921a37b288cfa89f7eb72ac34c3946d40d611c51ac28ad530c41a3a7","sha512":"5eeba290f0de367943a99f9c63d301719799fb5a398e9c79b27bfcff882680e94003816d8bc9ee42afa6b91824af47c8ba22c12ea6b68024c65c4cd60f949511","ssdeep":"384:KOtTeTfURuKcSNvzIYp1eFmri/NYqrhDjK60Dog:Ku/uQNLIYpsKoBKJDB","tlshash":"f3e2c7c5e97316e9da0de63eefdb2f2633680fd931504356a77db2616eb22b1c901018","first_seen":"2026-03-29T12:46:31.406854Z","last_seen":"2026-03-29T12:46:42.483828Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":830,"receive":275,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/favicon.ico","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:04.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nCookie: _ga_F7KR5PF0GC=GS1.1.1774788363.1.0.1774788363.0; _ga=GA1.1.565177537.1774788364\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:05 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kcV%2B2BC1iv1ueOMZxSKO55wu%2BIpsmvzoUiNKOaAxKkGD5yBbwISam1qny01OlQ9ECsqAQ%2BYW3Lk2wdCTfa4zGO2%2FxvEhdyjQMhGKQDYlG5EEpeyQyTA%2Bz4fm6xvpNKRczouv\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9e3ef9adfc4e5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-26T21:24:15.795585Z","times_seen":543983,"resource_available":true,"data":null}},"time_used":829,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":829,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:02.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sun, 29 Mar 2026 13:34:01 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9j%2BkEQUGVAs1tmRauwP1ELKisia%2F43NZX8nasinGPo9MH9iKFSjJem9K76EfLt3N5aCNvGf5av6sI3Q2M%2B0Z%2FvM1r8S1yGKttGlVLMAHTcfEdHWJwTH4aRS205gPA%2F7WgKs5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:01 GMT\r\ncf-ray: 9e3ef99e6a4f5a0f-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-26T21:51:36.172489Z","times_seen":407069,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/templates/wpzf/static/js/swiper.min.js","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:01.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /templates/wpzf/static/js/swiper.min.js HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 18 May 2022 16:51:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62852426-22681\"\r\nexpires: Mon, 30 Mar 2026 00:46:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wn2qXqrgXhipfKwsAL5PIicanCk5hFadeNSvW%2FJJean7GuRqlf7AH%2FY31PHKoZglInI%2FMPgomqjn52ix0AoLcIzNjsTdFf4Q7oNUSsKq3YNop2jGqos870QaaHYQOsENFAXg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3ef99e1a265a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":140929,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65284)","md5":"10ad6473484630a85272174de546fa21","sha1":"ea40634dc07be2074345cdc14f6844d3cf3f02bd","sha256":"36231d9ccbf4581029b3733c99c07b587ce56a7113b74ae7c0c0a083aec38029","sha512":"547b0d695d42e176e02927363b4ad90e69143a130a3e0feb222f1a6d7f6a4da543cd5267ac31871672e70a7b8f999ddc362d674099be7f326d05b654f72442c3","ssdeep":"1536:MOgAc1fFOszeCOG3RxCK8Yi/Glq+dBZDUiOMRLMGpukRRgj8evHgZsUgeAq5qV8h:uQCL7ji/udoxKRRtYHgZsUgeAq5qOsJu","tlshash":"fbd3094eb39061a551e36257525e8241a3b72409b80ad0ac35b68cd7adbde4c13bfffc","first_seen":"2023-03-07T01:24:40Z","last_seen":"2026-07-26T07:47:40.124694Z","times_seen":6384,"resource_available":true,"data":null}},"time_used":1434,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1152,"receive":282,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/upfile/2021/02/20210203112008_628.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:01.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /upfile/2021/02/20210203112008_628.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 29937\r\nlast-modified: Wed, 18 May 2022 16:51:12 GMT\r\netag: \"62852400-74f1\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fDeAwweOn0xtiG4WZW5yQGpjDgkgsyWQ1EU3frEH7afjsSIHbcwMSh0sPx7zS2UrwAfu1%2FhfMOSX1NwEm4qTEX8mYQDBLMkOQHfItCdF01A3VUa9hGpi7VSrO17h5e3Qk7pi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e3a3c5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29937,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 553 x 393, 8-bit/color RGBA, non-interlaced","md5":"25bc4fecda7f45f32ad641ff084b204d","sha1":"d8c233f051bb0517a714e8cc37ea4ba1a9e57574","sha256":"99e81a864a5d195be9eab312b386da1a851a47022c12573c6c66f8c3efb5ad4a","sha512":"8466a0a4ea851c1ccb4aaffdb716ba61bd2406eeb5e514519a7fd225e13b2a73e983d8b025f0222559fc399e7ff43d07aebdc1b90713a03a3c8f680950bc0d69","ssdeep":"384:PNurfovF2K5EExOTEgPtBzgScEtzebm5+ZRT1g2cLV3isPXXOnZu0nRarsN/MzUQ:PmozJQpcECm5C4FVybZRnRbkzUw0r4/","tlshash":"efd2e0a490bbcb6d06ac1e3cb2510243c43a6fa6c96917fc475081bd2a4e56cd14d3ee","first_seen":"2026-03-29T12:46:31.409267Z","last_seen":"2026-03-29T12:46:42.470972Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":855,"receive":281,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/upfile/2021/01/20210113095004_346.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:02.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /upfile/2021/01/20210113095004_346.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 3770\r\nlast-modified: Wed, 18 May 2022 16:51:27 GMT\r\netag: \"6285240f-eba\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=85u561p03wGR48LxnSzQjYvwprmSQnnshRlpkoK0alXJ6zHt1ZwqoQREiJ%2B2PjM0WWAS%2F9A1E0ClKXySk%2BfhLVSv52c12MYb8zeRxCj9R9T%2BMvZN7rjhAZY8hXFJUpCpVn31\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e4a415a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3770,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"7fa6d24b47f61db366a73897ae85b750","sha1":"4c88f88b4230bcf1e15c461ea2be60bf134594bc","sha256":"d7461630d980e30be536a4dc49443f2a6b2d76cd391369861a4fa3cb19eabe26","sha512":"994ccd4cd28a895eb23a03cd01ca4361946765175370a8f3351acae431382abef51add86a48c6edcc4a76ca992051219bd212a03126edff57d9635b73c4de455","ssdeep":"","tlshash":"60717c70c96a6ffddb002c2e94f60255e9f8814446c0eb98a8f5a2404f226f900ceadd","first_seen":"2026-03-29T12:46:31.410279Z","last_seen":"2026-06-03T03:56:38.754305Z","times_seen":3,"resource_available":false,"data":null}},"time_used":838,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":837,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/templates/wpzf/static/js/jquery-1.7.2.min.js","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:01.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /templates/wpzf/static/js/jquery-1.7.2.min.js HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 18 May 2022 16:51:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62852425-1729f\"\r\nexpires: Mon, 30 Mar 2026 00:46:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hVhHAloz9%2BcfDQIq%2FgW5PzEHErzIhTEmfa5XdB0ZLvKP1xLO4YlEumRFkChueOwXb7u4S%2B37xlwyYv4Jb0frxwqzAjRVP9P%2BD4hxKbWke5jmbEc8sjhn5f8DgQoEYP54NBvN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3ef99e0a255a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94879,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32769)","md5":"bfc74ed9463d634081ab798ab1fe0e5f","sha1":"25b327059bcb96d459052aa42078f95fd274639c","sha256":"e3ad4b0323011fce0eee9679721e0a667e141385ace0d33cfd6596ccb1c68ac8","sha512":"40be94cf526856f53fa2c88c02add9d5ca619986c6d8639d14eedb84d027fa81d141ff5aeb385f930e4b546fd3b462e658d8253a796bd87414aa9d2dc2e9a819","ssdeep":"1536:8YRKUfAjtledhTmtaFyQHGvCXsedOgRc9izzr4yff8teLvHHEjam7W5X3yzSiLno:VUb6GvCu09s2o2skAiee","tlshash":"d293e7d9b2d67123c7b731b850af510bb17698aa784c8c50f068d8e4be74a48907bf7d","first_seen":"2023-03-07T22:17:14Z","last_seen":"2026-06-20T18:48:56.386548Z","times_seen":29,"resource_available":true,"data":null}},"time_used":1103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1101,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/templates/wpzf/static/img/sn.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:01.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /templates/wpzf/static/img/sn.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 501910\r\nlast-modified: Wed, 18 May 2022 16:52:12 GMT\r\netag: \"6285243c-7a896\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sUt0%2BPcJWjmMOtY4vXSaHz%2Bc0mZGr7Jr0RXFIit4N37ctYv3wM%2FShDFLUE%2FMYYFrtBWaoGmqHi2Y67TzHiRVKuNckyZxTIXMRu7IwD5%2BIR%2BzaL%2BFR25Ph8zgDfgFYRaSFLEe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e1a2b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":501910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 763 x 945, 8-bit/color RGBA, non-interlaced","md5":"cda162ef10563907a74aae15f994dd1f","sha1":"eb7d2762046b652827d5960bee2a39eb2d242c13","sha256":"6891418883de93df909bf8e532ee0e50ba616eb8b637d8eeb7763c96535c8078","sha512":"c13c0cd5cb4f8c6f64ee6ca56efc962a659214d16003ddb49eeb08d00ac07ac8d116813b91df77f1d43e6a24cab270aae7836a1ec1e59ed3c10fe5a0df6c5aca","ssdeep":"12288:Vr5l6pPPwpTXRvprnd48MmvZijxlb+uI60qfM93KS:95lfdFdnmtjD2Bt9B","tlshash":"d2b4234adfe490e29246404ccaef08bbeebc877184ca959a557c3d71c3b62d96012f77","first_seen":"2026-03-29T12:46:31.412859Z","last_seen":"2026-03-29T12:46:42.49658Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":826,"receive":1390,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/upfile/2021/01/20210113094306_103.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:01.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /upfile/2021/01/20210113094306_103.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 2693\r\nlast-modified: Wed, 18 May 2022 16:51:23 GMT\r\netag: \"6285240b-a85\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nnS3SsI14sLyQtZ7Q1Tv2cenMeYhkJha6ijuFHxNuPvOf%2B9RgVzBDW9hsveno9idzHx%2FTYrHZXeLDLva7cl9A821FfzpcDeG1spZjpqD0gMlH4mhbZbUttovjxjR3x6oTOAf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e2a355a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2693,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 62 x 61, 8-bit/color RGBA, non-interlaced","md5":"a590044a5ad237414809662e138ba8c3","sha1":"aca06d127c74b394a760eda7dec36e5440103c35","sha256":"ed9af3ffc2d6c68c5c0d43f8dda39d35a2c2559a363ec6ec7e1a623604f1c6e2","sha512":"7ba7c7d217cd85271a0600a66be4bd3345e96da1976beeec4112ff2f56a0ed5b7aecc2d72914e9dfd4c855d4a5dbc1994b36648c2b9114b19f1c9143a082e601","ssdeep":"","tlshash":"ba516e0c908bcaf9e81c1b379d09a6b0e617c4ef4054d0193c701627929194cdab16e3","first_seen":"2026-03-29T12:46:31.41417Z","last_seen":"2026-06-03T03:56:38.79821Z","times_seen":3,"resource_available":false,"data":null}},"time_used":819,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":819,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/upfile/2021/01/20210113095816_833.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:02.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /upfile/2021/01/20210113095816_833.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 2166\r\nlast-modified: Wed, 18 May 2022 16:51:29 GMT\r\netag: \"62852411-876\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xtNLyUATL07qpdwHpt6TV%2BvzlVR9dWlkFE%2FgVrtUXtSEWUnWdsDSe3sEU7lhxyKG%2Fw3q%2B0kk80lxlN2YCIvp%2FBYucURwRrPNSvUtqCtus1wQQZRRxSyh2ftFg3HaLqKX2Uam\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e4a465a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2166,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 74 x 87, 8-bit/color RGBA, non-interlaced","md5":"0629da44285abfacd269150c69801d4c","sha1":"ff6c9044dddd660ea751de39dd046301f59e9930","sha256":"33d65c02fb694590613015d25535a175281d7fb8d0d2bb899991972c3f6ca269","sha512":"30150a2be7232f22a290717fbf8d5e47b513bbd560d663d33b920b3d9a9ffcbe50eb623666c9a5bd86550deccf9fa4278a32e649d49e548dbb90a51874bc4b61","ssdeep":"","tlshash":"f94109f8a2db6d50d5753a0c1eaa096ec9b9431b04234efe1087016ae864b419b523e3","first_seen":"2026-03-29T12:46:31.415282Z","last_seen":"2026-06-03T03:56:38.7637Z","times_seen":3,"resource_available":false,"data":null}},"time_used":829,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":828,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/tdzsadpgvapc1bdxnmzxz5qmepvxgnwr.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"172.67.73.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:02.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 17:15:01 GMT","end":"Sun, 24 May 2026 18:14:53 GMT"},"fingerprint":{"sha1":"31:36:89:C7:40:5B:0B:E6:E7:F4:A1:39:D4:03:C8:91:03:F3:27:75","sha256":"3F:EC:22:F7:0C:7A:FE:28:EF:F8:92:A6:E0:B1:FF:75:40:11:76:AE:EB:3B:57:20:62:6F:B5:C0:7C:4B:2A:26"}}},"request":{"raw":"GET /tdzsadpgvapc1bdxnmzxz5qmepvxgnwr.js HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: public, s-maxage=600, max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o3Ib%2BDsXUM4wRbM36sIcQ3GrCcZO3mJr77rJhsGPfC1%2BwZzn%2F3wYjSZ3qnJKONrSzSmugJdFQYVqDCnH0G96GW6QpWg7hkfQsk%2BELRxPJRGwxpxJb7dTxWBiZP02ekg%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3ef99eafbd56a4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T21:50:45.967557Z","times_seen":17550659,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":3,"dns":21,"connect":1,"send":0,"wait":210,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/upfile/2021/02/20210203112143_875.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:01.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /upfile/2021/02/20210203112143_875.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 22544\r\nlast-modified: Wed, 18 May 2022 16:51:13 GMT\r\netag: \"62852401-5810\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UPmyO5Mv9ST9upnZmznuOo8geSNZF9XdtqQDUrB0hXXB%2FEO8VBmmgI9WMmyn0yCtyqr3XC3X1PTV%2FTEcvnQUkGVQW5ifhqKkQLuxZqtfmdCn1hL1g3TxYc3IfY0m0QWhkv%2Bx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e3a3b5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22544,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 551 x 394, 8-bit/color RGBA, non-interlaced","md5":"5fab173fbe2092e6d258d20421c5a914","sha1":"86d796ad7bb024bd45cf8c8a9d658f8f131e4aec","sha256":"0be2fa5271d8ba232b43f32bfb9f59bf6ac2a754337aff5c5fd7dc5c7a2632a2","sha512":"14a90165d38643d0489d8154f6f62aa568c38a9a48262a0b534467bb1e6f8ff46cb1bb37825db14ac58f70cea3512de3208fdf3e7233d1c7d08c66f2c9c804d9","ssdeep":"384:o7rWudfyKH2qr75FfSs/zc5wP1ru7uEAPRd5RkN5Km6FYjWWOa6mdNXJ:o7rWCfyKHnjSs/o5wP1i7wH5R65x6Gjr","tlshash":"27a2d165cc2b14f98d97f752b9afda02f67ad00240b36dc1c8809d9f672459b1ae2a43","first_seen":"2026-03-29T12:46:31.416786Z","last_seen":"2026-06-03T03:56:38.748336Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":872,"receive":286,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/upfile/2021/01/20210113093838_144.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:01.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /upfile/2021/01/20210113093838_144.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 3652\r\nlast-modified: Wed, 18 May 2022 16:51:19 GMT\r\netag: \"62852407-e44\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G0VH%2Fq6jyMpQX7cjl7z987IkJSlBeyXssbr1maOza2yBQbIWu4nEZNmeDfXae1hHRcs84ayqU6%2Fee7oW1VYoQo8XGRk9T68FCzei6d1X85aLRp8CNr7DVOfvsVki6JQA8urn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e1a2d5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3652,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 91 x 92, 8-bit/color RGBA, non-interlaced","md5":"768049fbe0b0c9629d192dacb11a4816","sha1":"ff24a8eb82fbbf414336e64945c549a5fea7a97a","sha256":"50d45df696a870be9ad82bdeb92dce0a7efddf00b0d193d4d81c213be6b4531e","sha512":"9244f31b03f6906003450e6194eb2bc7db7209c8f33cfb91cb4f90d00859a7cbaaa8df3e4daeacfe3e5f20bc27f93fb9db4fa04642a231a304c1bad3fb3d56e6","ssdeep":"","tlshash":"20714c90df01ee7d5d429a2195049449a6b6b9edcf20f7bc62855b16cfc12f631b6c0c","first_seen":"2026-03-29T12:46:31.419791Z","last_seen":"2026-06-03T03:56:38.702374Z","times_seen":3,"resource_available":false,"data":null}},"time_used":797,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":794,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/upfile/2021/01/20210113094145_418.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:01.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /upfile/2021/01/20210113094145_418.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 2690\r\nlast-modified: Wed, 18 May 2022 16:51:21 GMT\r\netag: \"62852409-a82\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wW7MCoFFrdqg5RWiEjik%2FL81fQG5nPg5lralhME7j370JgHOzLm%2BpwjVQ3idMGi8W8KeiBSbpKrtsSN7aBm5Z1gqoGF%2BbvhcmQlyfGt%2FL6YlfF59%2BAhWQjcusMEQHandoV8M\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e2a325a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2690,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 62 x 61, 8-bit/color RGBA, non-interlaced","md5":"1621e342581e3e01bde891651de7a20e","sha1":"e4bd8401b110b4f98f15786c48abf3073c277003","sha256":"6b6a2675b86936ea49669033da794869642c9c3530a2ccab51976121cb9a2f19","sha512":"c949d7168820d469272e940e8d9f8d3a13ca65075ade28b7538124dbf02b401568bece093fba26e31c831643c01e63b8797953cd20964547c01158a148a66dc7","ssdeep":"","tlshash":"76515b751280a0774ff4f0abb29210cc37d9aa223833e1598e93ce13b915c68f7943da","first_seen":"2026-03-29T12:46:31.420724Z","last_seen":"2026-06-03T03:56:38.801777Z","times_seen":3,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":808,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/upfile/2021/02/20210203112156_366.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:01.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /upfile/2021/02/20210203112156_366.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 22217\r\nlast-modified: Wed, 18 May 2022 16:51:13 GMT\r\netag: \"62852401-56c9\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PqC9LnZiG4sUYiVK%2FRhhyEPsbvLTAL27FNLr%2FSxRuSpuLrUqp0FDZh5B5bf2ijgu5IjwaXPCaXI6kEAk68uBO%2F2ByXPbg79%2Bf8KB4bmJwQxxYkZV0K%2FrpmM8N3HJjpPexEmc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e2a395a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22217,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 551 x 394, 8-bit/color RGBA, non-interlaced","md5":"e4763d9d865579c82d21d9067b634346","sha1":"13518ed7c0df146709f45ea02f634ac251528e43","sha256":"6e121179db91f69872a5d835aaae55f3f2ad82d46bc0b4b9401fde198e0731e0","sha512":"fc2d2ee15cbc1cf62d88eeccd1c3fd1116bb5293948137a78c2813f6e9dcffeb0641f20f96f02512c8c11350f94bc7b46e8390f2df1e05fda67ff56bf14b7583","ssdeep":"384:GFNC2xlU8N99U2i0xBLN2i5MK1yojo4dc4WCQ8VEhuZimLUTGgY+QnDyjw:GOwN9W2iUxg3Ksojo4dcPwV7JL1t+eOE","tlshash":"95a2f1a2c67c6503483127bfc7911fc2581472a68a62c3798476e878bb9dc77586f43d","first_seen":"2026-03-29T12:46:31.422314Z","last_seen":"2026-06-03T03:56:38.707444Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":885,"receive":292,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/upfile/2021/01/20210113095513_526.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:02.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /upfile/2021/01/20210113095513_526.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 390073\r\nlast-modified: Wed, 18 May 2022 16:51:28 GMT\r\netag: \"62852410-5f3b9\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BHd%2B2YR%2FD%2BE%2BpHc72h%2BcUIHh%2FkUfyBITKkUV3NbXp01y7tzYZaOTBadYOdy0YtnTzC1P3YHIFGMt%2BLwKxra9CifG%2Ferigx2ABsCZgeI%2BbgcCwgQzQYhMpo7K6xwksiWCougN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e4a435a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":390073,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1137 x 665, 8-bit/color RGBA, non-interlaced","md5":"32f43023c26c5fb9a29810b4d8cb5396","sha1":"92b96a370aff52ce661bb06a4ed50429ece26e2d","sha256":"39a3801b56dd2bf6b8d5c71fa53171472cd2d5da4712c0cc05db64b6ce69fbaf","sha512":"17a1a6ae4f7f49417a0978a44807a54a350c542e2dc9b02bab10720682c8e5469c0eb32361b424da700b514717dd4c8b3210f09d794d09d0139c1a688b05c3f5","ssdeep":"6144:Pl5nj2IVMLRDTGAuLZWNX4NG/HzTmdLd+9D0eR6YUgnIqvUg2TpiTaMIGkKQ95W5:t5njhgQAyZioG2dLdS026YUsvUfTpDZm","tlshash":"328423bbeac4e8ed481375a00734fdd529716a96c16a07089560e8f91eff70aa16f7c0","first_seen":"2026-03-29T12:46:31.423726Z","last_seen":"2026-06-03T03:56:38.77685Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1934,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":821,"receive":1113,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/upfile/2021/01/20210113095716_680.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:02.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /upfile/2021/01/20210113095716_680.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 3077\r\nlast-modified: Wed, 18 May 2022 16:51:29 GMT\r\netag: \"62852411-c05\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z0646jYTdKQcPqqOKwhU8XXlVVH6ghTWJrq%2Fu0%2F98I8wa%2FWztsveiY5V3wUqhR3%2F6wrf8Ukv0VsGZbmP0n5cVflXspUzyWv0DZlrv0faAK9w1oBmKJlcGMjUNCEfm6Fd2XUt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e4a455a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3077,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 81 x 96, 8-bit/color RGBA, non-interlaced","md5":"5045fd838a9a819f966634b225393ec7","sha1":"a5d32af3aaa29f8702c4f046aeb59edd9c1c2c2e","sha256":"b01904f68f071fde7ec115af21f7de464c6b6c4ef98495bbdbdc24ed5f6a2124","sha512":"add543e783c4b55409df2e6b3816544d6c513d36c74e89d44d07851148b76f8bec57a428ff3664f56f9c05b044127ad20d4ebe92538a371b86d3e19e65e81ac8","ssdeep":"","tlshash":"f1514d8be6241529a45d00bfbd790848cd795b3b33c9961b007905664b8fce99256d1c","first_seen":"2026-03-29T12:46:31.424685Z","last_seen":"2026-06-03T03:56:38.804964Z","times_seen":3,"resource_available":false,"data":null}},"time_used":815,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":814,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/templates/wpzf/static/css/swiper.min.css","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:01.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /templates/wpzf/static/css/swiper.min.css HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 18 May 2022 16:52:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6285243f-356d\"\r\nexpires: Mon, 30 Mar 2026 00:46:02 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dnLUHCybtye57Qb%2BkUjYU44zxL1OnHAvj7iRC14OKoMhTun35R5RqA8iKzqHr0SDQ1%2Bcle5bftkRarXn0Qp9VHQ777I5jprQivK4wUnS1uGQcafftXaRS9C7aUgrg6uBU%2FbC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3ef99e0a235a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13677,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13425)","md5":"24f21657c5465ed6e144fb4401350e07","sha1":"1a7b8f26e33feabc257ecc8e954cc3f0e1f7ac60","sha256":"906ba97c9e3365be3f9b418f3d56349e0ec5c128d99b5134c0c586d5a4586f09","sha512":"b824260286b1e9a253c42d375651f4b8212d13488b8bcdd35b5421e957b3119e58d7bad3ac813ef22af3e07e1e84cec56df6e6f2b6f7d0e931564bb0857c6b46","ssdeep":"384:tXUbeQS7Rgx9BU0m/XCcif65W/1mXA82FHpx:tEb67gbhm/XDif65W/1mXA82Fn","tlshash":"ec52236417003837f3774f6e4aa1e6b59f60cc838a934d9db2c0dd44d6fa8b9121eb95","first_seen":"2023-04-05T23:58:18Z","last_seen":"2026-07-26T18:48:33.826584Z","times_seen":8931,"resource_available":false,"data":null}},"time_used":826,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":826,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/templates/wpzf/static/img/dn.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:02.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /templates/wpzf/static/img/dn.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 405651\r\nlast-modified: Wed, 18 May 2022 16:52:02 GMT\r\netag: \"62852432-63093\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sgSDp0qZmq7SqqD1pxRXcgqSN8gL13yLveJ%2F709yyHacybr%2F5ukanyr9KdwLYsB%2FlpQFi%2FLH%2FtGRmEHIbuP4hOe7xeF0M1iZuSbj2SYj6qMx9wu8kLmJyjyBJpASn3a4jXyc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e4a425a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":405651,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1472 x 822, 8-bit/color RGBA, non-interlaced","md5":"3d435f8c5ba9ef1dde845011152b3723","sha1":"41ca124bac86af7676e1bedfcb7d5d7122ff8ed1","sha256":"7c4139e3dcde7e9b9d1b5cf2add9ff4168588a8be581f65201e817bdd8204458","sha512":"7823d3511dddc929480f38f85163a8aa74c5efb6595eb997d5b2ceb0972a2389f9a19c3a97937eab745f1faf5401866352e7ea62861b2075f1aa60980f1006e2","ssdeep":"12288:EtOxAjz4ECrFf1X0PQbAOB3+169mxIvEFscmeW:EtOxAjzy2P2B3+169P6scmp","tlshash":"dd84234de6b9cc6c8f96707fc88064215fd1048fe1a8547ce2c2b696c191fb716ce79a","first_seen":"2026-03-29T12:46:31.426776Z","last_seen":"2026-06-03T03:56:38.732088Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1919,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":793,"receive":1126,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/templates/wpzf/static/img/tme.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:02.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /templates/wpzf/static/img/tme.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 4654\r\nlast-modified: Wed, 18 May 2022 16:52:13 GMT\r\netag: \"6285243d-122e\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1hLWhrAeSZ7%2BJOtgLUz2dRQQ0rTgFoCRZp3zFPxlz%2F1XTDZcJd92KWUKEVAk9VmZc%2FTunWMsCIfjzI4IoyNDNM4yJGquYAh%2BRYxlbGdyO0gQxfQ28qgmW1y7t3IJbVip0b6A\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e5a4c5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4654,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"cb77ba99f3e393caca86042b39d210ec","sha1":"a532468b690a420cb71d5f92c7a25a82c389abab","sha256":"b75675a4f09f2672f317f978741b89b1c00eb4fbac22ddf8a5fe23db5bd94acb","sha512":"47c05c7e6a127ff22ac5a5fd925fc64770f19a70ca93912c40a85caa8da6885456f99fa2ff4d4f906d844ace87d07e7dcc2d564d5fdbc7d17e68b89665094b89","ssdeep":"96:8y4zzAUNrtC0dvQtW5x1VeX2rk1fYy5+4Ntw5fwQSPtuoz3Y8a7:8vA0GWx6h1ZeomS3c7","tlshash":"18a18ecc0cb03527c5f0ae5d87a12d23a666a02180462f2afd97dd7f1a1b5304e782c6","first_seen":"2026-03-29T12:46:31.428222Z","last_seen":"2026-06-03T03:56:38.734462Z","times_seen":3,"resource_available":false,"data":null}},"time_used":813,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":812,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/templates/wpzf/static/img/email.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:02.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /templates/wpzf/static/img/email.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 10183\r\nlast-modified: Wed, 18 May 2022 16:52:03 GMT\r\netag: \"62852433-27c7\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BiD%2FfuQXv8PMNxCTVZ8cYsWXCpsSnoXyBbAaPEGGU76rEiRfndzQOwH7K%2BrgI6eU6FBnSuGP%2FQiGEA8zKQVy0bc6Lkelva2Ub%2Bf2O%2FrslpXM8VmL7o%2B1kZz4xFQixv5LXdse\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e6a4e5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10183,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 224, 8-bit/color RGBA, non-interlaced","md5":"55f5d69e3d00ba2b827d9ce1b7efbe89","sha1":"aa86eb751e0bb391b782a5e177517d535df5d9db","sha256":"b0042562a3c6005c745adfe09575d401a355a369c9841ce09d4ac37f97704ba1","sha512":"385e9f763e8b52e81203fb24d23ea15afe404b4d329d127e26aa2619e2bac6d2eb3cfcf40ef46ab2b954258c9620e2f4a469e6fec27bf8fa2dd501307377b75f","ssdeep":"192:Zyjq1mrSY+h2pr06tSv1LfTbKefklFRZpSBT9V0aGgpmQWNRsOHJh+:ojqoj+hQfgLnK6kxZpMIFzX+","tlshash":"3422cff26ccf50b78117f76ecdf1bc788c860b86c542b8cba1b50a29e8e51471ad505a","first_seen":"2026-03-29T12:46:31.4293Z","last_seen":"2026-03-29T12:46:42.532188Z","times_seen":2,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/upfile/2021/01/20210113093809_875.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:01.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /upfile/2021/01/20210113093809_875.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 3438\r\nlast-modified: Wed, 18 May 2022 16:51:18 GMT\r\netag: \"62852406-d6e\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8rQY89ELi8%2FKt59Piqn2jGNvIvyWW0LTso1Vznb%2BVGHZ2mfgdUs82cNjFlaH9lJ3lgkYZUascu%2FGGUl1vHB1tEvW1rjLlZpZaamWHVvzHOGi3xQSBGESbcd8FxZv%2BnVCCOWU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e1a2c5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3438,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 91 x 92, 8-bit/color RGBA, non-interlaced","md5":"98351815e996a5ab57a2c2094c2f1071","sha1":"f788ca43e28c45706ba5c6b2d9cccc6519ca20c1","sha256":"da9fb7f1f52f2cce13aad2cd1955fabaa5c4a3ded3d6cfa76c25e53c23471306","sha512":"2c3241c92fc03da49ec3fee7722f799a38c336b11950a241f6d479b59a61bab9a94b1ea8011046477c6f8dfc7dda9a8643cba204797787128476a8da961e65c9","ssdeep":"","tlshash":"c4616d72ef5426b5c8ca3accc38a3228abb03d7d103dd96c3d559e66c95c57858608e3","first_seen":"2026-03-29T12:46:31.430855Z","last_seen":"2026-06-03T03:56:38.786184Z","times_seen":3,"resource_available":false,"data":null}},"time_used":815,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":815,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/upfile/2021/01/20210113094353_419.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:01.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /upfile/2021/01/20210113094353_419.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 2646\r\nlast-modified: Wed, 18 May 2022 16:51:24 GMT\r\netag: \"6285240c-a56\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ymXnXnNC%2BZtEXfCvsfWKb02hI2Do2ajOD23ftFX%2Btq86XgVMyLZutyFt4oTFUmxXOCMehpynvxb4z3pomk0%2BItWbQ33eIPah%2BSCusVHouhfSVWkD5GxVkBlMbiXydR5WEVkl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e2a385a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2646,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 62 x 61, 8-bit/color RGBA, non-interlaced","md5":"75f11e17cd3cc3f42dce34ed590b73e0","sha1":"11aa03d2afb2c9a9ddc6a83bf9e525bc6a24121c","sha256":"d4d0459ca03f83394578a071692f18c075fdd3c3b6ab702c66382487321c2cc6","sha512":"f2fdb1da4a5eecb41de0d5172d21872a777fc4858d06c003395759d66d18f19773ac5c2722061e1b720bb366e00c501496f610de3654296d65e8152b39f82883","ssdeep":"","tlshash":"c7513b51be42ed2bf30a19d35b39c898d526d03c2ab63bd1044a536af022e2d391e41f","first_seen":"2026-03-29T12:46:31.431866Z","last_seen":"2026-06-03T03:56:38.768725Z","times_seen":3,"resource_available":false,"data":null}},"time_used":856,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":855,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/upfile/2021/01/20210113093938_105.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:01.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /upfile/2021/01/20210113093938_105.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 3844\r\nlast-modified: Wed, 18 May 2022 16:51:20 GMT\r\netag: \"62852408-f04\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=doz6%2Bi22inJlmeZv2BQwJD7n62JuTuw9KZnzV2yk4zrg5noyNmFWeo5BEcffEhDCyvbanQFnzGlgeOdk%2FEarwDIdpHFLxoEz5%2Fd8FMJhEKtm8IM49HRgoUD%2B33auZcWoD6z0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e2a2f5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3844,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 91 x 92, 8-bit/color RGBA, non-interlaced","md5":"b5901f37d16b17747ebbb18703b96a90","sha1":"c8355bde18e5c0b74c3a390ea2b87322816d5909","sha256":"0bf75af008290de024602e972ab2933f659c99c9f22744ca8d7b4aa28747ea03","sha512":"f1ef4fa536d662038c50ab43085b090c98dbdb936bd9a8722da389951dacef2b1b757287de99906fe38e334d56caeee7f91452ad0ef273c2e4363935a9a14980","ssdeep":"","tlshash":"25818ed34aa3c04b8453f9fb5c59f4f3ad26c36deebc077dc828556505389091e1823a","first_seen":"2026-03-29T12:46:31.43297Z","last_seen":"2026-06-03T03:56:38.679277Z","times_seen":3,"resource_available":false,"data":null}},"time_used":866,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":864,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/upfile/2021/01/20210113095020_903.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:02.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /upfile/2021/01/20210113095020_903.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 3891\r\nlast-modified: Wed, 18 May 2022 16:51:27 GMT\r\netag: \"6285240f-f33\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yDgp3XFVADSECkqfjZiKjaKJ0swA5POIE%2BGd%2B5vWrNfFZraMy2LMd03rtCYwofOkP0M4gueXG8dB5nvbdJ6BpgwaWvXRdL5iRijUyOLkZ14spp4dwTHLkUVEFDi4nHITa7uE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e3a3e5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3891,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"f9836e07984c659a39b5ce9e10e552e7","sha1":"5cff29681b432530ce70c691268fcc9293d1173a","sha256":"f206be2132350e56bb31a956d8e5af4c3df578291ea9b666d5bdd5dd4a672171","sha512":"abe075424af97732ab99c8ebbc3d87d586ace9088488506f9594e5e03e44911058739344f05e824a39e72a5fcb73b27f424af3f91479541930a9bbb38736171e","ssdeep":"","tlshash":"7c816dcd5b48caa6c9b0fdda80ce06853b113f8964a4be15c7dae5350ae8f21d7c3571","first_seen":"2026-03-29T12:46:31.434497Z","last_seen":"2026-06-03T03:56:38.690739Z","times_seen":3,"resource_available":false,"data":null}},"time_used":816,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":816,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/templates/wpzf/static/img/back1.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:03.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /templates/wpzf/static/img/back1.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 11173\r\nlast-modified: Wed, 18 May 2022 16:51:51 GMT\r\netag: \"62852427-2ba5\"\r\nexpires: Tue, 28 Apr 2026 12:46:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xu9o%2B4M7xKoiWuOes4OPIA0Tww3KVvL4xWj2AprrDBLIFJ%2FX0aMwqh%2FbI%2FJG6xAaaW44AsP%2BGMz3ayHtpnazAVnGDhT1HZQ5eovM15CVOQas4OV3S5zhmFSRnsxAxNjapdos\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef9a76b715a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11173,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 980, 8-bit/color RGBA, non-interlaced","md5":"cf496e5cd36c0efedd8c978b4cf2a802","sha1":"83ad03caacc46cedb52317d15e98c88cfef36725","sha256":"b5caad623e785f935ad2b0bdab5bf56ae5b6dd23f46d334ebc4ff103e5210fff","sha512":"98405cbf797c450bd33e1ff128ea07767b571f79b37ab33b325ac1bf06fc30cdcfdec6cee068aed6827038bc75302d470f29674bc40a53b0ecaaf7b132067506","ssdeep":"48:xyv63WrO7xAVli1ZrnqGT0XMOTByg/fEQjPaiXAALIgof+wITiO+2wyKnXuefSl4:xySjAVCyXMQBd/f9LaiQA07+VpLefSWj","tlshash":"17328020403266dccd1f4078199fafbaf7905b2694a0c75e83b6f51e2d973fa4c5ca98","first_seen":"2026-03-29T12:46:31.435895Z","last_seen":"2026-03-29T12:46:42.497628Z","times_seen":2,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/tdzsadpgvapc1bdxnmzxz5qmepvxgnwr.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"172.67.73.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:03.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 17:15:01 GMT","end":"Sun, 24 May 2026 18:14:53 GMT"},"fingerprint":{"sha1":"31:36:89:C7:40:5B:0B:E6:E7:F4:A1:39:D4:03:C8:91:03:F3:27:75","sha256":"3F:EC:22:F7:0C:7A:FE:28:EF:F8:92:A6:E0:B1:FF:75:40:11:76:AE:EB:3B:57:20:62:6F:B5:C0:7C:4B:2A:26"}}},"request":{"raw":"GET /tdzsadpgvapc1bdxnmzxz5qmepvxgnwr.js HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 29 Mar 2026 12:46:03 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: public, s-maxage=600, max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S85koumHOcigsVakaw75EtEXMO1bXCabOajO7DlZ1T8t5IJk%2F290obo0Xs2yPzxrDR4FQD1nWAWFA%2B9SP5ts24tn1fs2GaxZsbKVc%2BiuGojulE1OK2NBLHi2%2FhtkNng%3D\"}]}\r\nage: 1\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e3ef9a818f056a4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T21:50:45.967557Z","times_seen":17550659,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/upfile/2021/01/20210113094209_842.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:01.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /upfile/2021/01/20210113094209_842.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 2253\r\nlast-modified: Wed, 18 May 2022 16:51:22 GMT\r\netag: \"6285240a-8cd\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9m9zXMR9mN2q4MEZOUISJ%2Bplv8DY5lVPsXy09DcsmdRWFd1lwoXs%2BmHSmXwcy0XHbyKjLbtCxqU%2BnwNzSaZlPhumIfC2LMQIR60pfa9EGEWcnaw1DFXy8v1ufnlihEUIoBCk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e2a335a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2253,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 62 x 61, 8-bit/color RGBA, non-interlaced","md5":"59c5fe1c6b3f7db2104b8e60aed236e5","sha1":"fc5a811f18108c6cd7f8fa76b98c3adcf3a8b278","sha256":"ec7373a08754ca509e7a11fdbfa953e54feb540b970967cf036eb986efd1f001","sha512":"10f1e8e620809c7ab46eea5fc82cc161dc0b1e839d32e52593677d6113fb31464e8a891599bc7239bfaedcc58c6d0f91921f49423a1e90a44fc49e48dff351d5","ssdeep":"","tlshash":"a54119f96c951fc4ca8983d5ba93d287b7e22f53414eb450fe580ceb4a3217e8352611","first_seen":"2026-03-29T12:46:31.437181Z","last_seen":"2026-06-03T03:56:38.710013Z","times_seen":3,"resource_available":false,"data":null}},"time_used":819,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":819,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/upfile/2021/01/20210113094918_801.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:02.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /upfile/2021/01/20210113094918_801.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 4131\r\nlast-modified: Wed, 18 May 2022 16:51:25 GMT\r\netag: \"6285240d-1023\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dNmmTVo1dCYpr%2FLmeXzHU01z2tHpXi7UFIdpj4ZuixS2urMFzY7NjnodcbyFpxRPa7OO4aCJwLRwJrLRzNhd%2BlGGQZhx%2BTOYFsT8mjeEtDClGLGuCdUdTNGCXiTCZQDhQvoP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e4a405a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4131,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"45e461b782bdc8ff5eb22ac8b3ed4a83","sha1":"dce6f94153806250c112dbfe363a772c12581c69","sha256":"26db6d7dbd6cf5981fe3012e7fec98fc62d229e100785581215d6bcc33016da6","sha512":"0f74c449fc5093ee1e27c74b85b7a499c3d99ff201d8de71832f7420c5e87e6f381ec53bf34d3455ff93139447e1a43330d269457bed5a053a8a76e8a811a0c6","ssdeep":"96:iPiEnmrDfd75bjA8zhvyg5HxHxX3gO3gmw67HPI8PEy3URzdu+/brMEx:en6BLzhv5HxlQbiFEyMQ+zwI","tlshash":"8b816eee1bf960ccc0d1b0e283a97477d275a820144d4ebf104d5eadb5e689da0521c9","first_seen":"2026-03-29T12:46:31.438464Z","last_seen":"2026-06-03T03:56:38.812814Z","times_seen":3,"resource_available":false,"data":null}},"time_used":819,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":819,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/upfile/2021/01/20210113095805_512.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:02.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /upfile/2021/01/20210113095805_512.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 1970\r\nlast-modified: Wed, 18 May 2022 16:51:29 GMT\r\netag: \"62852411-7b2\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bqtr1BIJCUbqLyKHRqMrNt9wHicMSr708w%2BEctxeV3NhbM8ekNT8GBvBMNfxTI2QgoV0nPMr71Te6Pd9stHX2xc8oxAXdz44jn8JNNjk5lSbGc0ovYvsbhTReythr6TLGgce\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e5a485a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1970,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 74 x 87, 8-bit/color RGBA, non-interlaced","md5":"e64a5323bac0572b753d3ce637ea3f9f","sha1":"3abfef4544b10b8a841b11620e75b259c4a9f492","sha256":"2e00ffabac4e657a6b931149e89f9a2fb92f46839aabc65cba4453ce26926b9c","sha512":"743bf98231f6a5b41cb214b8c30e1d2afe9e0e36db1d422d86466a8c6a8173e2209bafca10ef60a9d9863f4e98185240b8c42db8e5ba10147f7d1b21a10fc5f0","ssdeep":"","tlshash":"68414c1d99808b5ca18320f369b4b1890efa591d8f43e1f9efe21726d09bb0159c2e0c","first_seen":"2026-03-29T12:46:31.440094Z","last_seen":"2026-06-03T03:56:38.807642Z","times_seen":3,"resource_available":false,"data":null}},"time_used":831,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":831,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pay-usdt.org/templates/wpzf/static/img/lo2go.png","fqdn":"www.pay-usdt.org","domain":"pay-usdt.org","tld":"org"},"ip":{"addr":"104.21.90.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pay-usdt.org/","date":"2026-03-29T12:46:02.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pay-usdt.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 15:00:18 GMT","end":"Fri, 01 May 2026 15:58:42 GMT"},"fingerprint":{"sha1":"A2:9D:CB:D3:50:DD:F6:F2:97:32:37:41:DD:65:E3:29:9A:39:17:51","sha256":"A2:63:01:14:8A:3B:4F:AD:E4:CF:00:42:B0:4A:5F:39:FC:D9:F1:53:D7:7D:30:68:C8:46:9B:FA:08:25:FE:7B"}}},"request":{"raw":"GET /templates/wpzf/static/img/lo2go.png HTTP/1.1\r\nHost: www.pay-usdt.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pay-usdt.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 29 Mar 2026 12:46:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 22025\r\nlast-modified: Wed, 18 May 2022 16:52:06 GMT\r\netag: \"62852436-5609\"\r\nexpires: Tue, 28 Apr 2026 12:46:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VSZ1WAzFB4mp6zRyLYK4qHYfFZd%2BE5M%2FxCuC1M5PlH6hHXXvBkox0MFPxSOaUGwPxmgCY5l0bncPUqHFFuaDXom9HyRcuGcrAqoLNjzmTlZmTE6AN089nMCPIFU1lDogVa6k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e3ef99e5a4a5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22025,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"3922b460f20db3d47617bae431ac758c","sha1":"c0a030b8cb0468cb639127c6dd93285c4a9b0c8b","sha256":"08f0d4ab61cf59539eecc00b8baed2cd8169905c38c1638a75d6a59d87a1690b","sha512":"727073eefa2d85284605664382f2f5702d3197523d820ae8b3cfedfb0fabb9830b85d94164665685f3c2297a04644a03df5a6e082735d57164c9cd31c9f30a0d","ssdeep":"384:qiM7GClL24ORAo2UmkH8vs9Dk84Xlt+5Zi2FZHgTSUO9vDMToK+bic:qiCXZ211980Dk84Vt+iyZHgGRvVh","tlshash":"08a2ae37c1342843f0f46b75486947a148b86cdc28bf348a81da3e16abbd3cdf99a148","first_seen":"2026-03-29T12:46:31.388206Z","last_seen":"2026-03-29T12:46:42.501336Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":872,"receive":288,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}