{"report_id":"35e41554-f7c5-42ed-baf6-c233ba603d34","version":0,"status":"done","tags":[],"date":"2026-07-28T20:27:51Z","url":{"schema":"https","addr":"stusdt.bet/","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"104.21.2.180","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"stusdt.bet/","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"title":"stUSDT Staking | Deposit USDT and Get stUSD | Unstake Claim Portal","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"stusdt.bet/","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"104.21.2.180","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-01T20:27:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"stusdt.bet","ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-28T20:27:58.826307Z","last_seen":"2026-07-28T20:27:58.826307Z","alert_count":36,"request_count":36,"received_data":7539648,"sent_data":18771,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]}]},{"fqdn":"cdn.stusdt.io","ip":{"addr":"108.157.229.25","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2023-06-07","domain_rank":0,"first_seen":"2026-07-28T20:27:58.824808Z","last_seen":"2026-07-28T20:27:58.824808Z","alert_count":0,"request_count":1,"received_data":24207,"sent_data":530,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"stusdt.bet/","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-07-29T01:02:40.221019Z","times_seen":90571,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"633753bce071de800f0ef533c1093e54","sha1":"109e1aaf5c9593c62c304e7ccb8e9f500d7dca6c","sha256":"2ccbe660478cfed371a7e8dc06c3a9522e7bcf7a5d1e0f2a9d3e0a708e4b3848","sha512":"2a076903275e97f19cbd24dedfc62c5356d9bcc56a73ae0584c9e2d1b8ce15929e8f841a713c956b6fa8734cd2b0e64fe371f81e928680528055787e0ee8a2dc","ssdeep":"3072:KUEhDHWRbXhDHWRbVhDHWRbchDHWRbi6fKELROu:k0x0z000imN","tlshash":"3f4474e9db5b80ed8e6160ced873f909e4544d678e6cf163aa2dedc17509f22848313b","size":254279,"data":"","first_seen":"2026-07-28T20:28:05.52103Z","last_seen":"2026-07-28T20:28:05.52103Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/1cbc11de-f7aa-46a3-976a-e91229f782d2","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c253263aac1095d93d4d500c9217acec","sha1":"14b01fca6fc53340c364505b02b909990b78a754","sha256":"26a2d5ef55a6da122f6a5797a67cc59d718467924dd29fc6d5f903fe508e3f79","sha512":"9af2d4ee81660f02f3db49558d1a08d1cde2c3eed1ddb43ea0b7b07d6636465f1af78bfa48107a96e9be30f0c1af1fe3794bd7b0c1def6c7bbbcdc8ebd29801f","ssdeep":"6144:jlrVBOcz77ExqGkDXSdgIhfN0ubmm/yQ0t9kxk/Q8qElDTRNmUPqJypxUpTotejI:jl5BOVqW0c2/G4pxodHrI+W3cZKPp","tlshash":"f8f4fa97691f3436c6ef2aba005b2841bc8979434fcd9446b19cce40a3bdfa761d21bd","size":787347,"data":"","first_seen":"2026-07-28T20:28:05.521927Z","last_seen":"2026-07-28T20:28:05.521927Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"895f526ab37305311d1e998fa4d5a6e8","sha1":"06d0220830c81bf254c70552e908371c6dc1f18f","sha256":"90916b8b1fb2fbbd765a22eba866c30d8829f59aa2d7ee86869abd20207b2117","sha512":"6b087d2e2025f4d11073254448b124af8839ce24ff37eb45bf2fd1a2b66bee8fd4fdca2b4d23c08786d217dd71dbc660d1054b7876b37752dee3baaefdaeaa4e","ssdeep":"","tlshash":"2871bc3beb00173bdc8fa9fdced5b4c02e62497262496960691ce102a16cd7487bed88","size":3743,"data":"","first_seen":"2025-08-14T22:47:51.287187Z","last_seen":"2026-07-28T20:28:05.522888Z","times_seen":1371,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-29T00:59:10.768187Z","times_seen":410334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/32293bda-49ee-4b3e-ba7f-dd8c5519e65c","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0f576fd6fb498e3113245ba18e0f7a3","sha1":"b8cb0ca29bd45f2387ab551fe63d33267d0fc135","sha256":"6178c034b5383cb958c905b70f3dacf26798ba15e4eadf99c8210fa8e66eae9c","sha512":"a7ca0e1afa6817282f8da48783eb3d189e8391948096e614fd8010cdd34ee13280a7392cd56c87cf03b60cff4ef118d1907dcbf3641f2285bddd27e43a5e8368","ssdeep":"49152:QGkwdNZngkvGvGhQ60Ea9khBbd6L6owW2QUSvhjG+EyY4bfO3xrQanJfCpszVtOz:K","tlshash":"7a2623426d4bb8b98f48427471bb6e0e18980d13509df1ebe794f9c3346ef9180eb96d","size":4699033,"data":"","first_seen":"2026-07-28T20:28:05.524275Z","last_seen":"2026-07-28T20:28:05.524275Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a97d6ef5abced657bf5d46b969b239da","sha1":"212f1fc55f39b82d41e88c7628aec3b33d263afc","sha256":"fd3d3ea23ebc1d6ff9299cbe2cc651dfcd714b9be828c8ca2a81540e2f85eaf9","sha512":"6f35480a04c1360f72ae3d1dec34f1357b49fb10a7c7e6de8124e33a87b075127206686daa9145d40be27c4dd761f078d085a1f2538567c714ede67f66122c7c","ssdeep":"192:7mmQewTVPeY8DpuTM3kpVg9LuKXgnudSWXLPKPIlH4SjmnUYsCc0V02Y2pE2XuCh:7mmQewTYY8Fb3kjgTtLPKPIJgcx0V02l","tlshash":"8732c5b06a242ad911d604e20ace4f5d74f591611179dc249b3ef28a2fec3cab7d37a1","size":11308,"data":"","first_seen":"2025-08-01T04:17:54.885074Z","last_seen":"2026-07-28T20:28:05.525589Z","times_seen":1521,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-07-28T20:28:05.526371Z","times_seen":3273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-07-28T20:28:05.52705Z","times_seen":3333,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-07-28T20:28:05.527639Z","times_seen":3378,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/moment-7.23.6.js","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef914f6cb10b3f5532770b776db69161","sha1":"708358a275c65659d7a7c599f05c255d59bd362f","sha256":"f816451402e094fff456ce79f36f2527d5b4466d21911f189ef14dbca3132ab1","sha512":"ee5b09f61c82182cd09d412726673100acd72fcbcea2116e43b670e8da205dff5a788f72ca679c5672ea76679b59d9caca0988af3613221fc438cdb83c8eb38f","ssdeep":"3072:/8iPw5CNqVJw5CNqV1w5CNqV4w5CNqVg1iBBJDUc:O5C805C8M5C8r5C88iJ","tlshash":"415450da594684a6be1200cdcc32ed08e0645d53bdacf153a7edfccab15af26944732b","size":299229,"data":"","first_seen":"2026-07-28T20:28:05.502117Z","last_seen":"2026-07-28T20:28:05.502117Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b1bb204266bfcc8c98fef785be153481","sha1":"2b891d38b150e4fcb700fb7d34ac06c1a5f29faa","sha256":"78d2e69d522cfae8e36e82187c43ee9901d429e5f2709129ad49736c39249a0b","sha512":"0fed7547a669bff8de9a3dd6f59be9ce2642f6a75142c5b03d4909bf44664677dc771a6c13cbde4286489d149b38156da4d3937b29e3aedeff6e9890609c1835","ssdeep":"49152:JGkwdNZngkvGvGhQ60Ea9khBbd6L60wW2QUSvhjG+EyY4bfO3xrQanJfCpszVt4i:6","tlshash":"b42633426d5778ba8f584274b1ab6e0e18980d03509df1dbe794f9c234aef9180ef86d","size":4696718,"data":"","first_seen":"2026-07-28T20:28:05.528699Z","last_seen":"2026-07-28T20:28:05.528699Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-07-28T20:28:05.529876Z","times_seen":3418,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2380d391cf784bce2f77e0e16fa2268b","sha1":"2b88cb08e3d7f56772d46fe1a10d84774e8728d5","sha256":"e65fcff70fe965f3d1878fe515a7ebcd265dfe61b15461521450c882e8d081d7","sha512":"0f3264af3a045928be20d2ee1ef3af905571d07e3fc25eaeda22199baca89b8c9bff94d90d81124ff45b16c5e40df291c2f49d9464ba901d2d961f6fd1196f1f","ssdeep":"","tlshash":"e6411b1e00aa0aa31ba3054333ce846d0956c2cedcc73534d3b27f8134c67832a93bea","size":2254,"data":"","first_seen":"2025-08-01T04:17:54.882582Z","last_seen":"2026-07-28T20:28:05.53047Z","times_seen":3203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-07-28T20:28:05.531078Z","times_seen":3168,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"stusdt.bet/997.4b90f369.chunk.css","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.650Z","timestamp":1785270430650,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /997.4b90f369.chunk.css HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\netag: W/\"69b91687-2ec7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 79\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UIAWzm0oPqHxzwpk91EcGpCkEzA0pt1TM7CIR%2FBmn76FCSivy17jX4BXB7ZhE6l0ZlJXFA7qTt4xBusQYz0%2F2%2B%2BqrLJFPFiJFh2ektOsmRD5D4auzLqGDsGcKXJk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a2269f7f9b355688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11975,"size_decoded":3725,"mime_type":"text/css","magic":"ASCII text, with very long lines (11975), with no line terminators","md5":"a8c126651d653e06e74aca4ceea0726f","sha1":"5d52bb0db4b5ff2891e031ae5b15b502c6f9734d","sha256":"ad2c312e0a713597f8f6df1abfac700a4e734ce2afca8edfb7fbf7e84b84832c","sha512":"ee6d2f0c01b67bb48d7a986f9f5c43dba6f16947c0f01b4a39920a4665e9fc80905bee6888712b5930b0be448de0538a788eff5c0353e5c42b96d7a2746d1542","ssdeep":"192:Mi3j87Jjd6N8QagKZZY36PDrT9F8EJNDlI:D3j89jTQagaZbT9FxJY","tlshash":"2c32ee28b919005cf6bbc952144cb198241bf527f6e766efa8c93638c7c2f8e365171e","first_seen":"2026-07-28T20:28:05.486587Z","last_seen":"2026-07-28T20:28:05.486587Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/finance-report-icon.6875064653f752f8b350e11d09284108.svg","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.669Z","timestamp":1785270430669,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /finance-report-icon.6875064653f752f8b350e11d09284108.svg HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xPNwRArFh5CfntNbvXTtRMFG89fuuvJfXLM5udimVTzivrl5Zk2bpbJo7j5dJCyEaCv7yr1WoixYFsKabJBao9K2vqBkZ66Ya3mUUFeiNjBRsEHIEoMXU%2B%2BkqfZY\"}]}\r\nage: 79\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69b91687-1241\"\r\ncf-ray: a2269f7fbb3d5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4673,"size_decoded":2469,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"12b58567149a1b75855356904461ea38","sha1":"f2848addacdc988c3d4c4cf80dc529690ff675cd","sha256":"4d3fc9266e12c39e60520e9b2d575e91f9893711e22dfc65932a233c894aff53","sha512":"d76c6dcc105a5f08d442083d5afbd5c854c501966ec1069fa10d1de687655b5cef57f8611e3392f13b732ba2baa20edbc7651597df3d5d1170957c94b1857721","ssdeep":"96:MXebS4/BeSxA2jQO7Qx32DGU8QiHyag40z5Jqo:qCSgThjQ+GU8Ja54o","tlshash":"5ba1dceb6e40829d0ad16796bb9f9079e43da6d6137600697284df0b0d0162ffdcf9c1","first_seen":"2026-07-28T20:28:05.487691Z","last_seen":"2026-07-28T20:28:05.487691Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.653Z","timestamp":1785270430653,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Thu, 30 Jul 2026 20:27:10 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LGwkvXsxVexAsz95MT60iIjnbW7SRQxrkzvZ1SOW87z4E71K497EcmhFSLoMUwRA8zhYjkqWrt5GDeqGUC3nhZVI8h%2Bt2dCMP9AgHOOEFRx96s77HbvBKrx9masc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\nserver: cloudflare\r\ncf-ray: a2269f7f9b375688-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1276,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-29T00:59:10.768187Z","times_seen":410334,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/arrow-down-large-white.d018b415af8c99f3b6c6.svg","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.858Z","timestamp":1785270430858,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /arrow-down-large-white.d018b415af8c99f3b6c6.svg HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/main.4c3a2149.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6RDZY5HwjmR0370ASaY89UddfO%2B6Y2yTHVhuVHGBv735OEt2HfusWEuUOgFJCNaqAOV4O94ZuYsmW9F0pHIHHfwDKVoZHUNZTnPnWyzDip0MRJYIWpYeroHhuelY\"}]}\r\nage: 78\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69b91687-cc\"\r\ncf-ray: a2269f80eb4f5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":204,"size_decoded":1066,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"96904e8b2cf52475f1fb06a991d008f2","sha1":"ab03385592c29f6fbf5dc15627f1f0b6e8d18a2b","sha256":"9e3427ae17fe0b753a5eb800191224247d8bbdb52f3dfc8d48024d40f5947df5","sha512":"366c2509329e88966dba4bb7278fcd34d0b728eddef206d7b9bef0b439e1421e803538da69422fcd5f9191f4b9a79de7733eb489028405fe966f93cde304feea","ssdeep":"","tlshash":"f6d023e6d2dc440585444352d71c712751d691e1878400d469803510f30c4bf2d1d16d","first_seen":"2026-07-28T20:28:05.489281Z","last_seen":"2026-07-28T20:28:05.489281Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/medium.b9d2a24f941e245ed9fc.svg","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.878Z","timestamp":1785270430878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /medium.b9d2a24f941e245ed9fc.svg HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/main.4c3a2149.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wwOg401WlGCkEsHnREO4X0K%2Bktgmz%2BNFl1g%2BlewuTQ4%2FzcdoMl0ecNlK%2Bk2d3VTtbxcNgVJvoWY72snzGIeAswm8FhGDnM5N2c%2FZeUgJM98SWV%2BwMsCtgcgoIxCx\"}]}\r\nage: 78\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69b91687-343\"\r\ncf-ray: a2269f80fb5c5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":835,"size_decoded":1380,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4f7798a98a865aae359372aa807374bf","sha1":"e18b5f4d6fffdadcd6a9734ee70ebd636cc8a705","sha256":"49b102ffff8081346173fcaad79972dc1988ac010300c380e70789b9507efb74","sha512":"6d12302b5ad36547bb47e5922f28d60b6cc2bbaf8d53ecfcdb2015ae2537a9f65803973df712fd0fba44af628c707ae0f7d435b1aba9307509d4d218311dc9d2","ssdeep":"","tlshash":"b8011ef3a9dcc0e05104bf818141a564b26039e5b3ea99a9b2e0d28863a9059da8cdce","first_seen":"2026-07-28T20:28:05.490072Z","last_seen":"2026-07-28T20:28:05.490072Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/Inter-SemiBold.4d56bb21f2399db8ad48.ttf","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.903Z","timestamp":1785270430903,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /Inter-SemiBold.4d56bb21f2399db8ad48.ttf HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/main.4c3a2149.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\netag: \"69b91687-4d16c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 78\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bDqSjNegXAU6yZOlQjKLjYQXkUjJd3kX824dHuQhdncG8J87z3ylSa5NUMH8gJ24WdaWKIqLvFYrLPWbKKVHHV%2Bk26YGs8QecdKTpq%2BmYtxtKUx7RNFqUBYpJLAh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2269f812b635688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 315756\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315756,"size_decoded":316697,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 36 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)Inter SemiBoldRegular3.0","md5":"07a48beb92b401297a76ff9f6aedd0ed","sha1":"431007da316de60d85174aeec9b8389b5c73e7d6","sha256":"e8cbc2b88bc4268237ff5e251776d3c54edcb14e015a9e66e4883bde4b55f13f","sha512":"703756e6869bf5d6f2d2c6800216979746c351160a7adbdb0e31a0adedc3bc88c7e4d25176797ca9b3db535a93be93437363a71f03ca89ffe438c70b113ae7e8","ssdeep":"3072:H2fuNOVKphfMIXfsCVAQ4yotx614TJnnisjLjHo4qsb5CQ3wrb+NQyH0vfx17JT5:PfAQYo4TJeKHCMR41+aTjtdF","tlshash":"ee646b17f363835dc8162d3a87a7c7a07363bca17a12e10af7283799c88b4b84d5b5d5","first_seen":"2023-05-10T05:13:45Z","last_seen":"2026-07-28T20:28:05.49094Z","times_seen":2275,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.stusdt.io/logo192.png","fqdn":"cdn.stusdt.io","domain":"stusdt.io","tld":"io"},"ip":{"addr":"108.157.229.25","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:11.234Z","timestamp":1785270431234,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Thu, 29 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9D:9A:D6:0E:FD:FB:C2:EE:2C:BA:6D:5B:88:98:F6:47:63:C3:98:7D","sha256":"A6:BC:5C:BC:81:C5:A2:D2:4A:D2:29:73:04:26:0F:17:A8:05:FA:7F:98:B3:D1:17:ED:18:0C:DB:21:7E:2B:67"}}},"request":{"raw":"GET /logo192.png HTTP/1.1\r\nHost: cdn.stusdt.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 23715\r\ndate: Tue, 28 Jul 2026 20:24:20 GMT\r\nlast-modified: Mon, 18 May 2026 10:27:29 GMT\r\netag: \"9d78db1101cebca7af10aa66f187e974\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d9ef81045d0cf909bd3143957da09138.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: PnQgqr8kbLyYbSy1qiAzl1Ozk6SizHb7QBwvLEB1DxYe1TFy393bDw==\r\nage: 171\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":23715,"size_decoded":24207,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"9d78db1101cebca7af10aa66f187e974","sha1":"e89a909fd54a0e9d4cec923f3e34165681fa57fa","sha256":"07a46112dbe7c192881e0ef837bc0b4880e18533a96a9f12be2cef95831f0503","sha512":"58cb5d2400501f25313e8d342436c522338fd9daf7406e7a2cda293d4d8cd0fd6b914d765e40c8ebd6d5daa8696f7429f186913203c12329efb9b8c4b684ed07","ssdeep":"384:XSnTGlR8nJViz2PlSDa6T8jIuNsF1sw7+QGpsZj/EsoMDRFo+q6H7qOtMJFxGJAL:i6lR8J6OADTbuN++QGOZjsWRFGGnMJF5","tlshash":"87b2e03dc5315d87bc1c89fe2edbe513694768d25ad0260ae4be8ae86c401fdf904bb1","first_seen":"2026-07-28T20:28:05.491476Z","last_seen":"2026-07-28T20:28:05.491476Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":12,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/main.4c3a2149.css","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.643Z","timestamp":1785270430643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /main.4c3a2149.css HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\netag: W/\"69b91687-9f2a4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 78\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xsu5F21SjrvGE59sleosH6UKhsp3t4JpQKzZIiJ7zZ4D%2BBDYhM0BlHKfRsvFw5CekMDVttgQRDoXsBLZcJJMqtCBdJK2yTCWihSEtZv%2FoodKUaF%2F82AS7ZLLRPc7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a2269f7f8b325688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":651940,"size_decoded":109428,"mime_type":"text/css","magic":"ASCII text, with very long lines (65434)","md5":"661f72b5c00b1bd19587d082c9688d9c","sha1":"2597174ace886e4b2d99fae6d20a9e30b3ba507a","sha256":"fda762704582aa889120602cb686f7bb9cfe7258bb1fd1eaf3d49a613729e0f6","sha512":"b7e08157b96dda01eebb28b8d1865dbc6bc34f3114a92753800b6c247c0fa39c09eee70b0b3d11122f5971cfffc69f2fa5dab2dad0687f01ebc5a127b2301c40","ssdeep":"6144:IKARRAHjJzsDNnp1RecwIqyuuHZbEK8mk/P:IVbY3","tlshash":"01d4f8186b91306ee1ebc33764a0f9696d219603d5bf8a7ff2f07e5c8b4958d01a3e05","first_seen":"2026-07-28T20:28:05.492294Z","last_seen":"2026-07-28T20:28:05.492294Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/tron.ec66ff5bb57889831512d36feeb70cc7.svg","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.664Z","timestamp":1785270430664,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /tron.ec66ff5bb57889831512d36feeb70cc7.svg HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X3C8NQZKQuLERVj9LapS3yt2SbPYY8O5vmehuB7Sj81aht8VVJi2o2r5Hvo7pfaeBllBGX4XLmsjy8gg3rJTgQyCz9syex6pM4uBEdrZXl65JKXLqQIHScjqmfuT\"}]}\r\nage: 79\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69b91687-24f\"\r\ncf-ray: a2269f7fab3a5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":591,"size_decoded":1248,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"09539e692ba826d51592003a99acf35b","sha1":"83eaea289f75033eb01801c95aad41b927f1ea5f","sha256":"a30fadc8872022bb58465059426689a2d616b2513766a2ec01e9e7c7aaa5cdd5","sha512":"8604a9add0e049d5b0003c67fabf6e59636b842e3aeecb96938aef638acd5b3e95586ec4cdb8598b705a1c020a3633d0563cfac90bfd4f3821a24d3bedaaa097","ssdeep":"","tlshash":"9df046eda12c84956507e70ef739647264b770f24e8857a898015b72a6219864ca6fcc","first_seen":"2026-07-28T20:28:05.493092Z","last_seen":"2026-07-28T20:28:05.493092Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/connect-wallet-check.42aff9d557989335312a028d76282f3d.svg","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.666Z","timestamp":1785270430666,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /connect-wallet-check.42aff9d557989335312a028d76282f3d.svg HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UdmFE%2BXtwOWC%2BjWcI7vQyXpngt%2F7w4PS2S8%2BXKedupyTQ7TZDGRg%2BZvtkMxwSAjrZHYsBcoNh92pejQdk1Zl4sHke3aelr8VFnQfTuizUls%2BadO4IzjFiCjPaxjl\"}]}\r\nage: 79\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69b91687-3fb\"\r\ncf-ray: a2269f7fab3b5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1019,"size_decoded":1447,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e8bb9b75d82788d804597a9f5b801eff","sha1":"5a53a2f69af229d5a2e3fe550d8f7b56688a96b2","sha256":"622455d3ecb6d228e0a549c0e84318a8ebd5eb2eebde896a206f8139dd6aebf1","sha512":"c053399e78c9029557041d5c39b315b2a5937b79c71df614a0fedddf804bc5272729b13e555d8b31b44515e5d40f426d4ba1b7b7a9ded3a9d75b5a8620092bfc","ssdeep":"","tlshash":"d411efe7424cbec4ff0bcf12d5b2a13641d71c782fac261180775b06ee51428cd95d85","first_seen":"2026-07-28T20:28:05.493907Z","last_seen":"2026-07-28T20:28:05.493907Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/Inter-Bold.88fa7ae373b07b41ecce.ttf","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.900Z","timestamp":1785270430900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /Inter-Bold.88fa7ae373b07b41ecce.ttf HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/main.4c3a2149.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\netag: \"69b91687-4d2c4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 78\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JXcVNtgCKaiZWaNEZ%2BVNFEmtyhyT8HkhrCeyjq51sWgckOdHMrx2TzuzMA3iMApkwRwTMFdIBO0snymcRHofKNtnAjZ6yXIRHbpsPtwoSGhevf1HsasWZKCndcTA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2269f812b615688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 316100\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":316100,"size_decoded":317039,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 34 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterBold3.019;RSMS;Inte","md5":"275bfea5dc74c33f51916fee80feae67","sha1":"48747b7a60086f97af0d373febcbd1f1bee87f17","sha256":"790c108befe859dac2ddbd20af3fbb6917c601b3d544c8a05761519f3b5508fe","sha512":"0b82f93805dff2769bad25a503c6264094df6f403a636b039a8917aa2a1580b0c70c70ff4eb5135dda83aff0c3092e2a707216920685162ef52b395f82a86c11","ssdeep":"3072:kAkl4i5ZELTzK/PxMJ2YkGIKpqjw0K2pgm0J2Rrq41tIW+yMaf/J7oPHUGHYI9LN:VLTnJ2CW9BpW2RW1JaZWRRnQzSF","tlshash":"08647c03f313c35dc9172d3a8b92c7a0b327bc926b12e10ab7243a55c99b4f85e6b5d5","first_seen":"2023-05-10T15:50:10Z","last_seen":"2026-07-28T20:28:05.494981Z","times_seen":1612,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/stUsdt.90084258ad3fdb3bcc90.svg","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.864Z","timestamp":1785270430864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /stUsdt.90084258ad3fdb3bcc90.svg HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/main.4c3a2149.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q2VVrBgQCTMnS1jXGdvOJw9EziFxo%2FBUUe5Ocw98xOjVXsSrOXjsSnf99TkBj3k6nOC0gZF%2BYrxgJ4sDy3PhvmgB6HuKH3Q1jBGQtxlaR4BYuJkJZJs5%2FXv%2B3aiv\"}]}\r\nage: 78\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69b91687-5349\"\r\ncf-ray: a2269f80eb535688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21321,"size_decoded":7360,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"086879b4ad1cd3b583ce8db56749fc13","sha1":"4d0f92bfed22d5a9132c1cf88e6ef011b55f9b1c","sha256":"24af4eda3c9fd4603b2d1c06601efbf401160ecf291cedd900cc7008bce7a409","sha512":"2bb5fbe0b0b0fe865d876e20f029adad0ec70004545c14f137c2c3ee458d5c686442a30fc256a1b21c33686ebfca097eb0e4994131348cc719d4dabd53c3f422","ssdeep":"384:iAgp0KCip0KCF6hkM/dPJKbZWEExcMPijO5l6kR:i3VTV4M/lJYExcliRR","tlshash":"2aa295f396d0a7d08507efb4ec1a8571362f2cfafbb65bc88256e9d69471190c50ec88","first_seen":"2026-07-28T20:28:05.495487Z","last_seen":"2026-07-28T20:28:05.495487Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/copy.1ad60512dfc1ec30f151.svg","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.866Z","timestamp":1785270430866,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /copy.1ad60512dfc1ec30f151.svg HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/main.4c3a2149.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pfSFVLwzwNt3tu1O9JHQJ6bh5x8qL45uoYnHEImaMq8MUG5T50fMkmn3TxYCOeda9CURclywqePpr7WURPmRvva12WuiUz%2F87DJuaub2lI%2F871Hcrym%2F7QCVHY5Q\"}]}\r\nage: 78\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69b91687-2b5\"\r\ncf-ray: a2269f80eb565688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":693,"size_decoded":1305,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9761ea8987a77546e3b0a6864c19d0c7","sha1":"da98a5d85af6250dc303bfa13c8ac009091622ac","sha256":"5cb33ce459e5678a13e187c6b387582e71e52eb94c039087b1ad198bb2f5d3ad","sha512":"35721e8e61db4114b522e1ccf8a2801aa2a4325561e0641646086f5aba394f8c25766b18589c885fe6a983b36125190683db336694d60360c37959bbc7e7f38d","ssdeep":"","tlshash":"470147e432d9d043c4479737ea3d7ef98c8b41c8abc8405885546f09b91b0c65da08b9","first_seen":"2026-07-28T20:28:05.496668Z","last_seen":"2026-07-28T20:28:05.496668Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/mail.343ced6cb8b8834cb43f.svg","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.879Z","timestamp":1785270430879,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /mail.343ced6cb8b8834cb43f.svg HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/main.4c3a2149.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FH1dekjSs7nidqdS1T3dn2QvkpVKbvfFCWOr3ZJoSPfeRd0g3nk1Xqj53Yy8Z1w%2F2hzDzyTQIdK9uX9p9eJFoFZW3BpXdvK0rGA1d1GmIcH7BpKvuOlNbmnPst19\"}]}\r\nage: 78\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69b91687-1f8\"\r\ncf-ray: a2269f810b5e5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":504,"size_decoded":1210,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ca9b11c8f1f3353f6f7fbfdf3996952b","sha1":"7b818396801d3673dad2d30d09e35bc29c149ae7","sha256":"73f8dcc8dde05f6305b2d6dc50c08a8c1c39d94af0cf3dafed35ff14d72fa73c","sha512":"48ac0d688a8b5be6244ae3401baf633c04d31fbb6d79d59f13b60229ea622bc8c140029e0037cf0445f95fe524344d3e175c561533ccc3f04df7347f8e05d529","ssdeep":"","tlshash":"fcf00e04a1dc2880910df7fab8341320b75b34f2fbded1c88d005200b9090e6b81fda8","first_seen":"2026-07-28T20:28:05.497539Z","last_seen":"2026-07-28T20:28:05.497539Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/favicon.ico","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:11.235Z","timestamp":1785270431235,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:11 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s0Aakt3Qnr5buMOoS1OuN45NpMmU06JKAQvHlzChyDx8AmRKl2AhxePJBxYye9eF8chSOIXBA0gDvTGiRiT18v%2FDUgMFeM8dzDFv0OhXR77aUZCTI82zaTgWkgY6\"}]}\r\nage: 78\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69b91687-3c2e\"\r\ncf-ray: a2269f833b735688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":6073,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"a4a7d03619b86d7578b90db3465a41af","sha1":"2f5b466c8f947bded126a873f34bad11082ec2e6","sha256":"8ccb6d526895c6a2f7d00efb1db5c59a0e5046bf959840e4b2100228db41f250","sha512":"fb60b8ea09afecf82cc1552e50df34fb32c48f12f94762da37e185b0f5703f3d3d5224f0e116aa8ef38c17ee3a7a1ee0b389270777d75f39a69e3a3b2baeca07","ssdeep":"192:mStjZPaoZtLYG+knX4EoDpZ0L5mjnxpNrew:mCjpxt+i4EypiWP","tlshash":"8162c425764d8171cec806fa64177bc4320048ed9286834fe26cd7b5396b6db8e8a4ce","first_seen":"2024-12-18T16:24:29.02437Z","last_seen":"2026-07-28T20:28:05.498506Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-28T20:27:10.410Z","timestamp":1785270430410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 79\r\npriority: u=0,i\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m8fXWBCt%2BJzhzQ%2FfHF%2FjbSHaPXm7PjbpJ7JCecoDBd%2FjYb2Dwfa8RZi%2BnOASe9hBoHzbw%2Fj%2B0r4XqWoiiyVgXhYj3v%2F9gIsLVrSVvlX7GBm95wZcIsiNQ6%2BXJdZD\"}]}\r\ncf-ray: a2269f7e4b265688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]}],"data":{"size":63167,"size_decoded":28021,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (25950)","md5":"e4f8fd6706050e7e59b8176c198d5a3d","sha1":"9defef9309f3f8bae17379ecf6aae1b7c615087c","sha256":"3373aaf7b58f51c05bedab54ec11da87efd6b360d16d364d32df70800bc4696c","sha512":"82ea7ac44e39bb7020fb523225cabd27d0197d9f66835b4aed5b3a0b70088dbb25c156d3aeecf45ee8d7da53b6f45890e80907f81b0bb49ce601b7ba2d8a5669","ssdeep":"1536:SsLebo7lk+fx7VgNP3cT20kc+rQgBEP3MlXWvzoC5:jKygxmOO","tlshash":"d353073183b221b650b7e4d49d653e1b1e81d64be60a84c8b5ac87f01fefca1ed5f825","first_seen":"2026-07-28T20:28:05.499662Z","last_seen":"2026-07-28T20:28:05.499662Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":3,"connect":25,"send":0,"wait":21,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/445.db6fa2f5.chunk.css","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.648Z","timestamp":1785270430648,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /445.db6fa2f5.chunk.css HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\netag: W/\"69b91687-7f15\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 79\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JcqlAJXWRF7sldtTOH%2F1XC0ZoIsmmvFrkijlBb92O1kNqGUMZQLoZ1qna8Ru2p31OJ8pyxUhkt%2B6TQDiE0kOJEXee%2FIR0PBXR%2FSp4LUfLdfD5alAO53d%2BE37U8H%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a2269f7f8b345688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32533,"size_decoded":5340,"mime_type":"text/css","magic":"ASCII text, with very long lines (32533), with no line terminators","md5":"393d64e1cd8e2ca6cde852ec26c31898","sha1":"b40d8bce3367e4c6a99cf8db864f93d4b406aa71","sha256":"4b566228ec3937be2d7f88bbb168c2f3f6daa52363c1085774ca62541eee3a43","sha512":"bab8da93da3e4c82225d01a2c4d09f303eccbb3e8a7cc80fd6dd5067822868f009c6052f8659b7aa1765d5909254256d26405ab72d5b0a599bac1ec86ad64d43","ssdeep":"768:QMVOrNnIrl7rt/r8vfiBm21m10rfUVxji1/Ov:Q+Oyrl7rt/r8vfiBm21m10rfUVxji1/G","tlshash":"59e2ad235335253f713b463d349ea69c1ee98532934225ece5926ceccb4d26b732326e","first_seen":"2026-07-28T20:28:05.501109Z","last_seen":"2026-07-28T20:28:05.501109Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/moment-7.23.6.js","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.651Z","timestamp":1785270430651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /moment-7.23.6.js HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\netag: W/\"69b91687-490dd\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 78\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Tj8wmyuWDOFEYqVZFsIjfEsmfGNzjBgGtV44t0PjIT%2F5Nihb7qK%2BSDp9uEZE0PShYNjnKyd1%2FLPoxnkVP6iSDv3b7ia9FaFCj9z4E735y0ZeIblojifFr1ogZkB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a2269f7f9b365688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":299229,"size_decoded":54193,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ef914f6cb10b3f5532770b776db69161","sha1":"708358a275c65659d7a7c599f05c255d59bd362f","sha256":"f816451402e094fff456ce79f36f2527d5b4466d21911f189ef14dbca3132ab1","sha512":"ee5b09f61c82182cd09d412726673100acd72fcbcea2116e43b670e8da205dff5a788f72ca679c5672ea76679b59d9caca0988af3613221fc438cdb83c8eb38f","ssdeep":"3072:/8iPw5CNqVJw5CNqV1w5CNqV4w5CNqVg1iBBJDUc:O5C805C8M5C8r5C88iJ","tlshash":"415450da594684a6be1200cdcc32ed08e0645d53bdacf153a7edfccab15af26944732b","first_seen":"2026-07-28T20:28:05.502117Z","last_seen":"2026-07-28T20:28:05.502117Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/blue-bg.075c3571f7f7e194dffa.png","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.847Z","timestamp":1785270430847,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /blue-bg.075c3571f7f7e194dffa.png HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/main.4c3a2149.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\netag: \"69b91687-64354\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 78\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ehJQzGO4rDlg4B2d4ilj8J14xRSTcH8%2B7ITGTFxmLQtVKqnhIYtEhNKBZPX1cR2PJ4gsQfOrh7%2BwV4ZNJgFq27hd%2F3FVH0DBoa0LO0F7NfpCq%2BQn7UsAskuoxj2d\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2269f80cb4a5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 410452\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":410452,"size_decoded":411379,"mime_type":"image/png","magic":"PNG image data, 5122 x 1274, 8-bit colormap, non-interlaced","md5":"f7bb7273fdb4aded2b10c54d8cc620c0","sha1":"7aaa70a2abfdec2acc42784707ff269082cfe766","sha256":"ecb7ae05ff0a8a48cb209cd2db9e3a81c521e9e5a9dd5421caf65a7f8f1eac52","sha512":"92586ca1085a44c57e2dca53a9f88a2bcb4505835905e225c28430cae852da9ec75a1ef6a8371672404fd4742fed40fe95146c4c5f6871d1d4e99732e93a5f0a","ssdeep":"12288:wrjWqu6ZMWdKMg7hdcvWd8phnuPq9V03rJ+y5eI3Q8/s:wPWquOMiKMgVKBFB4V+ktI","tlshash":"6e942396f788f8dd04e9adc46e1c3e9372e00d7af115a600e624ab105a5b79def350cb","first_seen":"2026-07-28T20:28:05.503286Z","last_seen":"2026-07-28T20:28:05.503286Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/connect-border.6a9c091c451cb7a8352f.svg","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.855Z","timestamp":1785270430855,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /connect-border.6a9c091c451cb7a8352f.svg HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/main.4c3a2149.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fnw%2FYf5hwPbrbnmjvyYi8dAJB0raq%2BKt3Ym704sF1X9w95q7peFlNnijgZugtPh%2BjJqNFD9WJ8LSCt2tkve6P%2FYK1KKtBxOL47TzvBfApkUjsK9RbHRJFfsVIfRE\"}]}\r\nage: 78\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69b91687-1ae\"\r\ncf-ray: a2269f80db4d5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":430,"size_decoded":1208,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d39c78a3b4ca6d2a29dc16d9b76cc88f","sha1":"3b8f120f44a603ad80acbbb5f0119611ffdfe7d7","sha256":"38fbd8485045e3510016d48fafa059fa31277148e64a5f70e3631a362e2ddae0","sha512":"94749cf3b7b57f05507c3e9ee356f6be1e7894a736bca89215655da955f16ed2a0018af44682b66124efd793849e3c5f27fa33184b927ca47dc47f416229e656","ssdeep":"","tlshash":"02e0ab3ef29eed37d228c258c618e4a8209a51a389c99171d1c1bf2e34284c3383a2dd","first_seen":"2024-12-18T16:24:28.9922Z","last_seen":"2026-07-28T20:28:05.504075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/eth-icon.5c8e66454edfc0c486dd.svg","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.859Z","timestamp":1785270430859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /eth-icon.5c8e66454edfc0c486dd.svg HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/main.4c3a2149.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TZkpikrXt4owSJdn5vA%2F65806gtC4xHbOAhZ82WGb%2FFYrtWvsSXviFLs5x8IzB7v%2BtMWDCAxI0FEAjj8ZTA6IoQ043pfA4k%2FRYJIfmK9HNioZA%2Fdr3oL0VlN0ptk\"}]}\r\nage: 78\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69b91687-30f\"\r\ncf-ray: a2269f80eb505688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":783,"size_decoded":1276,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cf8b175af887095c2b166f88f8da6d65","sha1":"5d67f424651b8537bddc819bd15ae91d5f80b28e","sha256":"e1b3ba8d17a11f479cddf6607f3095c5d9bf5f30b7f199db17e6acd0ade98df5","sha512":"6a6cbb5ebcfb2d0008a6e1b9b154170c53e5215400a998dda71fdf62b297f8a06d1075bf96e0573168fe1eb15e864af267a3d10ab416d5d9856808f5265cf335","ssdeep":"","tlshash":"d201bdb8226cd0c169048feab92f607941bbc4eccb5d64d052506e0ffd48beb0c750c0","first_seen":"2026-07-28T20:28:05.504982Z","last_seen":"2026-07-28T20:28:05.504982Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/tooltip-icon.c7ff3fa2182ddc50c2fd.svg","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.860Z","timestamp":1785270430860,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /tooltip-icon.c7ff3fa2182ddc50c2fd.svg HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/main.4c3a2149.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WjZd8SWqgSRIZqwsv%2F7SMarB4cHCskCcHAFqIKYseCkktjEIQPnp0faCzOpUbyNuHSKYBeBwia25SvHbCkHTLjldY%2FGknPs%2BX6QZXHuC0jPJ%2B8%2Fy4%2FPMqt%2FuzLha\"}]}\r\nage: 78\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69b91687-1009\"\r\ncf-ray: a2269f80eb515688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4105,"size_decoded":2849,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"015eed79dfd8034f0c28ca4f98d75477","sha1":"f5c489dbc0acf2f3e6625f0f60903e335f99a70b","sha256":"c7f1074a7b73fbf2b3ebe6fddfa75f495232e0133748123ef7c529b8b512ac67","sha512":"438365208b5ffc7f4c7723727e907692450c0a7b6c36815fda5307c056116597d1b3fd35e214084b76d34d8b7addaedc410c4898c996d5cdf53656bf6f51e6bf","ssdeep":"96:kYw4cQQYQueIRGkVpTCxPGLTKY1ty4K+bk:k87PZHVpuxP8KY1gjT","tlshash":"3b81a7f021a8c2ec8607dc29dd3759d2d81f29fcafc823eac065e5e054756e5de45ca4","first_seen":"2026-07-28T20:28:05.505792Z","last_seen":"2026-07-28T20:28:05.505792Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/usdt.d2bb3b6bf0a82e19f7fe42b2a5e4d876.svg","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.667Z","timestamp":1785270430667,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /usdt.d2bb3b6bf0a82e19f7fe42b2a5e4d876.svg HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5TZTzjQ3mY%2FDZlt8FxAigI20qfZmuG%2BWkMfZNmOAVzD0TuP1W%2B328hRHhysbYzDTFg5AQ3Ru6hAr89Ffee4TQ1pDLyRnbMnQIltKSD1zf1QNwcwRQSI3Y6CQoyip\"}]}\r\nage: 79\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69b91687-6fe\"\r\ncf-ray: a2269f7fab3c5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1790,"size_decoded":1697,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"df2e8b53cf72e4f488f21e6a90498ded","sha1":"3bf596851cb126ad57386bc90197fbb5c7e7aa93","sha256":"1439402cfc3779e1856818746bff4ae59522db7a9136f6ace29078fa4bf35a19","sha512":"3f4c9057e85ea84764d5264c6653fafdd52c94ec2289d8baa0128b47b1f8b7e56c22bf49e58ec51baba96851c353601bc10f349ed829430247f140ce77b68508","ssdeep":"","tlshash":"e63120a2718c85e05b029f7de93c1af2297f2cf83781db5c81545bc6e42b268840cc93","first_seen":"2026-07-28T20:28:05.507872Z","last_seen":"2026-07-28T20:28:05.507872Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/arrow-white.9d71a8832acfbc0852d8.svg","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.850Z","timestamp":1785270430850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /arrow-white.9d71a8832acfbc0852d8.svg HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/main.4c3a2149.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8yRk2DvTakfcYea%2F1%2B55q3HBo6IEpCBhqNFmDZACl6NOcZb6M%2B9YYyVJ0x3vPiGwFWqlISQC5yerHECM3XwzhnQXCafDwdviFNuJWZokoNNpFHgds67BIiG57S%2FV\"}]}\r\nage: 78\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69b91687-df\"\r\ncf-ray: a2269f80db4b5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":223,"size_decoded":1085,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"df5793dbbe9faa0213ba2b4dd61f689b","sha1":"587f9f94f73fbea3964d673db558c4dce1e37d5e","sha256":"5695b99d678161f74367bb0ae536b055f7fceab1ccf4abfae73de3af48ba93c3","sha512":"eb3797ccfd5322b5611df0417e25a21edd4e9b127e58a122e9d97216ff89def223912f16f124170e27035e506553793b7ee26bea55bba4308e050bc3435f4c76","ssdeep":"","tlshash":"f9d023fd531cb514d708577969196b1506a350e35fccd0d5c553391370d44776d112fc","first_seen":"2024-12-18T16:24:28.990971Z","last_seen":"2026-07-28T20:28:05.508711Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/arrow-half-white.dac56461d9775ab709cf.svg","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.862Z","timestamp":1785270430862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /arrow-half-white.dac56461d9775ab709cf.svg HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/main.4c3a2149.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FAMMz0G6osapIrx%2BMPhE%2FeV1GQ31XFvfnjYfoAKNSkS8XMol1p%2FANIYO%2F%2F0Wju8E%2BzfLgwKySGKdkLFmrpTaTBynyWFxrqAaq%2BMTms0fQdyLa6kYyRru0Qf7eUCI\"}]}\r\nage: 78\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69b91687-a8\"\r\ncf-ray: a2269f80eb525688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":168,"size_decoded":1059,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fab733460bca818ec656b8fcd8a166d6","sha1":"e3d5ab1c265315432ba33ca45f32f852b70cf160","sha256":"14cf6246663e1be0831c26b817f14c22ccbf0331915a9569c61bd2778c22b3ca","sha512":"954ca1413c1eaf44a4c7feeefa499872b5929ad812608e7e494c33e90821db4640f6cd95f4ca00c3f3b776fb711e1c03be2e2876a5199adac59dd02fbd0fba49","ssdeep":"","tlshash":"11c0807c624c593de2244350f77c715545a6619241490095b5406712fd889bb2c7f5dc","first_seen":"2026-07-28T20:28:05.509474Z","last_seen":"2026-07-28T20:28:05.509474Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/4f386d4a55e45a53b591ba0fb1f93593232edfed.png","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.865Z","timestamp":1785270430865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /4f386d4a55e45a53b591ba0fb1f93593232edfed.png HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/main.4c3a2149.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\netag: \"69b91687-562\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 78\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8VIDPY12Ya8J%2BB6NKUMUxyYxqq9nZfUgOqWMnS37VyJMwAWb8pvdjTycNHAWtKrTnqM6syWFNIqoei3FIY7RNUvPgWpPxqOucheAarYytSaSueR5DUKyltb24yRT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2269f80eb555688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1378\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1378,"size_decoded":2295,"mime_type":"image/png","magic":"PNG image data, 33 x 33, 8-bit/color RGBA, non-interlaced","md5":"9f5a0d56d90dcf601538ba0d0b994b50","sha1":"4f386d4a55e45a53b591ba0fb1f93593232edfed","sha256":"14b3c2f58c5ce738f9fde5ec28c20a5831e662f48e7faa3d6d91c282408ffd69","sha512":"b1dfad1cdf4a7ea12393f423ad986226e1fb49a69b0ba16edc9e869fd8de39f07e0b6c85417dcb2db0bc6f37feeee8a5cd9a2129a2ed8859e92c5952ffff8b2f","ssdeep":"","tlshash":"7f21b8cc2b2cea58c349df71cd76a11c908ddc854957d727cc8065fc6c97199dc54262","first_seen":"2026-07-28T20:28:05.510409Z","last_seen":"2026-07-28T20:28:05.510409Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/twitter.f981dbe1e66ced638d85.svg","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.875Z","timestamp":1785270430875,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /twitter.f981dbe1e66ced638d85.svg HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/main.4c3a2149.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fN7kPR7zce03r40WfU4keZ3LDo6eeGqom6t6UunxSA0XuT0l51pRO3A3FXdKtYZUX%2BryUOWfNud8Cq0XK4PzDACpt8gUCRD2PZqKMEBBaWt8jVeu25fh9BudlG4b\"}]}\r\nage: 78\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69b91687-50e\"\r\ncf-ray: a2269f80fb5a5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1294,"size_decoded":1606,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6a3557e47af4de78310dc103a84760db","sha1":"c877bc6d27328147a01ba97aca4244cfe5ee283a","sha256":"531f30a7c5d40ebff779abafa4da3135cf6c356072fb14c6cc0c47f003da1340","sha512":"c3c82f8fc63a38c86a1845e5c45f1bd5480240f1bfb6ab6b0c6360c8331bf7981c3b1e4954ac4638f7c28889e3766e6e68c0c26e8e7ff980f49498ba403aaecd","ssdeep":"","tlshash":"5d2168d181d862d0d00adf69d42dd821f36d2df62fecdb5fc15062cc61b50d59988cb9","first_seen":"2026-07-28T20:28:05.511965Z","last_seen":"2026-07-28T20:28:05.511965Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/Inter-Medium.6dcbc9bed1ec438907ee.ttf","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.902Z","timestamp":1785270430902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /Inter-Medium.6dcbc9bed1ec438907ee.ttf HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/main.4c3a2149.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\netag: \"69b91687-4cd58\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 78\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xcTR14a4wkA%2Blyn3RxlpWpUiZ5OwdTC1s89NXaRZw4MNPlfW65xOCjUK8jUjbK8co7cSAK5IcG032Kja64RfBdhJ0%2F1q6mNIsOaRHN6XrWhZPGxia1B1qLffQwp%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2269f812b625688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 314712\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":314712,"size_decoded":315655,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 36 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)Inter MediumRegular3.019","md5":"ed533866b5c83114c7dddbcbc2288b19","sha1":"a418a8ba73bbcfa8c131c426ab836d78457afa9b","sha256":"10d48331f5b3c7362ca357b00c17ac4863ad35199b13b0eceb0962c8c1ad7dc9","sha512":"f0653d74393bf0b78685cbbdacd1e8180034d51bdefc6af8e0a3a7a4b913a63b20a2c72093f82daf9d99c40efd65ab28d916d3e439087552be4dd7f8a79c6f4f","ssdeep":"3072:2d9CwXSBu/5QJJCz0zF4stCr5x3s5DU+FFlUOUK6EfJyq41tIW+mGMaf/coPHUGB:2d9BX0CUnDU+FFeDER11IzaUX4P","tlshash":"28646c03f363835dd9272d3a87a7c7a063a3bc913a12d20bf7283669ca8b5b44d574d5","first_seen":"2023-05-09T01:02:40Z","last_seen":"2026-07-28T20:28:05.513621Z","times_seen":1474,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/Inter-Regular.e89cb19905e7db5591b0.ttf","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.904Z","timestamp":1785270430904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /Inter-Regular.e89cb19905e7db5591b0.ttf HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/main.4c3a2149.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\netag: \"69b91687-4ba44\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 78\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JWWCBwokytmiIbDUPMMTRewZ60iK%2FewGorezvu3mAIPGz4weW7ztk2DvejFBBzFipkc9ulgv24B3RZiw2UfTwDVJlEkQZgWbQ8spz0GMSOG8%2BciNODprrN0bhUzV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2269f812b645688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 309828\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":309828,"size_decoded":310769,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 33 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterRegular3.019;RSMS;I","md5":"079af0e2936ccb99b391ddc0bbb73dcb","sha1":"7237d9cf55f177702066a28a4dde1e4c7e8ab576","sha256":"41ab0f707a2bfab8133ccdfcdab52282f5f79e5751f43a264805451c7bb95fb8","sha512":"0dc66e3ea9fe00ebdba8636f563842e4170f21fe3dadd57ba59cab416ca3326dc887332644b0ec47cf0911d7396557beb420908d3e90a5ea7830efc4f0a482fa","ssdeep":"6144:AyKMOMxMmABlNGowmBNn6m4zHkA4atw21za0dkh6w/yOjs:AyKfMxMmABlNGwBNn6m4DkJak0fw/w","tlshash":"88645b23f363c35dc5172d3687e2c7a0b367bc512a12e10af7283a55daab1b41d9b4d4","first_seen":"2023-05-09T01:02:40Z","last_seen":"2026-07-28T20:28:05.514165Z","times_seen":4375,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/eth.ad77f09fc42ad5ca1a9f876213e3a952.svg","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.660Z","timestamp":1785270430660,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /eth.ad77f09fc42ad5ca1a9f876213e3a952.svg HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HsqGMdVE%2FlMVpfwRJPTP9rHpB%2BgWi7PTPEJQHWy%2F3Y4%2BvfnXU1nOCla%2BL4a6jkfuq05cmrC%2BOju3TTCybt%2FKh8dr1vd0vPcD9bYdoZrio7IcuDadtQzDYIRD7Gx2\"}]}\r\nage: 78\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69b91687-329\"\r\ncf-ray: a2269f7fab395688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":809,"size_decoded":1304,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"57bbdb7a3bc3269340344e3954fb5545","sha1":"f0fb0f074b24deba7e2dcc6330230d9a50ccc838","sha256":"629b0b23460794e5ec59f0e2e375db1398e3f3a7afbbf499b139ca2118085715","sha512":"35c978c267009d1c844400a8c71427c7b3af6d8c2939ffaeadd5db134d4594d247e980be7e9926699862460a9606c36dbd9185ded1d053c9b0b18c50b649b6b3","ssdeep":"","tlshash":"da0166eaa06da0cd5c04c39c2b0e6537703298d89f5f16d9e9402a9bbd498c75d3c6e0","first_seen":"2026-07-28T20:28:05.514969Z","last_seen":"2026-07-28T20:28:05.514969Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/learn-more-arrow.171a8b348fd3d9891c35.svg","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.856Z","timestamp":1785270430856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /learn-more-arrow.171a8b348fd3d9891c35.svg HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/main.4c3a2149.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hv1gB8flHhyuh%2FEj3zXmUsVQEDpK1yheevfWoe9WbIDLke8QnHzxWZQCLC2ojONa%2BbrMiiCcwApMSS264zhcV41T3lQh0mak%2BM81U2va1RHxDE%2FUSNX2V%2FtyUlhk\"}]}\r\nage: 78\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69b91687-d9\"\r\ncf-ray: a2269f80db4e5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":217,"size_decoded":1087,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6fba2ec8779e1c253613eb65b2350ac7","sha1":"f8f5a2dc33b2ba03100ee5095269009ee9f88ef8","sha256":"824de3a6c6f939b6c32747092945222fbe5643a16deb7e3a364b69ba2d05e050","sha512":"738ea43dc1095cbc698ef7822258075ff97700855adbd83ab6335a73e4c999bfa7aab0ff030da01a67188130e16adc895d70f6659cc180e8a3fae1a545ae6b7b","ssdeep":"","tlshash":"96d0a775620c95419403d6319d287db1106f90d5904d11a1a5443746f0555d77f585bc","first_seen":"2026-07-28T20:28:05.516231Z","last_seen":"2026-07-28T20:28:05.516231Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/usdt.d2bb3b6bf0a82e19f7fe.svg","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.868Z","timestamp":1785270430868,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /usdt.d2bb3b6bf0a82e19f7fe.svg HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/main.4c3a2149.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SvI%2F%2BJHVxqJqDeTtu49SqTAZxRyGABisG%2Bganda6E7IGRN3Hi4BQk5V1iBULmVdNUtK4zDHxrk4RhenyrULrJTgu54klcBMRMExHC%2FUtXj2GA2oRe%2BS8s6ZfpDU4\"}]}\r\nage: 78\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69b91687-6fe\"\r\ncf-ray: a2269f80eb575688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1790,"size_decoded":1701,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"df2e8b53cf72e4f488f21e6a90498ded","sha1":"3bf596851cb126ad57386bc90197fbb5c7e7aa93","sha256":"1439402cfc3779e1856818746bff4ae59522db7a9136f6ace29078fa4bf35a19","sha512":"3f4c9057e85ea84764d5264c6653fafdd52c94ec2289d8baa0128b47b1f8b7e56c22bf49e58ec51baba96851c353601bc10f349ed829430247f140ce77b68508","ssdeep":"","tlshash":"e63120a2718c85e05b029f7de93c1af2297f2cf83781db5c81545bc6e42b268840cc93","first_seen":"2026-07-28T20:28:05.507872Z","last_seen":"2026-07-28T20:28:05.507872Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/secureproxy?e=jscdn/getFile","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:11.237Z","timestamp":1785270431237,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://stusdt.bet/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://stusdt.bet\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"py44czx8plcq56ajixml\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Rq%2BVRBM%2BtyqVLdB05mFWh0Gv6D0zPO2D4nFlql4sl83I1Y5f5VkCoMVhKF6lcw9SG14dObjht1Jhayy1XxizpaO4QLuY%2Bh4h%2BE9pARwqjfDNgXP2wZJRZJtYp0tiedvHKDeQSU%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: a2269f833b755688-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4699033,"size_decoded":3638272,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"57ee965844c83b7631f20f9a599575d8","sha1":"43d0dfef5f7385d7358d305a49e365ecf8089ee6","sha256":"97f5d4a9b1612df4d8e9dbe5f2f916d1560accd537408bf167c4d05d9d04ed30","sha512":"f878649e8a315d9456aa8bfadf21bad07c80910822cef16d5c2621424e12885e2702f434796c940d9abfb7853819c258f18e2b2faeefa011217fc96daf045430","ssdeep":"24576:yb/YWmLkwsOukzMSPbg+lsVo5/Cr0OSzcfUjeQ6SI51a:QGkwdNZngkvGI","tlshash":"6a252393bf6b687ccf2c49a4a26f1e0e3c854c211045daf6e6a1d887329577012fb97d","first_seen":"2026-07-28T20:28:05.517217Z","last_seen":"2026-07-28T20:28:05.517217Z","times_seen":1,"resource_available":false,"data":null}},"time_used":874,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":407,"receive":467,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/stUsdt.90084258ad3fdb3bcc90ae0ee116159d.svg","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.658Z","timestamp":1785270430658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /stUsdt.90084258ad3fdb3bcc90ae0ee116159d.svg HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wO20I9sRzufCZ3rYWntj10LzyPeeqVeD6qWqloCAe3Qj3lOcJXtNs6Cs4OXsYr%2BaPGR9hWCyS%2BzNTh5S9%2BYRJGL6%2Bpfh8%2FndMLwlPaNzrjyVRaLGIqUL%2FMfYucT1\"}]}\r\nage: 78\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69b91687-5349\"\r\ncf-ray: a2269f7fab385688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21321,"size_decoded":7337,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"086879b4ad1cd3b583ce8db56749fc13","sha1":"4d0f92bfed22d5a9132c1cf88e6ef011b55f9b1c","sha256":"24af4eda3c9fd4603b2d1c06601efbf401160ecf291cedd900cc7008bce7a409","sha512":"2bb5fbe0b0b0fe865d876e20f029adad0ec70004545c14f137c2c3ee458d5c686442a30fc256a1b21c33686ebfca097eb0e4994131348cc719d4dabd53c3f422","ssdeep":"384:iAgp0KCip0KCF6hkM/dPJKbZWEExcMPijO5l6kR:i3VTV4M/lJYExcliRR","tlshash":"2aa295f396d0a7d08507efb4ec1a8571362f2cfafbb65bc88256e9d69471190c50ec88","first_seen":"2026-07-28T20:28:05.495487Z","last_seen":"2026-07-28T20:28:05.495487Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/arrow-small-white.c85b1429271bb021f765555cba1318e5.svg","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.671Z","timestamp":1785270430671,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /arrow-small-white.c85b1429271bb021f765555cba1318e5.svg HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b1WxGWCV%2FHbwCO6T37e97CPltcAhRvZmrRThY0bYOQKvmu7R3hAVIXfA2Lp4%2BYfI%2B8gowXzf9pzMkfHNtmXHfpdjp5XlHQOj696x0YmeP2Vu7gBWfO1zkd84LQoh\"}]}\r\nage: 79\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69b91687-d9\"\r\ncf-ray: a2269f7fbb3e5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":217,"size_decoded":1080,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5df12bc008f806717d95aee0368527ec","sha1":"2ad2ede2f2caed6b6c82283f886d54c157ad3a92","sha256":"612059f851b61c4a34f872fd279d5ff3c1f9009a892e647df4b649007bc5f60f","sha512":"eca2e822f9dca649be63af14be2a81fb16a396d0070bd1e4a73e8d6722564b00dd26ce2149f46d992cc545852231b0a7c43d033cb87a540be4dc4824885d3531","ssdeep":"","tlshash":"13d0a765900855148a54c2218328f12a429921e197cc50cdc6941245b5184623a4a568","first_seen":"2026-07-28T20:28:05.518062Z","last_seen":"2026-07-28T20:28:05.518062Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/hot-tag-bg.d9f9f826532e3cda2eae.svg","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.871Z","timestamp":1785270430871,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /hot-tag-bg.d9f9f826532e3cda2eae.svg HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/997.4b90f369.chunk.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bKtTQZM%2FpOYZYZ%2FsOvSEYrKbA%2BQG2s%2FEGUI%2FUHptvOxg7w44B4VFecroQk1QwTBmUNKXNCWAqlulutMZCwDVf5TZPdjxzuK%2BsWq74O5oyIzDb9EhbdFybyTfOaVp\"}]}\r\nage: 78\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69b91687-18c\"\r\ncf-ray: a2269f80fb585688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":396,"size_decoded":1184,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dd307ef990aaffaf6c0b49fd78937568","sha1":"2734ae51a2107853b73d8478496e407127e64918","sha256":"a7469bd98b87658e64fd1cc8f7d0f724dd5125d1caf7ac13c9b562f4ed0f8651","sha512":"74186ba267af05017d820278b3b73b67ffa7788e97bfb10e55f87023028e3574323e65ecad221c6b865c45410231704f8c48181a0a60f0b6011ea172b7975711","ssdeep":"","tlshash":"1ce022e7d1088485ba04817dea282ac518ef8484220e006ce0d52cebfc53aaa9858be5","first_seen":"2026-07-28T20:28:05.518839Z","last_seen":"2026-07-28T20:28:05.518839Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stusdt.bet/telegram.4bd6346335df2faf258b.svg","fqdn":"stusdt.bet","domain":"stusdt.bet","tld":"bet"},"ip":{"addr":"172.67.129.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stusdt.bet/","date":"2026-07-28T20:27:10.876Z","timestamp":1785270430876,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stusdt.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 07:33:35 GMT","end":"Sun, 11 Oct 2026 07:33:34 GMT"},"fingerprint":{"sha1":"B2:C6:5C:0C:55:DD:59:7C:05:EE:DA:C8:CA:97:F7:16:3D:D2:11:D0","sha256":"34:16:E5:CA:E3:5C:F6:23:19:89:EE:E7:F6:26:94:F1:5F:BB:67:36:56:4A:4D:6B:40:87:EC:2C:6B:32:01:A3"}}},"request":{"raw":"GET /telegram.4bd6346335df2faf258b.svg HTTP/1.1\r\nHost: stusdt.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stusdt.bet/main.4c3a2149.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 20:27:10 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i\r\ncast-mode: default\r\nlast-modified: Tue, 17 Mar 2026 08:53:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zWfTcz1xSSJKWY0WRoHpMKeqkZY5dX6gCUyKTgLHhv6E9Gp3oEUHVjCcWoMhN6uEayFS6WajxQ3ev%2BW7McPLwR5jctD8kffxswhkIz7dNTLj8FFxKrzLaKsLuos2\"}]}\r\nage: 78\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69b91687-1fe\"\r\ncf-ray: a2269f80fb5b5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":510,"size_decoded":1243,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"58ae801919e70c0493e66fd8f81bcd36","sha1":"fa26b148eb2e6e459d926eb975649b489fc7e51e","sha256":"ccab4fa1a8e8a1ee437d010ceb799782b6f357165b5d4ce2f799a72f35826e1f","sha512":"9336430cb77f8295c3240d32b4ae02cd665522d5d614b9692ea753d19f7abd43f451d93a14970b818dff14e126b88a34b3f02ffe83c35363d3f5ebe2995ecb08","ssdeep":"","tlshash":"d0f00ef081dc3792c05bdfa0e93212b272bf30f3534c8b188880890472299a48c18c58","first_seen":"2026-07-28T20:28:05.519649Z","last_seen":"2026-07-28T20:28:05.519649Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"stusdt.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}