{"report_id":"5a105e56-3eb0-4bb8-958d-389d3aebb575","version":6,"status":"done","tags":[],"date":"2026-03-28T19:42:50Z","url":{"schema":"http","addr":"usdt-99.com","fqdn":"usdt-99.com","domain":"usdt-99.com","tld":"com"},"ip":{"addr":"172.67.150.228","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"usdt-99.com/","fqdn":"usdt-99.com","domain":"usdt-99.com","tld":"com"},"title":"Verification","dom":{"size":5047,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (354)","md5":"da785107489532579da2e0b481f3f385","sha1":"bd2bcaa036915562574e23bf4ce88837c1aa433e","sha256":"60fed8cd07e4b1bf94a36fd3115bf9c68a9f65da6898cf387a5cb88a1bdef371","sha512":"c3d01b66f41b7684da43e005c55e7a58286a286aa1e9d1f4015a8573c977f82504d5d55502e70c126e94a522eb6a06d72b5b0ee3792fc26483c7638b356e2d69","ssdeep":"96:nzqgEeqdFib/M99CEkMrLPDSyJ5udljY+iy4nScy7v:zqgFqdFizMPCEkMfPWyJIDKy4nScy7v","tlshash":"19a1732328f6002a9d57f17149fea15db566c14bd78d8869bdcc42c0cf4eec988a7bc8","dom_hash":"domhash6ef2e2fd201c1e7644467a5c7e6a02be","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"usdt-99.com","fqdn":"usdt-99.com","domain":"usdt-99.com","tld":"com"},"ip":{"addr":"172.67.150.228","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-02T19:42:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"usdt-99.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-25","domain_rank":0,"first_seen":"2026-03-28T19:42:50.454139Z","last_seen":"2026-03-28T19:42:50.454139Z","alert_count":0,"request_count":6,"received_data":132493,"sent_data":2884,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"usdt-99.com/","fqdn":"usdt-99.com","domain":"usdt-99.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b0c66a78a935d4f14c127201f25e015d","sha1":"c45125f4e621cf183e7f737f5d40a75f9cf6f697","sha256":"e10a8eb7ded7ec908744bc4e18eafdfac9f93a5d564413a17be14124ed702951","sha512":"03c13df57ac0993c7b0bd81d1734667316b81faf6609288e13d865962ebc08a8e89386ebdb5c35b8db807a1742ab8b4ef2eb0c678703880db751d49968a4ae68","ssdeep":"","tlshash":"fe21ba87289500209a67f163ca4f25183432019b2e1aed35b58d53c0cf1d76e92b37ca","size":1440,"data":"","first_seen":"2025-11-11T21:08:20.593943Z","last_seen":"2026-03-28T19:46:32.383494Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-99.com/fake_captcha/fakeCAPTCHA.js?v=20260329034229","fqdn":"usdt-99.com","domain":"usdt-99.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"519c3cdde3e89a07313a740c66841a6c","sha1":"4205e6116ba023e729bcf5e56af15c7825c0b885","sha256":"dcfa96ef2213fc7fe6925094c55667cfe39d592e58467110f4725a9692750f56","sha512":"9a1667c9a769da20b53a2a0d7664a844edf5d0e672d3293997068278dcdd04c830c1b6be8f57f8eb7512692caa3c84039dcd181739445b00f5e32d5d30f5aa45","ssdeep":"","tlshash":"8c71773601b900b2452bd5a1529a56cdf92582cbe245541df5dcc3c45f68cecb4c7fec","size":3598,"data":"","first_seen":"2025-11-11T21:08:20.584404Z","last_seen":"2026-03-28T19:46:32.379712Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-99.com/fake_captcha/jquery.js","fqdn":"usdt-99.com","domain":"usdt-99.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87532,"data":"","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-06-07T23:24:23.309009Z","times_seen":27477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"usdt-99.com/fake_captcha/fakeCAPTCHA-LOGO.png","fqdn":"usdt-99.com","domain":"usdt-99.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-99.com/","date":"2026-03-28T19:42:30.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-99.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:35:50 GMT","end":"Fri, 26 Jun 2026 17:34:30 GMT"},"fingerprint":{"sha1":"48:DF:BE:26:56:32:D7:16:95:83:74:33:55:5B:7B:42:10:37:78:ED","sha256":"4D:D3:0E:06:29:CB:3E:AB:74:67:16:B8:24:2B:46:0E:AE:E7:C2:BD:76:1B:1B:B0:DD:6F:20:53:2F:F1:1F:87"}}},"request":{"raw":"GET /fake_captcha/fakeCAPTCHA-LOGO.png HTTP/1.1\r\nHost: usdt-99.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-99.com/\r\nCookie: sl-session=hx07CKWAyWl/ajH3UVCZng==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 19:42:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 29454\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\nlast-modified: Sat, 28 Mar 2026 11:30:50 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization,Content-Type,Access-Token,X-Language\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uHDaekdZcvBOwoiWWNDEbUPeXHXAwvRGDJ8g97iv61yRA21RLPznxy%2BdsVV%2BOglduuuxhHJskzaOAQDWzDpH94Pf9rHXr%2BPcsAmkDPxYjSqmqlgkY8xizZWp%2Fynttw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e391e51eb464e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29454,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 640, 8-bit/color RGBA, non-interlaced","md5":"ccfdaac2f8c83e893672fc90f40983ee","sha1":"5eff61f12de921ffe21ae3cc263fa5339307dabb","sha256":"7a770c7c4e8b40d326bdea1309b7824c33cfc8e6791e2b0dfe4258b29e8bbbbc","sha512":"f76e1dfae2c44f37fc6d09d046555f0eab228d6c5139830b2f43e6581b326b8f5125abd66f98f91ca9c190923ec15cda0b0acf2da1e812d0dcb4c4efd7a000f1","ssdeep":"384:350wTvLBXvpQr5hSRR9q26Q2GwiAIbTNIcDadt6vI9J8kDV9fz71F0JBUf5:JJvL1mzhWIJIQLnf3AJB25","tlshash":"0ad2e15a88ab2c01ce3c4d32a966c4dfe1ff14f64b350d038eb55361972919df87396a","first_seen":"2025-11-11T21:08:20.590661Z","last_seen":"2026-03-28T19:46:32.381549Z","times_seen":7,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":266,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-99.com/","fqdn":"usdt-99.com","domain":"usdt-99.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T19:42:29.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-99.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:35:50 GMT","end":"Fri, 26 Jun 2026 17:34:30 GMT"},"fingerprint":{"sha1":"48:DF:BE:26:56:32:D7:16:95:83:74:33:55:5B:7B:42:10:37:78:ED","sha256":"4D:D3:0E:06:29:CB:3E:AB:74:67:16:B8:24:2B:46:0E:AE:E7:C2:BD:76:1B:1B:B0:DD:6F:20:53:2F:F1:1F:87"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: usdt-99.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 19:42:29 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization,Content-Type,Access-Token,X-Language\r\nset-cookie: sl-session=hx07CKWAyWl/ajH3UVCZng==; Path=/; Max-Age=86400; HttpOnly\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SsBPEUMRaUWqGZB9%2FOFkrwuGfVtv8YBNEXZey%2Fbk4lEYG7PvZEJMrvtA6Hex%2FFb2SGw%2BdLV%2BS6RhflwoIZrs8x9%2BPzB7aEKerhKOMFomjmwd2pUaugTdQB8TcisikA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e391e47bb5eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3589,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"e8fc106a414db290540196ef4c0312a5","sha1":"1414aa4030779b6f7c729881214c381fc7632556","sha256":"a692f661a5dcec9ad53f3de6ae642e3a00551fc72eb1a0d3e4d642cc9cf86c4c","sha512":"d8ba39a8c2012aed44bdfbaf4bde9444db0bdc1393ad41388de7a5564f0eba1da3e10ca13d9f9608cf87b68bc73b0e654e7f8780c4829d89258c9fda886215fa","ssdeep":"","tlshash":"047130432ce2401aa913f0369ebf601ca576811bab4ecc953d8c51d5cf8e78985f37c9","first_seen":"2026-03-28T19:42:53.997471Z","last_seen":"2026-03-28T19:42:53.997471Z","times_seen":1,"resource_available":false,"data":null}},"time_used":628,"timings":{"blocked":27,"dns":0,"connect":2,"send":0,"wait":574,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-99.com/fake_captcha/jquery.js","fqdn":"usdt-99.com","domain":"usdt-99.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-99.com/","date":"2026-03-28T19:42:29.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-99.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:35:50 GMT","end":"Fri, 26 Jun 2026 17:34:30 GMT"},"fingerprint":{"sha1":"48:DF:BE:26:56:32:D7:16:95:83:74:33:55:5B:7B:42:10:37:78:ED","sha256":"4D:D3:0E:06:29:CB:3E:AB:74:67:16:B8:24:2B:46:0E:AE:E7:C2:BD:76:1B:1B:B0:DD:6F:20:53:2F:F1:1F:87"}}},"request":{"raw":"GET /fake_captcha/jquery.js HTTP/1.1\r\nHost: usdt-99.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-99.com/\r\nCookie: sl-session=hx07CKWAyWl/ajH3UVCZng==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 19:42:30 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 28 Mar 2026 11:30:50 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization,Content-Type,Access-Token,X-Language\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HJ23%2BKN3mv3hXMNUnAu6g3KiVhdLi5VRVWxYOzsx6l98klJHRtHYVqTuNwy2aRkaX8KENg6rSmno0Z6idmo0x787%2FcRKfEpNB8%2F4AXsZglExjLlouXnVmhUbfv2RKw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e391e4c6da84e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87532,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-06-07T23:24:23.309009Z","times_seen":27477,"resource_available":true,"data":null}},"time_used":791,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":257,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-99.com/fake_captcha/fakeCAPTCHA.js?v=20260329034229","fqdn":"usdt-99.com","domain":"usdt-99.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-99.com/","date":"2026-03-28T19:42:29.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-99.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:35:50 GMT","end":"Fri, 26 Jun 2026 17:34:30 GMT"},"fingerprint":{"sha1":"48:DF:BE:26:56:32:D7:16:95:83:74:33:55:5B:7B:42:10:37:78:ED","sha256":"4D:D3:0E:06:29:CB:3E:AB:74:67:16:B8:24:2B:46:0E:AE:E7:C2:BD:76:1B:1B:B0:DD:6F:20:53:2F:F1:1F:87"}}},"request":{"raw":"GET /fake_captcha/fakeCAPTCHA.js?v=20260329034229 HTTP/1.1\r\nHost: usdt-99.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-99.com/\r\nCookie: sl-session=hx07CKWAyWl/ajH3UVCZng==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 19:42:30 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 28 Mar 2026 11:30:50 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization,Content-Type,Access-Token,X-Language\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KF4YbRHBDN4al5NSFZDXFeL9JwXMmdC6FyTbI%2BOjywQibY5m4BU3AYCYSbbsLSNdwhGTMMYyo9bkb1BG0lNSLEPx%2FSpIHRy%2FENZhzmPCgJ82Hp3dbdn0Fzd7j1hrbw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e391e4c6dae4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3598,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (347)","md5":"519c3cdde3e89a07313a740c66841a6c","sha1":"4205e6116ba023e729bcf5e56af15c7825c0b885","sha256":"dcfa96ef2213fc7fe6925094c55667cfe39d592e58467110f4725a9692750f56","sha512":"9a1667c9a769da20b53a2a0d7664a844edf5d0e672d3293997068278dcdd04c830c1b6be8f57f8eb7512692caa3c84039dcd181739445b00f5e32d5d30f5aa45","ssdeep":"","tlshash":"8c71773601b900b2452bd5a1529a56cdf92582cbe245541df5dcc3c45f68cecb4c7fec","first_seen":"2025-11-11T21:08:20.584404Z","last_seen":"2026-03-28T19:46:32.379712Z","times_seen":7,"resource_available":true,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-99.com/fake_captcha/fakeCAPTCHA.css","fqdn":"usdt-99.com","domain":"usdt-99.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdt-99.com/","date":"2026-03-28T19:42:29.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-99.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:35:50 GMT","end":"Fri, 26 Jun 2026 17:34:30 GMT"},"fingerprint":{"sha1":"48:DF:BE:26:56:32:D7:16:95:83:74:33:55:5B:7B:42:10:37:78:ED","sha256":"4D:D3:0E:06:29:CB:3E:AB:74:67:16:B8:24:2B:46:0E:AE:E7:C2:BD:76:1B:1B:B0:DD:6F:20:53:2F:F1:1F:87"}}},"request":{"raw":"GET /fake_captcha/fakeCAPTCHA.css HTTP/1.1\r\nHost: usdt-99.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-99.com/\r\nCookie: sl-session=hx07CKWAyWl/ajH3UVCZng==\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 19:42:30 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 28 Mar 2026 11:30:50 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization,Content-Type,Access-Token,X-Language\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BzYgNOIFaeDbxL8oOqeHc0iiXeQna5VIZRRqDT2IrGZKAdwzPjW3RO93SyPMhdUSBLS0npZlLEjxhzDT5BmaOpShpKO%2FWIxI9NwOLclrvbN%2BIh9SBMerTOKW450QQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9e391e4c6dbf4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3013,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"62aabe263ad95512ef3da42843c30032","sha1":"a63f0022c2b36f3a5ad9af007033e6728d5143ec","sha256":"7135f80bd71b734b93e96edf821566156589c876c5ed9c47dc495f10a1bdbbf4","sha512":"0e690f4acd4d2aa224f8711fdbfc88e06e2e751faf93be75e94f504b2f24e246daa93732cb74d91ebea3e4266e42e1c9cd05e00f5b1076229b1eac4ee5e96162","ssdeep":"","tlshash":"6951eca54d83097069278d9897eb87c5a7754253f90bca783aa5aa1c8f4e1f80292f41","first_seen":"2025-07-01T15:31:52.358463Z","last_seen":"2026-03-28T19:46:32.380331Z","times_seen":9,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-99.com/favicon.ico","fqdn":"usdt-99.com","domain":"usdt-99.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-99.com/","date":"2026-03-28T19:42:30.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-99.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:35:50 GMT","end":"Fri, 26 Jun 2026 17:34:30 GMT"},"fingerprint":{"sha1":"48:DF:BE:26:56:32:D7:16:95:83:74:33:55:5B:7B:42:10:37:78:ED","sha256":"4D:D3:0E:06:29:CB:3E:AB:74:67:16:B8:24:2B:46:0E:AE:E7:C2:BD:76:1B:1B:B0:DD:6F:20:53:2F:F1:1F:87"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: usdt-99.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-99.com/\r\nCookie: sl-session=hx07CKWAyWl/ajH3UVCZng==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 28 Mar 2026 19:42:31 GMT\r\ncontent-type: text/html;charset=utf-8\r\npriority: u=6,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization,Content-Type,Access-Token,X-Language\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VsCAta%2B%2BY91up86PTrguNJvo%2BU460e6i9pLG%2BCreRc60tNlzzUYTfwcwUongLKF%2FPG6rfLEk9w1NPQn%2BOeDF%2Bd7js9mhnvEFVdlQJFX4eJrNLfqagsrao6A7NVqomg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e391e51db264e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":378,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"dc87cfc5d4c302b04b0b82b95982c670","sha1":"c9a23ef2950c8e6c6073c4c442830b1b022f67c5","sha256":"5a139b2d77f288757d9653406793cf734383e9d129d63ad03a6335ffdb977034","sha512":"35c556418657fbdd5c1b4bc8af31d4b096689ccab78d7835961463c821cbd70cde9416cf2576cf106f58aa9ee7409459f5894076991bff530db40e2b57114e10","ssdeep":"","tlshash":"1fe0df4f04e34918006295601ac0a21098868aabeb6f991139dee06a8fcae59cac73c8","first_seen":"2025-06-27T13:52:47.810274Z","last_seen":"2026-05-02T11:25:36.538424Z","times_seen":30,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}