{"report_id":"6f59e6eb-a163-4527-8460-ef0c8f353698","version":6,"status":"done","tags":[],"date":"2026-01-07T15:08:26Z","url":{"schema":"https","addr":"usdtclean.com/","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":0,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"usdtclean.com/","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"title":"AML Check","dom":{"size":161441,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (34360)","md5":"a41cfbafb3051003712ab480a473ba61","sha1":"768b41331371148ad5e729222b536090da5bb379","sha256":"a7ffeab997e5f96c09092eac0d2ec9dfa3e56dbc28230d2412fc5a5d22f92c9d","sha512":"c2227108e22830784a68e87322613d16506567d4f32fc46a2a417fec45be2130a94842e1597d562e99817a9fe8d42a3eaabfa23f870651896d244c1c4952f497","ssdeep":"3072:v5Z1pLZkqu5z1f8ZkTu4V1pHZkqu6y3QZHo7AXQVmGD6:vbLGVf8GCwHGVoydm3","tlshash":"57f39d76aa8129a350230be1b12953aeb596511fde534d70d2ec0f9dd7e2cf8987ecc0","dom_hash":"domhashf04287dab7b8e24a62324b50ef35f5dd","first_seen":"2026-01-07T15:08:32.826668Z","last_seen":"2026-01-07T15:08:32.826668Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"usdtclean.com/","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":0,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-11T15:08:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"usdtclean.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-04T22:14:09.841371Z","alert_count":0,"request_count":1,"received_data":49279,"sent_data":538,"comment":"","tags":null,"fingerprints":null},{"fqdn":"usdtclean.com","ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-04-01","domain_rank":0,"first_seen":"2026-01-07T15:08:28.658949Z","last_seen":"2026-01-07T15:08:28.658949Z","alert_count":87,"request_count":29,"received_data":5665432,"sent_data":12914,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"explorer-api.walletconnect.com","ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-12-19","domain_rank":466611,"first_seen":"2022-10-10T18:16:28Z","last_seen":"2026-01-07T07:57:12.406157Z","alert_count":0,"request_count":5,"received_data":14139,"sent_data":3217,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"config.php","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-06-29T23:58:54.188775Z","last_seen":"2025-07-19T07:55:46.379985Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":424,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"usdtclean.com/430.bundle.js","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2acf8e6fa1c98c5adb3e291700be61f","sha1":"73c9ba6d77792312d1861887700b0a3a98e896fd","sha256":"6423b4f5bf389a655d84a0b0d0227d82eca6a8b91dbab20b18f0f78989e6bbeb","sha512":"af223f797c907572907eeb32f7512684c7f566a00ed9dffeeca9aacf4ede6251eaa284cca1154e058d25a3d4dd06bf3ad802a3426784f930ac28b1555b74723c","ssdeep":"3072:6r7LcemkZcOcqTwP3ZUwaIFmiPELysPjbgj5tOS9H6r:6r7LFTwvGwhFjPE6oS9H6r","tlshash":"72d35be4b3a0f17d725342ad823b05a5f2386404b526c0a8f7ec96d754d3e9a85b7b3c","size":139635,"data":"","first_seen":"2025-06-26T13:47:12.009839Z","last_seen":"2026-02-03T20:35:25.156226Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtclean.com/page1.bundle.js","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"52e345bdeaafebeea0d7a8426a06a9dd","sha1":"e54ac8d527b3e6190083c58cee088955d2f2ad5f","sha256":"486d9ad9ee8ea7d06d82549427ff3e44a46cb1af0dec739f84f0926fb8c01fee","sha512":"4fcba30d5ad7f5827b272650f31dfde999689aecbef52f28d04363eb65145ada80d6d57e15dd8ca0da434da8c950a3a3e594ddaf3ca7543f76da32420afa4cec","ssdeep":"49152:0aHKSHt0dBIF2Welck8TqbtmLleZNhYq+Tc8aWeUCS4Jr6Ytv+:uBIHkjbtHBw","tlshash":"bbf54b847292f07143d660e5047b140af33daa69a40d84a8f768dce77db9dc9923bf78","size":3492242,"data":"","first_seen":"2025-06-29T23:58:57.803636Z","last_seen":"2026-01-07T15:08:32.872499Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:04.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://usdtclean.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48444\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 10:45:13 GMT\r\nexpires: Sun, 03 Jan 2027 10:45:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 361371\r\nlast-modified: Mon, 29 Jul 2024 22:51:01 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48444,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48444, version 1.0","md5":"8e433c0592f77beb6dc527d7b90be120","sha1":"d7402416753ae1bb4cbd4b10d33a0c10517838bd","sha256":"f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af","sha512":"5e90f48b923bb95aeb49691d03dade8825c119b2fa28977ea170c41548900f4e0165e2869f97c7a9380d7ff8ff331a1da855500e5f7b0dfd2b9abd77a386bbf3","ssdeep":"768:dn0V9qZpy/4pR+9MzTCGXckDohHxCc/TfZQEh9UONYyPYcABoN/8rZujvB:dn0+rAmWUMooVrbZQE7NYyzABK8rQ1","tlshash":"0523f25daa398ea9ed25403bd63f2ff004c61409dd645cdfa62871bf2db290d06633d6","first_seen":"2024-07-30T23:13:06Z","last_seen":"2026-08-04T01:57:19.789234Z","times_seen":23590,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":110,"dns":1,"connect":7,"send":0,"wait":10,"receive":10,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtclean.com/images/how-does-DnlstxIX.svg","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:03.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtclean.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 06:31:18 GMT","end":"Thu, 26 Feb 2026 06:31:17 GMT"},"fingerprint":{"sha1":"69:C9:0C:0F:A5:07:F4:8D:B9:D4:0D:BB:7E:74:05:34:71:35:24:06","sha256":"A8:D8:57:D5:D8:0F:3A:AE:60:7E:6C:45:92:44:A2:03:60:1F:1B:6D:D4:C1:7F:D5:0B:B9:13:B3:FE:D1:64:2F"}}},"request":{"raw":"GET /images/how-does-DnlstxIX.svg HTTP/1.1\r\nHost: usdtclean.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Jan 2026 15:08:04 GMT\r\nServer: Apache/2.4.41 (Ubuntu)\r\nLast-Modified: Fri, 17 Jan 2025 11:18:06 GMT\r\nETag: \"1270d-62be510957780\"\r\nAccept-Ranges: bytes\r\nContent-Length: 75533\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":75533,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f74cda42deb365718c80d66ae85c229a","sha1":"4239d279133a77b716a777486656143cf4338569","sha256":"f01c6f20d0beb7cb60a8831b8da262f042cd98a11a758be9032a2459550d4c98","sha512":"d6e3819cb59a1f4e9d1f9802d17c8015e978702b3eeaaeaa4fd61d5bf22a47aae20333fde7abcdb2d450383e9d1617f6edbfd3588d5d0b540376e0dd88a5f7e0","ssdeep":"768:oPk3zyS7R4f5w0BpHL9HMayHkEBGhFUfSmAVg3wTcECVSW7pfxMXuGgNQrdpW4gG:O04o7kF3DTcD7pZy/JkBZga4V","tlshash":"757383dc3f708cc55ec48bdb7f1150ec6a57d5b3aa898e08d15c8f6d088682c9dea983","first_seen":"2025-04-08T20:33:55.218198Z","last_seen":"2026-08-01T06:14:06.835704Z","times_seen":510,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":120,"dns":0,"connect":0,"send":0,"wait":29,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"usdtclean.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtclean.com/images/team4-B3PbVeRF.webp","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:03.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtclean.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 06:31:18 GMT","end":"Thu, 26 Feb 2026 06:31:17 GMT"},"fingerprint":{"sha1":"69:C9:0C:0F:A5:07:F4:8D:B9:D4:0D:BB:7E:74:05:34:71:35:24:06","sha256":"A8:D8:57:D5:D8:0F:3A:AE:60:7E:6C:45:92:44:A2:03:60:1F:1B:6D:D4:C1:7F:D5:0B:B9:13:B3:FE:D1:64:2F"}}},"request":{"raw":"GET /images/team4-B3PbVeRF.webp HTTP/1.1\r\nHost: usdtclean.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Jan 2026 15:08:04 GMT\r\nServer: Apache/2.4.41 (Ubuntu)\r\nLast-Modified: Fri, 17 Jan 2025 11:18:06 GMT\r\nETag: \"1360-62be510957780\"\r\nAccept-Ranges: bytes\r\nContent-Length: 4960\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":4960,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"667a7a156924eb8cf1ea2cc310fa84be","sha1":"a0c41d24550cb1375e1e7184e562cdd1fc19bdaf","sha256":"687e6062d6b65a7669c1badbbf7a4f374eb95572ab40efefcabee1208b96f679","sha512":"c7f8d10bc7c4d14fc2a2444150999baf64f7ae98728ddcc09bbc6147d8452bfdf08f3e17780641303299482bc7ab237d9df36f332446d674632771ff81d2b99e","ssdeep":"96:MZETuQouq6zgoF7sOUTf/l6RdFDcPAnD+zFc5msuDmMIui/Jyx9woc0BhNC3:3TuQo67sO4/ATFDoAD+zW5mVTIRhnocb","tlshash":"e6a18d621f66e1a1eb564f3b2431ca4a218337c487c490a8b3a99c9561d597cabe3b12","first_seen":"2025-04-08T20:33:55.212733Z","last_seen":"2026-08-03T12:37:51.109242Z","times_seen":530,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":225,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"usdtclean.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtclean.com/images/11-CEJH9EXk.webp","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:03.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtclean.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 06:31:18 GMT","end":"Thu, 26 Feb 2026 06:31:17 GMT"},"fingerprint":{"sha1":"69:C9:0C:0F:A5:07:F4:8D:B9:D4:0D:BB:7E:74:05:34:71:35:24:06","sha256":"A8:D8:57:D5:D8:0F:3A:AE:60:7E:6C:45:92:44:A2:03:60:1F:1B:6D:D4:C1:7F:D5:0B:B9:13:B3:FE:D1:64:2F"}}},"request":{"raw":"GET /images/11-CEJH9EXk.webp HTTP/1.1\r\nHost: usdtclean.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Jan 2026 15:08:04 GMT\r\nServer: Apache/2.4.41 (Ubuntu)\r\nLast-Modified: Fri, 17 Jan 2025 11:18:06 GMT\r\nETag: \"4dea-62be510957780\"\r\nAccept-Ranges: bytes\r\nContent-Length: 19946\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":19946,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d848cc6082d065edec132c04bcc72a1e","sha1":"ee347487fc051c45082e8053d05d06aa37a0dccb","sha256":"ece6e8ca616a5c0416427834c086199980328f18e36c53707dd559cd49f0536f","sha512":"b67c5bd932034b717261d74d10d67fd5d1ab0ca507dd0dcdeb2f1679bc8628d83762af7fbac359fb2148981804a907bc7a138f69d1ceba3ca93f34ebd720668e","ssdeep":"384:qJTRUuDcWFQBZnHM/C0R7YDW1w2gMTFT1eDQTS0VamG7MurCubw/g8qf2Ggt:qX+WFQfs/C27O32gevTS0VamcCRg8qf+","tlshash":"1792e0087400489a87ff0ddaa85f9771534e5edd7c7e00693bf8aa8c93e4a958215f4d","first_seen":"2025-04-08T20:33:55.233493Z","last_seen":"2026-08-03T12:37:51.07343Z","times_seen":446,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":302,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"usdtclean.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtclean.com/page1.css","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:03.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtclean.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 06:31:18 GMT","end":"Thu, 26 Feb 2026 06:31:17 GMT"},"fingerprint":{"sha1":"69:C9:0C:0F:A5:07:F4:8D:B9:D4:0D:BB:7E:74:05:34:71:35:24:06","sha256":"A8:D8:57:D5:D8:0F:3A:AE:60:7E:6C:45:92:44:A2:03:60:1F:1B:6D:D4:C1:7F:D5:0B:B9:13:B3:FE:D1:64:2F"}}},"request":{"raw":"GET /page1.css HTTP/1.1\r\nHost: usdtclean.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Jan 2026 15:08:04 GMT\r\nServer: Apache/2.4.41 (Ubuntu)\r\nLast-Modified: Fri, 17 Jan 2025 11:18:06 GMT\r\nETag: \"21fc5-62be510957780-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 28157\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":139205,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27787)","md5":"c35c6cffc2974b4ff1da8284f24d348a","sha1":"e064571c4d383baf603afe4e02612f45f73158ae","sha256":"6b5bb65897d9f89c1cd004229432f6f6f468343dde3c804d88fbf7372a49426f","sha512":"c2b1b974a82cb3a1bbbfe957bf84923dcaaf2cb9f2dc11eb3a3d98461d711b8327aa3d78c99ec6531b8facad0dc1367889e49d5dba45cafb87cdf85122eb0ed7","ssdeep":"1536:+MJihoCcZCOud8G8tKS65wqsZCG+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4KC:ywu/diUyjU5KOUSf","tlshash":"7ad3a765365c14047d0b9912269f1b68227cb041d92acaf8fee33588decade575b3f8c","first_seen":"2025-06-26T13:44:20.104496Z","last_seen":"2026-04-27T03:22:06.487935Z","times_seen":66,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":53,"dns":1,"connect":33,"send":0,"wait":39,"receive":31,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"usdtclean.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtclean.com/images/oneobmen-CyrSxzF4.webp","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:03.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtclean.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 06:31:18 GMT","end":"Thu, 26 Feb 2026 06:31:17 GMT"},"fingerprint":{"sha1":"69:C9:0C:0F:A5:07:F4:8D:B9:D4:0D:BB:7E:74:05:34:71:35:24:06","sha256":"A8:D8:57:D5:D8:0F:3A:AE:60:7E:6C:45:92:44:A2:03:60:1F:1B:6D:D4:C1:7F:D5:0B:B9:13:B3:FE:D1:64:2F"}}},"request":{"raw":"GET /images/oneobmen-CyrSxzF4.webp HTTP/1.1\r\nHost: usdtclean.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Jan 2026 15:08:04 GMT\r\nServer: Apache/2.4.41 (Ubuntu)\r\nLast-Modified: Fri, 17 Jan 2025 11:18:06 GMT\r\nETag: \"10ba-62be510957780\"\r\nAccept-Ranges: bytes\r\nContent-Length: 4282\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":4282,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1bc53ee5929fc3195e5adf1d86c72a33","sha1":"a72412370f4ff21cbb9d758dd6d68731356c9276","sha256":"a6264cb3a7fabd924bcd62bee017831472ecd32fc7624700d3df895a0968af7c","sha512":"acda9b9f3a95005731d72c16ff515c0121114d43612838fcc8f34c731741171c37dc2cc4abe9b461a8eed3984249c38c8457c819f9795064eea99e75b0a1b80e","ssdeep":"96:X2mKVaGphCpFLE38bTHNstUDueEtDhT8zCJK6OS+CRC0MwhwH1nf4i7:vgTpuicTtGUDVE3T8zsHCDwhw","tlshash":"d2918fda6a84d4b4d905a77f4af27f40db8423064781075e2157a906fdbc8c854965f3","first_seen":"2025-04-08T20:33:55.235244Z","last_seen":"2026-08-03T12:37:51.092349Z","times_seen":405,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":276,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"usdtclean.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/c20e1cec-05e8-4ac6-a086-7ce355092400?projectId=cb1211e80ba2992a895db83e6314fb95\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:05.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 08:35:13 GMT","end":"Sun, 08 Mar 2026 09:35:11 GMT"},"fingerprint":{"sha1":"9A:4E:F9:52:35:79:70:FD:85:E6:2D:13:85:19:6A:C7:D8:BA:02:CB","sha256":"2E:13:A5:10:27:76:B3:13:95:EC:3A:92:D4:36:FC:06:76:06:42:8C:3C:FF:F7:34:3B:92:46:11:09:BB:64:63"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/c20e1cec-05e8-4ac6-a086-7ce355092400?projectId=cb1211e80ba2992a895db83e6314fb95\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdtclean.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 15:08:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1192\r\ncf-ray: 9ba45e560c425696-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfs6eobn8WxmhFyQ_IbBrw7DUFfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept, accept-encoding\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=616+2 c=0+2 v=2025.1.5 l=1192 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1192,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4d40ea4af9c48c1d894bf5aabcbdcd8c","sha1":"4b82938b46b8d238553afe63c1f591ce24a562af","sha256":"54656b79cfe70edf0e291967e6aeeec12239fa8042d1d2281efa356889de134f","sha512":"16a8587b3aee0df3406f3464adf437b2e43aba4b87823a4dd3ee1e18f89c725c817f308d38f186e5a9ff12fd69757701ad3a827b36b0360d27c8e40a8cda751e","ssdeep":"","tlshash":"89210ae1123e045cc83bb3fe0f5433e35d9b4921d88228d1684489046dbc0c12301ed2","first_seen":"2024-12-05T15:42:26.551532Z","last_seen":"2026-08-02T03:31:50.439311Z","times_seen":1198,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":402,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtclean.com/index_files/index-CBzum9nO.css","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:03.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtclean.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 06:31:18 GMT","end":"Thu, 26 Feb 2026 06:31:17 GMT"},"fingerprint":{"sha1":"69:C9:0C:0F:A5:07:F4:8D:B9:D4:0D:BB:7E:74:05:34:71:35:24:06","sha256":"A8:D8:57:D5:D8:0F:3A:AE:60:7E:6C:45:92:44:A2:03:60:1F:1B:6D:D4:C1:7F:D5:0B:B9:13:B3:FE:D1:64:2F"}}},"request":{"raw":"GET /index_files/index-CBzum9nO.css HTTP/1.1\r\nHost: usdtclean.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Wed, 07 Jan 2026 15:08:03 GMT\r\nServer: Apache/2.4.41 (Ubuntu)\r\nContent-Length: 276\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":276,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"59c9676f826de92db44fb01504cefb85","sha1":"1a7ea5c6f85e95b3b11878f6ecd8bd4cec6b030a","sha256":"f953dc7b65addaddaf148f8a398bd5e2b3e7920de8edd93afde7c4211b686366","sha512":"080422827ae07e0323e950a8e5b00732787f91aa703b68cf492884069d167ffa8bbfcbf849f6fad01f1d67edaee88f8a3389da55dea6e27b8ccafb11340e2929","ssdeep":"","tlshash":"4ed0eb9f4003638b0812104038c120c2278c13eab82ec5e82cc6d083028c23ecd8aa9c","first_seen":"2026-01-07T15:08:32.842564Z","last_seen":"2026-01-07T15:08:32.842564Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"usdtclean.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtclean.com/index_files/Land-Btat2g4s.css","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:03.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtclean.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 06:31:18 GMT","end":"Thu, 26 Feb 2026 06:31:17 GMT"},"fingerprint":{"sha1":"69:C9:0C:0F:A5:07:F4:8D:B9:D4:0D:BB:7E:74:05:34:71:35:24:06","sha256":"A8:D8:57:D5:D8:0F:3A:AE:60:7E:6C:45:92:44:A2:03:60:1F:1B:6D:D4:C1:7F:D5:0B:B9:13:B3:FE:D1:64:2F"}}},"request":{"raw":"GET /index_files/Land-Btat2g4s.css HTTP/1.1\r\nHost: usdtclean.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Wed, 07 Jan 2026 15:08:04 GMT\r\nServer: Apache/2.4.41 (Ubuntu)\r\nContent-Length: 276\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":276,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"59c9676f826de92db44fb01504cefb85","sha1":"1a7ea5c6f85e95b3b11878f6ecd8bd4cec6b030a","sha256":"f953dc7b65addaddaf148f8a398bd5e2b3e7920de8edd93afde7c4211b686366","sha512":"080422827ae07e0323e950a8e5b00732787f91aa703b68cf492884069d167ffa8bbfcbf849f6fad01f1d67edaee88f8a3389da55dea6e27b8ccafb11340e2929","ssdeep":"","tlshash":"4ed0eb9f4003638b0812104038c120c2278c13eab82ec5e82cc6d083028c23ecd8aa9c","first_seen":"2026-01-07T15:08:32.842564Z","last_seen":"2026-01-07T15:08:32.842564Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":39,"dns":1,"connect":27,"send":0,"wait":26,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"usdtclean.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtclean.com/images/team5-Z1xAavYy.webp","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:03.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtclean.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 06:31:18 GMT","end":"Thu, 26 Feb 2026 06:31:17 GMT"},"fingerprint":{"sha1":"69:C9:0C:0F:A5:07:F4:8D:B9:D4:0D:BB:7E:74:05:34:71:35:24:06","sha256":"A8:D8:57:D5:D8:0F:3A:AE:60:7E:6C:45:92:44:A2:03:60:1F:1B:6D:D4:C1:7F:D5:0B:B9:13:B3:FE:D1:64:2F"}}},"request":{"raw":"GET /images/team5-Z1xAavYy.webp HTTP/1.1\r\nHost: usdtclean.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Jan 2026 15:08:04 GMT\r\nServer: Apache/2.4.41 (Ubuntu)\r\nLast-Modified: Fri, 17 Jan 2025 11:18:06 GMT\r\nETag: \"151a-62be510957780\"\r\nAccept-Ranges: bytes\r\nContent-Length: 5402\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5402,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1b861f2296e3769da970e6af87cff205","sha1":"23e4cfc4f857247ae9955dff2503c3d6231febb1","sha256":"05201c411495b15a1807b3e649ca8fbbfbfee22e149b1ad0c42f9e3768e81230","sha512":"e9dc80a9198a8ee38b1a9407ff0d74258851a61f9461c97a83f5f9f34642ea5466a510610e6371e5d9f77333257749505396468ee9f8a2cf40241fc97dbc3b91","ssdeep":"96:ZRNCyHuEJ8uPWkvCwcBsYUKtZ88YPn+AkI+TwG0UVJg:fNBHui8uPWs2WYUEZ8jPxkTVJg","tlshash":"f1b1aed50af4c71c980316884b4c294beb7a6f5c9d20fd755c52eebb939bcc0661260e","first_seen":"2025-04-08T20:33:55.227028Z","last_seen":"2026-08-03T12:37:51.091538Z","times_seen":448,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":224,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"usdtclean.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtclean.com/images/team7-CmlWnAqS.webp","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:03.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtclean.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 06:31:18 GMT","end":"Thu, 26 Feb 2026 06:31:17 GMT"},"fingerprint":{"sha1":"69:C9:0C:0F:A5:07:F4:8D:B9:D4:0D:BB:7E:74:05:34:71:35:24:06","sha256":"A8:D8:57:D5:D8:0F:3A:AE:60:7E:6C:45:92:44:A2:03:60:1F:1B:6D:D4:C1:7F:D5:0B:B9:13:B3:FE:D1:64:2F"}}},"request":{"raw":"GET /images/team7-CmlWnAqS.webp HTTP/1.1\r\nHost: usdtclean.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Jan 2026 15:08:04 GMT\r\nServer: Apache/2.4.41 (Ubuntu)\r\nLast-Modified: Fri, 17 Jan 2025 11:18:06 GMT\r\nETag: \"25d8-62be510957780\"\r\nAccept-Ranges: bytes\r\nContent-Length: 9688\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":9688,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"21990ddbef30acafada5ba840885cd4e","sha1":"25696e08962a0758185198ede1429c789ab3516d","sha256":"241f8c2374eedda4b5bcdc553f91e383fb54cf2d99e8e9e3ca95fb935964c262","sha512":"a118c8c34208bb2c182be1c5b26551a1d6144172f32f40d929c148d2a972a942f85a73571381d6c5671c93718b3571fc3d446749dfdc4ce8c27292c432e68998","ssdeep":"192:i10Tks2INi0TU+xhRRqeksiFAoOqA1vrM4x6qlqRV7r5X6:imRgchR7ksfjqA1vrMOARFrs","tlshash":"3d12b018d340648eef0ae7445261726681d55b7abf7b5c701a3c8bda308f8b61906e45","first_seen":"2025-04-08T20:33:55.241357Z","last_seen":"2026-08-03T12:37:51.038894Z","times_seen":448,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":269,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"usdtclean.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtclean.com/images/amlsafe-Dapxivrv.webp","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:03.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtclean.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 06:31:18 GMT","end":"Thu, 26 Feb 2026 06:31:17 GMT"},"fingerprint":{"sha1":"69:C9:0C:0F:A5:07:F4:8D:B9:D4:0D:BB:7E:74:05:34:71:35:24:06","sha256":"A8:D8:57:D5:D8:0F:3A:AE:60:7E:6C:45:92:44:A2:03:60:1F:1B:6D:D4:C1:7F:D5:0B:B9:13:B3:FE:D1:64:2F"}}},"request":{"raw":"GET /images/amlsafe-Dapxivrv.webp HTTP/1.1\r\nHost: usdtclean.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Jan 2026 15:08:04 GMT\r\nServer: Apache/2.4.41 (Ubuntu)\r\nLast-Modified: Fri, 17 Jan 2025 11:18:06 GMT\r\nETag: \"2674-62be510957780\"\r\nAccept-Ranges: bytes\r\nContent-Length: 9844\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":9844,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f748a3cfd9873d313464f9e4bbcd76f2","sha1":"a83bddfbde067d55b167ec308e126cf8ca62f39d","sha256":"8fbbeb76beafc36aa0ea7fc570774505c2420352539aef015c3de412cf89a6db","sha512":"ef92662bbe1500595f103d365ff34222f0e6b6286dc3dd240f276d2d8965f8cebd9398adc835c0e4e9c1b06ffbef80edfb0084a5d717139bd5ed6edcaecc078d","ssdeep":"192:ZFiBIVp+T5ehnQHhd5BTr2zdmQbkJZaGwcs5LREy:Z7H+T5QnO75B24QbkzcLR","tlshash":"b8121a95884d9044db9790f86f0320b3a9798873cadcae7384fef0a5d7591f19fa9d40","first_seen":"2025-04-08T20:33:55.228278Z","last_seen":"2026-08-03T12:37:51.088035Z","times_seen":404,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":290,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"usdtclean.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getAllListings?projectId=cb1211e80ba2992a895db83e6314fb95\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0\u0026recommendedIds=4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2Ce9ff15be73584489ca4a66f64d32c4537711797e30b6660dbcb71ea72a42b1f4%2C38f5d18bd8522c244bdd70cb4a68e0e718865155811c043f052fb9f1c51de662%2C19177a98252e07ddfc9af2083ba8e07ef627cb6103467ffebb3f8f4205fd7927","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:05.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 08:35:13 GMT","end":"Sun, 08 Mar 2026 09:35:11 GMT"},"fingerprint":{"sha1":"9A:4E:F9:52:35:79:70:FD:85:E6:2D:13:85:19:6A:C7:D8:BA:02:CB","sha256":"2E:13:A5:10:27:76:B3:13:95:EC:3A:92:D4:36:FC:06:76:06:42:8C:3C:FF:F7:34:3B:92:46:11:09:BB:64:63"}}},"request":{"raw":"GET /w3m/v1/getAllListings?projectId=cb1211e80ba2992a895db83e6314fb95\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0\u0026recommendedIds=4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2Ce9ff15be73584489ca4a66f64d32c4537711797e30b6660dbcb71ea72a42b1f4%2C38f5d18bd8522c244bdd70cb4a68e0e718865155811c043f052fb9f1c51de662%2C19177a98252e07ddfc9af2083ba8e07ef627cb6103467ffebb3f8f4205fd7927 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usdtclean.com/\r\nOrigin: https://usdtclean.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 15:08:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ba45e543a705696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3348,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"da4f16d40280287ec032dc3d711a5b24","sha1":"d04be7f5f25eff7d9208fc018cd757041df43408","sha256":"52f9e6fb3ccef95f049dcb1deb5f4c6582a4f99d2045091c866dff074306ce75","sha512":"cafaafc258194a2ab266569209fbc5112f83becd3544505b331232add01639764808b7f337d3864ea46a25e58e1e1066ac95ac4c6e466f33b08eb520274d7fb8","ssdeep":"","tlshash":"4561fefb9b848f2f1f1c47c9611e394c996e154fdac1ade7a180cf2d80e997a2201d62","first_seen":"2026-01-07T15:08:32.846257Z","last_seen":"2026-01-07T15:08:32.846257Z","times_seen":1,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":24,"dns":6,"connect":1,"send":0,"wait":246,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/3386dde1-8b24-48c8-4b81-16979e342000?projectId=cb1211e80ba2992a895db83e6314fb95\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:05.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 08:35:13 GMT","end":"Sun, 08 Mar 2026 09:35:11 GMT"},"fingerprint":{"sha1":"9A:4E:F9:52:35:79:70:FD:85:E6:2D:13:85:19:6A:C7:D8:BA:02:CB","sha256":"2E:13:A5:10:27:76:B3:13:95:EC:3A:92:D4:36:FC:06:76:06:42:8C:3C:FF:F7:34:3B:92:46:11:09:BB:64:63"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/3386dde1-8b24-48c8-4b81-16979e342000?projectId=cb1211e80ba2992a895db83e6314fb95\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdtclean.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 15:08:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1688\r\ncf-ray: 9ba45e55fc2c5696-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfEA-Bw7H9k1gZltgcL-Suew9FfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept, accept-encoding\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=690+4 c=0+4 v=2024.10.6 l=1688 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1688,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2bffc4df749e3b8f1d0890df22f4bc77","sha1":"ec3033a449dcff239808409c5d96d388a661ea37","sha256":"c7cc404018e711a83cdb04a08a5c5a12f54d1612b3d3cef12a0b7721fccd4465","sha512":"0ef53d6b15c58647ec9f81e562dbda560cd9f6287abf9d07b5e791db37b97879aa57c86637f7213ff127d4d10e4b8528ffc5368e085d8179d18524a4d506a649","ssdeep":"","tlshash":"cb311a52b99510c943825527eff4cd41971398270f3c61734161247349694b22df02d4","first_seen":"2025-01-28T05:59:32.01912Z","last_seen":"2026-06-06T21:30:11.571202Z","times_seen":1649,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtclean.com/page1.bundle.js","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:03.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtclean.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 06:31:18 GMT","end":"Thu, 26 Feb 2026 06:31:17 GMT"},"fingerprint":{"sha1":"69:C9:0C:0F:A5:07:F4:8D:B9:D4:0D:BB:7E:74:05:34:71:35:24:06","sha256":"A8:D8:57:D5:D8:0F:3A:AE:60:7E:6C:45:92:44:A2:03:60:1F:1B:6D:D4:C1:7F:D5:0B:B9:13:B3:FE:D1:64:2F"}}},"request":{"raw":"GET /page1.bundle.js HTTP/1.1\r\nHost: usdtclean.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Jan 2026 15:08:04 GMT\r\nServer: Apache/2.4.41 (Ubuntu)\r\nLast-Modified: Tue, 01 Apr 2025 15:12:35 GMT\r\nETag: \"354992-631b8f76fc9cd-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3492242,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65466)","md5":"d1d2ddb5d7b96251035ac8cfa412dbbd","sha1":"c4c741d6741eb99511173e3e519b9d94e780f3d5","sha256":"08c5c13430440091617d783d1a9137569ebfa5bca042ee7b8be8c2f0ea3ee198","sha512":"549eba3d87dfd00ceae2e1ecc326e3c597cafec2b6a23aeee70a4ca1ffb25f10f97183866ffd16c63ed3e009e3b8b7e713ff3643d51ae3efbfee1d1ac76ae16e","ssdeep":"12288:0QLGsLHuj/SHt0dF/kV8h/PjCvz7Z2WVzAMCLhamsmlx:0QLGsLHKSHt0dF/IF2WehPT","tlshash":"f225188472a4b07643d765d5042f5006f33af82c7849486cb668ecfb7cbd889663af79","first_seen":"2026-01-07T15:08:32.849738Z","last_seen":"2026-01-07T15:08:32.849738Z","times_seen":1,"resource_available":false,"data":null}},"time_used":447,"timings":{"blocked":56,"dns":0,"connect":27,"send":0,"wait":44,"receive":265,"ssl":48},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"usdtclean.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtclean.com/images/home-image-gzJaQJ7U.png","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:03.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtclean.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 06:31:18 GMT","end":"Thu, 26 Feb 2026 06:31:17 GMT"},"fingerprint":{"sha1":"69:C9:0C:0F:A5:07:F4:8D:B9:D4:0D:BB:7E:74:05:34:71:35:24:06","sha256":"A8:D8:57:D5:D8:0F:3A:AE:60:7E:6C:45:92:44:A2:03:60:1F:1B:6D:D4:C1:7F:D5:0B:B9:13:B3:FE:D1:64:2F"}}},"request":{"raw":"GET /images/home-image-gzJaQJ7U.png HTTP/1.1\r\nHost: usdtclean.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Jan 2026 15:08:04 GMT\r\nServer: Apache/2.4.41 (Ubuntu)\r\nLast-Modified: Fri, 17 Jan 2025 11:18:06 GMT\r\nETag: \"23c77-62be510957780\"\r\nAccept-Ranges: bytes\r\nContent-Length: 146551\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":146551,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1512 x 2130, 8-bit/color RGBA, non-interlaced","md5":"9cad99dbdf29233a3e18fae89cbcdd56","sha1":"05d9639f849359af23082e722dd8bae99bfdf560","sha256":"b005f5a6875b15ca7957b90dbae8cf52e6ff1645b327d4b7ef90892401ffcff5","sha512":"9ab249cc09967d21d5a3cf2b75250c3bcc0305d5c0c693d9c7b55e62dcd0de734950c55f5ec6dcb3b5d091ff6d193892b5b27de3cb6a06065df1f7df84223665","ssdeep":"3072:GaDBLdkD1Y5RW69+1cVOA0gi52BytVMTSqXQfjo/n7:lDBLqqW6NV1+52BytVMuaqc","tlshash":"6fe3e058250b5d6ac84d86358beb4fb5f76c8ad94598fe1b0bb40276bcf7319cc83881","first_seen":"2025-04-08T20:33:55.226246Z","last_seen":"2026-08-01T06:14:06.818869Z","times_seen":475,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":121,"dns":1,"connect":31,"send":0,"wait":28,"receive":83,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"usdtclean.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtclean.com/images/team2-CTL725D4.webp","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:03.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtclean.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 06:31:18 GMT","end":"Thu, 26 Feb 2026 06:31:17 GMT"},"fingerprint":{"sha1":"69:C9:0C:0F:A5:07:F4:8D:B9:D4:0D:BB:7E:74:05:34:71:35:24:06","sha256":"A8:D8:57:D5:D8:0F:3A:AE:60:7E:6C:45:92:44:A2:03:60:1F:1B:6D:D4:C1:7F:D5:0B:B9:13:B3:FE:D1:64:2F"}}},"request":{"raw":"GET /images/team2-CTL725D4.webp HTTP/1.1\r\nHost: usdtclean.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Jan 2026 15:08:04 GMT\r\nServer: Apache/2.4.41 (Ubuntu)\r\nLast-Modified: Fri, 17 Jan 2025 11:18:06 GMT\r\nETag: \"16b4-62be510957780\"\r\nAccept-Ranges: bytes\r\nContent-Length: 5812\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5812,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7ddbbf9cab745b9433bea6b2edc96096","sha1":"5d6c1060beabd56827c5441fea4d7cabdd59b70b","sha256":"3a3f8a7f6ccee1feb368a7a7c8d357a29156e35181772292242b6de2a053cf01","sha512":"7635535a1db3b572135119ca99e4beb6517af783ab9df43ee97535273c534e247610d7b7cfd123886fe73c8941deb68e4959daf394c91ffc8c85921f9af92729","ssdeep":"96:8WoZZT+fYdS4oDKOhMRDvHm4s6XepK3f/j+u63ygikCq6d+Lv1A+k2uos:8njOYdFoO7D/mv6RD+7jikCBQL9u3","tlshash":"efc1afd46f92c0bb00d1f848aabd189626bd77e1ee12112625c9690038d13a4625feef","first_seen":"2025-04-08T20:33:55.24233Z","last_seen":"2026-08-03T12:37:51.063429Z","times_seen":447,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":195,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"usdtclean.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtclean.com/images/team8-Ba7qheCQ.webp","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:03.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtclean.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 06:31:18 GMT","end":"Thu, 26 Feb 2026 06:31:17 GMT"},"fingerprint":{"sha1":"69:C9:0C:0F:A5:07:F4:8D:B9:D4:0D:BB:7E:74:05:34:71:35:24:06","sha256":"A8:D8:57:D5:D8:0F:3A:AE:60:7E:6C:45:92:44:A2:03:60:1F:1B:6D:D4:C1:7F:D5:0B:B9:13:B3:FE:D1:64:2F"}}},"request":{"raw":"GET /images/team8-Ba7qheCQ.webp HTTP/1.1\r\nHost: usdtclean.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Jan 2026 15:08:04 GMT\r\nServer: Apache/2.4.41 (Ubuntu)\r\nLast-Modified: Fri, 17 Jan 2025 11:18:06 GMT\r\nETag: \"4d5c-62be510957780\"\r\nAccept-Ranges: bytes\r\nContent-Length: 19804\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":19804,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fd8f7be198d97dbaaa2d1a3b5645191b","sha1":"8ca51f777ba30dbb1f57c755abe0cd17c9ba3ccc","sha256":"3d886348daceeeb72cbb1f157440d88e3cd8e273199f0be11ab8fb489a8d6b60","sha512":"618952eff83f028c6d211dffe0525d2f6c2b957552e33010698dd8119163ccc349d5389c2cd78e0ea58f80ce7e710cbc9417df9d48c33091bd6db2ee3651c910","ssdeep":"384:jnpCiYZLoKv/PpXu2HTr6bhIBuwbIkC5SxpHgoIHEC4Eij4dvvngZp+T:jnBYSa/HHTrqqUwG5cHaLi0d0E","tlshash":"a592d1066158b1a2e7bfe4029bad2daf1d20c2cdb86806534d9cf141d617db27b3f56c","first_seen":"2025-04-08T20:33:55.235982Z","last_seen":"2026-08-03T12:37:51.05785Z","times_seen":448,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":279,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"usdtclean.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtclean.com/images/uniochange-B8zbqJSY.webp","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:03.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtclean.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 06:31:18 GMT","end":"Thu, 26 Feb 2026 06:31:17 GMT"},"fingerprint":{"sha1":"69:C9:0C:0F:A5:07:F4:8D:B9:D4:0D:BB:7E:74:05:34:71:35:24:06","sha256":"A8:D8:57:D5:D8:0F:3A:AE:60:7E:6C:45:92:44:A2:03:60:1F:1B:6D:D4:C1:7F:D5:0B:B9:13:B3:FE:D1:64:2F"}}},"request":{"raw":"GET /images/uniochange-B8zbqJSY.webp HTTP/1.1\r\nHost: usdtclean.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Jan 2026 15:08:04 GMT\r\nServer: Apache/2.4.41 (Ubuntu)\r\nLast-Modified: Fri, 17 Jan 2025 11:18:06 GMT\r\nETag: \"1082-62be510957780\"\r\nAccept-Ranges: bytes\r\nContent-Length: 4226\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":4226,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6c1d8ecc4eb00c7b2fc07c6e6bf80d62","sha1":"9f4768ee54c89fc835ab8ebb553f27d1687d6c09","sha256":"239a8beaafa035e38e4e3a96bd524269676557d5f2fa5c2b64e086a283e82308","sha512":"a4a3a752dbf6a1d97c0e711bf100988e80fa47bfc6288ccf523bf97b0527d4373267f4306cf0d04cf6cd10d430b609bd9e82153e28b244297108ffbc3761eb0a","ssdeep":"96:vytkHXw/Xbumhm5aioWQPDN7a4Ic44MUut0mXZ5FsmOA:mkA/w53JQPDVa4T44MUutBXZ5Fso","tlshash":"f8917f549f8835318c170d4928372225a0e4968edc380ddfee531c21676dcb1b9b1f3c","first_seen":"2025-04-08T20:33:55.219007Z","last_seen":"2026-08-03T12:37:51.061703Z","times_seen":405,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":303,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"usdtclean.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtclean.com/index_files/css2","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:03.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtclean.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 06:31:18 GMT","end":"Thu, 26 Feb 2026 06:31:17 GMT"},"fingerprint":{"sha1":"69:C9:0C:0F:A5:07:F4:8D:B9:D4:0D:BB:7E:74:05:34:71:35:24:06","sha256":"A8:D8:57:D5:D8:0F:3A:AE:60:7E:6C:45:92:44:A2:03:60:1F:1B:6D:D4:C1:7F:D5:0B:B9:13:B3:FE:D1:64:2F"}}},"request":{"raw":"GET /index_files/css2 HTTP/1.1\r\nHost: usdtclean.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Wed, 07 Jan 2026 15:08:03 GMT\r\nServer: Apache/2.4.41 (Ubuntu)\r\nContent-Length: 276\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":276,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"59c9676f826de92db44fb01504cefb85","sha1":"1a7ea5c6f85e95b3b11878f6ecd8bd4cec6b030a","sha256":"f953dc7b65addaddaf148f8a398bd5e2b3e7920de8edd93afde7c4211b686366","sha512":"080422827ae07e0323e950a8e5b00732787f91aa703b68cf492884069d167ffa8bbfcbf849f6fad01f1d67edaee88f8a3389da55dea6e27b8ccafb11340e2929","ssdeep":"","tlshash":"4ed0eb9f4003638b0812104038c120c2278c13eab82ec5e82cc6d083028c23ecd8aa9c","first_seen":"2026-01-07T15:08:32.842564Z","last_seen":"2026-01-07T15:08:32.842564Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"usdtclean.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtclean.com/images/what-else1-BqAm836B.svg","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:03.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtclean.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 06:31:18 GMT","end":"Thu, 26 Feb 2026 06:31:17 GMT"},"fingerprint":{"sha1":"69:C9:0C:0F:A5:07:F4:8D:B9:D4:0D:BB:7E:74:05:34:71:35:24:06","sha256":"A8:D8:57:D5:D8:0F:3A:AE:60:7E:6C:45:92:44:A2:03:60:1F:1B:6D:D4:C1:7F:D5:0B:B9:13:B3:FE:D1:64:2F"}}},"request":{"raw":"GET /images/what-else1-BqAm836B.svg HTTP/1.1\r\nHost: usdtclean.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Jan 2026 15:08:04 GMT\r\nServer: Apache/2.4.41 (Ubuntu)\r\nLast-Modified: Fri, 17 Jan 2025 11:18:06 GMT\r\nETag: \"54b36-62be510957780\"\r\nAccept-Ranges: bytes\r\nContent-Length: 346934\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":346934,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"512f89c0f286c15602c3185b3e8de07d","sha1":"3056e918097ec260b8a565aa088e78ef3bd78d0e","sha256":"030d84266479bd6e195d340e2dbbab1f20afab194bcf91f92c7e0fa3f8008220","sha512":"945a753a8816321ff62b4b792f286ba617fede9e7fe087219eb688db95c88f33cb435cff215a864c89881f62152ba5a2f92ab823263c211c5b1c960a894c85cb","ssdeep":"1536:y5QRcR9vN3RRPtmmhMgbSsPpI1v4xhBQVdDNDNi+6hjNRcjRQrIGtUOW2uFh+tGw:EZH+W","tlshash":"957450ec2fb01dd98ddc8bd7bf1285ad6823d1779999ce08c25c8f581585c2cfc66a82","first_seen":"2025-04-08T20:33:55.211481Z","last_seen":"2026-08-01T06:14:06.80458Z","times_seen":381,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":147,"dns":0,"connect":0,"send":0,"wait":26,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"usdtclean.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtclean.com/images/team3-DH9H-rCm.webp","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:03.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtclean.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 06:31:18 GMT","end":"Thu, 26 Feb 2026 06:31:17 GMT"},"fingerprint":{"sha1":"69:C9:0C:0F:A5:07:F4:8D:B9:D4:0D:BB:7E:74:05:34:71:35:24:06","sha256":"A8:D8:57:D5:D8:0F:3A:AE:60:7E:6C:45:92:44:A2:03:60:1F:1B:6D:D4:C1:7F:D5:0B:B9:13:B3:FE:D1:64:2F"}}},"request":{"raw":"GET /images/team3-DH9H-rCm.webp HTTP/1.1\r\nHost: usdtclean.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Jan 2026 15:08:04 GMT\r\nServer: Apache/2.4.41 (Ubuntu)\r\nLast-Modified: Fri, 17 Jan 2025 11:18:06 GMT\r\nETag: \"14ee-62be510957780\"\r\nAccept-Ranges: bytes\r\nContent-Length: 5358\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5358,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"74bcbc95eb9c765eb9807d9a6f5a198d","sha1":"3a1595be13ffd0a8622900fbe79b8bafa5a72d3b","sha256":"40b376a82e6f6ed6e382e6955fca2037bb67a22fdb08b26736d357051393dc2a","sha512":"41286c269e0650b523a3cbc18f91b95a10173f7f90bd5a0164f0f29a3c114928dbda998a93397de4e80cb5838370c46cf7ff369a189abb4a777d0fe34ce17e6c","ssdeep":"96:CHNESUnx97dkN8xnkhSwRWXBwK025xozmK0sMu2+7fJDf4Y/UCh2:ANof7g8xkhQhzzPtfu2exrt8Cg","tlshash":"9ab1aee0825d0da86a8ed98c15576a636c2d345c17c403951c855a637a8f61ecff4f2f","first_seen":"2025-04-08T20:33:55.231907Z","last_seen":"2026-08-03T12:37:51.084831Z","times_seen":449,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":201,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"usdtclean.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtclean.com/images/team6-DPDdh9tS.webp","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:03.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtclean.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 06:31:18 GMT","end":"Thu, 26 Feb 2026 06:31:17 GMT"},"fingerprint":{"sha1":"69:C9:0C:0F:A5:07:F4:8D:B9:D4:0D:BB:7E:74:05:34:71:35:24:06","sha256":"A8:D8:57:D5:D8:0F:3A:AE:60:7E:6C:45:92:44:A2:03:60:1F:1B:6D:D4:C1:7F:D5:0B:B9:13:B3:FE:D1:64:2F"}}},"request":{"raw":"GET /images/team6-DPDdh9tS.webp HTTP/1.1\r\nHost: usdtclean.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Jan 2026 15:08:04 GMT\r\nServer: Apache/2.4.41 (Ubuntu)\r\nLast-Modified: Fri, 17 Jan 2025 11:18:06 GMT\r\nETag: \"1f86-62be510957780\"\r\nAccept-Ranges: bytes\r\nContent-Length: 8070\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":8070,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ff92c5d0702748d4fd4a7598287b52e9","sha1":"1c52f75273473401f01060b11732c9f2b93bdec0","sha256":"4678f709196922389c98ba22c894212e124843154455769551b2af283e2afb78","sha512":"0d728fb2b6b205466fda940e0732da04c5bd6f42a17a266ba871e2412d285caada5814ed15240ebfa942798871c2de97ee109cd16856da574255de2ba4abca5c","ssdeep":"96:Ag9uYyKIvVYX1msb1sbUItmcdl0+InYMAXAf6glqBTTCxBd5bIe75fPM8Hif/pDq:V94J+8sRYHzM3dtPMSifFKXG+8W9fJ","tlshash":"d7f1c0157ba4493c6ee08b78d1f4e6827ef5dd0946f37d1a580518f43c2d690390bb26","first_seen":"2025-04-08T20:33:55.234306Z","last_seen":"2026-08-03T12:37:51.080649Z","times_seen":447,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":228,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"usdtclean.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtclean.com/images/cryptohome-Bkw0BUZH.webp","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:03.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtclean.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 06:31:18 GMT","end":"Thu, 26 Feb 2026 06:31:17 GMT"},"fingerprint":{"sha1":"69:C9:0C:0F:A5:07:F4:8D:B9:D4:0D:BB:7E:74:05:34:71:35:24:06","sha256":"A8:D8:57:D5:D8:0F:3A:AE:60:7E:6C:45:92:44:A2:03:60:1F:1B:6D:D4:C1:7F:D5:0B:B9:13:B3:FE:D1:64:2F"}}},"request":{"raw":"GET /images/cryptohome-Bkw0BUZH.webp HTTP/1.1\r\nHost: usdtclean.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Jan 2026 15:08:04 GMT\r\nServer: Apache/2.4.41 (Ubuntu)\r\nLast-Modified: Fri, 17 Jan 2025 11:18:06 GMT\r\nETag: \"197c-62be510957780\"\r\nAccept-Ranges: bytes\r\nContent-Length: 6524\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6524,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"10a2a0b43e1c12c0518ee43437610ef9","sha1":"49885aa60fda4e756d9e02516f9e8b4abf0441b5","sha256":"bb65329601cee30def53aeabaa90cca20c36c5c5560c20f6bb7c85f40989f5ef","sha512":"d08a23b1764987b0c01beb8f6f5c5ede4305be744ea396f7c0fa5670a347768123958154f5e34c34fcce6c6b962264327a091c0d82f7b5a53bdbab83782b5c77","ssdeep":"192:K5CHETRBoVjBVHm0hQVK2/R8j+9yYZXa:KAH6R+tsFVNR9a","tlshash":"a0d18fe6236d7678e4546fb4bad993d1a6447a3c84507d37283f8eae7cc56748230dc0","first_seen":"2025-04-08T20:33:55.236886Z","last_seen":"2026-08-03T12:37:51.034342Z","times_seen":406,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":277,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"usdtclean.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtclean.com/images/44-DcUgPKtf.webp","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:03.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtclean.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 06:31:18 GMT","end":"Thu, 26 Feb 2026 06:31:17 GMT"},"fingerprint":{"sha1":"69:C9:0C:0F:A5:07:F4:8D:B9:D4:0D:BB:7E:74:05:34:71:35:24:06","sha256":"A8:D8:57:D5:D8:0F:3A:AE:60:7E:6C:45:92:44:A2:03:60:1F:1B:6D:D4:C1:7F:D5:0B:B9:13:B3:FE:D1:64:2F"}}},"request":{"raw":"GET /images/44-DcUgPKtf.webp HTTP/1.1\r\nHost: usdtclean.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Jan 2026 15:08:04 GMT\r\nServer: Apache/2.4.41 (Ubuntu)\r\nLast-Modified: Fri, 17 Jan 2025 11:18:06 GMT\r\nETag: \"2aa4-62be510957780\"\r\nAccept-Ranges: bytes\r\nContent-Length: 10916\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":10916,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b8dc93cca387bf2c17d1f47b79205b00","sha1":"afd9f668392c676754652edef35bc84af4624532","sha256":"064243afc32b9aba427090bffe6c1fb20a9a3068368147cec2566007d5dbf709","sha512":"a4364e4e888bfa68c1ed6e279753e8947616ce68c933bf16857e59d509551fe7a2b0d94966c34f10c7c74bb61bd721223db97416011e573e2c0ca22fc8ca50b8","ssdeep":"192:HCtlaTub/yIuJoKRhKGzNnL3DrY2kVBOr60PuO/mpIs3mW26mbBNzY:iuCb/moK+Un/rrkjx0B+pIsH26mdN8","tlshash":"5232c0e1be3a71a09a0439aeb36c5194c535600fc27a7df77a59047ca8c35f031817d6","first_seen":"2025-04-08T20:33:55.238728Z","last_seen":"2026-08-03T12:37:51.064319Z","times_seen":446,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":101,"dns":1,"connect":33,"send":0,"wait":28,"receive":1,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"usdtclean.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtclean.com/images/favicon.ico","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:04.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtclean.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 06:31:18 GMT","end":"Thu, 26 Feb 2026 06:31:17 GMT"},"fingerprint":{"sha1":"69:C9:0C:0F:A5:07:F4:8D:B9:D4:0D:BB:7E:74:05:34:71:35:24:06","sha256":"A8:D8:57:D5:D8:0F:3A:AE:60:7E:6C:45:92:44:A2:03:60:1F:1B:6D:D4:C1:7F:D5:0B:B9:13:B3:FE:D1:64:2F"}}},"request":{"raw":"GET /images/favicon.ico HTTP/1.1\r\nHost: usdtclean.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Jan 2026 15:08:04 GMT\r\nServer: Apache/2.4.41 (Ubuntu)\r\nLast-Modified: Fri, 17 Jan 2025 11:18:06 GMT\r\nETag: \"a76e-62be510957780\"\r\nAccept-Ranges: bytes\r\nContent-Length: 42862\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/vnd.microsoft.icon\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":42862,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 103x100, 32 bits/pixel","md5":"854845c9dc489b715a93d6718e1d65a8","sha1":"8126b243953b16480417412e11633c05ceec3208","sha256":"85573e3bf8fdc1b4a255135b2b61dc422992ae07f2c0ce53d4fd79a7c98d1152","sha512":"d5c421e91f3c869839c8d2207a63f6d506f287a1e7670da2c06079ed425533db8ebc559cbec2844f9614189c5a64055f3f4aec1bc02f9f3d62c6f21dc7813fc6","ssdeep":"192:nVNPtBme7yyGkbVlDRGxeODlmRqqQL3JSpE1t3O2KP2iO8rNZMvTZUwoHVV9AJpR:VEyLpqHN/BZvTZxoHVV9AJpQn0owt7l","tlshash":"c21312a0a462e395f0db353945a3d5f8645bfe9873820812e53c73f91933a835eb374a","first_seen":"2025-06-20T20:01:15.025332Z","last_seen":"2026-07-18T17:51:01.774691Z","times_seen":239,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"usdtclean.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/f6ff957e-7e74-4f43-a3ae-a643bf18a200?projectId=cb1211e80ba2992a895db83e6314fb95\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:05.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 08:35:13 GMT","end":"Sun, 08 Mar 2026 09:35:11 GMT"},"fingerprint":{"sha1":"9A:4E:F9:52:35:79:70:FD:85:E6:2D:13:85:19:6A:C7:D8:BA:02:CB","sha256":"2E:13:A5:10:27:76:B3:13:95:EC:3A:92:D4:36:FC:06:76:06:42:8C:3C:FF:F7:34:3B:92:46:11:09:BB:64:63"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/f6ff957e-7e74-4f43-a3ae-a643bf18a200?projectId=cb1211e80ba2992a895db83e6314fb95\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdtclean.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 15:08:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1522\r\ncf-ray: 9ba45e560c3f5696-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfWO9thvxtxbg41N-thM9s_bmtfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept, accept-encoding\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=1006+5 c=0+5 v=2025.5.2 l=1522 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1522,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6290547a33ac9e9a3cdb7bd693dcfd1c","sha1":"356980fdb86b10c322aed1433f60a3a245e1c48f","sha256":"3d61d02171ec648d5303c71c4513b00df31217fda260e3bf346a91c46034fe4a","sha512":"9a8f3ad6e70e620e7df4f040d16918f33d7eee380843d973576e2c72d61bc1e158f9884d5cfd114fd57c686567b9604def778253197f9933c416b60aedfa823a","ssdeep":"","tlshash":"bf31da5c201518d81d96c1069c241600d7766bba973bba6b7132f27ac24e8ad4cd504d","first_seen":"2025-05-26T15:14:19.567265Z","last_seen":"2026-08-03T17:37:04.827404Z","times_seen":402,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":351,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtclean.com/","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-07T15:08:03.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtclean.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 06:31:18 GMT","end":"Thu, 26 Feb 2026 06:31:17 GMT"},"fingerprint":{"sha1":"69:C9:0C:0F:A5:07:F4:8D:B9:D4:0D:BB:7E:74:05:34:71:35:24:06","sha256":"A8:D8:57:D5:D8:0F:3A:AE:60:7E:6C:45:92:44:A2:03:60:1F:1B:6D:D4:C1:7F:D5:0B:B9:13:B3:FE:D1:64:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: usdtclean.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Jan 2026 15:08:03 GMT\r\nServer: Apache/2.4.41 (Ubuntu)\r\nLast-Modified: Sun, 19 Oct 2025 12:13:44 GMT\r\nETag: \"26b24-64181e5ead6a8-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":158500,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (34380)","md5":"ff70c617a92d14e0aae1a4aef9147cbc","sha1":"f63f68723584d5ad8b6e9b178dbe0fe89733abe6","sha256":"525dbe75cf0bd6e790d7246c450a3e3dd07788538d7bb97f260ecd4151f6e53b","sha512":"04ff99bcc408efd1b47d7b7eeebe3f843c063625d1d3137adb2166ff49d52c520fd0add05fdd42675f7a99a181f2c6673d5c1a21d95946ab0ea96ea554d2b2d3","ssdeep":"3072:xEl0ZkOuaB1ZXZkxuFT1pAZkeusj1P5tudVDzZPtyB6DL:xEl0GxeXGYlAGhgcHqw","tlshash":"57f3aeb6a68029a340230be5f12952aa7996611fde534d70d2ec0fddd7e3ce4987ecc4","first_seen":"2026-01-07T15:08:32.858908Z","last_seen":"2026-01-07T15:08:32.858908Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":65,"dns":8,"connect":26,"send":0,"wait":31,"receive":49,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"usdtclean.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"config.php/","fqdn":"config.php","domain":"config.php","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:05.138Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: config.php\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usdtclean.com/\r\nOrigin: https://usdtclean.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T02:30:19.920341Z","times_seen":17700918,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/4c16cad4-cac9-4643-6726-c696efaf5200?projectId=cb1211e80ba2992a895db83e6314fb95\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:05.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 08:35:13 GMT","end":"Sun, 08 Mar 2026 09:35:11 GMT"},"fingerprint":{"sha1":"9A:4E:F9:52:35:79:70:FD:85:E6:2D:13:85:19:6A:C7:D8:BA:02:CB","sha256":"2E:13:A5:10:27:76:B3:13:95:EC:3A:92:D4:36:FC:06:76:06:42:8C:3C:FF:F7:34:3B:92:46:11:09:BB:64:63"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/4c16cad4-cac9-4643-6726-c696efaf5200?projectId=cb1211e80ba2992a895db83e6314fb95\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdtclean.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 15:08:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3334\r\ncf-ray: 9ba45e560c315696-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfi8b0hPD3q7U39aV1RkpFFz8RfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept, accept-encoding\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=16+0 c=0+5 v=2023.9.8 l=3334\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3334,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"adb282163d619a97ec44427f12df5d43","sha1":"a1c10417ed604229709795569d570036980334ae","sha256":"1fbbb4ff9c79d6a4c0d0545c410149d1b69fb38eeb25c787af7a91cc385701de","sha512":"cba016d4aa33a2753e9635ac97245e16d05965403d948a7996528f0514645f34b759b5978c4add2fe7adae5b32c7ce6e7ba50bd76cdda04a8f66108ed350b776","ssdeep":"","tlshash":"53614bdb0b0ea0a5147534360548fc1a315b87f07ba4faae2382cc689ea81f5da7c1d4","first_seen":"2024-07-08T23:13:45Z","last_seen":"2026-08-04T01:13:27.376844Z","times_seen":360,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtclean.com/images/1-B8hMQnFc.svg","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:03.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtclean.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 06:31:18 GMT","end":"Thu, 26 Feb 2026 06:31:17 GMT"},"fingerprint":{"sha1":"69:C9:0C:0F:A5:07:F4:8D:B9:D4:0D:BB:7E:74:05:34:71:35:24:06","sha256":"A8:D8:57:D5:D8:0F:3A:AE:60:7E:6C:45:92:44:A2:03:60:1F:1B:6D:D4:C1:7F:D5:0B:B9:13:B3:FE:D1:64:2F"}}},"request":{"raw":"GET /images/1-B8hMQnFc.svg HTTP/1.1\r\nHost: usdtclean.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Jan 2026 15:08:04 GMT\r\nServer: Apache/2.4.41 (Ubuntu)\r\nLast-Modified: Fri, 17 Jan 2025 11:18:06 GMT\r\nETag: \"dadf3-62be510957780\"\r\nAccept-Ranges: bytes\r\nContent-Length: 896499\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":896499,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7e54ee403da676c99d77633c01b606c3","sha1":"351c6bb9a4dba01eed5cc86ac6ae0a38f3e472f6","sha256":"59fee31a79439edb17dccae8553674f87012403c8a486c9b098a1e294c119e65","sha512":"7cc6dd0aea72a3f8e9c324dec727ab5133eef87d600768bf29801201118d4025fae2ce28071582dd3699b13a1ded3f3b78c56aa9fb53a67c7e5d1bcb7a099947","ssdeep":"24576:euayhlfPkhRx15QVsLcIuJ2wStoU6ghC5:eaDex6gW","tlshash":"be151214f80ae5b503bd0a251eb7156c6f748f709895ab8e87ac774683983c0f3ede25","first_seen":"2025-04-08T20:33:55.231096Z","last_seen":"2026-08-01T06:14:06.810384Z","times_seen":462,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":145,"dns":0,"connect":0,"send":0,"wait":25,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"usdtclean.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtclean.com/images/what-else2-c8YgOWn0.webp","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:03.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtclean.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 06:31:18 GMT","end":"Thu, 26 Feb 2026 06:31:17 GMT"},"fingerprint":{"sha1":"69:C9:0C:0F:A5:07:F4:8D:B9:D4:0D:BB:7E:74:05:34:71:35:24:06","sha256":"A8:D8:57:D5:D8:0F:3A:AE:60:7E:6C:45:92:44:A2:03:60:1F:1B:6D:D4:C1:7F:D5:0B:B9:13:B3:FE:D1:64:2F"}}},"request":{"raw":"GET /images/what-else2-c8YgOWn0.webp HTTP/1.1\r\nHost: usdtclean.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Jan 2026 15:08:04 GMT\r\nServer: Apache/2.4.41 (Ubuntu)\r\nLast-Modified: Fri, 17 Jan 2025 11:18:06 GMT\r\nETag: \"56c0-62be510957780\"\r\nAccept-Ranges: bytes\r\nContent-Length: 22208\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":22208,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e1e057fdfd21fcb1b20f6dbff68beec6","sha1":"0a1b93824ad73034f0fdcca9cdb69bb141cc766f","sha256":"56999b85ede07c51cb32cbb21169a76bab2fd5396bb1edf7cedf88b1f32c32eb","sha512":"7d78ceee169f2e5309396dec77dae0bded22a9b2f0223308c15019904c203233071bb88f126fb037de94a793ef2d88533dff1cce22efd85216fb2d5f4587385d","ssdeep":"384:VZgiCAV2JY7iTlSiIQigkOzLewew0/dOnPm5FcHCQO5D2p:VYWmTlSiTTLez//dXFcHCQSa","tlshash":"25a2cffc302d028afeedc67b6906af92b9fe14571470ca0d63587a8155906c753cabb8","first_seen":"2025-04-08T20:33:55.221615Z","last_seen":"2026-08-01T06:14:06.815617Z","times_seen":417,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":175,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"usdtclean.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtclean.com/images/team9-sIMRwxbc.webp","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:03.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtclean.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 06:31:18 GMT","end":"Thu, 26 Feb 2026 06:31:17 GMT"},"fingerprint":{"sha1":"69:C9:0C:0F:A5:07:F4:8D:B9:D4:0D:BB:7E:74:05:34:71:35:24:06","sha256":"A8:D8:57:D5:D8:0F:3A:AE:60:7E:6C:45:92:44:A2:03:60:1F:1B:6D:D4:C1:7F:D5:0B:B9:13:B3:FE:D1:64:2F"}}},"request":{"raw":"GET /images/team9-sIMRwxbc.webp HTTP/1.1\r\nHost: usdtclean.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Jan 2026 15:08:04 GMT\r\nServer: Apache/2.4.41 (Ubuntu)\r\nLast-Modified: Fri, 17 Jan 2025 11:18:06 GMT\r\nETag: \"2b48-62be510957780\"\r\nAccept-Ranges: bytes\r\nContent-Length: 11080\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":11080,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"87d484adedd61343f676bf417fc61fd6","sha1":"96cf1ad110d99c2870f85c9f5c717fbb14f6c44f","sha256":"ec79aeb903b3fa0ad35e684b252ab35fc654bcdf93fa4b28cccac058b8b69ccf","sha512":"7a6d1e57e3434d8ae603cc9d8d1c3b80ab1666a281d62b16f1ea109d97d52b64aebba41d998be548f2d69c5c052f1e1d80abfa07bad36a595aea3da0ebfeb125","ssdeep":"192:qmmu84BOdcxxn8iFk6GI+HgvIm6mKj544gF2jVr19XzKlpwoTI4GlZY92Vm:qmmvX/iWEvp6Bj5NgFI39jKlp7TnGlZI","tlshash":"ff32c0f5858d67f49f809b468043ec6d04b7905bce86e1e6013b640a8a77c89ec2a31e","first_seen":"2025-04-08T20:33:55.23263Z","last_seen":"2026-08-03T12:37:51.058797Z","times_seen":448,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":278,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"usdtclean.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtclean.com/images/22-CzpWkn_R.webp","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:03.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtclean.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 06:31:18 GMT","end":"Thu, 26 Feb 2026 06:31:17 GMT"},"fingerprint":{"sha1":"69:C9:0C:0F:A5:07:F4:8D:B9:D4:0D:BB:7E:74:05:34:71:35:24:06","sha256":"A8:D8:57:D5:D8:0F:3A:AE:60:7E:6C:45:92:44:A2:03:60:1F:1B:6D:D4:C1:7F:D5:0B:B9:13:B3:FE:D1:64:2F"}}},"request":{"raw":"GET /images/22-CzpWkn_R.webp HTTP/1.1\r\nHost: usdtclean.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Jan 2026 15:08:04 GMT\r\nServer: Apache/2.4.41 (Ubuntu)\r\nLast-Modified: Fri, 17 Jan 2025 11:18:06 GMT\r\nETag: \"4b64-62be510957780\"\r\nAccept-Ranges: bytes\r\nContent-Length: 19300\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":19300,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d4224b0cea000adfe29027c4ace6ca90","sha1":"f3f62f8c429c5446db4ee28f6857c81265bb6a8d","sha256":"9c5add30b5e422671689a41106849fdc2319a01ac3952b16c9506aed05bfedd8","sha512":"f846a43f28741f7a4ee7528a042e9d0de1bb45ccb65e239f9941c4a536f74529539d08f9f740f437bb523a8f5756292835dec6dc15e2825c1b082d04a236a04b","ssdeep":"384:60GohnG8pPSTVjACEs6tLfdQYaW+61jXKDFFoBlM7PD0sHLG2Xz2x:60GoI8ZyVjCLSiZ1jXA8l0rbLG2XKx","tlshash":"cf82c0d0d6b9946bacbc43a8bf2011bdb5fc12ea3a545b134d00747c87eb97a076ad34","first_seen":"2025-04-08T20:33:55.237744Z","last_seen":"2026-08-03T12:37:51.044983Z","times_seen":441,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":102,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"usdtclean.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtclean.com/images/33-1yWRRjf1.webp","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:03.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtclean.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 06:31:18 GMT","end":"Thu, 26 Feb 2026 06:31:17 GMT"},"fingerprint":{"sha1":"69:C9:0C:0F:A5:07:F4:8D:B9:D4:0D:BB:7E:74:05:34:71:35:24:06","sha256":"A8:D8:57:D5:D8:0F:3A:AE:60:7E:6C:45:92:44:A2:03:60:1F:1B:6D:D4:C1:7F:D5:0B:B9:13:B3:FE:D1:64:2F"}}},"request":{"raw":"GET /images/33-1yWRRjf1.webp HTTP/1.1\r\nHost: usdtclean.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Jan 2026 15:08:04 GMT\r\nServer: Apache/2.4.41 (Ubuntu)\r\nLast-Modified: Fri, 17 Jan 2025 11:18:06 GMT\r\nETag: \"c83c-62be510957780\"\r\nAccept-Ranges: bytes\r\nContent-Length: 51260\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":51260,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ee868cf20c90ea252365e462b6ed3c5e","sha1":"152db0b5653fd2b887fd121364cdf30958681d03","sha256":"127cbc5c941fbc03d9cbb37facd6601951d51318c0e6e50c7d15596c4481630f","sha512":"03515bab68fbeed2a2f2ac21c9f59551eeabffa5b8f62789aaab7fb2983303a36d7d9ba4cbb2d798df73081c15f614c6cc9504eb5813d11fc298bc4214438707","ssdeep":"768:j653t9vVD5JXaaGDkMYqov6bM/z1Czd1spLBSuvAmxpp4UZYrmlKLs0PpkhHWQhw:stFV0vYt6bY1CJSB4UZ1Qg7/6uoeC4","tlshash":"6533f1d2bbee3551c19ff51dc9eb49da1105f40ace1cb98c42d864ca99722fd132b163","first_seen":"2025-04-08T20:33:55.213792Z","last_seen":"2026-08-03T12:37:51.10327Z","times_seen":447,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":101,"dns":0,"connect":0,"send":0,"wait":27,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"usdtclean.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtclean.com/430.bundle.js","fqdn":"usdtclean.com","domain":"usdtclean.com","tld":"com"},"ip":{"addr":"38.180.218.210","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtclean.com/","date":"2026-01-07T15:08:04.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtclean.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 28 Nov 2025 06:31:18 GMT","end":"Thu, 26 Feb 2026 06:31:17 GMT"},"fingerprint":{"sha1":"69:C9:0C:0F:A5:07:F4:8D:B9:D4:0D:BB:7E:74:05:34:71:35:24:06","sha256":"A8:D8:57:D5:D8:0F:3A:AE:60:7E:6C:45:92:44:A2:03:60:1F:1B:6D:D4:C1:7F:D5:0B:B9:13:B3:FE:D1:64:2F"}}},"request":{"raw":"GET /430.bundle.js HTTP/1.1\r\nHost: usdtclean.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtclean.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 07 Jan 2026 15:08:04 GMT\r\nServer: Apache/2.4.41 (Ubuntu)\r\nLast-Modified: Fri, 17 Jan 2025 11:18:06 GMT\r\nETag: \"22173-62be510957780-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 42400\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.41","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":139635,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65468)","md5":"c2acf8e6fa1c98c5adb3e291700be61f","sha1":"73c9ba6d77792312d1861887700b0a3a98e896fd","sha256":"6423b4f5bf389a655d84a0b0d0227d82eca6a8b91dbab20b18f0f78989e6bbeb","sha512":"af223f797c907572907eeb32f7512684c7f566a00ed9dffeeca9aacf4ede6251eaa284cca1154e058d25a3d4dd06bf3ad802a3426784f930ac28b1555b74723c","ssdeep":"3072:6r7LcemkZcOcqTwP3ZUwaIFmiPELysPjbgj5tOS9H6r:6r7LFTwvGwhFjPE6oS9H6r","tlshash":"72d35be4b3a0f17d725342ad823b05a5f2386404b526c0a8f7ec96d754d3e9a85b7b3c","first_seen":"2025-06-26T13:47:12.009839Z","last_seen":"2026-02-03T20:35:25.156226Z","times_seen":20,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"usdtclean.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"usdtclean.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
