{"report_id":"7ed8fd69-ecce-4d45-aae6-e35d6d45e1bf","version":6,"status":"done","tags":[],"date":"2026-01-25T01:17:05Z","url":{"schema":"https","addr":"contract.usdc.ltd/","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"104.21.76.40","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"contract.usdc.ltd/host","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"title":"Defi-ETH","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T23:03:04.169812Z","times_seen":17732675,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"contract.usdc.ltd/","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"104.21.76.40","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-01T01:17:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"contract.usdc.ltd","ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-30","domain_rank":0,"first_seen":"2026-01-24T19:43:03.915138Z","last_seen":"2026-01-24T19:43:03.915138Z","alert_count":31,"request_count":31,"received_data":4200768,"sent_data":14199,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Axios:1.4.0","description":"Promise based HTTP client for the browser and node.js","website":"https://github.com/axios/axios","common_platform_enumeration":"","icon":"Axios.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-01-18T22:30:25.777558Z","alert_count":0,"request_count":1,"received_data":32966,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"contract.usdc.ltd/js/534.68bddafc.js","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae4070de2bfbf3e2fc5e597c374728cd","sha1":"f4ded362c18eb08bf750c3868c48a5c8ac5d0e67","sha256":"0269bfc51d6dc3539179242a81fd68170e129393a0204b261a27086ca622d405","sha512":"eec0e6f555f9d2f5631d02febab82b9d835fede72fbcaa690e35073c437d41813e5b8d668d3395b0481f2ba8a8ae9dcc2302bec7d4a3091c0533cc2258b92228","ssdeep":"384:MjCdF71cgvvZ/CjAc60gDYTT/p2dQgdxp/ZFj8QskF0KH:771cgvvZ/CS0gkTT/p2ugdxp/Dj8RNKH","tlshash":"5162c469b3d0f85807a7ab773b1fa0c6fa1b08662cad4c4bf940bdb16cf4521d985634","size":15413,"data":"","first_seen":"2026-01-21T20:20:33.994406Z","last_seen":"2026-01-25T01:17:07.895064Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/axios@1.4.0/dist/axios.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6470a918ba1fd4b8d0882df0269ddb82","sha1":"97814fdab64aa7d1b30f082f9eb272d4b1ce18a2","sha256":"fd4ce12a87594281afcee9c73a40fe7acc282bcc9e764fbb3afa1481a96a091e","sha512":"b8cb57985dbc03601bfc924edadfef62195a6bfdda8543a08f565fdbb339acea3cffe7dc4d4547d3f134965ebc9e39a3acba8e0635ccdd5f4d88f14be72c163d","ssdeep":"768:KCaQhyOsbrQ5NVtQehvP8KuzHxSCuWiOakq:iI5Jht8TrzRq","tlshash":"81e20ac9b6d1b072136771b5406f250bf33aa926a44d8890f120ecea7cb950e9727f7d","size":31842,"data":"","first_seen":"2023-04-28T01:15:05Z","last_seen":"2026-08-03T08:53:41.258333Z","times_seen":3018,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-05T23:00:09.151317Z","times_seen":738672,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-05T22:28:26.303446Z","times_seen":237106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-05T22:28:26.303446Z","times_seen":237106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-05T23:00:09.151317Z","times_seen":738672,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/js/70.72c6b361.js","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f048369efdea0fa86f89a76f181d0e5","sha1":"0533f743e72192c2eb1a62c6f1969d30e4f4cfaa","sha256":"d0f6b878919e693093b5358dd9100d36c78e8e29c1d8100fa439df2f932d989b","sha512":"b625aa8d9917c5bfb2bc71200a8388cf9911a405ea51c831589a6699009212ef8f4cee169c74bc608b09d0203b19135c88ab57d21cfc9e259fb938f6c3d824f6","ssdeep":"3072:5fGUMjE5l97/+ePosDiqk/0dS4gXrHf4kefIm:lNMo5lRvPosD0/0dS4gXrHf4kefIm","tlshash":"fce3f844e640aad4a289cbbb6d2276e5e80e04a57468105ddc90bcf635f213dfffd239","size":154138,"data":"","first_seen":"2026-01-21T20:20:33.957068Z","last_seen":"2026-01-25T01:17:07.913629Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb3ad53efdaeac89ef5f5e4ced2f72f7","sha1":"6b5d2d1de4c46e2d537d9458b62e5b5533d06ac1","sha256":"089011051726b32b75a7c4da7d5603c771d484f287668795123cce1b331a5b43","sha512":"23e07e8750a4c174f47e935c70b4de1262f912a579141e189887044e52cabb916f4cd1d001b462bdfa720a234feda4459b4a05c8e806ff760819b9be9420a380","ssdeep":"","tlshash":"3a31ce382cb8d51b8b26505e1a7ee28530a1211f8442e4447caeef6d7f14ff52c92eec","size":1619,"data":"","first_seen":"2025-06-25T09:03:04.577776Z","last_seen":"2026-06-13T20:28:08.882449Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"contract.usdc.ltd/js/app.a2048d6e.js","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contract.usdc.ltd/","date":"2026-01-25T01:16:44.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 09:27:26 GMT","end":"Fri, 13 Mar 2026 10:25:04 GMT"},"fingerprint":{"sha1":"1D:7C:18:C1:E4:0F:D4:1A:DD:5B:F2:E8:D9:A6:D2:02:35:EB:77:C6","sha256":"CD:A7:63:D2:63:D7:25:3C:64:3D:4C:E9:10:F8:3A:2B:65:8A:6E:D3:F7:1C:6F:1A:E6:9C:55:9C:B8:FD:D8:BA"}}},"request":{"raw":"GET /js/app.a2048d6e.js HTTP/1.1\r\nHost: contract.usdc.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contract.usdc.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 25 Jan 2026 01:16:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 11 Nov 2025 14:50:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"69134d1a-1ad6e8\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1AmSJFo%2BfYA4DIPq9H93EfJ7u%2BLfKM8u%2FVNV%2B8eTPvuU544n2BnVyRpK3gdWMUtji8MtHuvCebCVmuvBR869hXhyvZ2Hn4q%2BH1ByWwBNiQ%3D%3D\"}]}\r\ncf-ray: 9c33ed4adcda56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1758952,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"1cb76e1a9c74765819ddd03f721dde9b","sha1":"0b18c58a8856558d2c42fa726cec25cba1399cdb","sha256":"9df9de1836b3123b8e91f4a6c441863be330f08b37d68ebff39412307a8bf45c","sha512":"f8cb3d60d5027045648c9031af7866233c28f71dad7a34fc7f20c23c5a551e486b49519a3ff37d09d2b0d8cf13f0e578bf94bdd2f085511eaadecc3004eef4a4","ssdeep":"12288:Xd28cSNGCDXc84blku4B5DrUsLsxchaDcVMxzLGNKGD:Xd2fhblku4B5XNoxcwwVONGD","tlshash":"d425d89885a8fc7002644deaaad350dad24b2cef4465527cdfc436a4297e9cf7cf2631","first_seen":"2026-01-21T20:20:33.985535Z","last_seen":"2026-01-25T01:17:07.890708Z","times_seen":3,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/api/api/common/getTextConfig","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://contract.usdc.ltd/","date":"2026-01-25T01:16:46.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 09:27:26 GMT","end":"Fri, 13 Mar 2026 10:25:04 GMT"},"fingerprint":{"sha1":"1D:7C:18:C1:E4:0F:D4:1A:DD:5B:F2:E8:D9:A6:D2:02:35:EB:77:C6","sha256":"CD:A7:63:D2:63:D7:25:3C:64:3D:4C:E9:10:F8:3A:2B:65:8A:6E:D3:F7:1C:6F:1A:E6:9C:55:9C:B8:FD:D8:BA"}}},"request":{"raw":"POST /api/api/common/getTextConfig HTTP/1.1\r\nHost: contract.usdc.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nOrigin: https://contract.usdc.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contract.usdc.ltd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 25 Jan 2026 01:16:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 120\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: accept-language,language,authorization,lang,uid,token,Keep-Alive,User-Agent,Cache-Control,Content-Type\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NFSW%2B0FyfMHhnWx8pwQvaeuDcwcN2tqTUlJB77GuWmvshA9xMuY5Y0jEeVDloqzRhyQ5vuOZcsgGMGsQT19MqkJu3x5Mb5zTeKUrEMrn4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c33ed56ad5c56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b3c5382e247076d6d80cb5d1d33e0899","sha1":"c8adb311eea6dde6005d0af2bd6bb7bc2cca8786","sha256":"dd884d7f27c5a2add253ae66dd678f45f8c28254f00cc4d1dde3cdf904b3c5a8","sha512":"780a6f103ac5cb2d1cd51522918ba2454c03adc5ed816a8630d0b1c933a6f4bcc559393f19bfead48e8554a2668f8062b1c43cfa11bda049639d0c55dfb6926b","ssdeep":"","tlshash":"a4b0929329116ce9e7122196b61b6e5024dc7052b31044679cae03faca450513696819","first_seen":"2026-01-25T01:17:07.891999Z","last_seen":"2026-01-25T01:17:07.891999Z","times_seen":1,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/img/partner7.1627fd6d.png","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://contract.usdc.ltd/","date":"2026-01-25T01:16:47.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 09:27:26 GMT","end":"Fri, 13 Mar 2026 10:25:04 GMT"},"fingerprint":{"sha1":"1D:7C:18:C1:E4:0F:D4:1A:DD:5B:F2:E8:D9:A6:D2:02:35:EB:77:C6","sha256":"CD:A7:63:D2:63:D7:25:3C:64:3D:4C:E9:10:F8:3A:2B:65:8A:6E:D3:F7:1C:6F:1A:E6:9C:55:9C:B8:FD:D8:BA"}}},"request":{"raw":"GET /img/partner7.1627fd6d.png HTTP/1.1\r\nHost: contract.usdc.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contract.usdc.ltd/host\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 25 Jan 2026 01:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 11119\r\nlast-modified: Tue, 11 Nov 2025 14:50:02 GMT\r\npriority: u=4,i=?0\r\netag: \"69134d1a-2b6f\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CRvfyjV94uQRbg9rvaODzoxfBE6gJ5gH8IJsZ6t438VStr4izGmnsRcqkcA4cZwM1niHaNI7IUfk5IjVRMeoNpAlLlcODn8GPdCHI2PjlA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c33ed59fd7c56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11119,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 241 x 73, 8-bit/color RGBA, non-interlaced","md5":"77373c4e9de7f1ee0f7050bbf14c6872","sha1":"09db66977e92ec93c63023e9e5b31138a9a1aea5","sha256":"8cdcb529146d87ac797a3211ad573599ff6542b6db8d7bb0627bb176d6a2f775","sha512":"85a05ad5906104eb17609d2a806c0fded77d3b5f1c0dd591f3465a2bbb3bc86cd02557eae4f8288c84d2561675504ed2216a2473cc18b73036b8dd9b5f8e1d71","ssdeep":"192:iIIHUCD4wazCQ7/HPbKzdqCxN9ydCvVkXPZlZp5AM772N43/ObHC:M0wr0vbqJxNAmePxAM7u4ki","tlshash":"cb32bf81e0e54775420a0fcc67e7f90c8774476ac2974e2d9ad2c50e8e15ce2fdb465b","first_seen":"2023-08-07T11:13:11Z","last_seen":"2026-07-08T10:30:46.277985Z","times_seen":158,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/js/534.68bddafc.js","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contract.usdc.ltd/","date":"2026-01-25T01:16:46.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 09:27:26 GMT","end":"Fri, 13 Mar 2026 10:25:04 GMT"},"fingerprint":{"sha1":"1D:7C:18:C1:E4:0F:D4:1A:DD:5B:F2:E8:D9:A6:D2:02:35:EB:77:C6","sha256":"CD:A7:63:D2:63:D7:25:3C:64:3D:4C:E9:10:F8:3A:2B:65:8A:6E:D3:F7:1C:6F:1A:E6:9C:55:9C:B8:FD:D8:BA"}}},"request":{"raw":"GET /js/534.68bddafc.js HTTP/1.1\r\nHost: contract.usdc.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contract.usdc.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 25 Jan 2026 01:16:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 11 Nov 2025 14:50:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"69134d1a-3c35\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yLIaf3fuVZOH%2FGMttRoSI%2FwrhwiMn0TxQpQct1%2FVkUJYy6mxs7o%2BXxb2byhZO4zW7ML9gplXqPQWwffWbLj%2FghYJywT7YitUx%2BeJ9qpk2g%3D%3D\"}]}\r\ncf-ray: 9c33ed565d5856a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15413,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15413), with no line terminators","md5":"ae4070de2bfbf3e2fc5e597c374728cd","sha1":"f4ded362c18eb08bf750c3868c48a5c8ac5d0e67","sha256":"0269bfc51d6dc3539179242a81fd68170e129393a0204b261a27086ca622d405","sha512":"eec0e6f555f9d2f5631d02febab82b9d835fede72fbcaa690e35073c437d41813e5b8d668d3395b0481f2ba8a8ae9dcc2302bec7d4a3091c0533cc2258b92228","ssdeep":"384:MjCdF71cgvvZ/CjAc60gDYTT/p2dQgdxp/ZFj8QskF0KH:771cgvvZ/CS0gkTT/p2ugdxp/Dj8RNKH","tlshash":"5162c469b3d0f85807a7ab773b1fa0c6fa1b08662cad4c4bf940bdb16cf4521d985634","first_seen":"2026-01-21T20:20:33.994406Z","last_seen":"2026-01-25T01:17:07.895064Z","times_seen":3,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/img/open.d282e6a4.png","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://contract.usdc.ltd/","date":"2026-01-25T01:16:47.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 09:27:26 GMT","end":"Fri, 13 Mar 2026 10:25:04 GMT"},"fingerprint":{"sha1":"1D:7C:18:C1:E4:0F:D4:1A:DD:5B:F2:E8:D9:A6:D2:02:35:EB:77:C6","sha256":"CD:A7:63:D2:63:D7:25:3C:64:3D:4C:E9:10:F8:3A:2B:65:8A:6E:D3:F7:1C:6F:1A:E6:9C:55:9C:B8:FD:D8:BA"}}},"request":{"raw":"GET /img/open.d282e6a4.png HTTP/1.1\r\nHost: contract.usdc.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contract.usdc.ltd/host\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 25 Jan 2026 01:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 10139\r\nlast-modified: Tue, 11 Nov 2025 14:50:02 GMT\r\npriority: u=4,i=?0\r\netag: \"69134d1a-279b\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fi8OIQZIMfqTc0FbxAwL%2B3ylDAajuEZVT8plYcV6diLKbkM8mJ5jd7Iz9XIDDEwMmgtkaPSwGppRezrATvzxv7t9TPY9cACacvwFHiMevQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c33ed59ed7256a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10139,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 508 x 80, 8-bit/color RGBA, non-interlaced","md5":"27b901b2c4277f9e0b93d47fa19c350d","sha1":"5212b07628f663152220034890edb97c207b88dc","sha256":"d6c97276b73efb0fcb850b3348e5f0a796f4e42a63fdb7518991ea89d0a1ffed","sha512":"3a4e2258c37da213e79b1bf7fb5a59ee4bd5da02e40e466449770c8d60a637a19a854765eb7ad2a22e89338c828241686d4b1386ba8075bb356d90a3883e0b5a","ssdeep":"192:UcVhpVZkP4QM3YCMR1pxwLttrNoJOWiI4P3dSDo5KHfoL:B7pVZuMICi1QL7rqCP3Uj6","tlshash":"ed22d0ad7e1b9c82de832abd80ecfe123e5b5bd4415ed00c0d202e1066a78b70dd6398","first_seen":"2024-05-24T01:19:09Z","last_seen":"2026-07-08T10:30:46.29422Z","times_seen":151,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/img/partner2.cb84f105.png","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://contract.usdc.ltd/","date":"2026-01-25T01:16:47.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 09:27:26 GMT","end":"Fri, 13 Mar 2026 10:25:04 GMT"},"fingerprint":{"sha1":"1D:7C:18:C1:E4:0F:D4:1A:DD:5B:F2:E8:D9:A6:D2:02:35:EB:77:C6","sha256":"CD:A7:63:D2:63:D7:25:3C:64:3D:4C:E9:10:F8:3A:2B:65:8A:6E:D3:F7:1C:6F:1A:E6:9C:55:9C:B8:FD:D8:BA"}}},"request":{"raw":"GET /img/partner2.cb84f105.png HTTP/1.1\r\nHost: contract.usdc.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contract.usdc.ltd/host\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 25 Jan 2026 01:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 9971\r\nlast-modified: Tue, 11 Nov 2025 14:50:02 GMT\r\npriority: u=4,i=?0\r\netag: \"69134d1a-26f3\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zFxlwzE1gpTH6CNvp3jHjRdvkP8dZsWEspUmpyd5JA8MU98seFOmM2di1dMkavdiB2auWzWqVyZbEmAupcQ1vFy8l2RI16yiIaXmpBZQtw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c33ed59ed7756a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9971,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 241 x 73, 8-bit/color RGBA, non-interlaced","md5":"29c7d051644df93fdf2204daa41d7d05","sha1":"d23317601a5dd4514fbd9506c36d66d5e8020eef","sha256":"fd9f33f97e64449684dcef9c35dae8c273210039970c94132d8e89e06d152fd4","sha512":"006f8ecc22627d899d7f608f398f96304a1ec84838aa4e5e18248f427835063ff5eb0ed4807d86c6daa16a46bf0977d392d21456e4b3841a8ff1ddc3f3f0086b","ssdeep":"192:iIIHUCD4walYO4Z0nNGgOFFe4Rs0ZuJoUqb9+v8TensqI+C+cTjGj14ZGrtdG3:M0wfJ2nNTOW4O01Fl+C+YGBhg3","tlshash":"e522bf0a4c442816820e9f3a31ebfd126b5b8e42451d0c5c9a9f12cfe7470d2edbbb52","first_seen":"2023-08-07T11:13:11Z","last_seen":"2026-07-08T10:30:46.277146Z","times_seen":158,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/img/partner8.8d78f62c.png","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://contract.usdc.ltd/","date":"2026-01-25T01:16:47.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 09:27:26 GMT","end":"Fri, 13 Mar 2026 10:25:04 GMT"},"fingerprint":{"sha1":"1D:7C:18:C1:E4:0F:D4:1A:DD:5B:F2:E8:D9:A6:D2:02:35:EB:77:C6","sha256":"CD:A7:63:D2:63:D7:25:3C:64:3D:4C:E9:10:F8:3A:2B:65:8A:6E:D3:F7:1C:6F:1A:E6:9C:55:9C:B8:FD:D8:BA"}}},"request":{"raw":"GET /img/partner8.8d78f62c.png HTTP/1.1\r\nHost: contract.usdc.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contract.usdc.ltd/host\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 25 Jan 2026 01:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 15129\r\nlast-modified: Tue, 11 Nov 2025 14:50:02 GMT\r\npriority: u=4,i=?0\r\netag: \"69134d1a-3b19\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eBF8ZqGhuQVQv3JYYRE22kMEo3XQMmGqF8gaQfxHH5pMdNjJFvMz%2BAc4RkYr0%2FhS9T74yRo%2FYDdT3EifAVzJUTb99Jb3J2FosnVj3g1L4A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c33ed59fd7d56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15129,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 241 x 73, 8-bit/color RGBA, non-interlaced","md5":"0af0f02bafb3234e206dd796e91a45dc","sha1":"3818e0c2e7ddf92359fa7bc23b232cad5818f53d","sha256":"3c165162f73d37f9e55f22dc1cca488ee9c0a6f9e651df7e2a58307f4237b1cb","sha512":"5b042df57f4634ba9452da5bf9d4c448171d5b4fd7c754582a6e211912c7f83427c74ec732c406efacf63d20e6e9aabe5341512228cdaf6a012aaf1d71bd80ce","ssdeep":"384:M0wcthAxMlMrJQzHKU2fGyuBjDa7WmQdVL7VfHqrmR:M2tnoQzHKUiuBXa7gVvArmR","tlshash":"d562c08554283249774ca32f60d85f5b57a5f066120f7b1cfc7983c9922a822d937eee","first_seen":"2023-08-07T11:13:11Z","last_seen":"2026-07-08T10:30:46.322328Z","times_seen":158,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/img/wallet-select.4c554d44.svg","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://contract.usdc.ltd/","date":"2026-01-25T01:16:47.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 09:27:26 GMT","end":"Fri, 13 Mar 2026 10:25:04 GMT"},"fingerprint":{"sha1":"1D:7C:18:C1:E4:0F:D4:1A:DD:5B:F2:E8:D9:A6:D2:02:35:EB:77:C6","sha256":"CD:A7:63:D2:63:D7:25:3C:64:3D:4C:E9:10:F8:3A:2B:65:8A:6E:D3:F7:1C:6F:1A:E6:9C:55:9C:B8:FD:D8:BA"}}},"request":{"raw":"GET /img/wallet-select.4c554d44.svg HTTP/1.1\r\nHost: contract.usdc.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contract.usdc.ltd/host\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 25 Jan 2026 01:16:47 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 11 Nov 2025 14:50:02 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69134d1a-397\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dn%2FMf8jfHbDqYfuA%2Fi89g4j%2BvgYz1bLPvmxF5m%2F7E2udFUP2LWJeSe4IitNt4e1JSa1YkMjK9A2Cc62FczX%2B97F%2F3pphhHICmSRw%2BxyeZQ%3D%3D\"}]}\r\ncf-ray: 9c33ed5a1d8656a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":919,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b23f076822f35f1265a261cc2b4f24f0","sha1":"39eab950da6ab38f04afd45869eadecab0623cb4","sha256":"bfd3f2edc39e40b938fd8d2ae060164c7e70b4fdc79b98dd4d8344513848adf4","sha512":"50f3c5122cb3da8bf9f6fc869a2a8a33d1c3f9ca72bafac22e2740213fc3274c38a005203a123b135e5ffe6d5fc04ab948915be36bdb80414a37b1036cc3d1ea","ssdeep":"","tlshash":"941140c0dfa9bbb6448d6bc543544028be3fd8e0b763655cc2058c65e2f6cc4ae91ce6","first_seen":"2024-09-19T22:02:07.070085Z","last_seen":"2026-07-08T10:30:46.332593Z","times_seen":148,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/js/chunk-vendors.bf775063.js","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contract.usdc.ltd/","date":"2026-01-25T01:16:44.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 09:27:26 GMT","end":"Fri, 13 Mar 2026 10:25:04 GMT"},"fingerprint":{"sha1":"1D:7C:18:C1:E4:0F:D4:1A:DD:5B:F2:E8:D9:A6:D2:02:35:EB:77:C6","sha256":"CD:A7:63:D2:63:D7:25:3C:64:3D:4C:E9:10:F8:3A:2B:65:8A:6E:D3:F7:1C:6F:1A:E6:9C:55:9C:B8:FD:D8:BA"}}},"request":{"raw":"GET /js/chunk-vendors.bf775063.js HTTP/1.1\r\nHost: contract.usdc.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contract.usdc.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 25 Jan 2026 01:16:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 11 Nov 2025 14:50:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"69134d1a-1cd23b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wq7X29G84QA9n%2Bb20fLeuugSsZvXUwVjGknGvSL5UlKGskeW%2FrGb68EKlxoT9VeOi0o4bUU2Lz0Qb800Qd5odA%2FDL7T0W4qRT6Ru6nPqdA%3D%3D\"}]}\r\ncf-ray: 9c33ed4adcdc56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1888827,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54369)","md5":"f6578779be09ddb098cc3ee0a6559203","sha1":"7c616dd2350e14ff11b691fa65f1a4c74b1690c2","sha256":"a517dfc4353cfc7e1cb831856c4125a09adb0eaf402d39367eb511e1ba4634d0","sha512":"f786b442f8b47ef28a9f30a9e4881f448d71cb09433e27836bc27be09e78e7a058fbf8f2fa8cfd1860d401ec848608ba046f381650e46481bcd8aed76e855ff0","ssdeep":"6144:FYKaOH+GXTvyZfgd4656GQPMLAsWz2db3kShhJwhCNvmstZIbk/:F0OrM4q4jQULAstk2chamstWQ/","tlshash":"2e25f9c972d5b065439760a4003f100bb23bb96c584d84acf665e8f67db998da23bf3d","first_seen":"2025-08-01T13:10:20.807386Z","last_seen":"2026-04-08T21:31:27.042397Z","times_seen":11,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/css/chunk-vendors.2fde208c.css","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://contract.usdc.ltd/","date":"2026-01-25T01:16:44.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 09:27:26 GMT","end":"Fri, 13 Mar 2026 10:25:04 GMT"},"fingerprint":{"sha1":"1D:7C:18:C1:E4:0F:D4:1A:DD:5B:F2:E8:D9:A6:D2:02:35:EB:77:C6","sha256":"CD:A7:63:D2:63:D7:25:3C:64:3D:4C:E9:10:F8:3A:2B:65:8A:6E:D3:F7:1C:6F:1A:E6:9C:55:9C:B8:FD:D8:BA"}}},"request":{"raw":"GET /css/chunk-vendors.2fde208c.css HTTP/1.1\r\nHost: contract.usdc.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contract.usdc.ltd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 25 Jan 2026 01:16:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 11 Nov 2025 14:50:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"69134d1a-23e55\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4JCxNuus7JOqrFCQFZuRWWo%2FiK%2BXTUA3jN2gE%2FuZ6NE8LOS5BEs7AuWUF6y3PChNa2dWMWkNcmvY%2Fe87eY087vBboL88dw9qC44V1jL4jA%3D%3D\"}]}\r\ncf-ray: 9c33ed4adcdb56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147029,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9cdfbbe3eba1738c35e7ad9cac2d8d0b","sha1":"41ee9cf0c056ccc85a186a2e6b57a8fdb89267a6","sha256":"b11de3449eb6f406a6f9053a1d95d0392114a4058f9d26dd630d041b8b72e036","sha512":"13190031dc5b3fdb9c96130678da7369d531bca1d07d6579032aa74ba82a63e9481b07fab82e6c5a1b87090f021714735debaf35c506ff1c178d4886d494d227","ssdeep":"1536:OsN5J+jOkiHcZiNEBVcZH5NHMja4drYcafD1hIz0VF2d:OueVc5HMjajRfB6g2d","tlshash":"30e3c53786c1236cb21bcd25afc0e6d4c228c522f5924fe9f2117a2acfc7b85159675b","first_seen":"2023-12-19T18:25:31Z","last_seen":"2026-07-08T10:30:46.338113Z","times_seen":120,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/img/partner1.7961f9de.png","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://contract.usdc.ltd/","date":"2026-01-25T01:16:47.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 09:27:26 GMT","end":"Fri, 13 Mar 2026 10:25:04 GMT"},"fingerprint":{"sha1":"1D:7C:18:C1:E4:0F:D4:1A:DD:5B:F2:E8:D9:A6:D2:02:35:EB:77:C6","sha256":"CD:A7:63:D2:63:D7:25:3C:64:3D:4C:E9:10:F8:3A:2B:65:8A:6E:D3:F7:1C:6F:1A:E6:9C:55:9C:B8:FD:D8:BA"}}},"request":{"raw":"GET /img/partner1.7961f9de.png HTTP/1.1\r\nHost: contract.usdc.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contract.usdc.ltd/host\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 25 Jan 2026 01:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 23249\r\nlast-modified: Tue, 11 Nov 2025 14:50:02 GMT\r\npriority: u=4,i=?0\r\netag: \"69134d1a-5ad1\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1FRRD4ERKJ651lCmPFl5m56mqeULvFASkPxffSt%2FVSz9Na6S6SDCAp96W2lTmfUk3xXoQKEnuk32DCJjGbKmin7DVrP41p5Z%2F%2BQokbO1YA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c33ed59ed7656a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23249,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 241 x 73, 8-bit/color RGBA, non-interlaced","md5":"9062a9be6b65f92f00737f744e1b00ee","sha1":"005d0aa1c8ba68e3303d9d409fcc7a1d5a487d03","sha256":"39d978a44ce40838dcce29fe7ee0222d131d26f0251572caef41e981e755bcc2","sha512":"a814fb707fd9fb52b6359c6bf7bf9b225eae2a04c024ec052cf8c4e4b84d77739886fc7b74187a050cf646d1c4e6cd287b881d35b31ac17d928abf667439f4c9","ssdeep":"384:M0wHYlaEl4gu/3Ucj01aOQzIbQVVSzVUibjwKsBivVvHh1s6VA9Nwyx82R:MSTl4gu/k1aOQzdGz2ibjeBKVvHM6V8h","tlshash":"87a2d1168639c98f20064956236aad3f0ebe4759350d6b02ebef83dd4ee0d5027a5927","first_seen":"2023-08-07T11:13:11Z","last_seen":"2026-07-08T10:30:46.275178Z","times_seen":158,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/img/contact.a23b58b6.svg","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://contract.usdc.ltd/","date":"2026-01-25T01:16:47.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 09:27:26 GMT","end":"Fri, 13 Mar 2026 10:25:04 GMT"},"fingerprint":{"sha1":"1D:7C:18:C1:E4:0F:D4:1A:DD:5B:F2:E8:D9:A6:D2:02:35:EB:77:C6","sha256":"CD:A7:63:D2:63:D7:25:3C:64:3D:4C:E9:10:F8:3A:2B:65:8A:6E:D3:F7:1C:6F:1A:E6:9C:55:9C:B8:FD:D8:BA"}}},"request":{"raw":"GET /img/contact.a23b58b6.svg HTTP/1.1\r\nHost: contract.usdc.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contract.usdc.ltd/host\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 25 Jan 2026 01:16:47 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 11 Nov 2025 14:50:02 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69134d1a-e02\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZxANVODUD0xVNWbjhMJiiamjDDqSedA%2B0ClvU6FZt%2FqO9Sz8ow2UhvM6SyqrbFOmvIZkUF5fZcVoXOD9%2BjQaQpQjgtCKMgLy5FvRH5Fajg%3D%3D\"}]}\r\ncf-ray: 9c33ed5a0d8456a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3586,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"141e90fbab1b59151f86f779798b4c56","sha1":"35d7d862cca1c900f050cc2595dc08c439f2dbd7","sha256":"86c79478e9723c3ce78e5bd2b78f414838bf8328ef92276309ba15d59252c5d1","sha512":"a688fefe09af170912bb6d2d6474bac8a7d1a222f4f69166b03c00fc439e76f6aee0596977cdaf8e8072dfa35c7ea7960ea406b0a6c4728752ef04a42910cf51","ssdeep":"","tlshash":"c271f9e8d75053ec7d0cdbe68d231ee9331b3a75319ba16cc3ea52824197ad85d84888","first_seen":"2025-06-25T12:55:22.289437Z","last_seen":"2026-06-13T20:28:08.859404Z","times_seen":102,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/api/api//common/getConfig","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://contract.usdc.ltd/","date":"2026-01-25T01:16:44.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 09:27:26 GMT","end":"Fri, 13 Mar 2026 10:25:04 GMT"},"fingerprint":{"sha1":"1D:7C:18:C1:E4:0F:D4:1A:DD:5B:F2:E8:D9:A6:D2:02:35:EB:77:C6","sha256":"CD:A7:63:D2:63:D7:25:3C:64:3D:4C:E9:10:F8:3A:2B:65:8A:6E:D3:F7:1C:6F:1A:E6:9C:55:9C:B8:FD:D8:BA"}}},"request":{"raw":"GET /api/api//common/getConfig HTTP/1.1\r\nHost: contract.usdc.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contract.usdc.ltd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 25 Jan 2026 01:16:44 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 236\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: accept-language,language,authorization,lang,uid,token,Keep-Alive,User-Agent,Cache-Control,Content-Type\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7hHpa3xVn5Y5DDgP0zFiL4AeAvl5eCYCWze1DHTzZKcLiL02y5DM0UmZWhLWwSbvuvX8HeVHMMyHescFMKrXK1T04Yrpq8X6F3mVeTG5Ig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c33ed4c2d0456a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":302,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"57c439f089cdc9348977874622ecc2a4","sha1":"0444101ea0abf3ae3065ce15602a50799d1a49c8","sha256":"2adc4eb27a2a8de489134d9994a4a45cd8199c442614dd20b1c3373379817383","sha512":"ee62fb0e323b724ff8e22f3edd230e83ced685bacbeb9c720aed64c0bb5f72930f9336c6ead9fa9a60fcedfc21bfd2cbbd72bee2a6e030fb42563a699d1b943d","ssdeep":"","tlshash":"bee0e70bb3d0dc5cf702b4c017c7381474dd7537f5102117a79f0870a5d42d4220a113","first_seen":"2026-01-25T01:17:07.902492Z","last_seen":"2026-01-25T01:17:07.902492Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/css/534.e108442d.css","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://contract.usdc.ltd/","date":"2026-01-25T01:16:46.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 09:27:26 GMT","end":"Fri, 13 Mar 2026 10:25:04 GMT"},"fingerprint":{"sha1":"1D:7C:18:C1:E4:0F:D4:1A:DD:5B:F2:E8:D9:A6:D2:02:35:EB:77:C6","sha256":"CD:A7:63:D2:63:D7:25:3C:64:3D:4C:E9:10:F8:3A:2B:65:8A:6E:D3:F7:1C:6F:1A:E6:9C:55:9C:B8:FD:D8:BA"}}},"request":{"raw":"GET /css/534.e108442d.css HTTP/1.1\r\nHost: contract.usdc.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contract.usdc.ltd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 25 Jan 2026 01:16:46 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Tue, 11 Nov 2025 14:50:02 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69134d1a-1b3\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cofjvUI9M9t%2B4v38musO7qALoMEztRIX9fPCgXJS15WMZcPvC33KFItjlBjajK2c8mdpi7iQPUCKGC%2Fin4abyrK%2B3ivcAwzoPHTVXS8Dxw%3D%3D\"}]}\r\ncf-ray: 9c33ed564d5756a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":435,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (435), with no line terminators","md5":"bd38cdcc79ce75d2d7351faf7a38d0a9","sha1":"928e3b39d47c7f13bfe7a043329e81683975b041","sha256":"759bfadb38c74f16eef4176dc33cdf8c39e4bca5812862fddd83c2f08a9dafa7","sha512":"6b81e2bed5f70f5e3fce9dd3b835883d84cb1f1e9dc36cf09fd2b777d0c88adf4e1ec2eced3c04bc05027183a2e3bd4c61a3bb5fba194b10edd76659cdc67d38","ssdeep":"","tlshash":"7fe0e531ba3c6836f177f71942e1d4842331661e96753587ea50a058be47ac73031f86","first_seen":"2023-12-19T18:25:31Z","last_seen":"2026-07-08T10:30:46.339139Z","times_seen":153,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/img/language.6b454ebd.svg","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://contract.usdc.ltd/","date":"2026-01-25T01:16:46.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 09:27:26 GMT","end":"Fri, 13 Mar 2026 10:25:04 GMT"},"fingerprint":{"sha1":"1D:7C:18:C1:E4:0F:D4:1A:DD:5B:F2:E8:D9:A6:D2:02:35:EB:77:C6","sha256":"CD:A7:63:D2:63:D7:25:3C:64:3D:4C:E9:10:F8:3A:2B:65:8A:6E:D3:F7:1C:6F:1A:E6:9C:55:9C:B8:FD:D8:BA"}}},"request":{"raw":"GET /img/language.6b454ebd.svg HTTP/1.1\r\nHost: contract.usdc.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contract.usdc.ltd/host\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 25 Jan 2026 01:16:47 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 11 Nov 2025 14:50:02 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69134d1a-120f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p40Jr1z9g%2Fl%2FJ0wLlt3dPNXqN0nXQXJ%2FePUqIbMxxhsaHmh%2BeHoD9JSesHAS9Q5gK9pnRsz80wNhYuOuNlPndkrLS8o76xGW5cbIGQnulg%3D%3D\"}]}\r\ncf-ray: 9c33ed598d6c56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4623,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a3ae09a287e23470abde4a4d54847112","sha1":"ac57a938ab69d4654783f48a4b3aaa6979206ec4","sha256":"84f579cb46e329257d94a8341e502dd6cc61e9fc8165327d949664e454539685","sha512":"ba204e1ac025aa5664b8064854fb3c0a0964e34fdc35d6e28b349da07de96b5ef93b552c229c08685b60031071bdf206485f7729f17b63344fbc7b4b8dfb3e91","ssdeep":"96:CDNH++GudUIn4BDze6IVndbBYWAzJbeeNK47yeRd3GPqNRldvR:aWNIIBsdbBYWANCBK3ySRHR","tlshash":"de9193dda77841bc64c04b9d6b22c5787b8ddc7838218764ce3e8e991983898d753cd7","first_seen":"2024-09-19T22:02:07.053804Z","last_seen":"2026-07-08T10:30:46.295739Z","times_seen":148,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/img/partner6.8ef4cc83.png","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://contract.usdc.ltd/","date":"2026-01-25T01:16:47.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 09:27:26 GMT","end":"Fri, 13 Mar 2026 10:25:04 GMT"},"fingerprint":{"sha1":"1D:7C:18:C1:E4:0F:D4:1A:DD:5B:F2:E8:D9:A6:D2:02:35:EB:77:C6","sha256":"CD:A7:63:D2:63:D7:25:3C:64:3D:4C:E9:10:F8:3A:2B:65:8A:6E:D3:F7:1C:6F:1A:E6:9C:55:9C:B8:FD:D8:BA"}}},"request":{"raw":"GET /img/partner6.8ef4cc83.png HTTP/1.1\r\nHost: contract.usdc.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contract.usdc.ltd/host\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 25 Jan 2026 01:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 10292\r\nlast-modified: Tue, 11 Nov 2025 14:50:02 GMT\r\npriority: u=4,i=?0\r\netag: \"69134d1a-2834\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hDOkalEpmZyD4TSshrbdE1zCLbiwVTxVBkHK3EIQL8oLhopbF0wLmdFhzs7j62EiNvB6ja3KWQKRWb4Fcw9WCWL%2FKaTLT09e69A8Z8DGsA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c33ed59fd7b56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10292,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 241 x 73, 8-bit/color RGBA, non-interlaced","md5":"6f75a23acc176b4052e9d1c54241bf6b","sha1":"89b177107a93d4a6ff1a0ee31efd637cd380323b","sha256":"917e87225e20d748ddaa2175dcf807acc0a1a639d0251ec2a369cdfb2952a23a","sha512":"49342b6eafa6a31500a2421b8e94ef473b18f9cc6062386f29c8bc541009a28b333ab31dada1c0dec97182089a148da20b6a0866b8e0ba5045a969116b72d971","ssdeep":"192:iIIHUCD4waLPh880UhgVTu/8+kExn5l5tlz+tpwn18q4zTC:M0wE880Uhs7+LZ5l57+tpAWe","tlshash":"4e22cfcd8c102884754849c43fb396ee16ba4b5593ca3f581f1bfb4d5b08c239e50f69","first_seen":"2023-08-07T11:13:11Z","last_seen":"2026-07-08T10:30:46.285606Z","times_seen":158,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/axios@1.4.0/dist/axios.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contract.usdc.ltd/","date":"2026-01-25T01:16:44.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/axios@1.4.0/dist/axios.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contract.usdc.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 25 Jan 2026 01:16:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 12296\r\ncf-ray: 9c33ed4ae9763181-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.4.0\r\nx-jsd-version-type: version\r\netag: W/\"7c62-l4FP2rZKp9GzDwgvnrJy1LHOGKI\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230063-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 11877459\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DpZT8DWQkuXv7kzc9oEfSi27uIC1NuNuL1SYWgGGOqSL7IkxCvk4LPBDVmAFuBPaPHlJsLf5Af3srmIvinemRcWTeCUVKrVA%2BgLYpxT%2B%2FpfYdzv5hwq%2BLYGomUyL9MPCnnU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31842,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (31803)","md5":"6470a918ba1fd4b8d0882df0269ddb82","sha1":"97814fdab64aa7d1b30f082f9eb272d4b1ce18a2","sha256":"fd4ce12a87594281afcee9c73a40fe7acc282bcc9e764fbb3afa1481a96a091e","sha512":"b8cb57985dbc03601bfc924edadfef62195a6bfdda8543a08f565fdbb339acea3cffe7dc4d4547d3f134965ebc9e39a3acba8e0635ccdd5f4d88f14be72c163d","ssdeep":"768:KCaQhyOsbrQ5NVtQehvP8KuzHxSCuWiOakq:iI5Jht8TrzRq","tlshash":"81e20ac9b6d1b072136771b5406f250bf33aa926a44d8890f120ecea7cb950e9727f7d","first_seen":"2023-04-28T01:15:05Z","last_seen":"2026-08-03T08:53:41.258333Z","times_seen":3018,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":11,"dns":1,"connect":3,"send":0,"wait":9,"receive":1,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/css/app.d5a1d39f.css","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://contract.usdc.ltd/","date":"2026-01-25T01:16:44.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 09:27:26 GMT","end":"Fri, 13 Mar 2026 10:25:04 GMT"},"fingerprint":{"sha1":"1D:7C:18:C1:E4:0F:D4:1A:DD:5B:F2:E8:D9:A6:D2:02:35:EB:77:C6","sha256":"CD:A7:63:D2:63:D7:25:3C:64:3D:4C:E9:10:F8:3A:2B:65:8A:6E:D3:F7:1C:6F:1A:E6:9C:55:9C:B8:FD:D8:BA"}}},"request":{"raw":"GET /css/app.d5a1d39f.css HTTP/1.1\r\nHost: contract.usdc.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contract.usdc.ltd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 25 Jan 2026 01:16:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 11 Nov 2025 14:50:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"69134d1a-2161\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oCnmHpPqX%2BMYN5JV3VLW0d5rM358PeqF2Ij11WloFeb3SWa087Tj4v%2BHNqGiBGe1RRK6hi3SuSjfjxyZgaD93epOCxW2WrxJ1oky5gutfQ%3D%3D\"}]}\r\ncf-ray: 9c33ed4adcd956a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8545,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8545), with no line terminators","md5":"646eaf56dceb2570f78e7707531f05e8","sha1":"9dc90023f70c5b4e7d7ca78336a5999cbd6f10e7","sha256":"a5875da2dd1ad5004f02b99ad5011e0ed4213dc00fbf41bb50d37770aa507a57","sha512":"c4a3f876681652757d5504e7fd5f1dc180cabf519f5825d8ef01973d51b14a16fb1a22f936fa984ebcdd72ea93889f79c6c5fa82b23f31c8e9d3cccef817318e","ssdeep":"48:AY04d4xu9L6CHhS6J0xU8GMFzxV+46s4SpFFK+Zo2UBhkHkUerFUHOda9iN44Hh4:AY0WR9Hen9Mts1nVAJ0a/uXjk3a","tlshash":"2f026a52270db8a4a07fc4d66850de6a9008fe93e393a579ff019579cfd73c2276860b","first_seen":"2025-11-07T01:18:25.183908Z","last_seen":"2026-07-08T10:30:46.256506Z","times_seen":43,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/api/api/common/getCurrencyRate","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://contract.usdc.ltd/","date":"2026-01-25T01:16:46.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 09:27:26 GMT","end":"Fri, 13 Mar 2026 10:25:04 GMT"},"fingerprint":{"sha1":"1D:7C:18:C1:E4:0F:D4:1A:DD:5B:F2:E8:D9:A6:D2:02:35:EB:77:C6","sha256":"CD:A7:63:D2:63:D7:25:3C:64:3D:4C:E9:10:F8:3A:2B:65:8A:6E:D3:F7:1C:6F:1A:E6:9C:55:9C:B8:FD:D8:BA"}}},"request":{"raw":"GET /api/api/common/getCurrencyRate HTTP/1.1\r\nHost: contract.usdc.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contract.usdc.ltd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 25 Jan 2026 01:16:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 212\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: accept-language,language,authorization,lang,uid,token,Keep-Alive,User-Agent,Cache-Control,Content-Type\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YrtYDF6xHRiL8wVHe1oSB1MiORqDXcC%2FjcZcbdRSMpV4ja505PK5RlegvBrn7EbnqPtzxrWbNh7%2BWYvmWUlLfEgg67pfi4D%2BlQaBGAHJeA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c33ed56ad5d56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":367,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a764fb3fa4824dc45645be24a3ca98d8","sha1":"31b7f5aa2e945575d840f8ce79832ce5bcb65153","sha256":"bcc61cf7c51b49ffe391d45a75d78b8258d06a9542166ed41ae71a969b965c43","sha512":"4766332fb1302be7c0f152cda88e80fb898da68535093eda26489f9e714a864162920ce1f707480c521184f15ab54068bf690a313399b2f57dc165c589d8d9c6","ssdeep":"","tlshash":"e2e0dff376388cace9211987141bf910648e300b7947da71a8acce1cc2a0050851e83a","first_seen":"2026-01-25T01:17:07.906091Z","last_seen":"2026-01-25T01:17:07.906091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/img/partner4.4c8a15b0.png","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://contract.usdc.ltd/","date":"2026-01-25T01:16:47.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 09:27:26 GMT","end":"Fri, 13 Mar 2026 10:25:04 GMT"},"fingerprint":{"sha1":"1D:7C:18:C1:E4:0F:D4:1A:DD:5B:F2:E8:D9:A6:D2:02:35:EB:77:C6","sha256":"CD:A7:63:D2:63:D7:25:3C:64:3D:4C:E9:10:F8:3A:2B:65:8A:6E:D3:F7:1C:6F:1A:E6:9C:55:9C:B8:FD:D8:BA"}}},"request":{"raw":"GET /img/partner4.4c8a15b0.png HTTP/1.1\r\nHost: contract.usdc.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contract.usdc.ltd/host\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 25 Jan 2026 01:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 9315\r\nlast-modified: Tue, 11 Nov 2025 14:50:02 GMT\r\npriority: u=4,i=?0\r\netag: \"69134d1a-2463\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UjEXgeCCt5xv7wHk7hj%2BlX%2F5nQXnbMYDP%2B35UbkHBS7gaK0taIyiqKWZwRpVEEQPc9Wwul0tHoeL1KqMplUUGfHmD4RaVvMo1AftABE1sw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c33ed59ed7956a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9315,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 241 x 73, 8-bit/color RGBA, non-interlaced","md5":"f55cd945beefebee3158410953f8a0fe","sha1":"925864d056d4e60f4923684ab9cb4a5909d7fd49","sha256":"91b02e2eb9dbaeb41364c4b86e79bb285eb33861b2ed437623148bdf786669ed","sha512":"10e19ba83c3d2ebdfb17dd2e3e2de97eecd513eb0c8b5179ca98813c06871e9a203e531dda1dc20bcbf213fe296e4d593f86becef94ba1925da8810242d62f91","ssdeep":"96:BllcHitlIxv9vk7C1+I4wWHLihk/xjzKrV5J2WEcxiwPmBOwzutWYWLMcHSDFYFO:iIIHUCD4wa5urVKWEHFDzutQL88s1gg7","tlshash":"3512c013c160482216070f796f1b2284c9ab5b86d2dcf70c6ceab5dfa618f212d7d782","first_seen":"2023-08-07T11:13:11Z","last_seen":"2026-07-08T10:30:46.298056Z","times_seen":158,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/img/partner9.b380d281.png","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://contract.usdc.ltd/","date":"2026-01-25T01:16:47.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 09:27:26 GMT","end":"Fri, 13 Mar 2026 10:25:04 GMT"},"fingerprint":{"sha1":"1D:7C:18:C1:E4:0F:D4:1A:DD:5B:F2:E8:D9:A6:D2:02:35:EB:77:C6","sha256":"CD:A7:63:D2:63:D7:25:3C:64:3D:4C:E9:10:F8:3A:2B:65:8A:6E:D3:F7:1C:6F:1A:E6:9C:55:9C:B8:FD:D8:BA"}}},"request":{"raw":"GET /img/partner9.b380d281.png HTTP/1.1\r\nHost: contract.usdc.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contract.usdc.ltd/host\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 25 Jan 2026 01:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 14035\r\nlast-modified: Tue, 11 Nov 2025 14:50:02 GMT\r\npriority: u=4,i=?0\r\netag: \"69134d1a-36d3\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CQTF9uKCaokNMDRgzJzPWv%2B2qatOPcisZcIN8iRGF%2BPw7FvyJpf%2BOxU45dRuvgtVwo7KwGq3rn4mB2J62vhxwJrT81xG8XUtSIHRnZuTjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c33ed5a0d8356a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14035,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 241 x 73, 8-bit/color RGBA, non-interlaced","md5":"c3003763ca335f8a36d77fc498f1d760","sha1":"78d783c037825e336f89f07cc5ec40c823621af3","sha256":"a5289783dc48b96f09c3723590e90b9a797ca5bf9e7d6ccc047482d76846fb63","sha512":"83ea6fee51fcd56e899e042aa5ffd3bf2de08872912bbf1a96d34c8ca3ec973a24a325ccfe35e95073679f8864af8a253823dfd113af2f61c852a8665425e66f","ssdeep":"384:M0w8llQABZwkaZOiHsi0wlJNSY3xiARKn0y:MS4SZwP9HCatiaK0y","tlshash":"1652c060d0819c487f1f8a7ec5abf9c7595f231e139d8948297e5e2e8fb1c871e66380","first_seen":"2023-08-07T11:13:11Z","last_seen":"2026-07-08T10:30:46.286947Z","times_seen":157,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-25T01:16:44.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 09:27:26 GMT","end":"Fri, 13 Mar 2026 10:25:04 GMT"},"fingerprint":{"sha1":"1D:7C:18:C1:E4:0F:D4:1A:DD:5B:F2:E8:D9:A6:D2:02:35:EB:77:C6","sha256":"CD:A7:63:D2:63:D7:25:3C:64:3D:4C:E9:10:F8:3A:2B:65:8A:6E:D3:F7:1C:6F:1A:E6:9C:55:9C:B8:FD:D8:BA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: contract.usdc.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 25 Jan 2026 01:16:44 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 11 Nov 2025 14:50:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nAuhpRy%2FwWiUYj2frBCFMimFqagcs1eQO4dOiOpHTUzs3R0ydRv3d%2FJ8JoNjpOFwYFm4BlFjzDMduR2BANkFWMDdT8dm4X5ixb%2Bq1yAW%2Bw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c33ed48cb8e5684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Axios:1.4.0","description":"Promise based HTTP client for the browser and node.js","website":"https://github.com/axios/axios","common_platform_enumeration":"","icon":"Axios.svg","categories":["JavaScript libraries"]}],"data":{"size":2631,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (963)","md5":"9ed4b8052eef07ca55a25ae5985f38dd","sha1":"61f0f08a17648c832fb3de4a4fccdb025a62ea74","sha256":"565fb66973c3876987dc4d86ca089df0b06f8e28f5f42f3514c54ae626b2d547","sha512":"108b4fd727999e10a14519417b9f5919b321796208673c094b6962b8aedb95991cd091ad0a849ac10fa52cdc99444964fdd872f65b68b1fcee97429a834bf3b9","ssdeep":"","tlshash":"f25184395c78d41f4b2105a96d7ef24930a5240f8501dc807caeeb7d6fa4fe95c92de8","first_seen":"2026-01-21T20:20:33.996307Z","last_seen":"2026-04-08T21:31:27.014813Z","times_seen":5,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":40,"dns":27,"connect":1,"send":0,"wait":90,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/favicon.ico","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://contract.usdc.ltd/","date":"2026-01-25T01:16:45.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 09:27:26 GMT","end":"Fri, 13 Mar 2026 10:25:04 GMT"},"fingerprint":{"sha1":"1D:7C:18:C1:E4:0F:D4:1A:DD:5B:F2:E8:D9:A6:D2:02:35:EB:77:C6","sha256":"CD:A7:63:D2:63:D7:25:3C:64:3D:4C:E9:10:F8:3A:2B:65:8A:6E:D3:F7:1C:6F:1A:E6:9C:55:9C:B8:FD:D8:BA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: contract.usdc.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contract.usdc.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 25 Jan 2026 01:16:45 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Tue, 11 Nov 2025 14:50:02 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69134d1a-10be\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BOaoLBzYE9Je%2BqHQZoo8A4Rh6G0C%2BirtdjZyogQ%2FUedx7XnsaFlwZcndBNjNoJ%2Bj4nvmEH%2Baf02DkLYZFQp2VL3JU5AJHi2TM%2FndNYDJRw%3D%3D\"}]}\r\ncf-ray: 9c33ed505d2e56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"d3e869131b395d6b44dd04ff7cddebe6","sha1":"3510f23ebb983db3b965293e5dbc2f96d39ed541","sha256":"3daa9532902a56fd446e7dcd3203fc0c1f6bbb4d156cbca310398ecdf7259e8c","sha512":"6f58954d3c8ccb50a5879463562b5005417693a8e2f426219ce120e98b654c68573781d2f61e115091fe73897c6cb59cedb43d9663c9baf2395f07da751ac9fa","ssdeep":"48:mPFokfoiU8E6OxgSGycPWu4bvtKtxv0UuE77G+oBmdgyFmC:W6gEbxwyKWvvMt5uGoBmXkC","tlshash":"6691d5e5c5800a22f531c23d790972000baffe6f9a6f213d25d9f4580bb2f43326942b","first_seen":"2023-12-19T18:25:31Z","last_seen":"2026-07-08T10:30:46.272427Z","times_seen":143,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/img/partner5.e17263d5.png","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://contract.usdc.ltd/","date":"2026-01-25T01:16:47.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 09:27:26 GMT","end":"Fri, 13 Mar 2026 10:25:04 GMT"},"fingerprint":{"sha1":"1D:7C:18:C1:E4:0F:D4:1A:DD:5B:F2:E8:D9:A6:D2:02:35:EB:77:C6","sha256":"CD:A7:63:D2:63:D7:25:3C:64:3D:4C:E9:10:F8:3A:2B:65:8A:6E:D3:F7:1C:6F:1A:E6:9C:55:9C:B8:FD:D8:BA"}}},"request":{"raw":"GET /img/partner5.e17263d5.png HTTP/1.1\r\nHost: contract.usdc.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contract.usdc.ltd/host\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 25 Jan 2026 01:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 15170\r\nlast-modified: Tue, 11 Nov 2025 14:50:02 GMT\r\npriority: u=4,i=?0\r\netag: \"69134d1a-3b42\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=090Rok7MmcpJSuQccJIWVHe6XHn9w7sVgiVPLhwcePOWbFwDwgu4%2ByXRAnWSSgMtD%2Fsd%2BEinrdCjil8CsS673j92sPgzVFF9KgpIacsoqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c33ed59ed7a56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15170,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 241 x 73, 8-bit/color RGBA, non-interlaced","md5":"c366f4d4d571d2121ab32a67bfaf97b3","sha1":"14d0b49831c66f47726b36348d8e12e6edba211d","sha256":"006966c33ade2cc045d4dd82cf5888f4871c1f32cecb60975689bda086359e15","sha512":"61f8c969123ac8c254affefc9a8121ce550ad3cd7ae07a191beacf52f57cab8b849a63adcf6e9351f241161a7e683a8734a07364b64bb547702596c3115058a1","ssdeep":"384:M0wiNw1N0SMWq5s6DJDwTWcwv+XgqEpragNmCqG86s747Q237:M8LKaxcU+XgfpragN84sM7Qs","tlshash":"c162cf88f9c22409595104e0657b7d7ecc63b04d138b2f2ebef14a895833b9ab069a63","first_seen":"2023-08-07T11:13:11Z","last_seen":"2026-07-08T10:30:46.284828Z","times_seen":158,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/api/api/common/getConfig","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://contract.usdc.ltd/","date":"2026-01-25T01:16:47.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 09:27:26 GMT","end":"Fri, 13 Mar 2026 10:25:04 GMT"},"fingerprint":{"sha1":"1D:7C:18:C1:E4:0F:D4:1A:DD:5B:F2:E8:D9:A6:D2:02:35:EB:77:C6","sha256":"CD:A7:63:D2:63:D7:25:3C:64:3D:4C:E9:10:F8:3A:2B:65:8A:6E:D3:F7:1C:6F:1A:E6:9C:55:9C:B8:FD:D8:BA"}}},"request":{"raw":"GET /api/api/common/getConfig HTTP/1.1\r\nHost: contract.usdc.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contract.usdc.ltd/host\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 25 Jan 2026 01:16:47 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 236\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: accept-language,language,authorization,lang,uid,token,Keep-Alive,User-Agent,Cache-Control,Content-Type\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=unN8I1dPMHRQ1locOG%2BhnQtaFHHtrav2sQhj%2FfHxDmtRT6KCqOB%2F1UE7AfFeTXcghSS2VlbWNeGIHcRVWCVopGeTkWfcdp8QwGnxRya39g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c33ed5a6d8956a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":302,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c75de41cea6995b97554e6efe0f21c2e","sha1":"809a3e789e8fada0478314a39dd98266e0ab38e4","sha256":"82b7a502a87c9a501865e2aefb5195419ec5fc43955bd2f6ff4f047aab961266","sha512":"8a3340d263ad3b142f5f3219c094f937ed4af5677640df3259874c6c3fe272f8682d09a18807ef4477f0ad6d815065aac59208b6c0a13094bb03d319e17b9964","ssdeep":"","tlshash":"07e0e74775815c5ceb8375c0124a340464eee527f0401007fbffc960d8d47d4b00d423","first_seen":"2026-01-25T01:17:07.909493Z","last_seen":"2026-01-25T01:17:07.909493Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/css/70.22937b97.css","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://contract.usdc.ltd/","date":"2026-01-25T01:16:46.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 09:27:26 GMT","end":"Fri, 13 Mar 2026 10:25:04 GMT"},"fingerprint":{"sha1":"1D:7C:18:C1:E4:0F:D4:1A:DD:5B:F2:E8:D9:A6:D2:02:35:EB:77:C6","sha256":"CD:A7:63:D2:63:D7:25:3C:64:3D:4C:E9:10:F8:3A:2B:65:8A:6E:D3:F7:1C:6F:1A:E6:9C:55:9C:B8:FD:D8:BA"}}},"request":{"raw":"GET /css/70.22937b97.css HTTP/1.1\r\nHost: contract.usdc.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contract.usdc.ltd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 25 Jan 2026 01:16:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 11 Nov 2025 14:50:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"69134d1a-72fb\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E11BlnfzjpBS8yTdAKPU4v8qg8Kp7L50zy6surPJihSgOXWH%2BizoGPZJJg05n949qSp5jXpPgGLkayodTEEhwt3J3cmOrvDPiIQBZfv75w%3D%3D\"}]}\r\ncf-ray: 9c33ed565d5956a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29435,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29435), with no line terminators","md5":"361fb02eabc30d78f5cfb7f11b99d49e","sha1":"d911cc586e2dc5df46d719210d0ee874fef22284","sha256":"6edfa8f34f29522565b1215de03a0821efca9cfd7d4896d40b9245b037e92483","sha512":"529110557e5382b791e7ba31482d40aaf8038319519525d94479211f4fbc7e25f0ece4f649b44b2cdfcea40cf63e1e9d224219200d386833044bb05e7814bae1","ssdeep":"768:zZXCOjagOHlgy6S/XNXbXMXGXY/fVzwjD9asGIWUa6VeySkd5HgGySuXNXMX6XGz:zZXCOjagOHlgy6QFL0O3jD9asGIWUa6T","tlshash":"a6d2e0317b2d143cf1b7d04db48262ce5945e513e15ae8feab00e869ddc2b8635b9a0f","first_seen":"2026-01-02T01:08:05.109857Z","last_seen":"2026-07-08T10:30:46.269117Z","times_seen":11,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/api/api/common/getConfig","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://contract.usdc.ltd/","date":"2026-01-25T01:16:46.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 09:27:26 GMT","end":"Fri, 13 Mar 2026 10:25:04 GMT"},"fingerprint":{"sha1":"1D:7C:18:C1:E4:0F:D4:1A:DD:5B:F2:E8:D9:A6:D2:02:35:EB:77:C6","sha256":"CD:A7:63:D2:63:D7:25:3C:64:3D:4C:E9:10:F8:3A:2B:65:8A:6E:D3:F7:1C:6F:1A:E6:9C:55:9C:B8:FD:D8:BA"}}},"request":{"raw":"GET /api/api/common/getConfig HTTP/1.1\r\nHost: contract.usdc.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contract.usdc.ltd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 25 Jan 2026 01:16:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 236\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: accept-language,language,authorization,lang,uid,token,Keep-Alive,User-Agent,Cache-Control,Content-Type\r\ncontent-encoding: gzip\r\ncache-control: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d5FGInO%2Bj%2FAE0LtXZDl1B5b74ofyGah1tzyEhSmvhCnSsJE5yWQHrI%2BLbrPpUzSksvMPxInkflD3eKbDviRFPZc%2B7w2md%2Fl9rbkAkUp14Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c33ed579d6356a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":302,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"302f7bcc84a5c316d78a5920c21bff7c","sha1":"85019c82727d75a01a9a5e42def9c348e2232f3d","sha256":"7884a56a0c532aaa583f0e3150a107c86497073e7c4a382bd77b9b5ca2456cb0","sha512":"ea4c1e60f3084e34503bcf3dab19bf2b602db6d39f94db7e049f3e89de753749d2fa397013c496f1d110a265f7464f7f6906f04b14eafe431ee7b03e33b33d63","ssdeep":"","tlshash":"e1e0e70bb7805c6cfb02b5841247350868ddf627f0405147b75f8974d4d41d4300a033","first_seen":"2026-01-25T01:17:07.911044Z","last_seen":"2026-01-25T01:17:07.911044Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/img/arrow-right.46fb20c1.svg","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://contract.usdc.ltd/","date":"2026-01-25T01:16:46.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 09:27:26 GMT","end":"Fri, 13 Mar 2026 10:25:04 GMT"},"fingerprint":{"sha1":"1D:7C:18:C1:E4:0F:D4:1A:DD:5B:F2:E8:D9:A6:D2:02:35:EB:77:C6","sha256":"CD:A7:63:D2:63:D7:25:3C:64:3D:4C:E9:10:F8:3A:2B:65:8A:6E:D3:F7:1C:6F:1A:E6:9C:55:9C:B8:FD:D8:BA"}}},"request":{"raw":"GET /img/arrow-right.46fb20c1.svg HTTP/1.1\r\nHost: contract.usdc.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contract.usdc.ltd/host\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 25 Jan 2026 01:16:47 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 11 Nov 2025 14:50:02 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69134d1a-19c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jy3LkLt7SWPeGTW%2FTsE6zE8uWpawc%2Bzq2Uv5UE%2FERF64b%2FwY%2FbB05K31k3nK%2BqsPLxc6cZi8QTYozPQfePgUfXD3IxhDf6veDqS8xXtL6w%3D%3D\"}]}\r\ncf-ray: 9c33ed598d6e56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":412,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"87c160ab987f7bf5d9d8ee177a96c04b","sha1":"8213f5f879d7bd3532e2ba6d190c9aa992d160bb","sha256":"60780961236e2c8290dc8d88e248b7fbc1f7c07a928a517d21114ece623668e9","sha512":"bcff2b5d6980a530193932dd73d1be9856a2eacc73a1d68c650759f55fdc27f43605caba8b870d4f583c2cba476b2d13a475933d64267d5f8b5fd3f67a151a0d","ssdeep":"","tlshash":"a8e0abe0a2198f31821d835c3baf86a42a3fe2d0f7c91959d2522981508edd53d0d1f6","first_seen":"2024-08-19T21:58:34.598752Z","last_seen":"2026-07-08T10:30:46.319922Z","times_seen":147,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/img/consensys.483c6346.png","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://contract.usdc.ltd/","date":"2026-01-25T01:16:47.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 09:27:26 GMT","end":"Fri, 13 Mar 2026 10:25:04 GMT"},"fingerprint":{"sha1":"1D:7C:18:C1:E4:0F:D4:1A:DD:5B:F2:E8:D9:A6:D2:02:35:EB:77:C6","sha256":"CD:A7:63:D2:63:D7:25:3C:64:3D:4C:E9:10:F8:3A:2B:65:8A:6E:D3:F7:1C:6F:1A:E6:9C:55:9C:B8:FD:D8:BA"}}},"request":{"raw":"GET /img/consensys.483c6346.png HTTP/1.1\r\nHost: contract.usdc.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contract.usdc.ltd/host\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 25 Jan 2026 01:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 27294\r\nlast-modified: Tue, 11 Nov 2025 14:50:02 GMT\r\npriority: u=4,i=?0\r\netag: \"69134d1a-6a9e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7GnL9sY9gHru%2FeqVysgfKMsavqR0ByIn6H7LT%2ByR6omfIIqjCi%2F9hG3oA7Z8MDdwHP5AWHVkRTx2hVOvGgkjQXqYr81fYkofhZ5bXH1Flg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c33ed59ed7556a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27294,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 508 x 124, 8-bit/color RGBA, non-interlaced","md5":"84d3f151f9ce04d09388856bb07dba5b","sha1":"dfb99eb8c1be3c7991e59f54d5f771cb90573453","sha256":"e521a626af2d65eafb2455c024558734cea23504560cacb061368f002e14b851","sha512":"2745f03e347f2b2af53147e540a5b511117b1aeddf1ef9e219f2144fd1ace1155cbca52c49b89cd1030062dd63af58d3f4e9fd1ec1196f714e2e2ea4e945d724","ssdeep":"768:tjWI66sSMWpf3yEf0EDSQ6YS3u7ONLuJLCJn:ISHp/HMv+iNiOB","tlshash":"5cc2f2a03173bbc0ce306e33b3ddb526c9e779620c5a0639c34d922791c6795aa16b39","first_seen":"2024-05-24T01:19:09Z","last_seen":"2026-07-08T10:30:46.331583Z","times_seen":151,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/img/partner3.42c12ebb.png","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://contract.usdc.ltd/","date":"2026-01-25T01:16:47.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 09:27:26 GMT","end":"Fri, 13 Mar 2026 10:25:04 GMT"},"fingerprint":{"sha1":"1D:7C:18:C1:E4:0F:D4:1A:DD:5B:F2:E8:D9:A6:D2:02:35:EB:77:C6","sha256":"CD:A7:63:D2:63:D7:25:3C:64:3D:4C:E9:10:F8:3A:2B:65:8A:6E:D3:F7:1C:6F:1A:E6:9C:55:9C:B8:FD:D8:BA"}}},"request":{"raw":"GET /img/partner3.42c12ebb.png HTTP/1.1\r\nHost: contract.usdc.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contract.usdc.ltd/host\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 25 Jan 2026 01:16:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 9746\r\nlast-modified: Tue, 11 Nov 2025 14:50:02 GMT\r\npriority: u=4,i=?0\r\netag: \"69134d1a-2612\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uN6YCbayEiTZc%2BqWmJEa1AMRBGv9R38obvN8rE3ma%2Bhfe%2FGaZ3nY9ITIQPICcRv%2BbAvJeucEPYKVTWhuQiCjGa2pcP0cr1KAuS2PBhxunQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c33ed59ed7856a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9746,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 241 x 73, 8-bit/color RGBA, non-interlaced","md5":"41b0a2fdc0a537f5a2ed3ae819ebe13f","sha1":"1e49c1ddc50b67b9139323428f2ef0e79181d201","sha256":"019403ec38fdddd30b83a1fecc1f06be1bde287e84817c86e8fd01d218397b42","sha512":"74e8fc9733960fcf41d2e1a55e0e904f2508db4a8079380ee18c3cb38d2ab8d8907b5c0aa8eb2c73c8cecfccbd9e507a45e100a7e5dcfd750ff99528725a7634","ssdeep":"192:iIIHUCD4wazp4y/JpvVqk8JqkLqtfZ3+n5++AeV0Qgj9Ub5vm:M0wa4yzv8kgPqH3q5+8V29oe","tlshash":"bd12cf88ed92457b3ddc184b322bb251863355e293589e41fd4c635f4620d907c3cf42","first_seen":"2023-08-07T11:13:11Z","last_seen":"2026-07-08T10:30:46.294973Z","times_seen":158,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/js/70.72c6b361.js","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://contract.usdc.ltd/","date":"2026-01-25T01:16:46.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 09:27:26 GMT","end":"Fri, 13 Mar 2026 10:25:04 GMT"},"fingerprint":{"sha1":"1D:7C:18:C1:E4:0F:D4:1A:DD:5B:F2:E8:D9:A6:D2:02:35:EB:77:C6","sha256":"CD:A7:63:D2:63:D7:25:3C:64:3D:4C:E9:10:F8:3A:2B:65:8A:6E:D3:F7:1C:6F:1A:E6:9C:55:9C:B8:FD:D8:BA"}}},"request":{"raw":"GET /js/70.72c6b361.js HTTP/1.1\r\nHost: contract.usdc.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contract.usdc.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 25 Jan 2026 01:16:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 11 Nov 2025 14:50:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"69134d1a-25a1a\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SM3YLjPuCOsZJjLjJMy7ln1w7nRPYC2DtGl1J%2BMazk9fIBeZFDXp6OUDUtS5QJCswOA24lsty5Sjui1ZjpqEMyIaTBRZj7x7zy9J%2FGk2ew%3D%3D\"}]}\r\ncf-ray: 9c33ed565d5a56a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154138,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0f048369efdea0fa86f89a76f181d0e5","sha1":"0533f743e72192c2eb1a62c6f1969d30e4f4cfaa","sha256":"d0f6b878919e693093b5358dd9100d36c78e8e29c1d8100fa439df2f932d989b","sha512":"b625aa8d9917c5bfb2bc71200a8388cf9911a405ea51c831589a6699009212ef8f4cee169c74bc608b09d0203b19135c88ab57d21cfc9e259fb938f6c3d824f6","ssdeep":"3072:5fGUMjE5l97/+ePosDiqk/0dS4gXrHf4kefIm:lNMo5lRvPosD0/0dS4gXrHf4kefIm","tlshash":"fce3f844e640aad4a289cbbb6d2276e5e80e04a57468105ddc90bcf635f213dfffd239","first_seen":"2026-01-21T20:20:33.957068Z","last_seen":"2026-01-25T01:17:07.913629Z","times_seen":3,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"contract.usdc.ltd/img/home-selected.970204f6.svg","fqdn":"contract.usdc.ltd","domain":"usdc.ltd","tld":"ltd"},"ip":{"addr":"172.67.186.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://contract.usdc.ltd/","date":"2026-01-25T01:16:47.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 09:27:26 GMT","end":"Fri, 13 Mar 2026 10:25:04 GMT"},"fingerprint":{"sha1":"1D:7C:18:C1:E4:0F:D4:1A:DD:5B:F2:E8:D9:A6:D2:02:35:EB:77:C6","sha256":"CD:A7:63:D2:63:D7:25:3C:64:3D:4C:E9:10:F8:3A:2B:65:8A:6E:D3:F7:1C:6F:1A:E6:9C:55:9C:B8:FD:D8:BA"}}},"request":{"raw":"GET /img/home-selected.970204f6.svg HTTP/1.1\r\nHost: contract.usdc.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://contract.usdc.ltd/host\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 25 Jan 2026 01:16:47 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Tue, 11 Nov 2025 14:50:02 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69134d1a-8a0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TJJfnJWSHSohjm41XQRRfCzegMyP3msQC2Xnxdy%2FHeiOJwePF0F1xtEzU4nEzTzvPhizGhVI%2BSafarKDy7QGDFpJDq2G40DULsBaKRBtQA%3D%3D\"}]}\r\ncf-ray: 9c33ed5a1d8556a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2208,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"259dfb89375e902feccc1b716388653b","sha1":"5483b0765bc0179d6063a296498e76056d4ca46c","sha256":"59df8f7a4cdbd708cd4c34d230726f30e01bdb2159958b61413ca47a47d5f7c4","sha512":"ecc972cedc32416eb7fcdb9f3c1ff54f079d70754a82788a1bdf895b12461d7377ae1d4acd0a0b335f91616b6b8eb1b41d483e4f7c547dfe2a73efb2f7969b46","ssdeep":"","tlshash":"a64130a7f219af6c910fcacc576724b63b6f32bc347751081deb84e21212664e81ea56","first_seen":"2025-06-16T02:37:48.856387Z","last_seen":"2026-07-08T10:30:46.298792Z","times_seen":147,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"contract.usdc.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}