{"report_id":"81ec5372-55ef-4321-95a4-5e5e8e9ef8fd","version":6,"status":"done","tags":[],"date":"2026-04-07T14:23:15Z","url":{"schema":"https","addr":"usdt-x.exchange/","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"172.67.201.174","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"usdt-x.exchange/","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"title":"Swap USDT to Monero (XMR) No KYC Instant Private Exchange","dom":{"size":47762,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (346)","md5":"378edac0bd4f64b59b5bc24ddd8ee34b","sha1":"709edbf29f28024ad9465e951c5000ffd60c94b6","sha256":"8727022dd2396878d0d044aa9dd29a2575e2503ea5b1709efd5f686d546512e6","sha512":"e3ee9b4ed16f2c06d1929f03d59d9156715544a06adbfd045ccb3aacf0c9515e4899778f5a3a8c0536e0073a49fdf427878eb8761d8fa57060754baa5e74dd85","ssdeep":"768:uSHXvPmAhqHVuNHXvPmAhqHVuqoiqTaxsM99nIjJiTV0UcpfM:uSH7H8qTaOU9nkJi50lM","tlshash":"0323320931fe49b704bb96e569930e063ed4e307e00915927aae0ef94fd7c65f877288","dom_hash":"domhash93ebb9d5e4b0c81c9f3b07e09b1d0dc2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"usdt-x.exchange/","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"172.67.201.174","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-12T14:23:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"usdt-x.exchange","ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-07T14:23:16.410342Z","last_seen":"2026-04-07T14:23:16.410342Z","alert_count":106,"request_count":53,"received_data":292676,"sent_data":25709,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-05T22:16:34.770209Z","alert_count":0,"request_count":3,"received_data":148101,"sent_data":1665,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-05T22:20:18.514512Z","alert_count":0,"request_count":1,"received_data":8418,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"usdt-x.exchange/","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f0a2bf188de49b6270f92d8563c2fdbe","sha1":"fa083f1fe8f261ceba66aa24cb2a5d96dc3d44e6","sha256":"3418bec180787cf6ee6b9afe2a43e0925a5480e69ad9720c698e446e85101475","sha512":"0e781fc421483b4d68c581d9e4d45b558254c5be924ce4c8c601289eca298a231af020616eff282794a6c16a3884b14efdf2cb913c3dd25c3809a5e5d81ae110","ssdeep":"192:n+tKuIjQwcdAOatSzdFedsBC8B9CKYqk6cdYyqsVscYbvW+lhfga3FTXPvmVEbdr:n+tKZLOZBn9Q/6Z1fbv1hNFbPOVEx/NB","tlshash":"3d1294aa32bb7a300abb66ff2edb56697464405b3800d9843abc41100fd0f95ed77dd6","size":9617,"data":"","first_seen":"2026-03-09T13:48:49.35552Z","last_seen":"2026-04-07T14:43:05.324379Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"usdt-x.exchange/logo/usdtton.png","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/usdtton.png HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 35528\r\nlast-modified: Sun, 22 Mar 2026 08:32:46 GMT\r\npriority: u=4,i=?0\r\netag: \"69bfa92e-8ac8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BPJmlx5sNXFTmrZ7qbGBNeirmyCDGxa9A9BAvvxkve8vPo7eYuQbHfWWbT2rSXozjssPxs4nG248mJXI%2BHw%2FEoWCUWAhxjx%2Fn%2F8LEzzB3t%2B1bmLTUxLCqi55ablo0I2rdH8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89afde0d9a2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35528,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"31e889c88c60a941fbbae1853dbf5a9e","sha1":"a8152e08885bb744822697063188366158b9c069","sha256":"0ea77264a2518023316f8bb8ab2a5fdeffbe9d687558e96cbc799a75caa07533","sha512":"8311df33378ac3dc0ed885dfcca144f29a99481abf4b53942ceed48a31971dfbcbc5ca6fd0aeb0d7c70e62d56cefdc571f0d3ec1309c8c4b2aa593bb89a93218","ssdeep":"768:0akjq7Du7AnW7uFlu+u4QOOqdDdVpiDSP+9hFsQ++DhhPonv+yxKi:f+q7K+zF8H4QO/ldHi2P+bFseNmv+YV","tlshash":"b4f2d04045590f8ade66e0387a687efc7f72231f811a7798932fd689235a3f39069b41","first_seen":"2025-08-08T03:14:58.247261Z","last_seen":"2026-04-07T14:43:05.308505Z","times_seen":468,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://usdt-x.exchange\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 01:38:11 GMT\r\nexpires: Fri, 02 Apr 2027 01:38:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 477882\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-07T19:37:11.893383Z","times_seen":136305,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":85,"dns":1,"connect":15,"send":0,"wait":17,"receive":24,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/trx.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/trx.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zBN43wzPey0Rcx11ai6NbK5PSxQNmFq2mjhw2O3bvTM28ONrvuv6KBPkmTi8YvKYE3DZOXAzrzwEEXQ5SZwIv%2FMpi6L%2Ba05gN5w76bcXfpN75pYmoqtRHkTVgK5qzQRA9qg%3D\"}]}\r\nlast-modified: Sun, 22 Mar 2026 08:32:26 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69bfa91a-28b\"\r\ncf-ray: 9e89afdd9d772678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":651,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4f3f390369f12750aab8fd55f786372f","sha1":"6e657fc446743d340bf0443c41fa07e893029c88","sha256":"6f5f6afca8e2facd43297b21b9c453d61994224184265284605e0ad21d3ac09b","sha512":"62ef62d6a342a8af66a436447b00329feea2ea696bc6935de9d9f4370a6c017bcd90ea2fb85d3a31a9eebb61ca06fa0d55c55c95c8e32fb983e92e082115351a","ssdeep":"","tlshash":"27f02dbf11657ab9e595a3813145b01e21a4b002f6b890ae2fe76823b8098f780a0c23","first_seen":"2023-11-07T08:36:10Z","last_seen":"2026-04-07T14:43:05.31918Z","times_seen":691,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/sui.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/sui.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:32:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa917-4bf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BcS42efu14hC%2BeCf5DKpoCum8AzbTGkMu0JvcU4YCE%2BdjR%2B%2BZWMfbqHOOzBmB26bqCvmTScvykWQJDYuOkZqYhoJGVN38pzXYWD4hwZn1mpBkovSaE%2BSQMprbPeTtgtO%2BYg%3D\"}]}\r\ncf-ray: 9e89afddad7d2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1215,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"acd43b38b0d5a1a02bf1484ca78ed1a9","sha1":"ef7e22ce96d9919dc3550d8563bac2b48a868ae9","sha256":"20a6ae6ce038f9f48d610c05d7269cf0a4a0fe2226a86172498b9ae3b7ddaebc","sha512":"0baa471a56f84c975a9a0a869bd72106f47d368032b27feecc3c10495b0d3b13852b4da93683ae8e6a37db068d4ee91fb7f06ad8b9553e935ef31b7344ad693f","ssdeep":"","tlshash":"cb21020783c19fa9be15823c03e4a19072b1a4c6f0f0a7dc7b971a52d44d8d4419e7fb","first_seen":"2025-07-04T10:15:19.602231Z","last_seen":"2026-04-07T14:43:05.299606Z","times_seen":485,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/usdcarb.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/usdcarb.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:32:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa91c-957\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lUA7PXLj%2BSsoleBjSWE58rb2J%2F2lFuOPonWkNpDpUGLPwdRVH59WtrsXTgsXQihApcjo53CeEFd6ndW%2B3xxWHt28P7%2F2A7F2QC9yvajC0wGl03LinzJpZJP6SsnaJ53%2B3WU%3D\"}]}\r\ncf-ray: 9e89afde1d9e2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2391,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04718d4bd8563bc973c42ec327721c90","sha1":"dafb67871836f9a57c2406668e0b30117aa5d75c","sha256":"6b3bafccf0606dfda24d8a260da11509827e3a536d911bf9a74f2c3d6f4dfdb0","sha512":"3292511798b47f488491934ee96641097a16f8571d1cdf396287282d7bc960dab879f5968a355bfccdfd7ec39b7fc5aa6bb3ad6a3df4e864832164e04348aa26","ssdeep":"","tlshash":"e141edf4a21d52bc0d4b8bb89b3698746b1f587ab38a02342d9fd2b091074fdd9d3894","first_seen":"2025-08-08T03:14:58.329492Z","last_seen":"2026-04-07T14:43:05.30964Z","times_seen":468,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/get_rate.php?from=USDT-ERC20\u0026to=XMR","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /get_rate.php?from=USDT-ERC20\u0026to=XMR HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usdt-x.exchange/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:54 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tgBigsK1yMEOf3CvgI9QwKSAEb7T0ydfbtGCDjS83KIFW8YemL8vJtf4twTrbNwaIvDz03nVQxK2RlmjbhK9X9TleCj5YQsOL5gY7tSb%2BhZxQDeuu8ta2BlKSyZIpbxFrFc%3D\"}]}\r\ncf-ray: 9e89afe01dbd2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4cc65e63276d8c6a5e32f811e09dc39e","sha1":"b90cd7a9c35a31107d225c97e59360dca4261ac4","sha256":"d0e4f2e6d24f1197ecb6c7442bbfc5a2842d81ec20a1c2682cbc7a031dece451","sha512":"f06c1b2a31cc647ea7744985ecde9c5152757cab53235fb3652e96c9ed71d97f8b7a2ebd78e58a1c92016a635fb03708340811bb9ad210ccc11720672e9d9c41","ssdeep":"","tlshash":"248000ca02bc0c80c08a20200a3080a020c280c308c80a0020ecce00a0008e8a208c00","first_seen":"2026-04-07T14:23:20.505689Z","last_seen":"2026-04-07T14:23:20.505689Z","times_seen":1,"resource_available":false,"data":null}},"time_used":966,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":964,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/weth.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/weth.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:32:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa932-85b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dmEtvmJPSj3JNHDqXmsIRjrlRZLD3jAQ23JfmljdFbthaEluVqz4av2gzccIEUv7%2BLmfITB%2BemwBF8au0I32Sh5gVodyLPqJgSY2wfoyMOLaouO2F1qmugFjytaWqSjQ3zI%3D\"}]}\r\ncf-ray: 9e89afde2da52678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2139,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e06ef72a3829d2c0b7ee12b02c618963","sha1":"290daa3f604e0f807a26820891174b8b49a09dfa","sha256":"f7a5b397898cb68f6928de822474b10447af4c0fec8b7a540a2842cea9e776c0","sha512":"99043372570509443c19d122647b946e251c079d7df3345e77d01891f985bb5d1206bf8c608da478cfbd29b93883487df4d5e609c656581ada721a336abacf29","ssdeep":"","tlshash":"6c41239531b965bcd40097328b2f357af92358e9364155dcc2d43f49e86482e1c96dcf","first_seen":"2025-08-08T03:14:58.252172Z","last_seen":"2026-04-07T14:43:05.302984Z","times_seen":469,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/s.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/s.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:32:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa912-486\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KXmPUG6F3Fx1Q6U3uDwLd2rZeQzvMww4CLfrPSDOrb33TyCdAH8MbCkmb5VF4UHhmZAI40nR3f6dh4bas2zBFKUnOCPHoX4DVkkvYCvOmCeak8IFYLvBLKUd53Wom95iwe4%3D\"}]}\r\ncf-ray: 9e89afdded8f2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1158,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bccb21c07afe15bf010c92ffff579b05","sha1":"cf707548bed3016c7670802c7b26052c65e5a2cb","sha256":"2a054b4943caf7ba55eb71ccc22058c0a84454537a9436658d5ebc21ee08452b","sha512":"a9ce685c5df36ef630703b0ba633e80f80b503e241a85449980b08a2ed173b5fa0b2a40f9d6c3cfaed71a370a80b5f8952b8041abb19d75f7d7ec33cb6a669ae","ssdeep":"","tlshash":"49211167eb49d6bc464587648d3166b17b8be49cb3835364c2e2c330624bad183b5dd4","first_seen":"2025-08-08T03:14:58.04309Z","last_seen":"2026-04-07T14:43:05.314077Z","times_seen":467,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/usdtsol.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/usdtsol.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:32:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa92d-919\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FX%2BsKIbf37so%2BMc77xrK%2B50ZGQzRktNMIX0z5bjQh2YTn1xX523vs0UB7%2F7VzaQHs%2FKoU6CwNvROgCoj4UFD6FT8wnvX4WUlUyrrUjPlFscWJGrN7yI3JZDOjaVtqbkBgdY%3D\"}]}\r\ncf-ray: 9e89afde0d992678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2329,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"64346595d18c63284443047e061af26d","sha1":"4cf0e95a278cceb2f92b1b872225c28822d8810f","sha256":"14c6fe294604e23397d327c03d26d9f9241175b035a5a31dafedb98d8dde1aec","sha512":"4f603cd6fe045ffff816fe139267c0ee7437258f3501bc797fabc1abfa566d09c15a7438dc76fd91cd3ad0388ddcc1f9d18645f33f4ca62378d26e520c87d21a","ssdeep":"","tlshash":"90412052e204d23b8d4f82bdcb7660b42413505c76feb2b892e35b1d70178e5f5089b8","first_seen":"2025-08-08T03:14:58.31984Z","last_seen":"2026-04-07T14:43:05.296942Z","times_seen":468,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/usdc.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/usdc.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:32:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa91c-6a0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RDqpcwvijBVRGgstvbKBsEFJRNarewy3gHxfkd7ZZFWiPIAzkayMTOjWCyL2f4Ge7ecKbRrHm5%2BTuaveMrRTP10SBgFMFW4OjmuWLfGK3vLgZfud7qp1AIGY54SXOBFgMVA%3D\"}]}\r\ncf-ray: 9e89afde1da02678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1696,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b5972c16a9795dcf6e2e2d7e3125d21","sha1":"9b1cbfda8bd93368b67de6e9aba62fd250bfc7ee","sha256":"913adf09fc3097cfee7f76a3226bacd52237f2ac714817d68eaf73bfc3a72109","sha512":"c271a0fcc19d8a62481e3c72dc679186d89f28b642fd5322b3e66250d4d63e549b6a468cb407ded0d92b5786e0e1fd3b99cc218da873133d2ab80f6af03fb791","ssdeep":"","tlshash":"d7312918eb950a399848c393ada42fa53a0f73bdb114c2fc94b45e30b935c9cdde508a","first_seen":"2023-05-19T19:08:22Z","last_seen":"2026-04-07T14:43:05.298015Z","times_seen":656,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/daibnb.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/daibnb.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:31:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa8f9-4d5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O%2B2ew1EH0guc4inFOQDfok21tNUPP%2FzsKtFRXJx1vxqAiAzH%2F3s%2Bw2Sl1jok7xMfMar%2BfM3mmjLd%2F9BunJZ6%2F7XiMGZWbM0kBbbdBvFJ1OnOMFbQmXculdSQ1p9lZq7RLzM%3D\"}]}\r\ncf-ray: 9e89afde1da22678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1237,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d65c85fccdce8a2e6dddef2c26e66cff","sha1":"d7f02719e75158096cceca288bef2368061f2176","sha256":"7b98008cf62b1cae702574b447bb541e281d16575de557e4fdeb8c2986434255","sha512":"64374064858c2c79d35673a6cbfae67688644dc95a9af2a20effb22dee8573eb07f0fedeaa5f33a5811c8118188e30d29f122ebe945486264b1e6b7d12cca87b","ssdeep":"","tlshash":"0e2167a8865005abd91bd7f0ca7c7bf67cad048c48c5cb73c5be321076521d961b54fa","first_seen":"2025-08-08T03:14:58.28393Z","last_seen":"2026-04-07T14:43:05.298542Z","times_seen":468,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/usdcmatic.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/usdcmatic.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:32:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa921-747\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JkC%2Bx%2BI6lpNvH%2BRYR2i4nSV08%2FXNEkLtuU%2FRdSTn%2BrHGYL943%2Fz4jILFwvYf3dTMiMl93mqntv09kuUoT0IxbCYFCWJPSjB0d7PlFI%2BBKAF8Rm3Xy0xuqX3LHK6eFjkvu%2Fc%3D\"}]}\r\ncf-ray: 9e89afde1d9f2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1863,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"168fcea028c4ac606fabb64b132cd323","sha1":"048c021a3a8797e444903e3e9c6d618357961864","sha256":"0941676070cb87e8a7fe56295a5dd41a6958368f78c904d0d74e143e57552d0b","sha512":"95362941bc9622ff2ef4a78909017218af8250681225de4e30e69e42c8c31df6519f04575bde726d517587c0c051f5d0a9a3452c04d739a4dec51047fcffa80f","ssdeep":"","tlshash":"da310e70c3689378bdca0bf8ee7874b1e8cf9aad05e8d35461e8c57072510dd12dd44a","first_seen":"2025-08-08T03:14:58.274832Z","last_seen":"2026-04-07T14:43:05.307398Z","times_seen":468,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-07T14:22:52.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Apr 2026 14:22:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk; path=/\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2FcYto%2BJ8DCUA9D07W1T2NfMdxX9iMdKP2f1im9Dk85x51aJ53ep1NP7JCVi3lKzh33Dbx4ZJ8%2BFOJBdJdRY06J4BEz0phLsCClRnIzq1Ux1E64YmROaNddhTjEJNHGwTBI%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e89afdb38bb4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":47924,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (346)","md5":"25bef39556c61e0a19a43125d2f66512","sha1":"e002302f4b7ec1a1f0db6633286d2a7f0c09ac41","sha256":"53ad4c0561aa30157ddf14e075004142abe9dcc522056021f707343e3b09f675","sha512":"436c713e0f72d6aae7ded89efd4dabefb23d850c3b777cbc1b178de219b381c9e867f4b64ce3eba59e173a0c2ff6259c9416316a81f903c293c21c78d28279d7","ssdeep":"768:kUZcWeNTiBE8vkZcWeNTiBE8vioiqTaxsM99nIjJiTV0UcpfM:kUZiZ0qTaOU9nkJi50lM","tlshash":"4023210930fe89b704bb96e559930e473e94e303e00915967aae0af94fd7c65f877388","first_seen":"2026-04-07T14:23:20.519202Z","last_seen":"2026-04-07T14:23:20.519202Z","times_seen":1,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":32,"dns":23,"connect":1,"send":0,"wait":126,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:54 GMT","end":"Mon, 08 Jun 2026 08:38:53 GMT"},"fingerprint":{"sha1":"B7:E6:53:75:FA:B8:E8:B5:11:AC:F7:22:E0:8B:AC:53:3E:61:05:64","sha256":"46:48:37:84:82:72:61:A1:32:78:58:13:38:99:8D:2A:19:CB:C4:47:8B:BC:B1:AC:5F:6C:F4:91:6D:BB:DE:BB"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 07 Apr 2026 14:22:53 GMT\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/bcfae741e379a885f2ab2cf83ebe6d32/mr\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7581,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"053e580dd54b26338a22e4cb549690c3","sha1":"c55e4b6acd019be1820230bacd9aaec4b548337c","sha256":"9d981e129460bc838afb4f5c3ae0a09a9b454c98004adce11470f729a814d764","sha512":"4707e1eb1367e61aa8e1cab1d9792790a2eb9dd9e3efadd937ffc7c091d5269a758fcb24f6417d6be86ca5ab99f0869d4f8957a42e68c1f308acb7417c15d5b7","ssdeep":"192:9NNIxO34OxDNNryfO3iExlONEhYO3RrxGx:vXJp2+4","tlshash":"57f18992002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T03:48:36.324085Z","last_seen":"2026-04-07T19:33:29.262757Z","times_seen":5222,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":219,"dns":1,"connect":14,"send":0,"wait":32,"receive":0,"ssl":291},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DYJzaylfPfPVOBgejGMXT%2FC3YCh5YKPYCFavL0Amsh1PfBQweqZzZQwAARvsMI5XUZgzS6b%2Be03Hfi2vlP6tPn9HPDvvELbn8v0H0H5o2ZQpNamfccEXINxyP7VaIEzzv9g%3D\"}]}\r\nlast-modified: Sun, 22 Mar 2026 08:29:19 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69bfa85f-36a\"\r\ncf-ray: 9e89afdd9d722678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":874,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"43f688a0313c926433ef60c377c7cc51","sha1":"7edea9502e75583e0f93815ebb6700ad04af7e04","sha256":"fc9c52d67a9dd9c5983c2f679218e804d9ba4aecef8a1074003e3de9efdea088","sha512":"3c957f1758fb3b3a1cf125a8c4e4a5728e0f7072202c421cf834306b6f0ae931291d3181ca725890e67e4274eefbfe114b4796f1cf5be597ab70b8f39c30f3b5","ssdeep":"","tlshash":"4611e3a6d5982f7005c9077c561a70e930f8c88ff5a445eddf7a5a36bc14cf68d280a7","first_seen":"2023-05-19T19:08:22Z","last_seen":"2026-04-07T14:43:05.319747Z","times_seen":659,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/bch.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/bch.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:31:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa8f3-4be\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pfw3iD2eWS4eYjQfKBY7Y%2B9EAFI3NF0VhFO5HjqFx4hFk4eiX6bw1jLX41068DdxfbTSaXUdNamuYpwtKcCn0LhKFffx%2Bj0EmzwnLvGirMkNT17mjF%2B0fHG65s5ZXj9vvCo%3D\"}]}\r\ncf-ray: 9e89afddad7f2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1214,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c09d291a67357599252f1208c0842ee9","sha1":"d1c95e8b248838d153735628c110951d18aa057b","sha256":"0af9263278022b11dd522c2ec26c5dc4e07e35f0b421fac7278951f0066795aa","sha512":"53d756eee3c4cb922a701fc0e427708d4d1b25a440bd5a2ac02e454288cd4a25ed575f42db132687b408525e155776df42b3acad643de2ef2761a64d89450ae3","ssdeep":"","tlshash":"10213f0881d5a87efc50e11953a0158633b4ac6fd430aa90f8eba85ec24c8d0128dfaf","first_seen":"2023-07-23T06:53:23Z","last_seen":"2026-04-07T14:43:05.318054Z","times_seen":763,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/pol.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/pol.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I5gA%2B6cVAy3b6L7RO9uLJ%2FUPaZre3Q9Kjje%2BfSADv8%2Fe%2FOTQ1dRL1aAwO2Tvp87LH1ZzyHKFk%2FkGjVVz6Rx9Xjomqcj4RZRwmagQaiUtqtzK%2BV7rUAHHIpwtRQ8AVf7CHWo%3D\"}]}\r\nlast-modified: Sun, 22 Mar 2026 08:32:16 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69bfa910-273\"\r\ncf-ray: 9e89afdddd8a2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":627,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aa72aafc7e825106d06b43aa3d1dcb6c","sha1":"6a4c770f18a70687baf0f1d884bd481fba583fba","sha256":"a496a1b5d645e93a82d186448d686aacbffbe431282b1df283adf5015c64c237","sha512":"256729f2f1bc66a17ab67005e9de5e7c4768b136159c55a283e9e35b950eddcc9e3f2f4adee6101e3ad4d2ff112a3e6e2855143f5ac1ac586b2dd6363085510a","ssdeep":"","tlshash":"fcf0dd48c309b83da426470093bdb1c173a172c9e2540d8c94a528b7a597c8c42955f8","first_seen":"2025-07-04T10:15:19.63792Z","last_seen":"2026-04-07T14:43:05.323163Z","times_seen":516,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/wbtc.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/wbtc.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:32:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa931-696\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8n2BpJNS0dCt56p8L%2BPOBl7hQRtOF9ZSR3pK2Lg%2BIbRm1c8CHwryS%2F85r2y6g%2BJKUtKERgzU7WAg3IvJnXQNVxCrpWoT%2B0uYl5559q9%2F3eND89gbI4gOoyu5ZCVRuSUzz9o%3D\"}]}\r\ncf-ray: 9e89afde1da42678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1686,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ec1996e5df275212861eb647fec114ba","sha1":"a1e21bb75e8c7e33c054c29146dfeaed577d0d6b","sha256":"7af7a4b20040df46c98ef79ee867f3e429f01a87c9d4f2a62cf0d7c56814974b","sha512":"cfa333737e008e56e417e6593cdf823f5032dab29aaeb1d23ef62bec9784988599519adfda0861d4f0280ca6e1d53a37569b3a132a30885e2e4232548285b18b","ssdeep":"","tlshash":"8e3132b7436d1cf2ac038ba676e0d42374f164fee258c9ec77eb21774406a762a24831","first_seen":"2025-08-08T03:14:58.291829Z","last_seen":"2026-04-07T14:43:05.304062Z","times_seen":467,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/xrp.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/xrp.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GiPYusVck%2ByH%2BwTb4OgbuSNqNrX%2F%2Bl3ykwG%2Fx%2FY8K6zqCQ9ai5H3qy2QhOIhGeCaZnkAWTJORmzRBRQPVs%2FmKcnxvctoc4JxCPwuQO0TSuKsXpNq4X1%2FvxE%2F%2BIg6SINpY2Y%3D\"}]}\r\nlast-modified: Sun, 22 Mar 2026 08:32:56 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69bfa938-1d8\"\r\ncf-ray: 9e89afddad792678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":472,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"639b151a2217fe161ce8042566cacec9","sha1":"64e49a6afb3c8b84342c50821b0db39defad887e","sha256":"7ef9f0d812984cb142e870166076e2221266528206274b080a2f0035ade4224a","sha512":"bf722bc3adaa6bcb2693f989959f36dba411d725b35c0ad08d4cdb96bfbdd67b52b7532d08c9ebfeca2c0559dfb3179cb44fe573aebd462ec0f6ec17dc1a4817","ssdeep":"","tlshash":"b6f0dc7f93459df4f11ac37e6c887680a0b3b0408a9c80dda3c13d232104c626032615","first_seen":"2024-08-20T15:05:04.276138Z","last_seen":"2026-04-07T14:43:05.312392Z","times_seen":688,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/xlm.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/xlm.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1LTBIhF8bhoVe5KHc4TI%2F15zj%2BW2BLxqG5Ee%2F0I2qY2jfCvGHkxfv4L99bDYTJ87%2FVlGMfZUTfUdbAwmszCOf4FOa4OK2SiBzk64pwjOSFezY7upQA5BHiomuAlpKcVEYxE%3D\"}]}\r\nlast-modified: Sun, 22 Mar 2026 08:32:53 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69bfa935-2c1\"\r\ncf-ray: 9e89afdded8c2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":705,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ad29091e7d23481da4685f74853b6ee5","sha1":"86c0460566479b9b0db731eb497bc970ab4d99a8","sha256":"c2e1a69ec05cbdf97b55af1e2d815fbc2a1dbf64f90b2eb5114125a3db00fffa","sha512":"f64919df5b486ed747e8e3513a29e3fa384f3afa6fb865034e812cebf802ec9838cb5dbe01911bc725c1967a079057947f0b2fc91d355207521f057167212f83","ssdeep":"","tlshash":"8c01c073634a0f20f1514798afc8681225e2716671d5c9b867522be92d05cf32930c30","first_seen":"2023-10-29T19:24:30Z","last_seen":"2026-04-07T14:43:05.320723Z","times_seen":492,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/usdttrx.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/usdttrx.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:32:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa92f-86b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lp4Upa5Hd3AjkMGZrexVMQ1IyPnc3ezjtQLvTftFXxTh0SprKWUIKqqPq8cZDjg2ghxLZ50Zbvg7BTgncPeTvCgda2vpWMe8CtiwglloY3eLpDVFKI38bhSyD0NPzW4hrDI%3D\"}]}\r\ncf-ray: 9e89afddfd942678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2155,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"65d0769f04cff5821407a498732732e3","sha1":"a503d417c974fc1e3a487c7471cc91af07c2f727","sha256":"eff62a2f0d19a238745f0644f5db3eb0e22ab3432b51fb40fb23843e2d0ceab9","sha512":"0f787807b5f5ffeee4358f187a2b1e737b0e81c2d7775a7b358d9cd59723fb8f844599f743e42314fb2db4060bf3c1bb43e4de5f187e44b0c52b4a2a2c8aa536","ssdeep":"","tlshash":"f84199788384d3789ecad7bcaf35b8b4a44ea0fed1e283148395915072d24d9f3ad8d1","first_seen":"2025-08-08T03:14:57.853514Z","last_seen":"2026-04-07T14:43:05.321208Z","times_seen":468,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/doge.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/doge.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:32:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa900-df60\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k7yLEi0Yz%2Blq0sWpJW1h05mH6QO%2Fws5WwqrV8lIS0JLX4rRDb%2FMbWg3pRH2UwuPHXqMs277%2BsO5U2UVMlZiyvpla%2BScEI3HVNjF07H3XbkMbxLt8ixoP249igpdKDb9TcDM%3D\"}]}\r\ncf-ray: 9e89afddad7c2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57184,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bfe942ea1ab1cdd5b24bf66e4764bee1","sha1":"cda102204962596c36af10643a9c7d52f2d27185","sha256":"fd1c5bba25550fb3817560c04c9ec96e9b1a59251249997220a98b8c69cc5cdc","sha512":"7f118456391705644d5bb4c3b668c055f7b145344cde2e4c4e72062c80882c0ddca1d137d5da4f58b9bcf5b70e285e33557e30726449c9a6f0c07529701e80c2","ssdeep":"768:ceNIDXtN03ZpiteAidcLojmW3/tbHH2OZugokMUXzCknYL9bkFyyFWATv:ceNWQAXUme/RdZdok/jdvXz","tlshash":"a3438993d2a817fc79460b24c531706679f555aa723be39ccb67d6827806ef200bcc7a","first_seen":"2023-11-25T21:53:24Z","last_seen":"2026-04-07T14:43:05.317482Z","times_seen":878,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/usdt.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/usdt.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q4jCMhDMbni9dwud4c8fNs70Ji464htwlMmCi%2FxXMC%2FAuyW6dunA4iJaaehWZNli0PbODGP4YdTEORoeCKik%2B6DrGQ2%2BRjYF5Cs2iouDuBUZdJsFpeG%2BnaZ0AeGtKc%2Fwabw%3D\"}]}\r\nlast-modified: Sun, 22 Mar 2026 08:32:38 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69bfa926-36a\"\r\ncf-ray: 9e89afdd9d732678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":874,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"43f688a0313c926433ef60c377c7cc51","sha1":"7edea9502e75583e0f93815ebb6700ad04af7e04","sha256":"fc9c52d67a9dd9c5983c2f679218e804d9ba4aecef8a1074003e3de9efdea088","sha512":"3c957f1758fb3b3a1cf125a8c4e4a5728e0f7072202c421cf834306b6f0ae931291d3181ca725890e67e4274eefbfe114b4796f1cf5be597ab70b8f39c30f3b5","ssdeep":"","tlshash":"4611e3a6d5982f7005c9077c561a70e930f8c88ff5a445eddf7a5a36bc14cf68d280a7","first_seen":"2023-05-19T19:08:22Z","last_seen":"2026-04-07T14:43:05.319747Z","times_seen":659,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/usdtbnb.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/usdtbnb.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:32:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa92a-67a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2WbgOG1EuI6l1cCgepezmpWXk1QJHKkc%2FyDtVriBn4ou%2FEbT93ANIxwDyxjEaJaHSEFfBahKMkbf3qy3ibboJewDk%2BZFtDD3fiO72vyNh%2BtRvBrcye7%2Bu%2F2uEBzChzY02JA%3D\"}]}\r\ncf-ray: 9e89afde0d962678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1658,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8336cbfae1821eaa5e60c4a732199e8b","sha1":"d1058b932852bfe85ea3a028bd1a745f121f7ee4","sha256":"0d861cdf93979e1c668f798b89d66eba2c77b187d9e3a6603ca4a0052a2f8e70","sha512":"d8b827b3101ef220e9867d3203f1118c4cdc5ceb041371dec513febda85f052ad5070d8a7974cf35017818647f8a59b7903b0afe9d512e2370b0a73b5d201f4b","ssdeep":"","tlshash":"70319ea8d676c2f46e4b4774ce742bd22e66d34c97a0472c43b26720b2159f37248c7e","first_seen":"2025-08-08T03:14:58.328265Z","last_seen":"2026-04-07T14:43:05.323656Z","times_seen":468,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/xaut.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/xaut.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:32:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa934-53c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HWY5rMTgfsOp8jYE3vFhDb2n3nu3sedQoTQ333iJAX7v1tfpiR5oD2n%2Bj6FKRNVrPn28a4M3tkIqxt%2BLZcX5dZQE9qK%2BbwJX%2BuPhDcJ%2By95Eng9m0Oe5dnyf2hj8GtksDhM%3D\"}]}\r\ncf-ray: 9e89afddfd932678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1340,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"366ffdc65a8d259c1c34081748586241","sha1":"aa10fade865478c4a704092d6b7d0371a515f964","sha256":"5d5581a3457b735d7f5300005c78171bdeea07787786ef3073a0a5f7b8675cd6","sha512":"9b316bbb7c94b5db6ea30533fe53d653dcb163406df9e91eb6b7d4fcee54691f9ed5cc7c503e2c3068e80737882ff0c236b046b7815bff14495efbe2db41b698","ssdeep":"","tlshash":"8c21453bd3199c75e13b8798d684d50b7438796af1c9d2ece6c0771b35314e30954e28","first_seen":"2023-08-12T12:25:11Z","last_seen":"2026-04-07T14:43:05.306817Z","times_seen":477,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/link.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/link.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=98Fqf6tzQCsH6NTQ%2FKxvN4sJZbsPB6EccKnp94ZLT1Hqph4w7wxKOpzwT6ZPLUze%2Bs0SHygSkSnchTWT9WJSgSUQDkuH2G9TKGK6bSAqHIGps7uFfLUkEIp4Xn1yCvpay4o%3D\"}]}\r\nlast-modified: Sun, 22 Mar 2026 08:32:06 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69bfa906-183\"\r\ncf-ray: 9e89afddad7e2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":387,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4b02bc11930246d53d859deaa960862f","sha1":"8319ab21888d10b5afd2b0dad4b24e642b6c558c","sha256":"44f03722fe182e5cee65cb2811b293ca23d759c150d00ac309179a493b572875","sha512":"93c68fe6e30e65471333f4ba3ff57e9950f8a1b8ad0da0b12e46c07d04023bc4e19dd5bdaec86a3931275f8fa05f9dcd23c7cd64a640f671a9e2e18252639b31","ssdeep":"","tlshash":"cbe0689bd34a9ea8b61a812866d4f024d8a5bd75c28a9ca5fae3642f905c8f41910846","first_seen":"2024-08-20T15:05:04.25452Z","last_seen":"2026-04-07T14:43:05.322163Z","times_seen":574,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/avax.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/avax.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:31:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa8f0-653\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q5M4j%2B%2B6pnXLKhsjPSTr5dZ%2BnPUrIHRMXseQ%2F%2Fw4j4npwGk7GI92MUI%2FADQ46LQPpwt3xpzG%2F97sKZ43EZWAjr5tGcEbGiy%2F0Glc0FwYmiklOFVA72o0ar%2BvphqjfvrkWps%3D\"}]}\r\ncf-ray: 9e89afddad802678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1619,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e9df24ea466b546f238627045e3f242","sha1":"f77d52a7ec76d6c123f80edf561bc76060bce738","sha256":"1770e468b98420107a7385066571b9ea8c2a86c327c16f5bf59108983a40657c","sha512":"c78827f51b37840004cb8855fc78f1e647a5a66c72817cf8511c598c47aa10db2ec372f358df6ae6befb90a026e304872d20e911e34f5a99e973647aec68a733","ssdeep":"","tlshash":"c13133dc1a4688dc5dc485f4f72030d4da1ff0fd66026e15c248ae5868938e88e4d55f","first_seen":"2023-05-07T20:18:14Z","last_seen":"2026-04-07T14:43:05.295297Z","times_seen":664,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/arb.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/arb.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:31:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa8ec-782\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=70%2FSe5jDaqYEkyRbtpZnb4aSzWThe6s3PxBs7HAmy4ICuN30qHNMlB1GCwiViy%2BCrEX4o%2FbjaNQl5xZO4mdJkMR03nBmNdXbCaKT7gMHFIpkayvvlbGxhBcos603WPt%2BmIo%3D\"}]}\r\ncf-ray: 9e89afdded8b2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1922,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f7e9bc0adcf5af84067eb66e36be7b6b","sha1":"f099b35e6d366088d70fc148f1a910c119ce79c1","sha256":"f719363fae816b4c9af724ae8935e6c978792fb774349cd0582b1a1bb4ae12c2","sha512":"c8fa17b077f4c89fc2024a6bd050084c434e60bce91e77670e6c2fdeda5840b43ae4d145afed719299e28e4409a22154d7d3e2568e83b1905b2a30ccdf48388c","ssdeep":"","tlshash":"e1414208019d3d4e76edc7c53bba41da54fbabfbd1410488b5fb2cdd67015650e56890","first_seen":"2023-08-06T17:14:54Z","last_seen":"2026-04-07T14:43:05.300205Z","times_seen":537,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/dash.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/dash.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aH109yBlmiqoSUJn3mBu4rD1Ny9IfosydWpEnIOLUOu1tJoSMQrhfd8wmTQbdeT3RK5Z2YMqyykAYKdpYyma1GQ0hAnEye0j4IVuy1dOili9y034nmNAtsqX5MXCRrciaxc%3D\"}]}\r\nlast-modified: Sun, 22 Mar 2026 08:31:59 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69bfa8ff-26d\"\r\ncf-ray: 9e89afddfd922678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":621,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"94b9ae90fc721072b5f8199a6ab9a747","sha1":"7155ad4c23b1f03550d3c3ff9866ad0e6a3f67e8","sha256":"307cd15ae12153f9c4440063dc5e53d44c1dafabe2c015c599cb97a179d7e7a0","sha512":"70a1aea23f3140f4b6cd9f8e6abb14f2f92df85a25af947d52358be2c1b2891aca438ad79930521becc98ffe80765d854e77bd88aba4052e5ebbcd14fc9ffe59","ssdeep":"","tlshash":"71f0dd6f82498f3abe1382b65a98284520fdb4e850a0d0a870e2701fd0488f45970593","first_seen":"2023-05-09T12:11:59Z","last_seen":"2026-04-07T14:43:05.306255Z","times_seen":483,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://usdt-x.exchange\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 01:38:11 GMT\r\nexpires: Fri, 02 Apr 2027 01:38:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 477882\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-07T19:37:11.893383Z","times_seen":136305,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":132,"dns":1,"connect":17,"send":0,"wait":14,"receive":11,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/css/design.css","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /css/design.css HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 22 Mar 2026 08:31:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa8e1-2c70\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=btF%2FC8khIENtuRSLZiEGOQXjEVTzh70ZtAJVgTm4TLUJBeZJqRLYKIi8EtXlnJ1XMgc07mWWeFzMbRrZmmPcAow7NSd7Rt6UArGvtve8X54gzJDHqUgB5mFopot8vaRQTSs%3D\"}]}\r\ncf-ray: 9e89afdd9d712678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11376,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"683f60edba3505e010c403e060af288f","sha1":"0b09ecbfbb03fb5f301194a5169d949ad1c13b61","sha256":"c857a9693ceff0d117c59e0c1085fef81dd0e9fe1f0e0f9743278ab2c7a41965","sha512":"617dd6dea4b5cfcae31741b6c4b35f72e858c30472a65492a8219de4fd3a27029a3cc9905dfea7f78bb4f78e0fc2ce1fe59fadff5bf9703802e956291e434b02","ssdeep":"192:3EK/oNFbckSpPvqKfis85J+dEpbbdAPqhM8nxhx9e:3VwGNqCa5J+CU+Dnxv9e","tlshash":"323263d73b581144f01bd5a879a39f9ba31d6502e006cc7c6be0102cdf8d6e9a6b3b8d","first_seen":"2026-03-26T21:16:32.563959Z","last_seen":"2026-04-07T14:32:12.22147Z","times_seen":7,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/sol.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/sol.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:32:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa916-6f9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4x30nu4KumZ%2FQLjBlZBQ13o2%2Fp%2BoOmOjfVn0w7k9YiBNkrvy%2FTFTCxewl31W3Dc16oo%2Beonl3wN8XtBLxZcEIXPx0ZneKetbHdQ6Zy%2BdYHrlzt5Yue4lIJhPb0ZJtNqkNU0%3D\"}]}\r\ncf-ray: 9e89afddad7a2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1785,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e6fecb2c83dd517ad34f5851b99ca82","sha1":"1f08ca68f7b9d5810f4048c90119b5f30a1d13c8","sha256":"767bd52ed4f4764f27243d78f441d6690b2024d5526044e06e55f49b8008d47a","sha512":"a932d777e8766aef3c077f636a6aa361d8afab191185092d28a353b765b8a86c26f9a71d611fa6d85d906a6ecff70451615fd8316947728aa63bd3cf0fe587de","ssdeep":"","tlshash":"b6310215e51a68bbf415c24ccee1197523e802eb9062d7e091a17e3ef5acce1001f3dd","first_seen":"2023-05-11T17:52:35Z","last_seen":"2026-04-07T14:43:05.294752Z","times_seen":680,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/ada.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/ada.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:31:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa8e9-163d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G5CYlQ%2FACi7lPM2kQDZ25o2WW1AEqyBNnV1WT5w3XB%2BS%2FVh0CjTIwl%2Fl%2F%2F1GuIZ8DHRmHjsHc8e2h7586zBYBPYHY7HBb6A6%2BUuzvEeqePq%2FsUF2WLXEPP694lec5P83JpA%3D\"}]}\r\ncf-ray: 9e89afddad7b2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5693,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6aea691c581b22a12b85bbe81506ae8b","sha1":"aa06a813f0588d3836f76ae4624fa51faa7bfa43","sha256":"59c9f3504914a9c3f16669e94db5469289161142c9257f1a3741129ffe2c969c","sha512":"b6a26cf5523f43de49c34fe2d5fca5fc1ea1b48e4d429be6197244a65bfc842bc002b18292879e112eac0d4858e59814285516cd80b38ccfa093c371dc96c5c0","ssdeep":"96:2vfuV+ovy2ZN6EaiFkhspmCGuG4OduEaNJfvKcZB7t+yTWXqzqxM:uuV+ov/VFkhspmCGDGbf/7tFTJzqxM","tlshash":"38c1bd520304ebf7aca587988ae8148575d69deff430f1d46ebf1427da0c8c489987db","first_seen":"2024-08-20T15:05:04.269975Z","last_seen":"2026-04-07T14:43:05.314627Z","times_seen":531,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/dot.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/dot.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:32:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa902-41f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L%2B6k9dJ1EvzJ%2BpG%2FjYaNUI773xyi6an2NRsGZMu5Gz98Hm1t8tMoMkDRk17UcQbL%2BBffze2ZecS09T2o6AbEijn7k1q4g046hW2G0f2hw4F4SgeSIqwfrxIZ116w1SSAgXE%3D\"}]}\r\ncf-ray: 9e89afddbd852678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1055,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7544a7dc0217267f00df8da7abbf25f5","sha1":"e5a447cc3934c038d8ff6cfded94664b719bfe9f","sha256":"eeb8fe43686e638fa2de0026fb3fa0e17371910f27e8404adf31ca800512b4ae","sha512":"48f2c2d4ab0fadef1b4079420e1f9e882979af83f2a0f02c16a0ad4d444a4402c9e2268cf3fa24572fe2042d41ed2e5be2e3b46290181c84b9245f261a328f19","ssdeep":"","tlshash":"1b118c59f24cf425991a1148c7f3aae197ae92278f909a8e80b17dbcf7728e015417f1","first_seen":"2024-12-17T05:49:38.368976Z","last_seen":"2026-04-07T14:43:05.292949Z","times_seen":495,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/atom.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/atom.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:31:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa8f0-842\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pNRLX54vvT1OYK%2B0Ggjq3B4il%2BEdn5ZXe3yYNGKkpM%2B02UhIeswduGLqItiqUKNvU783erHyA0RZBBVl5cRYESkKfvIrtA5K%2B1zN3BART86DfaNz0gFJGRWsduTtPTDi0sA%3D\"}]}\r\ncf-ray: 9e89afdded8d2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2114,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e915ff17eb74750c84f8b87158be2d5e","sha1":"09c8f89fca808b27d169819d8899f0a59f761bdd","sha256":"4010e79c2131a2cceee1027940138e866c0c95fa961059ce6958cf5a3ea460c4","sha512":"8a25aff49d8176fb636c00b4e8ea7d5b1aa93ff6bda312ecbff55da86b1206c13366f6666f4e183f781b8230d2053d9463f50f2368ab92488c327396b968ea66","ssdeep":"","tlshash":"294142b7c38d2f264841426ed9e7607925a89138eb7491ec9763e22fbe059f0241cdec","first_seen":"2023-10-29T19:24:30Z","last_seen":"2026-04-07T14:43:05.311826Z","times_seen":618,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://usdt-x.exchange\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 01:38:11 GMT\r\nexpires: Fri, 02 Apr 2027 01:38:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 477882\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-07T19:37:11.893383Z","times_seen":136305,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":155,"dns":0,"connect":15,"send":0,"wait":14,"receive":9,"ssl":135},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/favicon.ico","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Sun, 22 Mar 2026 08:29:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa867-10be\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y7aDW3OYorQNW6Q%2BgtxMCyb1Huvzup1aqMnvfc5rK5faoj8Irdv23rjZPF931DzpVHazVsCMRdie41ay%2BhnR5wjKfQWTG%2BDIAVu6k2Tl6T0X9BtzUnQzyL%2FJwj0W8aGKIaU%3D\"}]}\r\ncf-ray: 9e89afe1fdcf2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"8a714001d25959c81a7d472c31e6c680","sha1":"07367df7d8630cd09a7f94b5b779bbcbb8b53245","sha256":"adb1ada529d1d2f7b46f90509bfe8d10dcb7fb0b6e68cc33ad8bfa35d74bafcb","sha512":"cb9b4a8de2762c303e893a4a6a09620a11e4087297ad0393eac0cc53009663489fcc580e5b8e9ac47e4c017ce2dc4562cccde581ee6af9bd1e909af7de2579bd","ssdeep":"96:PlwOnPySe7zaQjLALphNxsAg9436XRRa94:Pjnqj7zaQjstmAg94qXfP","tlshash":"97910570e3e0cf68dc71337410058a433e186df8a2e11965aa227a493e7bc337d6e5b2","first_seen":"2026-01-24T18:34:43.272478Z","last_seen":"2026-04-07T14:43:05.318611Z","times_seen":10,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/aave.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/aave.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BWESibwOEWKm2owWdr1E1r8PK6R%2Fau6tkMO%2F2TBVVh1zpyYnIDVor5YABHCds8XK%2B%2Fuc0cS4hvzpBTcebhOGl32JNQRhiqjlos6Mx031pU9ixbSKxZgC06XdL7uXNTnlNs8%3D\"}]}\r\nlast-modified: Sun, 22 Mar 2026 08:31:37 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69bfa8e9-3da\"\r\ncf-ray: 9e89afddbd872678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":986,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"43b3ac8008da5b6ac71ad555efcf5986","sha1":"be7203559d86576a67cc91077314ea26d2a345a9","sha256":"55071c18b66729760d28f32766e4a39acb9b7bb179d9fd9389f1aeaff8d41829","sha512":"9ac3b42a9c11bca5fda1681782542761eaa12fe85731ec54516cd4128ae918926f7cad8256591a02775ffed5b653f9ff663c14a7314a62390f4567ee6d2dfb1f","ssdeep":"","tlshash":"60112d02829cc6ba9c63c331a6e870c32241f435f0b0a4f9fdeb5464860d2f00906ff6","first_seen":"2025-07-04T10:15:19.593113Z","last_seen":"2026-04-07T14:43:05.31351Z","times_seen":478,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/etc.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/etc.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KNrfD1siY7vtdF1KDtZ47DUZLMdxbtdEABpl9MmJfWmrAHeiZkNhF05IKU74TLjt3ZKMNe4kB9lQs1OFEsbpKwBoLy%2B8yDebPq7b77sb1KfNEX0WedF27lig0ZFymn5reyA%3D\"}]}\r\nlast-modified: Sun, 22 Mar 2026 08:32:03 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69bfa903-3ba\"\r\ncf-ray: 9e89afddbd882678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":954,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9d4534ae68dc2efc7ee6f7186e3c8b6b","sha1":"b803c4d8579db205bf55bfc9761db80d68baa1e7","sha256":"07ec8c673d077df357ddd662ddc84f4ee80777bbf07800426999f687084f860d","sha512":"8b1d3dd409226322c6d7b801ac3de2f3a70671ccb7c90bbbac466e1f32d50d6df9ee77892b65bf403fbf97636d1f11ad0a53297f84a518e82536448ad426958d","ssdeep":"","tlshash":"e1112d3d7bae7cb05a8643587990b8817831316d6bad01de78e5b5335d0aab10833e43","first_seen":"2023-12-24T22:32:30Z","last_seen":"2026-04-07T14:43:05.320301Z","times_seen":479,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/usdtarb.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/usdtarb.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:32:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa928-865\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a0ETlAG%2Bj6Y8HHG0apmWyTcPcG4b0l658nhqO5tel6Swe8%2BDyibHVuJsnq2N%2Bp6Y%2B5vwqwhG3ZMLj3AlwGN1TktL%2FBjYRQtBg4V3MkFqJZYkqEdtgW9y1y%2FpfCNJ0soEzsQ%3D\"}]}\r\ncf-ray: 9e89afde0d972678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2149,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d70c261908a7bd2cde182a6a477850be","sha1":"d587b777974afb3eb63009d8d06cd27f962acc5b","sha256":"fced8c4a47899704bd2606b577df5f893abafc9ad4625d91cbdc3f4deb13aede","sha512":"1c37f056407c887510b202b57af8d6007c66c2358dfa1fee7d64cd62e23aa0ac957f4b77b4490fd8e9655132307f0d572f60a7a5f48c30046bba3a0660df0ff5","ssdeep":"","tlshash":"744110b5a75a45fc0d0b4bb8ab3494b0671f187eb35b02342d5fa3f0a1074edd9938a4","first_seen":"2025-08-08T03:14:58.088751Z","last_seen":"2026-04-07T14:43:05.296386Z","times_seen":467,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/daimatic.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/daimatic.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:31:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa8fc-4de\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ezPsRv1J8vEY23SLjAhSvXwHVD947SGLuqgsh0c8ghuPjBsYyOap1cN8cWioxsd6NPoFyhp4VE4s2IfNexGyCVhWOR7gxxFni%2FxlQy0h7Ke6AyZ%2BKUjbcLY6IFvaY8nt62A%3D\"}]}\r\ncf-ray: 9e89afde1da32678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1246,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4436cbc4b6eeeeb953b4c04bc7c48e52","sha1":"49efdacaddb14aeb6bee5c3da7c7c896280157ad","sha256":"053977827032cdcccbe0b9fae05550151bf57a20bc6b047997e7d8f3c3e3239e","sha512":"3999d7da8e0a80642cff3a60a13b6222f6b9bf8ce58df7115c643ea00f1ac1e84ef2afe2cca8a14d83a46f6694a5b8d56802a2d5957efbc727e03f91e3441056","ssdeep":"","tlshash":"5621cb75c79982bd38c70b78ea7844e0d4df9f8c4cf9d2d181bf9568b2910d441ed85a","first_seen":"2025-08-08T03:14:57.943685Z","last_seen":"2026-04-07T14:43:05.316274Z","times_seen":467,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/btc.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/btc.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:31:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa8f6-815\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4bgzsUZrA8xy4dkntJQf34SIhZ00KYQxIq2KL4mYCG06rAtHNgvhRtJloxkyrg5vv8Vz8BvNrtwwg3nOWh9Ofk5qXa4YmJ6Gpn904vBceIpRbl%2F%2FSkj2Lrm0j9u1DPGkSUE%3D\"}]}\r\ncf-ray: 9e89afdd9d742678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2069,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f92890de8d6512e2597d378f00254e71","sha1":"ae4f3414bffd2594adedb794d4f9eefb2a86c382","sha256":"51a4362311aab24ca9f1b68d3ff5faf423385db8ffdade0894bd6acb799e53d3","sha512":"6ab7b81fef67d104a6fdf5c9523efc3d03d6039913a3cd3dac6d22fd4975d2449be7043953c840ff0ee8fdc7226894b07c287790381b0fb653579d8dd55f140f","ssdeep":"","tlshash":"cc41a5fcca1a8952ca9e4b6ceafc4c5e2f23604f016d01fcc58296f57c125f58645a9d","first_seen":"2023-07-06T20:31:23Z","last_seen":"2026-04-07T14:43:05.309087Z","times_seen":719,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/xmr.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/xmr.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VyCcapjyYWnFLeLER08hWQATUj04xFBK%2B6Rn3%2Bt2l6oknUP3YqbtDXr84divXtssCvHt4y8PXLn3K6iw3Mr3ne1BZ06iMfjPcdfhiMcVVbvjdspOnKvDdD94humYd7iE6X8%3D\"}]}\r\nlast-modified: Sun, 22 Mar 2026 08:32:55 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69bfa937-3ac\"\r\ncf-ray: 9e89afdd9d762678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":940,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"22ac5949dd8d861e10abeee3e4d546d0","sha1":"172f8c99e4b56bc6be6a86791e08fbe867640b40","sha256":"668c28e1a5e0ce6839c6b3a8a35c5dfba3e284a442f7ae4049398472f72ace27","sha512":"d0cb29e855ecafffbd4a49c4b287849ac133c97f0aa9d098d197031add5df8cf51668d2ec34db0934230c216952acf87bc7c4ddce33c6564da2e39e56395eac5","ssdeep":"","tlshash":"d7114083a0702d1ee07689c88be9ae260c7c91b563d92dfcf6d32d3e1531c7811c8a90","first_seen":"2023-05-22T07:53:58Z","last_seen":"2026-04-07T14:43:05.299066Z","times_seen":520,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/shib.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/shib.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:32:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa914-26a6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OcONNI8j3qRoWc0bczhY8v8qCsdz1qmXxgdmPMx8FGBk4RUS1eHTPNMTqtD0ZzeacjZdmmNj7llaU%2FmBLCY7hU8EPKcF4W2qvWMuKOZeTfvdX1OcpSlrLLkGiY1IM3%2FJoto%3D\"}]}\r\ncf-ray: 9e89afddad832678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9894,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e53ff3a90e8c46f183c2f76f5e56c725","sha1":"496b59dfa36d361399419112394dbfa2d638ed44","sha256":"e1718d832724f003ff97f4b2e5210ef48399cc992b00efca2ca3a17f75ccc908","sha512":"afd69f9c50b857827d1e73b101c64b058c2a537fa94272fa0041cf084ef3bb3d6ec2ee63c9db2a91252bc807374dd0821d9436469590d7eb31f4e6bce2e5be6d","ssdeep":"192:u0x5yqAxbG8Nz+R4y42CMAAq79NzpdyjfLFtCmkdPc6lI1y:u0vVAhG8Nz6gMAH79NzpQLfNkdU6O0","tlshash":"61122f074388ebf8bda98228d51064d979d5ecdbe430f2d4bb6b1442c58c4d5a68c7fe","first_seen":"2023-05-22T20:26:51Z","last_seen":"2026-04-07T14:43:05.311246Z","times_seen":521,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/usdcsol.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/usdcsol.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:32:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa923-ca9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nmmz4dBkU9k%2BM0uQH0GnsJRaTEwBVQ2i1JBH%2FURNo64k3Ikrj9urF%2FI1L1R2wiooKum1b7XBS0WHSVX5EF8%2B3SV3pfEg0ZG4ubuky4qxsgwE7WKsd0ekknn0Wz0HDzaZ3Bs%3D\"}]}\r\ncf-ray: 9e89afde1d9d2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3241,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7d20a02fa42c7ecf717261f06b657429","sha1":"e34f466c2fdfdd7bf4d9cbd21391db8b7452c2f3","sha256":"0414052fd922bb1d9598fb1d8a97114ee7c2ad4093f4f0fb40d3073fdc5fe332","sha512":"6256b6d5cf07d6eab0831ecced5e1adec8019773334115a952d44777d4a68aa2ed7f469d30d4bf13247f15ae18f72aa851568049f4360c2741b47cf81b43ffb0","ssdeep":"","tlshash":"1a616383c2245271cc4d88ac9725752d1656a88b7a708ad0efef5b1ed40e5f2510dad9","first_seen":"2025-08-08T03:14:58.321449Z","last_seen":"2026-04-07T14:43:05.301256Z","times_seen":467,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/eth.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/eth.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:32:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa905-541\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1kgOto3rA7qzPOXVAWsZhAiTpkl4z0Z7jQ4A4nDp6XuB8YZrEBPsmgqa%2FuSREgInR6jh7lGoeYDu8qPc9jHV2jlrGSS2aXJlvZI9p80MUyC5v2GqugOh1CIDinNlhZlMDrI%3D\"}]}\r\ncf-ray: 9e89afdd9d752678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1345,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7c19954628081bf6fd772fa0d0819547","sha1":"9c1d03cc04bb9d2e2f8577ad561abb9c9ac9dae5","sha256":"066b2a60df66fbe2c11bbf7d37201552fd27e4edca73cac4a3e7ebda3ceb2486","sha512":"3f40c39fa2e06194f6957ad2bb7cf6c752dd9ad12eaefe891a56380496d85f383331fc4c557b42f3cd897bdfa02c87d4f27ff457b1c11ecdbba6053ff2549ff4","ssdeep":"","tlshash":"fc21eef5ad9e6991c5fe83b4b5fc91532853c0cf008a0880fac07681ac066fe4e42adc","first_seen":"2023-10-24T01:06:33Z","last_seen":"2026-04-07T14:43:05.307952Z","times_seen":737,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/ton.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/ton.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LFmOwyyq4UHNC5aVg82C9bYON7aoH0BWhBMMONUH07sIlTIl8OdYJw3MU%2FjIr%2FsWxoOLccc5MUgmV0dXwxf1NMP3hmkuZv%2Bn%2BmdHjT4Xof1SjxK78pNFxx3mm6ddG84gZx8%3D\"}]}\r\nlast-modified: Sun, 22 Mar 2026 08:32:24 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69bfa918-328\"\r\ncf-ray: 9e89afddbd842678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":808,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f26a4968e7bd522daab3b7a71309bb7","sha1":"feedef31ecd11c0473ab2bb2af23a32b90634626","sha256":"453cf5649b76d7eb5b0648bd83aca1c5958cb042d75d89e81b0f0ce6201a66a6","sha512":"3333cc6363bd95447403fc146be17f4295994259f160c9528f9ec0bbdea5e219f0f5f71297e402bf8c3d92040943ea724bb25d3d03f561d4ef67fd715994132a","ssdeep":"","tlshash":"6f01120583815f5a6814861073ac55d2b3f5f4c7e170a9cc81d6343af64c8d41688bcd","first_seen":"2025-05-23T11:37:09.503981Z","last_seen":"2026-04-07T14:43:05.322671Z","times_seen":510,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/op.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/op.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:32:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa90b-647\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4xjw8CC87OaSHD13d5dSGHjJm4ji1L2YtXBw7YJyQnIiDG%2FPG%2FV64bJIkxNSLNZ1mbApHqglI0xLcHstf2YhZhnzwdk3nbC2jucZ5MFQlmoTK%2Bs1x7PY1Than%2BbVmB53kJ0%3D\"}]}\r\ncf-ray: 9e89afdded8e2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1607,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e1321c628e6fc01f56221b42b7899656","sha1":"14b324aabf8931c1f10bbfe101dfc6882ebf93f0","sha256":"8c52ff09c6306abac25cbf8f051db1596b41e856f1c9dd55b27c1a42abefde01","sha512":"b588788f22e971e919d79a055c821ede95089de0d17eade09e9911e50c15c7e66811237ea4a495a65a68ef2d4d04828416c41f95f8bb25764a569622ab299ddf","ssdeep":"","tlshash":"df31ed1a4701cbb9be99413c4aa0798d73f2ac95a174f4d4739b106ac5488d4694c7ed","first_seen":"2023-08-06T17:14:54Z","last_seen":"2026-04-07T14:43:05.315715Z","times_seen":492,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/zec.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/zec.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:32:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa93a-578\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bjqqJg04KUi8AJ4NsDiYjj2L2lXRXWDnbJHgAeHUgjciBHCNbuw%2BPLWV9AQeKKqHBBgDlpV39fv5GaV0RKB3apUwFie7cYj3BOPSXO1hbVKnBuzffxwcEOGfw%2FhICZCuVZI%3D\"}]}\r\ncf-ray: 9e89afddfd912678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1400,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0355dfef0156fa1410290c6f62594b18","sha1":"de25f2fc3d8e8417c25e9cacf316b8ab9ae5aa94","sha256":"c202292c36336b109523fff68c5e8de3a659ca2dbea6a7d1e9fdead80c0e1a90","sha512":"0f5db1dd772218a22b21ca44ceb50ab2a85036712ea4a17c7618f6bec7b4b6d198ed3e638158d8497132decdb5402823f3df0699d391c8cd56e6d00fa44ccb94","ssdeep":"","tlshash":"8a211664b3875e39b9b1c394ecd0b89e3029207a90c5415cd555bf5ee495df01c84ad4","first_seen":"2024-08-20T15:05:04.252796Z","last_seen":"2026-04-07T14:43:05.295838Z","times_seen":487,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/usdcbnb.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/usdcbnb.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:32:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa91f-745\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ReZ95fU9dKlaNlUktl63SZ3gMigs%2FG9STeJmNFilDiSRjzgOffS1218T40R6%2Ffh4od8Gu1cnkaDTsJsDWIkYh4XcdPqv4JYtmqA66QwIEbJCkdFRBlDtnQ3x3zUrSDC1pQI%3D\"}]}\r\ncf-ray: 9e89afde1d9c2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1861,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f0ce7292c332994628c0e1b4c08ab3f4","sha1":"1a9f3fd35b77a7de9671d1fd808d2681f8110da7","sha256":"491df7d4fa868a5356791fb10e13ba0ae2035752b4ec38c37ce882f8ec3ba457","sha512":"d4191f59758967ba29c4af68028487bcfb88f8327b0b3685bb3d82f53312ee83ba16cfa6753bdedb444ed7596c419e263f9f68c9e17030ab950e946539116ae1","ssdeep":"","tlshash":"0931dca482246373ce5bc7f4de7d7ab67c8e50ad00c4c33595fc922072511dd22aa4f9","first_seen":"2025-08-08T03:14:58.302643Z","last_seen":"2026-04-07T14:43:05.30073Z","times_seen":468,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/ltc.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/ltc.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JYt7hFELl5gNvlMz2obzSv7rsFywN9RmMGDRHSSkHH%2BEf%2Bs6gST9bs6Y2SIskAH4oMoX445Gfc30fBBd1iSNl31Uun2%2FfHY3C0am2hrUmZWzK3NdAcHkP%2BlX3%2FlcOCS3CwI%3D\"}]}\r\nlast-modified: Sun, 22 Mar 2026 08:32:08 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69bfa908-1e9\"\r\ncf-ray: 9e89afddad812678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":489,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6046cca14ef5741d48469675250f8d1a","sha1":"e5d3cb531aa29112387e94a9d68a1ea583576c8b","sha256":"20dd004b22b76d98151807b3ca99196f84edf24cc5d66c33e3aaabfd9ada6d19","sha512":"e4153f5893945f12cf4bcb8b0a66e1b360fcbdd62be00058ec3e6d32452e3aaed2913e3328ca99a3067acb5ed5964df60796b7e56199dfb316790bc413877b31","ssdeep":"","tlshash":"f6f0d47bdb50ce2ddb50472cc0c2b50210704542f1c24294ef97012cf80b8b3747c9c2","first_seen":"2023-07-06T20:31:16Z","last_seen":"2026-04-07T14:43:05.312959Z","times_seen":701,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/apt.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/apt.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:31:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa8ec-5d3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ptbs6LzdKRPmz5ha8%2FbjbwmCW8UsgmJjj6kTZ5ha0S%2FdAxLpasqDVUiawWSWxyY88ajLeh4gbMwKoQR7fgnvVU7o%2FemLeX%2ByT%2BgiZbyCqcBEkanXG03JZlhLhTk3vMz1lW4%3D\"}]}\r\ncf-ray: 9e89afdddd892678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1491,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6c7ad284010a856ad4cdd3f7bfc6b909","sha1":"aa7da091593b330064132f70b65a86065fb75845","sha256":"c7cd444572695311269e63476d0851682e0bed974c89b49353f039b1e033b0f3","sha512":"75222414c7c18a7997168a511c88716d6bd6e21c4913873a785e6fd5077d0ff099a87070be9df43d5cdd3a4a01213a737351d16f4c6facb076ec37f9e5cfb436","ssdeep":"","tlshash":"f231e20bc350daf9ad424538f315b860f6909ca5a470f1d8aba91855f50cce471adbeb","first_seen":"2024-11-24T05:56:59.788956Z","last_seen":"2026-04-07T14:43:05.302413Z","times_seen":476,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/daieth.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/daieth.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jxWPOiCcAZfPLXcssSDKW9JKuD3%2B6RkfaEXQjEEoV7E%2FuDmL52mv6YmnJHizeF3DzzK1rwBERKEnQKMTkaucXxFPO5BbojmV%2BD3GVGcalBCaG5PskiKk6bZZqcxPlFSK%2FNk%3D\"}]}\r\nlast-modified: Sun, 22 Mar 2026 08:31:56 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69bfa8fc-38a\"\r\ncf-ray: 9e89afde1da12678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":906,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d87ee22969e0aae24f1f110320f3b41d","sha1":"1689674b0c03a65cb2d7276913344f474196b0fc","sha256":"dadf1b43249c6a30982100346e82a7e56b7670e8495aa57627ab1ab257daa266","sha512":"cc55a781434ea99a8d3926946a518e14e059f86e8b79373a93fe66c93bd2be75f0c5cc53c84d97ab9095d7275a7f071b604ae247fbfff3dcaf00819ed36a6c29","ssdeep":"","tlshash":"3911dcf8f570246cde460bf08eae14e0b8992cddcca85652910f31007a9138f50f0aa1","first_seen":"2025-08-08T03:14:58.13591Z","last_seen":"2026-04-07T14:43:05.321687Z","times_seen":467,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/bnb.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/bnb.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:31:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa8f3-648\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kCiwbj9xDaP5b4k4yGrtmWjpce%2FR%2BJpv1bQxOVHOGStzAQ%2FztvPZKOQY72LWbut5TDcA3xWfZLGzj22iOIAa0NC%2B%2F1WZjRXWZQJa65lBqWimt%2BVxZDGRR2lGfsz9otLdmO0%3D\"}]}\r\ncf-ray: 9e89afdd9d782678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1608,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1aa88810b9f05826b0ce034c0799f7e6","sha1":"7f7092e9e20565d527a1ceddf7e123a6fa1112ca","sha256":"d068cbf5169368d3e27992d205e7891f2a376908fb6d6f5edbacf11a3f058c61","sha512":"6af3a7895649bb3b8fe912d4921403d91a3f24fa9182a978aa5451ec54bac8608c42ca332bdd48d4f50a3c0dbe22cff883bbcd615c6b2181d32fdd3b7a531ab5","ssdeep":"","tlshash":"46313305c7d4c7a7bc95c7ced6b11542427350e9a23382b4fb0bc531bc2e0aa0a4c6f9","first_seen":"2023-08-06T01:12:06Z","last_seen":"2026-04-07T14:43:05.305676Z","times_seen":654,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/pepe.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/pepe.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:32:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa90d-4d69\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zrDuwfYNWOYE%2Fn6YOXrRgR%2B%2BmQH3u%2F1Qqef3s55Amn2%2BaDKD0p4afsFtkSZwYmqVnQ2tUKcoqS15BXFAHh0wB3e3neifquljF76UzEUmKUBsD7HDJXgtED3s9xnPTeWj4wQ%3D\"}]}\r\ncf-ray: 9e89afddbd862678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19817,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"32b9ac73ce19668645d07c043bdb7ae0","sha1":"0d668bf6a962dd5a6192a0ebd003502edc603c94","sha256":"cab2d27b6b789d9f86dbbb91ada3b3a5bf3d83b3aa02e8145d81e89131228dbb","sha512":"74652f084d180e65e4379f946d9232c09e90fc7d6c0e0b87cae2e0919e8d19601ca055c622d787388ea669d3f54c3c4307dfe94c15bc0ae25b7a9dfaea11d894","ssdeep":"384:7VcTgHGcXSvgKIqL0xKjc4XnNzFLbu3dMeaWGd4wYzEEYFUgSBa:R/GoS4Pj4dFkBVzbgSk","tlshash":"3092a913438097bafe984868aa6124d5b1d5ecd7d4b4e3c0eb7f140ad94c4e0a5ac7fb","first_seen":"2025-08-08T03:14:57.833421Z","last_seen":"2026-04-07T14:43:05.315188Z","times_seen":471,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/usdtmatic.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/usdtmatic.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:32:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa92b-586\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FwnQAAaX7Uguos%2B2Qt8dXEBsmCjQak6tjKGq4E9VvsYhR8zqJys6xU4CjWqJ%2Fadw77%2FDzpBk4yyABrZV3kBQl6Vl%2FoE21S3UdIgd78dlTFIBdQ4tx5DHnqos9Y8UTFgOo48%3D\"}]}\r\ncf-ray: 9e89afde0d982678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1414,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0d0e6e76cbffd37bc0aef1b5a85e0f60","sha1":"de286a9d64f68d471abd382e796935b8f9d73e55","sha256":"6136d482b83eaa2ab3d9f13a6682876a75eb5f8c070f0928dd112db2e518f3eb","sha512":"ba9d2633aa02fa8dfde4d602ca7d5b426a19a93c6d860384854d365b1c1b9b2e4831e4a0a1150325fcd976717aff2be225d4338f88e45c60c7f55e14790fe6f9","ssdeep":"","tlshash":"48210335439c82bc398a0bb8fd7864f0c4cf9add44f5e3a022fd861071960d951ed8ca","first_seen":"2025-08-08T03:14:57.897783Z","last_seen":"2026-04-07T14:43:05.297464Z","times_seen":468,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-x.exchange/logo/usdceth.svg","fqdn":"usdt-x.exchange","domain":"usdt-x.exchange","tld":"exchange"},"ip":{"addr":"104.21.22.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-x.exchange/","date":"2026-04-07T14:22:53.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-x.exchange","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 07:57:43 GMT","end":"Sat, 20 Jun 2026 07:57:42 GMT"},"fingerprint":{"sha1":"58:E6:ED:F9:CC:BF:CA:81:A8:DE:F4:61:32:4A:38:E1:47:9C:34:9D","sha256":"82:B2:AD:9F:02:F2:0D:08:04:89:C0:73:06:09:71:3C:84:C4:CF:BD:67:AD:CB:5D:8D:FD:05:7D:69:A8:63:F0"}}},"request":{"raw":"GET /logo/usdceth.svg HTTP/1.1\r\nHost: usdt-x.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-x.exchange/\r\nCookie: PHPSESSID=i298u2eb1ugk7pjrjlls0ko0mk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 07 Apr 2026 14:22:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 22 Mar 2026 08:32:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69bfa91f-5fa\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Cmu%2Ffu0Ap%2BPpWgPcm7fWKKOnB14qQDm05gO4GFKv02Tg1LF1nbAJCd%2F0WzAfDBlTz6ncQJOgwvx%2B8MxaWKXx0cKq%2BetwwBapyijrFH%2FzcGRzi7z25Ff5seSWVVyeYo9jqk%3D\"}]}\r\ncf-ray: 9e89afde0d9b2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1530,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"322c3a29937251efd44281265efce141","sha1":"25ccd65f50945df52ac20313e9eee1daa4231a02","sha256":"25585d58d4deed391e7d396abfaa5c8724b1248c62d2f4df66fd1a5e918207a3","sha512":"9ad9ba6d21bea4dcf6c7a33b4dc4ddd73f8e90a6cba251534afe89126f241522698bc01bf0176dbeff07e1341b21dbc369023bda8b74f4f190223f2e3c92b306","ssdeep":"","tlshash":"9e3111f0e1343338ce8a4bf49e6e74b5bc8f68ee45e893107188e65072512ce22e9965","first_seen":"2025-08-08T03:14:58.202197Z","last_seen":"2026-04-07T14:43:05.293592Z","times_seen":468,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdt-x.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}