{"report_id":"8b9dcf89-8c47-47de-9e69-a879c58301a9","version":0,"status":"done","tags":[],"date":"2026-07-12T21:59:06Z","url":{"schema":"http","addr":"usdt-go.com","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"usdt-go.com/#/sign-in","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"title":"solfare","dom":{"size":12274,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2638)","md5":"59882f6c5d919773d940de52fee25b8f","sha1":"4b716691866d070bdbfda06d4d5b1bea16e161dc","sha256":"942e6afc700e6ec057712e080221b8628c9b74746b43c53872753728b9a06e4a","sha512":"3b9f2aecc4759f1030f630e8613d5523a8e8e007660b31d23883e4dca4c56116bf4ac3afbaad91764907d3dab71db3878b6ac154cfbd3149f7a2acd03ac26d1a","ssdeep":"192:eMWYqINmSCyzy3+jVBOLfsZCxfp2nfD3bLS7ghdB1XYYY6fI:dXXwEZCxB2TiUIF6A","tlshash":"c9429736bc1448270233d696e9e1bd0ce461730bc40ea85477ad41ad0fe2ff968aea35","dom_hash":"domhashb5c6c9b1b7523d637d406ec8eaa73e8e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"usdt-go.com","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T21:59:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"usdt-go.com","ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-08","domain_rank":0,"first_seen":"2026-07-10T15:17:54.385181Z","last_seen":"2026-07-10T15:17:54.385181Z","alert_count":90,"request_count":92,"received_data":5366475,"sent_data":46580,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"usdt-go.com/assets/index-BU4j9-0T.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"819cbddcd81c956a7ce1172fc44423f6","sha1":"89ed9664a2c4794b2fc0b2f6ac750fa9bc5aa5fa","sha256":"f03bbafcba6a7633c9c87ccb45ed3b118387ce0c4bf7d3863277606bf894ada4","sha512":"619fccc985ede337245c2fdbc9ee9a0277feba263674c2f240052f706195f1e5ae40bfafef95fe51185711d74dca16e0b13d9f8c09e56ab3f58d208d09695f91","ssdeep":"384:TfnZKe9R4a4cqZZI2hwhgaxF+cROpMfdGq8koek+pOrB:TBJ9R4RjwKIVROpMfoDV","tlshash":"bf42095af90a8938d5f2d4f580992010b62d3fde60069457bafe7c0527b7ef8a345b1c","size":12900,"data":"","first_seen":"2026-07-10T15:17:59.686658Z","last_seen":"2026-07-12T21:59:13.932133Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/#/","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ced6204993ccd4d4792486f3b3c899b1","sha1":"c16ea5b8c59dcea2b9b03d844467f9db0d358cdc","sha256":"317f80fdd1cb3e7b69648541320cfeb07fd3ea3d1b70d3aab180edce7c3c4ac5","sha512":"dbf99b86ffabe8deeb56f836821b1f3c58fe9b502b89210ec5082f60b4cb4e30f060645fc970bf48f5c3f20073f0e79845925b0dfb4ac89df0319d4c26bdb795","ssdeep":"","tlshash":"b8c08cc4a0c22e509622651410af38e89034402ab08c5b52dc98e94e3f260f49237eac","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-07-14T06:19:22.035114Z","times_seen":403,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/#/","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7de71cd324bb8833f4a138cbcdafa759","sha1":"d7a8122c1483170fa571ec47c62f91c66d662ede","sha256":"62b9d7d992de0ba11591d4ed7c7ab166d886c09ddb4a6b79693795ce836c6003","sha512":"5d42f665549881c48abeb0ee42138dcd1b0f6140e49c3fc6efdfe3657cba54e63218787f0b0d2f12622873799b4ec3a21b9f4f62194f2cc9bda2758dd699a439","ssdeep":"","tlshash":"73c08cdab0d72d006602642110af78e8a0388027b08c9b439cd4d8883ea30b08233fa8","size":151,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-14T06:19:21.987459Z","times_seen":392,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/charting_library/charting_library.min.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-07-14T17:49:40.743501Z","times_seen":1275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/#/","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-07-15T00:49:07.753866Z","times_seen":4242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"32ba287e74f1c44db7da02e53828ad76","sha1":"feb2a4b792523e4b04933da99488f7328753ab8a","sha256":"fefc04048871decbd8692be04d0d7b796d9ede0ec75f07e27d49a3667fdac175","sha512":"74e6494d3e5f5e91bc48f2c7019bf59c887690c50127cea19a9ba47b04b2181a5d507b6130a384fd4ad185069c99dacd3b6695002f127add74a1cc9eab8d41b3","ssdeep":"","tlshash":"5911abfe191a60296303405e976b7801643260a9001a184173cc9a9dbb9ab6dd0cbb8c","size":1034,"data":"","first_seen":"2026-07-10T15:17:59.705773Z","last_seen":"2026-07-12T21:59:13.984195Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-07-15T02:30:08.656697Z","times_seen":39838,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-07-15T02:30:08.657318Z","times_seen":41562,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/#/","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"207820ea30e8c69ce04100e8526ac9b2","sha1":"289c2ffded67dd3ddfa4bfbbba56b6f8043610a9","sha256":"1fd71a67efe14f91b321e3f476ef6de1ac2329e77f5720cd37ae6589fb074b69","sha512":"d1237fe7e4dbcbfe699ee7e9b4b30d9963a1919d1451c928aa9af64326dfb7a7d43f8bde094fdd4dab7a65a070422f6904cdea73eaac2fb4225f0bb1c8d6df5e","ssdeep":"","tlshash":"30c08cc5b0c36e10261ba85050ef34e490248027b04c1b038da4e8892e630f08237e98","size":148,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-07-14T06:19:22.021279Z","times_seen":1002,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/#/","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-07-14T17:49:40.87741Z","times_seen":1646,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/#/","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2815f524634dc09ab2c573bc12911939","sha1":"d61287cd00eed412db5abf98b71a3a1c044df183","sha256":"6bef5f3d0afad393bb4f3d004b4aa8b9815587eb1fcea3924e30cd2bc5becbf4","sha512":"671b6297c3cee4d3d5687d5e50431067a7797d8c83cc5657023dc5980cae0cf4993375d7332576fecd4add4e761b969f634441a054398d6cde0f632c452b218b","ssdeep":"","tlshash":"61c08cc9f0d22d00668a642460ef38e8a034803ab0881f43cda5d89c3eb70f8c233e9c","size":165,"data":"","first_seen":"2025-12-09T04:29:57.878798Z","last_seen":"2026-07-13T14:16:28.288097Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/#/","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-07-14T17:49:40.872474Z","times_seen":1989,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/#/","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ab03172a4d40655136b80667e96cb4fb","sha1":"4f3d2a5871e1d1a9eb42c6708e65429d20cbb71a","sha256":"46c0f332b071150677f4d99c326ff55d1da1c516e157429c254ffecb350e1309","sha512":"50f08bb6a7c76819d71cf1c3b8d660e6a46bbdf88913acd4bb10f16e025bc58a2e70351b0689e366701ecbe2e601656e1e313c0ab6e29a2b2b36f4f064c6f03b","ssdeep":"","tlshash":"53c08cc4a0d32d001612741164ef24e49024406a744c5f038dd8d8582e620b08233ea8","size":147,"data":"","first_seen":"2025-12-09T04:29:57.893865Z","last_seen":"2026-07-13T14:16:28.293867Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/currencyItem-G5HhdmNg.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3322fc372940a9615f47197900804d8","sha1":"ce8fed9999b63875cc90ea376e44d353b28c48a7","sha256":"166780b088a70e60f7fa29f3e9ba025e446fc176b7a95e7c734b614c76427049","sha512":"71550c87f161e337ae00dbff7bde35d8240cd8e82a9c545f582291dc5107b1e57b9d89bd6e1224f926f1c54143a1e930421f79b805e7106bbc14227266ca65f3","ssdeep":"","tlshash":"0231ce89dd018bb7c7bf9465c0390c38821e3bc67121d5d5bede18a8374696cab68e72","size":1457,"data":"","first_seen":"2026-07-10T15:17:59.677292Z","last_seen":"2026-07-12T21:59:13.909016Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/en-CrgfCZic.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c3234195d5faa4d60afc5d447759e2aa","sha1":"4cf11f70dba81bdad29cc7eca933c956818e9110","sha256":"a03bceed6f119794088a2c68941d02b71955fad8b96c6c3e743e40d54ce79127","sha512":"96aa53afa7268d3ae300eb5885cef7549b1313036cd615950d0077cca9cf0cc8a8ed3356da2f589a48b5e9bd4805059bf2c7f3944383508cc299a684607bf180","ssdeep":"768:KGtZcEw/o7rZOdAFsitAMC7zrAaAMFToP6+6sPG9w1moIO6fpk7aOLxle79G1:uponZOdeOHrdFTLsPWwHLxYi","tlshash":"e713d78a6d1a88de04f353b6b4ce6e2060f90ac1c255881f4fedc9f953d2b676363634","size":45539,"data":"","first_seen":"2026-07-10T15:17:20.24002Z","last_seen":"2026-07-13T14:16:28.210489Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/#/","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"83678961efc93c088d42dd78bc6ea6dd","sha1":"8007d82eec4894fa2867c628e925f1fcfa443fa3","sha256":"d6045334796ceaf006da578968c4ce319e6d4127c9c36ea88297daf6c6713026","sha512":"cd5e028a3850ceca98e01b30d338a9874404eba5a4d8fce81855dc9f8a6189c9c202e6caf3fe736b10295b4c81a1361a68fda5abeeca58d358c8fdb9c02a282d","ssdeep":"","tlshash":"13c08cc4a0c23e106602681124af24e4a0244027704c6b02cde4d8492ea34b8a233e98","size":147,"data":"","first_seen":"2023-07-28T08:36:26Z","last_seen":"2026-07-14T06:19:21.992739Z","times_seen":719,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/index-DXjKzvH0.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a6f5d1e10807d3ee884e04b961914a8","sha1":"cd178cb58b65f19e9abaabac0d0c839960bf6c1f","sha256":"343f73619e0d5e925390d6b5fdf0a636488ac6b3bbb327dcb7a4c502fc406177","sha512":"1d9d11731ee236e5aa274e733f3b0e4d15af23ddd561044062414a0ffb23e7c2f920da02c705afd326c3ca722815e6df005c9028e35dde932049f653f4e45c1c","ssdeep":"","tlshash":"5bf0c07ffd7741b217b348a861232930b91c1f462754c4d4d4c60a14cb344e7e67e614","size":515,"data":"","first_seen":"2026-07-10T15:17:59.656682Z","last_seen":"2026-07-12T21:59:13.903678Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/#/sign-in","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3378a5b76a9be2acb76882ebaf4bd0bb","sha1":"9c3a1669ca5c7cf4b09a758d8f60ae30dc83d399","sha256":"82733267c0bc91a78e986eb7a838e847787cb337df15a6693602715c3ea34dcf","sha512":"7c267457fa06cd421ee6afc8699d10df856c6358244c5467dcb40a9f332d421e2c6ec7805df426434f1d88c664a403754042b88ecb51455de675d1111ec7cf1c","ssdeep":"","tlshash":"6ec08cc4a0ca2e202692a89410af25e8a028802ab0486f169ca4d8482e620b48237ea8","size":149,"data":"","first_seen":"2025-07-30T18:17:14.789344Z","last_seen":"2026-07-14T06:19:22.026118Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/#/sign-in","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5676f6ef4695835d1951cd061190c8c3","sha1":"63cc0ecd6e7d50eb99c987892089d17ac47465f0","sha256":"27c319914798784e9ed5510bebaa6302f778873673abea0b2f20fe58c1d07178","sha512":"aa0c7e07c2a5093cb85a12b647bf8ced037656e58ff4982f770303162f22e00e678f7b9d312470f788bcd6bb28ba83f2fd2cc6609d950c042851ed3e15a83acc","ssdeep":"","tlshash":"88c08cc8a0c32d001606681054af34e49024446b714c1f038dd4e8692e630b48233e98","size":145,"data":"","first_seen":"2023-06-03T18:56:32Z","last_seen":"2026-07-15T00:49:07.834914Z","times_seen":511,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/#/","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-07-15T00:49:07.788942Z","times_seen":6690,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/index-b1orZhfn.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ac5f51c8141e59b30ae8bda79d8ef47","sha1":"44309113284fa04432b05934d4036e473a9e9351","sha256":"69734d6e50e240da5f0d29aa0c822f29836b53c919f49d24d7bf009c5210ae36","sha512":"5fdd430afe99d7dcabdf8a76f774b220d4de47befb102e7bb14e7b94777d24b44477bbdee1737736d0bb2da8c0272150ac1f56991e8cc8faedd64dd03b57fc54","ssdeep":"192:dMbilVnJzCA2ymE06YR3oCTXGb5HLy8InrlrhvDJvqD1:dMWvnJzCA2ymE0F3oCjs5HudhVCh","tlshash":"70e19589a813c579ab7a185444a81811714cffaaf414cda9f3fe8c0ab774ef9e690371","size":7408,"data":"","first_seen":"2026-07-10T15:17:59.664594Z","last_seen":"2026-07-12T21:59:13.950756Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/#/","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"16d61b34d353db595293edbdd6a8a3e8","sha1":"a6f987e667885222d4be23aab06a68ac62b777df","sha256":"84da13e3440137b5d80313fe2afbf64fb8caab2672fa384bd4be008b091abae5","sha512":"f714bf6c589dc2ac8a653b6ad595cb1b1bba071568fd243fe1fa8ca4214229fa2c860d0fb7d2fffd6c4c9ae941cedc653ac098205c80b78700b0a081bb834547","ssdeep":"","tlshash":"72c08cd5e0d72d001602645020af78e4a0244027b0486b42ccd8dc892ea74f08233f9c","size":149,"data":"","first_seen":"2025-12-09T04:29:57.883988Z","last_seen":"2026-07-13T14:16:28.295051Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/index-DxAZV_K5.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"06aac247ea21fc64b2629780020b08f8","sha1":"da497238ada5693c8994c7f37be46b3c14b08d18","sha256":"89943598ea734a649ca3f84d38ae07ef9ac8c5610145675dd05784d7c854c089","sha512":"07690a71ba3b2265b36971afd8eb5c6d668673ddf266237a8092c2750b14cf1ce6ca57b34c1316ae3db30a13123cccf42bb93643c348d16b8121da83a03e3cda","ssdeep":"1536:eMPDGSNIWcfkmmGe2SV4yNV7AkUMHwnvhClpd5TBxJB:vGSgkmmGoV4eVEkUoev8L","tlshash":"cec35c8155070eff56fe08882997140031255f56e104cc59ffbe9d7a3baac8ab3aaf35","size":124946,"data":"","first_seen":"2026-07-10T15:17:59.675169Z","last_seen":"2026-07-12T21:59:13.945687Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/#/","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5ef777763fcb4cd204f9d7cbaf32887e","sha1":"361874a04da45748824d8bcdec1afe436f4240b1","sha256":"c0db56b48647a4b73f597454774fe03c02d956100dbd3663c7442b711a691054","sha512":"5f1cd679e2f8e1370c88edb72ec885fe5ad2794f549997ca60f8a8d14f1a31806cd003249991e1e35aecdc05ff2dde662502b002e6d66b17f4604375110320ec","ssdeep":"","tlshash":"2ce0abfb3179c17054909a1a1cec542bf2eb65734c9c0a1ae584aa151e4dd78217c090","size":408,"data":"","first_seen":"2025-03-02T13:24:55.299758Z","last_seen":"2026-07-14T17:49:40.862324Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/#/","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f19a249a3e546a75d19b9d3f75497cdd","sha1":"4fcf8a4234dc76c37cb9415dd3c2d4820fb45a30","sha256":"8f0b9cbdf1999a03131eed312b7dc7ab85a5ddbf696e4805d240a61cdf5066b2","sha512":"7f999eee3d080218db37b9bd7ae6ca464771276ae0eb378b537d24635f5d700aede00359099b8e2197cc4f36e56162a46110fbdb85f213ed5ada51d9875a7402","ssdeep":"","tlshash":"c5c08cc9a2c22d001646641014bf28f4902480277048ab038dd4dc892e620f0823be9c","size":146,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-14T17:49:40.868105Z","times_seen":572,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/#/sign-in","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0ae64cce4f24529caa56156b159bdade","sha1":"3f1c5a480a93a0bfdc86eb0d7769ea098682b7a5","sha256":"99cb12f023e5c6752e9a7e0132343acf246a432e31d1e7326a3fad10704711a5","sha512":"0ce54f9c86d027c6895c449a7be022ab96d9df608d39f56a3eb0c2721f49aac55b9f82668c5265ba231c626d7a841bcb68c13b169f5f5f9be40244d0c3abec61","ssdeep":"","tlshash":"eec08cc8a0c22d002602a45010bf38e4a024842770481b028de4dc4c3e230f08233e98","size":141,"data":"","first_seen":"2023-04-14T14:41:51Z","last_seen":"2026-07-15T00:49:07.826598Z","times_seen":2385,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/index-DwBs6Umq.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d824727b4e6d46a0722da4884c83bf3","sha1":"fdf05b783814237cf7ac5a9efc4b4097c7118e6b","sha256":"cc2f198dd4e58d8ff125cff3d0330a2859faeb682b62c1ecf2cb592165221969","sha512":"72fb531da44e78ebc71e13cbb463df97c76829ff5a67f43c765aa599b8a6519531bcafe031129c10285f26a45a70b5c51a89f61919a6bbd84e900f118dfba6d1","ssdeep":"","tlshash":"4101c5f4f80dae7b0eb2094001813b0120095fcde91028e2a8937d291be1a80ca8eb1d","size":776,"data":"","first_seen":"2026-07-10T15:17:59.662702Z","last_seen":"2026-07-12T21:59:13.922451Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/#/","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-07-14T17:49:40.815923Z","times_seen":1518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/#/","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ba78027dcfdc9eb09767e4e83301b631","sha1":"1b7e7e0f0922b9165de433222ba8cc4afd0c59b2","sha256":"3de67c074b8692e1861e1c651848411308eb4c90e96f491e9cddc2df529a5da5","sha512":"158882fe08ddcf7bd297cd25a0e7b518789ef98ffa6ba9f14d1b565993ddd00de407f5be64c5c8a819e7a01c4da5887b21ba51f65308cd238c10076951e9e499","ssdeep":"","tlshash":"8ac08cd4a0c62d009646a51116ef36e4a0248026b8486b47cce4ec482e230b08633ea8","size":152,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-07-13T17:55:34.682969Z","times_seen":1019,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/#/sign-in","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4470163310a4069f237f37b5b545b90d","sha1":"f09e8a9c9a1777bb95f3c246cb73d082b2dfc87a","sha256":"dc8367cc46b11d847db147698dceb5f74ee58d21ea11e1abf1342ce141df0b98","sha512":"5729d564f2fc5de136884c09d9de64ae1f7602450f5ef12d92a0905e989abe18b78be8ee8120836b3cd1f2e684800b16d43d8625e49bfab6edbb46dbcc6645c4","ssdeep":"","tlshash":"2bc08cc4f0c2bd1126026e1411bf34e4a0248426b5885b428de4dc892f230b09233eac","size":152,"data":"","first_seen":"2023-11-15T21:35:21Z","last_seen":"2026-07-13T14:16:28.293324Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/#/","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-07-14T17:49:40.849999Z","times_seen":1275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/#/","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f2f5a4f08c8536ee9b64126b563cd62c","sha1":"15d57cd315463221c807ad74b0e19578dd90f7a5","sha256":"1fce7bdbc1acea81dde9287f6971529e3cc024b01b1ebcd537ce4f16e064b760","sha512":"204e680610bbc982bcb79334b0acd7f7f3c101fcd0b0d384925c0d0f1dbb4fb222d259d164c7cf5a339887dc471086b3dcb2ca246f6af92c95526c91a4ac0427","ssdeep":"","tlshash":"48c08cd8a1cb6d005682b41459bf3ae4a0344027745cab139ce4dc682e230b48233e9c","size":158,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-07-13T17:55:34.686178Z","times_seen":1014,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/#/sign-in","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"86a00d9058a7391d5c189cbb8701b4a3","sha1":"5f5c73e52cabc2335802e25cdfc13ff3c036c02b","sha256":"3bec02fbbbad7aefecae29767044039331817afa3257abea42c1eb951236f26b","sha512":"7f771c6c447fd29c5d8b730860b25ad82664a6f19e5649069f696f9305a8c2e7f8f7fda81c2c96b88d17304902d985f295b01e21bad829faaf55dc33c318a5de","ssdeep":"","tlshash":"1fc08cc4a0ca6d101682685410af35e49028802670489b528ca4dc882e230b09233ebc","size":145,"data":"","first_seen":"2025-09-20T19:02:57.768384Z","last_seen":"2026-07-13T14:16:28.279438Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/#/","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-07-14T17:49:40.818176Z","times_seen":1529,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/vendor-CumRKK6x.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec959aafbf2f088bf11a2ea07a269551","sha1":"23dc23d78121c9255c2ea50f3b2e4015ee057df9","sha256":"1de34d48a41a3cbfe9b6dc1e2f43e70d5d11dfa5e72609c8a18dfedf828f40c7","sha512":"a5298e53799d92653f82766b4dafae63ace5fd73bff8836c2d064d646b6feb17549410148041d54ef4f7eecfd3be28b06babdbf74ba78ad9065c77d014065f4e","ssdeep":"24576:IRoPPb+Pd3mp8uZ/+4eh9ZvLUWc8V3a2bej9:IRoPPb+Pd3mp8uZ/+4ehTvLUWcMPbej9","tlshash":"07453bc57292f06147ab25e1007b1006f339ae58740e84a8f5add8eb7db9d89d277f38","size":1186194,"data":"","first_seen":"2026-07-10T15:17:59.727021Z","last_seen":"2026-07-12T21:59:14.036726Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/info-BTLEttjQ.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"71fe2c7029607b0e0b1b0ae04a6a3c45","sha1":"4678a2a4ef5eaf2c096c6110c7e598ecdde01f96","sha256":"5ce7bdae3974574e420e9ff1fdaee2d64becb4665b20571b78a0f16365dac0cd","sha512":"b8c8b6f11216a20d27f300b3f7320d015764f76538f2fc2040bcb52841483dcdc434cf4ff9cf1e9278fb9ea07b133fd95295652cbc01b7d4892961c10a6424ee","ssdeep":"","tlshash":"26e0c25e0c03a7f3413918d921c14f012a47422cffd74fec14068c028ae8c82f42ec04","size":302,"data":"","first_seen":"2026-07-10T15:17:59.665638Z","last_seen":"2026-07-12T21:59:13.912726Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/useDynamicLineWidth-GVuDsOpb.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eebcc038b05f462a53bcb53207981482","sha1":"527a0309c81d8ceb030e190570fac8d1c3f95203","sha256":"889ae76876e29151c372a81d7606e481d5d6b573544a103c2e9e39b13728f48d","sha512":"331e55302318156b60c7be1bf753e763052af3fba9c70f3f6c44a7facc912fb97c7474c52408b82c3a47d0b6c3840b9f2e54e96bdae518e28602d8fb01dbfd14","ssdeep":"","tlshash":"db5123a5f1b15162d2f9402451305388f31f1d93a516cabeb0e95edeb6e5fc25138fb0","size":2877,"data":"","first_seen":"2026-07-10T15:17:59.66854Z","last_seen":"2026-07-12T21:59:13.940991Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/#/sign-in","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4e4caac02bbbbd114fd9a03971e384ce","sha1":"fb9289a417f6b9f76d2388c3b7baa49d0afa4ba8","sha256":"b036ff50946986840273921f6dd1c3dd5361ac23bef636459026594f67e0dfe8","sha512":"dff80edd7bcf5a18dd5a2dbe469e914c7ab7515c9363f1ec42dde9d1b94e30e6e730f399e29b8bf2e237a58da122063fa6fddc09db5ddc5f3aeb33a492551e82","ssdeep":"","tlshash":"edc08cc8a0d62d101a42691414af24e4a028842a74481b0b8c98e8883e230b0c233eb8","size":145,"data":"","first_seen":"2023-06-03T18:56:31Z","last_seen":"2026-07-13T14:16:28.29232Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/#/sign-in","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6900701ff959494d30437499abeb8885","sha1":"7cb4c820fbf30caa6b50d6c2dc4aa7c0c4b644d8","sha256":"3be52a71ee1e4d668cceef779a9942298cef4d68e03183d10681c4aa945c83f5","sha512":"731bc35b44d92adfda91474163cba7cbfe8ebb8faeb76364becb6a0f87c8d62c68a560257759546c0c38da3d0ea220cbee60eed126f77194441f92786231135b","ssdeep":"","tlshash":"b5c08cc4a0c22d101642645420af26e4a028802a70485b128c94d8482e620b48233ea8","size":138,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-07-15T00:49:07.762354Z","times_seen":7739,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"将根据已有的meta标签来设置缩放比例","filename":"https://usdt-go.com/assets/vendor-CumRKK6x.js","line_number":1,"column_number":347},{"level":"log","text":"no-wallet","filename":"https://usdt-go.com/assets/index-DxAZV_K5.js","line_number":2,"column_number":92257},{"level":"log","text":"Current language:en","filename":"https://usdt-go.com/assets/index-BU4j9-0T.js","line_number":1,"column_number":1858},{"level":"log","text":"home1production","filename":"https://usdt-go.com/assets/index-BU4j9-0T.js","line_number":1,"column_number":12727},{"level":"warn","text":"将根据已有的meta标签来设置缩放比例","filename":"https://usdt-go.com/assets/vendor-CumRKK6x.js","line_number":1,"column_number":347},{"level":"log","text":"no-wallet","filename":"https://usdt-go.com/assets/index-DxAZV_K5.js","line_number":2,"column_number":92257},{"level":"log","text":"Current language:en","filename":"https://usdt-go.com/assets/index-BU4j9-0T.js","line_number":1,"column_number":1858},{"level":"log","text":"URL Language param:map[type:undefined]","filename":"https://usdt-go.com/assets/index-BU4j9-0T.js","line_number":1,"column_number":2340},{"level":"log","text":"home1production","filename":"https://usdt-go.com/assets/index-BU4j9-0T.js","line_number":1,"column_number":12727},{"level":"log","text":"no-wallet","filename":"https://usdt-go.com/assets/index-DxAZV_K5.js","line_number":2,"column_number":92257},{"level":"log","text":"Login component mounted, checking store:map[actor:server1.conn0.watcher14.process7//obj117 class:Proxy preview:map[kind:Object ownProperties:map[\u003chandler\u003e:map[value:map[actor:server1.conn0.watcher14.process7//obj119 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]] \u003ctarget\u003e:map[value:map[actor:server1.conn0.watcher14.process7//obj118 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 sealed:false type:object]]] ownPropertiesLength:2] type:object]","filename":"https://usdt-go.com/assets/index-DxAZV_K5.js","line_number":2,"column_number":47789},{"level":"log","text":"Current language:en","filename":"https://usdt-go.com/assets/index-DxAZV_K5.js","line_number":2,"column_number":47692}]},"http":[{"url":{"schema":"https","addr":"usdt-go.com/assets/index-8dWXjc8b.css","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:34.584Z","timestamp":1783893514584,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/index-8dWXjc8b.css HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:34 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HbFTfrWaXlj1U9MXK4B4Q127R5%2BFOzHE3%2BvEuTnzr27dghG4W%2BQA3wUn8rHEcmqVNH1wZ%2F6CkrsUJWyvbmkNjIKim1V09CA%2BTxKjJyee1QerU3IfaLjhVod45KJRhA%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-4dec5\"\r\ncf-ray: a1a34f622d99568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":319173,"size_decoded":74506,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"ac3b6ee003d86f42422546610b4e3280","sha1":"5db8c8abdda489ba94a06b28cecb9de0cbdd3b24","sha256":"14cc618eacb92796316e5b9a224839e73cecb783cb3d584cc9d57cf9b58772f3","sha512":"53e07c8bac3335d0ff578c9594ccaac08e87483e5a6061848e5b9085a00e6668ccea23f4c06ffefb5b83aecfc66298eac3aba957d0bf0bb1af765f75ab3d7de9","ssdeep":"6144:3dB/9S/Rk4UkZ8w71ZACkFDS3vyf58rBeV05Tf:NB/N4NZ8w71ZACkFDS3vyf58rBeV05Tf","tlshash":"c764d8a9a590117c6f27aa7597ce9ad8f23ce6719c118de8f20150094fc3ffa2363617","first_seen":"2026-07-10T15:17:59.700208Z","last_seen":"2026-07-12T21:59:13.902233Z","times_seen":2,"resource_available":false,"data":null}},"time_used":855,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":636,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/index-DXjKzvH0.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:36.776Z","timestamp":1783893516776,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/index-DXjKzvH0.js HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:37 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7pBnXLXMV7XDxJVjWMdzNyQguFXpDbhYBnx%2FH15REM1SEDHOMMrm1rp1RpAK8J0%2FyYRazqeMyVqcFA02bzVbO1fJjOCSHZoZOy0F7fi3xedhsirb7w%2BsPg3u95ZP0w%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-203\"\r\ncf-ray: a1a34f6fde49568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":515,"size_decoded":1056,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (514)","md5":"6a6f5d1e10807d3ee884e04b961914a8","sha1":"cd178cb58b65f19e9abaabac0d0c839960bf6c1f","sha256":"343f73619e0d5e925390d6b5fdf0a636488ac6b3bbb327dcb7a4c502fc406177","sha512":"1d9d11731ee236e5aa274e733f3b0e4d15af23ddd561044062414a0ffb23e7c2f920da02c705afd326c3ca722815e6df005c9028e35dde932049f653f4e45c1c","ssdeep":"","tlshash":"5bf0c07ffd7741b217b348a861232930b91c1f462754c4d4d4c60a14cb344e7e67e614","first_seen":"2026-07-10T15:17:59.656682Z","last_seen":"2026-07-12T21:59:13.903678Z","times_seen":2,"resource_available":true,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":624,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T21:58:38.677Z","timestamp":1783893518677,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:39 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jPDkCY2byJrXhxSb9npA%2FYWEUQEbzsdXj9rOwoFn5DGXXqEOoXkFqPCLnu4BoKo2puk4fKVkeHFYCq%2FOf78YuatuY%2F0st4a5w6T%2Bjxsltj5ugQ1aNahBncPn%2BjCU2g%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1a34f7bbf24568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8467,"size_decoded":3700,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094)","md5":"53022ec2bbc7554f139cb352313ab9b0","sha1":"89bc60be877da168fe7c039844e75922ec26da6a","sha256":"a4cd7162f363a63fbc835d6188775ed3ec1fa9d3ac0e22303f96a14bbed303d7","sha512":"7676c026d9d483cc4987e53acecbaab4364a5467e791eeb70273498de926df12d2c6a4c35a2bdbe19f28deb38ca8582e0de8959ef8d1c9c38f28604bd0169ea2","ssdeep":"192:TFz9YiINmSCyzy3+jVBOK4SZCxfi2nfD3bLuB1XiYi6fo:1YXX5ZCxK2USX6A","tlshash":"9d029777ec74cd2603a5d12ba9e6b504e9611247884a6c18739c40ee4f99fed84efb3c","first_seen":"2026-07-10T15:17:59.683063Z","last_seen":"2026-07-12T21:59:13.90526Z","times_seen":2,"resource_available":true,"data":null}},"time_used":752,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":752,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/resource/images/app-icons/app-tab-trade.png?2.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.193Z","timestamp":1783893520193,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /resource/images/app-icons/app-tab-trade.png?2.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 09 Jul 2026 09:41:24 GMT\r\netag: \"6a4f6cc4-7b1\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IAjHR75U3dDHPRezonLPsm%2FXARkh4D6iY4RztWKxQ9iygDRjHEZQQj6DPp6WYAx9PmMOtw1Ovp2MWmGeVrJMKC%2F%2Fez6mOKlc%2FemiekBMJyti2npeftb7P3sDum%2BVfQ%3D%3D\"}]}\r\ncf-ray: a1a34f853fc9568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1969\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1969,"size_decoded":2665,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"116c0cf4bee54b8a0acdf00ecbed12e4","sha1":"75d21901624916a09b4b6cb565d2bc7d3731ef4f","sha256":"044dc2c0fb06a4a6abcdb9224176e6039aacf0eeeb1e33781cfe96e25975954b","sha512":"04fb111f129021bff30dbb662c7807ab7993628b186249c91fa0b1211af8bd19ecf008f3b4bd27955116b01e79b7b12ee561381d9616d56d8702d749b11470fe","ssdeep":"","tlshash":"4d414cbbd9777450645955bba80a258a9533df27eb73a12e30e7f00b18910e31304213","first_seen":"2026-07-10T15:17:20.226593Z","last_seen":"2026-07-13T14:16:28.243205Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/api/common/file/preview?path=%2Fminio%2Fsolfare%2Fmarket%2Fcoin-config%2F49_doge.png\u00262.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.181Z","timestamp":1783893520181,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /api/common/file/preview?path=%2Fminio%2Fsolfare%2Fmarket%2Fcoin-config%2F49_doge.png\u00262.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GW5gFXb1gZZBUl6%2BuCBNEUnl46LWlDFznF1ZtCGFbMTRlbsL7jvVSw8dxsrNpBt5QO1hr6mZxDg%2BSCv%2F4n77PTMJYj%2Ftto8cY5Zqd2CMCutyvP430zEkIFWF4kEF7A%3D%3D\"}]}\r\ncf-ray: a1a34f852fbe568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 55728\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55728,"size_decoded":56442,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"48384a67185dbdfeef3aa43c99d3319c","sha1":"23e15189bebafbbec8b23e8ed0f3392a9b7979ee","sha256":"1ceba4efa6a645fbe532e520385f37001922e14b6aa7b4ebeb19e755014feb39","sha512":"2f7a13f56ff64b874a76994d00f198c5fc2b7424181935e641eb81bcf171db54fa50b711502c0c4a7e8f5c934ed5747233d87ae0602916244947d3724eb3ce10","ssdeep":"1536:5ko5w6RHlzxqElMwBI6M3iD+oLKTn6EPwhk6g9p6uP5I:x5fR9xjlMGnMSDYLPJ6bOq","tlshash":"0d430247c0529ed2c68853aa0e3de48a84779d12358f80577ce6525a82e2df29bd770f","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-07-14T06:55:27.869777Z","times_seen":820,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/currencyItem-G5HhdmNg.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:39.794Z","timestamp":1783893519794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/currencyItem-G5HhdmNg.js HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:39 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q0Zjbx6funPBkgDCtRrE52pFw%2F1htQuLtdKLmo66gvtiV9HZRig363hXUeIQaotmmley8OB9IrrHHJNh4RylgOwhvioXBlBqVLXX3YW3YV2L7ln5UwycZ3%2FPB1M90g%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-5b1\"\r\ncf-ray: a1a34f82bf8d568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1457,"size_decoded":1433,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1456)","md5":"a3322fc372940a9615f47197900804d8","sha1":"ce8fed9999b63875cc90ea376e44d353b28c48a7","sha256":"166780b088a70e60f7fa29f3e9ba025e446fc176b7a95e7c734b614c76427049","sha512":"71550c87f161e337ae00dbff7bde35d8240cd8e82a9c545f582291dc5107b1e57b9d89bd6e1224f926f1c54143a1e930421f79b805e7106bbc14227266ca65f3","ssdeep":"","tlshash":"0231ce89dd018bb7c7bf9465c0390c38821e3bc67121d5d5bede18a8374696cab68e72","first_seen":"2026-07-10T15:17:59.677292Z","last_seen":"2026-07-12T21:59:13.909016Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/resource/images/app-icons/app-tab-trade-active.png?2.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.190Z","timestamp":1783893520190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /resource/images/app-icons/app-tab-trade-active.png?2.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 09 Jul 2026 09:41:24 GMT\r\netag: \"6a4f6cc4-64d\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L6LcbFmVbVYrkcyvKA4DLosxa2U1mUrsULZqsdIwP1yrJCprR7EVr%2FtDr7YmTMEKoxj%2FCsRtK%2BnOljWCWqA%2FmFMW%2BVHYX6vHlgi3VXJcToeBFXxt4CLH49r7MNV3QQ%3D%3D\"}]}\r\ncf-ray: a1a34f853fc8568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1613\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1613,"size_decoded":2309,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"1dd2936d97d8c40705c71fdbf14a1fc1","sha1":"6229f8ac32e9bb39e23833269b4086b42b3a569b","sha256":"9c3ff26570387daf77662264cdecdd6e3845e02cfba24d8c88111b1a8fb05785","sha512":"100f08c8e10a79ece0be24277c140ce3a2c74f67ed1fdfc5b26bdb79265566001f332f54458e4f92b7e0614b4576ac3b49c10390635592eb593ebc3282a800c5","ssdeep":"","tlshash":"cc314ce6ee9826e4cc762333b7afddd02462e31c221e083f6107918cd9eab1c1132419","first_seen":"2026-07-10T15:17:20.22566Z","last_seen":"2026-07-13T14:16:28.230201Z","times_seen":6,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/resource/svg/dark/jiantou10x5-x.svg?2.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.272Z","timestamp":1783893520272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /resource/svg/dark/jiantou10x5-x.svg?2.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wIv19rMTa5k46TDjrdNWHR%2FKVLfUtV5YNBwfBPaL8y%2F8NXeE1ky%2Fvct7O5m7SU53SNBuE80FgsIdalgetyZj5f9w9H3QLvSXVFzQDz8DdrivfaWxRT7KfUbdHZpeFw%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cc4-112\"\r\ncf-ray: a1a34f85bfd8568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":274,"size_decoded":888,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7b6080c6952d984c4dfcbaca6c744af5","sha1":"60ea9ab10393795f8d2af76affeadec65c10c0dc","sha256":"51162e82e27d5b4b91abd642227235b5aa0dc5caaa9a22ae581104a796cedbc9","sha512":"d598debceef7079a6ef7dda472ed041a1be854c36c0def2e25df8e80be66af33b3b956e48acd1c00dcf9e1be61cba69816a9251454a5b6946d59dbe7d39d4c17","ssdeep":"","tlshash":"45d0eb8862b81b0d0a8c8b80ebf122cc0a1fb1b233110194d140117b3070189201d96a","first_seen":"2025-12-09T04:29:57.84305Z","last_seen":"2026-07-13T14:16:28.242517Z","times_seen":9,"resource_available":false,"data":null}},"time_used":628,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":628,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/info-BTLEttjQ.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:36.779Z","timestamp":1783893516779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/info-BTLEttjQ.js HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:37 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OfBYTlHxs48v1noNV1RQSdLk6IuL7VDPy8eJ7YoAltgII7QzSzyKaxL0fLbdbFZmF6iOIEzsZTC8zQPJiFkk%2B7CF0inSr5ayQjTzFo%2F1qVzUO%2FvnVWBMO%2BUL%2FTzg%2Bw%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-12e\"\r\ncf-ray: a1a34f6fee4b568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":302,"size_decoded":877,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (301)","md5":"71fe2c7029607b0e0b1b0ae04a6a3c45","sha1":"4678a2a4ef5eaf2c096c6110c7e598ecdde01f96","sha256":"5ce7bdae3974574e420e9ff1fdaee2d64becb4665b20571b78a0f16365dac0cd","sha512":"b8c8b6f11216a20d27f300b3f7320d015764f76538f2fc2040bcb52841483dcdc434cf4ff9cf1e9278fb9ea07b133fd95295652cbc01b7d4892961c10a6424ee","ssdeep":"","tlshash":"26e0c25e0c03a7f3413918d921c14f012a47422cffd74fec14068c028ae8c82f42ec04","first_seen":"2026-07-10T15:17:59.665638Z","last_seen":"2026-07-12T21:59:13.912726Z","times_seen":2,"resource_available":true,"data":null}},"time_used":631,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":631,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/charting_library/charting_library.min.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:34.574Z","timestamp":1783893514574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:35 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mPEuxWHm7OTo6ZBtM8EQsfJfcCvyfr0gFJZghXaDXuIBIdEqGM5dUgg5AjkAXS6CxrYlEB0ncpMIKH4nOGVyosxxIKaYSCsdycRG0oiwdfygMsjHq1I2XCo993j4Ew%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cc4-2a6a\"\r\ncf-ray: a1a34f621d95568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10858,"size_decoded":4001,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-07-14T17:49:40.743501Z","times_seen":1275,"resource_available":true,"data":null}},"time_used":850,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":850,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/api/common/getAllSetting","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.165Z","timestamp":1783893520165,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nlanguage: en\r\nlang: en\r\nOrigin: https://usdt-go.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://usdt-go.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rF4SlVICYVn95u%2FtUhI7r%2BI5dK54YuukZj6DLwcLyrTyK%2FJY7ydl7quiVp%2BJungXaYxSw8Wi%2BqKiKJHHX2KZqMSVoNExXj9%2BDNIOgpxAG2vxS4bRqmiACGENxXD3cw%3D%3D\"}]}\r\ncf-ray: a1a34f850fb4568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18889,"size_decoded":5635,"mime_type":"application/json","magic":"JSON text data","md5":"c7d4a3eb3eb1abd039c28ac6b8b97d6a","sha1":"c1e2b169ed94dd5df55caab1625b89b87470b165","sha256":"ecd227357a780bbbf274c8d58c89dd5ff32e24ff82905165b7d312c6da50c0b5","sha512":"8e140e1cddab96f7c082abb5426c63db2d5b5a0aac8a8fb2cdf88a93fa7cb8ead6ffcb8c59e0c943c337e4f59d9dfdac3d806882f89da1d802a873d40882831e","ssdeep":"384:st2Ar/SVQe5tv2v2272wI2EjNiB+ZsTYtIPW:a1xjlW","tlshash":"d582d89d35d8ccb982eb2ad7c0eb7f4db9dd29abe5949c05e4b2ef4c8444971080b00e","first_seen":"2026-07-10T15:17:59.661727Z","last_seen":"2026-07-12T21:59:13.915339Z","times_seen":2,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/api/common/file/preview?path=%2Fminio%2Fsolfare%2Fmarket%2Fcoin-config%2F45_ltc.png\u00262.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.174Z","timestamp":1783893520174,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /api/common/file/preview?path=%2Fminio%2Fsolfare%2Fmarket%2Fcoin-config%2F45_ltc.png\u00262.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YmugP2qgxD4RtpfadDpGadVjDCVqGI2gBn8%2Fnz3zi1fjFcdhm6IBkwuOAf7apzP9hN%2FmjC%2BpgbHoCuwk5pn%2FD5%2FYvpCRW9deE3ke5Dpf2Msrq%2BWO0OiISd7H%2FRQZXQ%3D%3D\"}]}\r\ncf-ray: a1a34f851fbb568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 34858\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34858,"size_decoded":35578,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"bb27c369a3aa54d9c1f8e59e1706da48","sha1":"7e1b9677305cad40b686a5a1077da57c4f6cf07f","sha256":"e691621963c6de60c05c0e91cf7c65cba4191df054a3b1bd5becbef3a426f9ee","sha512":"4ff3058897ecbcee5464eb954955cc40bad7f411ee86f21dcbebe3d02ee45410b42f68c8e3a22537ef530c65c9bc9960fb36134aeced2dd36688a21c0cb02415","ssdeep":"768:FAbT/SSUokJQD9Wvnwoo2hzabJIqRw/VH3+WFxL1nHLy:G/RU4yni2kKl53+WbBLy","tlshash":"3df2f155ed69527406b90571846e302ca4669a7ebdceb11bffbd67302b3246f008e06e","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-07-13T17:55:34.59922Z","times_seen":794,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/resource/images/app-icons/app-tab-markets.png?2.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.189Z","timestamp":1783893520189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /resource/images/app-icons/app-tab-markets.png?2.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 09 Jul 2026 09:41:24 GMT\r\netag: \"6a4f6cc4-80a\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s%2Ft5qeI5DAyElWZkvzyt%2B2CqeMuyJ3jL2WrQtLH400u26akrE00BaP6Mqy%2BuSU7ygxGw9itS4LzBAXVMOMe9de8YG1QosFI4nyQkUW36Jev5HO24%2FwxgqgmXjjtmTw%3D%3D\"}]}\r\ncf-ray: a1a34f853fc7568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2058\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2058,"size_decoded":2752,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"a700c9a080d5e6dbc1991c268a5167ad","sha1":"8e64e8f546f04b1cd493b4fbe4380dd6ed822325","sha256":"0d6c013b7847299bcb2e3f3c315475bbfee04b7ef4fd39aa4d2959e5aeb866fa","sha512":"116eb788f18954a69aa6c584ac6b1212eef3960a2faa1ee71ebd4445bfade53b1f234244c8dab5754ad1698d43dd2bfa2cd648b949207cc05c42ea0ab0239c21","ssdeep":"","tlshash":"a1412adbbdbb8cfcf2cb6925ca1a8f02020d25e6ce12a1d1103800433635e99de097a1","first_seen":"2026-07-10T15:17:20.20929Z","last_seen":"2026-07-13T14:16:28.253573Z","times_seen":6,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/en-CrgfCZic.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.026Z","timestamp":1783893520026,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/en-CrgfCZic.js HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zHmjltzgdCsDRwZeVCVvMTqkjtqRb%2FRQp2o2s2sSxaEAsTyD8QRYhSl1e75NeAAqJRxWCHN%2FMW5JXV3zybcFhjxY6T2SJjnbhwPZRQkcqc%2FfUwVj%2FubdE5NGreW9%2Fg%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-b1e5\"\r\ncf-ray: a1a34f842fa4568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45541,"size_decoded":15001,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (45518)","md5":"c3234195d5faa4d60afc5d447759e2aa","sha1":"4cf11f70dba81bdad29cc7eca933c956818e9110","sha256":"a03bceed6f119794088a2c68941d02b71955fad8b96c6c3e743e40d54ce79127","sha512":"96aa53afa7268d3ae300eb5885cef7549b1313036cd615950d0077cca9cf0cc8a8ed3356da2f589a48b5e9bd4805059bf2c7f3944383508cc299a684607bf180","ssdeep":"768:KGtZcEw/o7rZOdAFsitAMC7zrAaAMFToP6+6sPG9w1moIO6fpk7aOLxle79G1:uponZOdeOHrdFTLsPWwHLxYi","tlshash":"e713d78a6d1a88de04f353b6b4ce6e2060f90ac1c255881f4fedc9f953d2b676363634","first_seen":"2026-07-10T15:17:20.24002Z","last_seen":"2026-07-13T14:16:28.210489Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/platform/CRY/logo_144.png?2.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.003Z","timestamp":1783893520003,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /platform/CRY/logo_144.png?2.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vFwX7nGGiKa1sgL90o7gzPGQd89SUfqIKWCtMjj%2BeKOG1SmJq02MslOpEYHvZs5p2p3f8cTB3CBsGTLOrz2y7KNjr09vwxL7A76LZnRbID58lwLcJV45Ltu3ae2Wuw%3D%3D\"}]}\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1a34f840f9d568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8467,"size_decoded":3729,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094)","md5":"53022ec2bbc7554f139cb352313ab9b0","sha1":"89bc60be877da168fe7c039844e75922ec26da6a","sha256":"a4cd7162f363a63fbc835d6188775ed3ec1fa9d3ac0e22303f96a14bbed303d7","sha512":"7676c026d9d483cc4987e53acecbaab4364a5467e791eeb70273498de926df12d2c6a4c35a2bdbe19f28deb38ca8582e0de8959ef8d1c9c38f28604bd0169ea2","ssdeep":"192:TFz9YiINmSCyzy3+jVBOK4SZCxfi2nfD3bLuB1XiYi6fo:1YXX5ZCxK2USX6A","tlshash":"9d029777ec74cd2603a5d12ba9e6b504e9611247884a6c18739c40ee4f99fed84efb3c","first_seen":"2026-07-10T15:17:59.683063Z","last_seen":"2026-07-12T21:59:13.90526Z","times_seen":2,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://usdt-go.com/ws/4deeea20-7885-4ec4-8629-e595e0d6c720","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:39.767Z","timestamp":1783893519767,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /ws/4deeea20-7885-4ec4-8629-e595e0d6c720 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://usdt-go.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 1wiLWM33Kdz6+47wJFDxfw==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Sun, 12 Jul 2026 21:58:40 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://usdt-go.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: P59isBUgtUNj32d12R5hqeU/dkA=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xDu38l43XiHtk5tB%2BaCm0FfRN63pIGQhedTHK2OBUUWvpiE28wZma046OM44BBJcT%2FNH%2FR3%2FhKJ0GcZedaDMp77jVhH2HXt9YA80P5UYVMdhKczG34NG%2BynF%2BRTAQw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: a1a34f829dc55ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1137\u0026min_rtt=1125\u0026rtt_var=447\u0026sent=5\u0026recv=6\u0026lost=0\u0026retrans=0\u0026sent_bytes=2859\u0026recv_bytes=1316\u0026delivery_rate=3056326\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=3d508cf09f7e062c\u0026ts=646\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1074,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T02:18:32.815563Z","times_seen":17253256,"resource_available":true,"data":null}},"time_used":650,"timings":{"blocked":0,"dns":0,"connect":2,"send":0,"wait":641,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/resource/images/app-icons/app-menu-system-notice.png?2.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.158Z","timestamp":1783893520158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /resource/images/app-icons/app-menu-system-notice.png?2.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 09 Jul 2026 09:41:24 GMT\r\netag: \"6a4f6cc4-1714\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=THdrEw3dsuIdaWuV8aik0Uuo3wKUf%2F7SjW5ucZDlPNrkoQeZ6JX7WUeYWEjnOYX45xri%2BXueRoiuaW6VBoB9AHif3WHFZbXXG%2F7p7BDfp%2FmlbCDFYl5onYUWF7Z9tw%3D%3D\"}]}\r\ncf-ray: a1a34f84ffb0568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5908\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5908,"size_decoded":6603,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"27ac01ec6066cc0e58622ed8913469d9","sha1":"572f344d080a606da7df99d539213ef9d06d0bfa","sha256":"50109bdac88284531e7a558bea1e4d12a1dc9dbbd5582761aeb19bff5345a7da","sha512":"3a5e4b854676e83508708e4a6bcd786c66158e66c2dd439538eda30d6a7b2cb78218718e924d823765e736f4edca43c92341adf3c6c4f0f629a24931a50b615a","ssdeep":"96:WS6Cjpg1QuiVeYqE3s6RunpkRtQfo+hMvD0C5MWj7JBpNJJy79s8/khtXpTkhu3v:WS62uaeYL3QMq72vDPbB/8pkrYurZ6zk","tlshash":"48c19f94a3d2226386e3807d41c08295f85b97d526e17c4a4b869b3cb5d7f3d92780cb","first_seen":"2026-07-10T15:17:20.196585Z","last_seen":"2026-07-13T14:16:28.251613Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/index-DwBs6Umq.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:36.771Z","timestamp":1783893516771,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/index-DwBs6Umq.js HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:37 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RSPVMC4YSNvoNkHHoo3nSpUefDoOQFEXRopq%2FpIU1bHtipLM%2BFv2ZoHip26R1cBA7RPXwHQaA2JTuxuNb7OOmSv8owriYQSiPA%2BQp4R5zALJol3DJVAkGswZJLPgpg%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-308\"\r\ncf-ray: a1a34f6fde43568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":776,"size_decoded":1169,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (775)","md5":"2d824727b4e6d46a0722da4884c83bf3","sha1":"fdf05b783814237cf7ac5a9efc4b4097c7118e6b","sha256":"cc2f198dd4e58d8ff125cff3d0330a2859faeb682b62c1ecf2cb592165221969","sha512":"72fb531da44e78ebc71e13cbb463df97c76829ff5a67f43c765aa599b8a6519531bcafe031129c10285f26a45a70b5c51a89f61919a6bbd84e900f118dfba6d1","ssdeep":"","tlshash":"4101c5f4f80dae7b0eb2094001813b0120095fcde91028e2a8937d291be1a80ca8eb1d","first_seen":"2026-07-10T15:17:59.662702Z","last_seen":"2026-07-12T21:59:13.922451Z","times_seen":2,"resource_available":true,"data":null}},"time_used":635,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":635,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/currencyItem-G5HhdmNg.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:36.781Z","timestamp":1783893516781,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/currencyItem-G5HhdmNg.js HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:37 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8rl9w2BlIwA85Mvx4pYkVagGxhL7JD924c%2F8yVAZ2mGHa8JSJ13idGVoYuCib05driWzMo5UV09L1NEDLM9rYi8ABX%2BZ8Klt8R7xPRNXmKlh2IadRIosTjD7cDDrBA%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-5b1\"\r\ncf-ray: a1a34f6fee4c568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1457,"size_decoded":1426,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1456)","md5":"a3322fc372940a9615f47197900804d8","sha1":"ce8fed9999b63875cc90ea376e44d353b28c48a7","sha256":"166780b088a70e60f7fa29f3e9ba025e446fc176b7a95e7c734b614c76427049","sha512":"71550c87f161e337ae00dbff7bde35d8240cd8e82a9c545f582291dc5107b1e57b9d89bd6e1224f926f1c54143a1e930421f79b805e7106bbc14227266ca65f3","ssdeep":"","tlshash":"0231ce89dd018bb7c7bf9465c0390c38821e3bc67121d5d5bede18a8374696cab68e72","first_seen":"2026-07-10T15:17:59.677292Z","last_seen":"2026-07-12T21:59:13.909016Z","times_seen":2,"resource_available":true,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":630,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/index-DXjKzvH0.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:39.789Z","timestamp":1783893519789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/index-DXjKzvH0.js HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:39 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NSyqCjm%2FMkiq1C3bHgxwrNv5isFDRjIF5575rcbewEJEVejviWWXgYzv7PbesykTCH4fWnu2CpN%2B35nbpDlXilaEs0S4UnlrNmka5LcotKvpmW2UcjSG%2BJ0dT221rA%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-203\"\r\ncf-ray: a1a34f82bf8a568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":515,"size_decoded":1063,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (514)","md5":"6a6f5d1e10807d3ee884e04b961914a8","sha1":"cd178cb58b65f19e9abaabac0d0c839960bf6c1f","sha256":"343f73619e0d5e925390d6b5fdf0a636488ac6b3bbb327dcb7a4c502fc406177","sha512":"1d9d11731ee236e5aa274e733f3b0e4d15af23ddd561044062414a0ffb23e7c2f920da02c705afd326c3ca722815e6df005c9028e35dde932049f653f4e45c1c","ssdeep":"","tlshash":"5bf0c07ffd7741b217b348a861232930b91c1f462754c4d4d4c60a14cb344e7e67e614","first_seen":"2026-07-10T15:17:59.656682Z","last_seen":"2026-07-12T21:59:13.903678Z","times_seen":2,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/index-B7ETc0e0.css","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:39.798Z","timestamp":1783893519798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/index-B7ETc0e0.css HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:39 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C4eUSib9%2BIS63Tw8AST0ojWNLFFlowE4rk%2BuOMBBBDFSU3rDPemjAjXyX9uYUTcueLA0HcGzw%2B3uia%2BV2n3LflS5VZFFWJmfZFSO1ahoqdOTmG8Fk23U%2FqfzeC6mxg%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-2925\"\r\ncf-ray: a1a34f82bf90568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10533,"size_decoded":3103,"mime_type":"text/css","magic":"ASCII text, with very long lines (10532)","md5":"7e9259350d4af992fcbf06010250e3ed","sha1":"f70d789e54ff48fb2791352bf2ff1d0e4daf5256","sha256":"4b5bb04b2f8209b7ba19ec163dd63da127eb1259f47e0568af4969244d76eaac","sha512":"22cd9ff98c08e04ba437060d36e586375edb257a71a216123cdebaa79429ef9a6c6559b06dc35b94998f0da92ab65c2cbc7d97fd157a5189e64ff1c6a3c460bb","ssdeep":"96:wHmIn3eTa8XjAXMp5mXUVM2tLb48vsLGzNr8OCO+J8k41OSDL/GYdQ/:wGU3eDzNYDHm+J8kKOSDL/GYA","tlshash":"2722543dba582738ac3bd196bad84fccf119ba01e6939dd4fa1756222cc72e7153018d","first_seen":"2026-07-10T15:17:20.203989Z","last_seen":"2026-07-13T14:16:28.208249Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/api/common/getMt5Amount?coin=xau","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.022Z","timestamp":1783893520022,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nlang: en-US\r\nOrigin: https://usdt-go.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://usdt-go.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bv4mx4XUWby%2FYi7DXDTQ3JdrQ5Pz55LsQ7NIQtn7kvCJLi%2BHciwEQasYupyE6N0q4JlXqLHZhLvUT6NRGuJocVcMWp2NqUjzz4vit3e5rrzYu8sgK4aPDoedTC1BuQ%3D%3D\"}]}\r\ncf-ray: a1a34f842fa2568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":866,"mime_type":"application/json","magic":"JSON text data","md5":"c8b9e306a7f58c973d01208cd822064d","sha1":"037f34c1912a4e37ed5f19e855fba82096b9d369","sha256":"3539226e6f931168c620197bd62c1e5847db566829bf7a65b70be061b2e8b6c7","sha512":"5871b18a1e647e212249381639251615e7141686b639ed176ea49389b0795a7b9a7397a33932586ee5c9019db8a5f78bbd1be511fe7fefca199c4142129930c5","ssdeep":"","tlshash":"169002555c1c8282e88300a595065208002471602724d2484c5d5125c0c81722040c68","first_seen":"2026-07-12T21:59:13.925249Z","last_seen":"2026-07-12T21:59:13.925249Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/resource/images/app-icons/app-tab-markets-active.png?2.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.188Z","timestamp":1783893520188,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /resource/images/app-icons/app-tab-markets-active.png?2.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 09 Jul 2026 09:41:24 GMT\r\netag: \"6a4f6cc4-801\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A9swAZhiVr9xfysfMU20kO9PiaFtTjyDspEe6P11E1JXIZQGdUVLAmNXrAYcxr%2F0zwEsp%2BaOLpLPGmxX9r79RFhiU0jxZbHMEhbfXJzq%2FwLXEkFr1KrZD2QGwgjcww%3D%3D\"}]}\r\ncf-ray: a1a34f852fc6568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2049\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2049,"size_decoded":2741,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"8dd18632129d4c95d2f0fb8b969f990b","sha1":"bf9bd970c6c6d29dd6b6dfcb357a7d60e96dfb79","sha256":"cc9dcd8b93e055ca5748e4b90a97d82aa6cf5035bb1301a57f14e1f42a68d847","sha512":"c1a49c3fe81c829765f6fd1124e83b98b8a1d052b5c9909e132dd5f67d34fc1603131d5bde6145cfbdcc60bad9462a1a8ed83ec1c0097dcd48de4e340db36b44","ssdeep":"","tlshash":"ad412cece7d075378de6851066889349f3101ed1a483e858e2b75393ee064bda7120dc","first_seen":"2026-07-10T15:17:20.191056Z","last_seen":"2026-07-13T14:16:28.238504Z","times_seen":6,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/resource/images/app-icons/app-lang-en.png?2.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.145Z","timestamp":1783893520145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /resource/images/app-icons/app-lang-en.png?2.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 09 Jul 2026 09:41:24 GMT\r\netag: \"6a4f6cc4-1a15\"\r\naccept-ranges: bytes\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gIdDPxypUokrMvw6xO0MMvmnPqg%2BsXyZHKatQ0xWf7sBQjDnOR056dl3MRv4HTci2X%2BylaFe8RfIRNjoEeW420ujLEwZpZaSfLT8OKTmLcocZYC6zWruI2xx1JDimg%3D%3D\"}]}\r\ncf-ray: a1a34f84efac568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6677\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6677,"size_decoded":7368,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"30abc45db7d8169eb6d1b55ef635c01f","sha1":"8b55004aca54327d96ecc5aba97509c69cecfa07","sha256":"75a4fc61b0efd0a746f28afe2d86b53d50fd6b25e3e6c95c367e077ea971c0d0","sha512":"fc9643611b0cc3d3985041606399e95f8dc31324a4f234e09cea0147a10b4e7458eb22e3fa9433acbe1c33e36af0b460e5392baefebc2fda544be4dea1374edd","ssdeep":"192:WSLmGCCi05LZuXkUiFac6Zl+oREFYMa/45GJsE:5LFi8Fu0UiFaPZlvKeMa/QE","tlshash":"34d1bf5ca09fa80664a6d8d7d38322b55f782d98f303ae73c710863f8a235111eaa24d","first_seen":"2026-07-10T15:17:20.195562Z","last_seen":"2026-07-13T14:16:28.248036Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/resource/images/app-icons/app-coin-bts.png?2.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.183Z","timestamp":1783893520183,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /resource/images/app-icons/app-coin-bts.png?2.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 09 Jul 2026 09:41:24 GMT\r\netag: \"6a4f6cc4-1eff\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ud65tUWeXC4r2AvzyVQGuW9NpTR7WZoGjS1pFaiSKXmgfxXa5u%2FlQu6acxbFfLYB9SqcmFtb9wL5QedQpdJGJ1a39rZ8mD1ZySzmm3Ngynoync9hxiNyl68CKIA0xQ%3D%3D\"}]}\r\ncf-ray: a1a34f852fc1568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7935\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7935,"size_decoded":8624,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"880809d3b3bf77a6b432e0f0c190ff95","sha1":"94cf37064f9ec8a7cb35902570bf0a5576d3ebb3","sha256":"a3ca29493e6f9dc3af5a2ae0be6de2f3ccf6d2700b37f4719cf1eba563130b7d","sha512":"46c61b6f2e2be3466451ca90bda5f317f7581b5dc621108bfa3e61329d160228f3acc06e9ae498f8a64fb2ce0578be11aef818840c1cc81cd277a55be1cd4502","ssdeep":"192:WSMDenGRjvnbWDEzBICOD8IHt6UMLiHE8mf6cYJUelN:5OenadW7D83i/mf6dnL","tlshash":"dff1bf89088b0d6f0b30af37251703745dacce5ee4df2a0862177825f02552bb72c57b","first_seen":"2026-07-10T15:17:20.21811Z","last_seen":"2026-07-13T14:16:28.24471Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/currencyItem-BOVcjtwy.css","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:36.783Z","timestamp":1783893516783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/currencyItem-BOVcjtwy.css HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:37 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wqjjzhb4mlmEuCj%2BmeebfWACp%2B3SsXLtPxX%2B%2FCczv4CM3vAJ1Bs8RPyOsKsJljsHVgxaM2E32sH8tkFi1S%2FXqEhwHrxtQXk99T3qMkeyOD5%2FBX%2FJxFFfKMbRrLwdsw%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-7f2\"\r\ncf-ray: a1a34f6fee4d568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2034,"size_decoded":1277,"mime_type":"text/css","magic":"ASCII text, with very long lines (2033)","md5":"cb3f54f7d86ca1dd7a5d781df82ec644","sha1":"f2250ba8632bb13b7f8f971d6403f913256b19e2","sha256":"3e539f6399544cc345dc104818c1e5abdcd6cfb230deda65541490906975d199","sha512":"687d0ee20c34e9fffd4b863d76495d37bc444e37ca150d46b3b272a29b7c9168a37842c715188ad915ab33dd06d8d58cd5f858ddedfe8de268351f75102d5a6f","ssdeep":"","tlshash":"2241af8463261374e937d49eaea8420cd0643fe1544b92d9e89f4f231ccba935ba0ba5","first_seen":"2026-07-10T15:17:20.20105Z","last_seen":"2026-07-13T14:16:28.225424Z","times_seen":6,"resource_available":false,"data":null}},"time_used":657,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":657,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/index-BU4j9-0T.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:39.782Z","timestamp":1783893519782,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/index-BU4j9-0T.js HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:39 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NC3g7GsiRqpOFCi%2FgtIoEr8Kohx62j8LjT0Sc%2BLFYMdXW%2FTytt%2B39L2dPaJdtiD%2Bnjxp7GKq%2Fg1xcW07PURG4PTducdCebgrYgOxlQCoUSIe4EiW9h%2FNBeCusV61Kg%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-3264\"\r\ncf-ray: a1a34f82af85568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12900,"size_decoded":5642,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (12899)","md5":"819cbddcd81c956a7ce1172fc44423f6","sha1":"89ed9664a2c4794b2fc0b2f6ac750fa9bc5aa5fa","sha256":"f03bbafcba6a7633c9c87ccb45ed3b118387ce0c4bf7d3863277606bf894ada4","sha512":"619fccc985ede337245c2fdbc9ee9a0277feba263674c2f240052f706195f1e5ae40bfafef95fe51185711d74dca16e0b13d9f8c09e56ab3f58d208d09695f91","ssdeep":"384:TfnZKe9R4a4cqZZI2hwhgaxF+cROpMfdGq8koek+pOrB:TBJ9R4RjwKIVROpMfoDV","tlshash":"bf42095af90a8938d5f2d4f580992010b62d3fde60069457bafe7c0527b7ef8a345b1c","first_seen":"2026-07-10T15:17:59.686658Z","last_seen":"2026-07-12T21:59:13.932133Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/resource/images/app-icons/app-coin-qpl.png?2.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.184Z","timestamp":1783893520184,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /resource/images/app-icons/app-coin-qpl.png?2.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 09 Jul 2026 09:41:24 GMT\r\netag: \"6a4f6cc4-2030\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HAJZCwiQ38dXXViCQJcRoMUSnbOJi26S19nII0LKYOZ7vtWGRYBtfamqzbw18GkHr9d%2Bk2RM4QmL%2BB3IgdmmU1HGpGNu7U19Q3igzsSFf5%2Bu6uUjnxTBGds9%2BthxJw%3D%3D\"}]}\r\ncf-ray: a1a34f852fc2568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8240\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8240,"size_decoded":8935,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"568414d937ba4a7137837257f680f96b","sha1":"7aaffddfc04b51d0d59c617e6b264749452b31db","sha256":"4b096661f5f0a3240cbfc39e344b1597b7c126732d32485326f103e5f6865334","sha512":"e07d0b3fae97015b96a9bf8a91f0261a65423c3e329349d81a377451daa35ce0fd0048fceac1876f1d1cc3d5ec6e6ae94a084f41a3b5f6ed07ff098e9a355565","ssdeep":"192:WSC+oRkbfw/XjPu5VSPd+2Jetl0qUVIsOr7udoKMoTKVL:5RoRwfwrjPrJU3UVIb7uibVL","tlshash":"45029ee09f6e7b9ab8b650850f2d3184067b63ace240079b6148e66c8ffd0c60748d8a","first_seen":"2026-07-10T15:17:20.179496Z","last_seen":"2026-07-13T14:16:28.256466Z","times_seen":6,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/resource/svg/dark/zu29.svg?2.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.168Z","timestamp":1783893520168,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /resource/svg/dark/zu29.svg?2.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cm8iaKa9k8vzH6woBLkrRlevGFN6zBYzbXVcWPT9OyXcb0Lh8pJZrsYOX01o7drVPXNEj1J4DAUM9lTfbHEx1NzY3h5ZD%2BsqMhsscbyZhzqrpXHgLhLRdOxa8GtDww%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cc4-3f2\"\r\ncf-ray: a1a34f850fb6568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1010,"size_decoded":1190,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bc825f3df226f1159701da8b22992922","sha1":"3c59abf11793093cbd107ae0e28d043f432b3573","sha256":"12d27d63bd857823aea0918425ab06ba62e53b80bb7fcee53e0ab73562b04fde","sha512":"0d69ef9e0c646e35e5252f700b26c7c7b00f5610928cc6c385f61a55bce3afdcfa835799a8ea5c2f2e84857bc0a2bbf8d7ffd43c7f8b224ae383b6975b38349a","ssdeep":"","tlshash":"43111497f6dc53f1c702cf50517ab6215e2b70d977c7458002827b01a22c08fcc6da90","first_seen":"2025-12-09T04:29:57.841353Z","last_seen":"2026-07-13T14:16:28.222338Z","times_seen":9,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/index-B7ETc0e0.css","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:36.786Z","timestamp":1783893516786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/index-B7ETc0e0.css HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:37 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EeJSSI6CoTD53OCBm%2Bw9BBf3ldCxGRvu6eqp8BXkJtevPXJPUA1ZVg3IgsU2ClZOtsK1g%2FNVmIBPi3vx4fFPMDQKpkE7tyNmWKaDCrkbR1TbSooRgRtGV3fQq1iC%2Bg%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-2925\"\r\ncf-ray: a1a34f6fee4f568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10533,"size_decoded":3092,"mime_type":"text/css","magic":"ASCII text, with very long lines (10532)","md5":"7e9259350d4af992fcbf06010250e3ed","sha1":"f70d789e54ff48fb2791352bf2ff1d0e4daf5256","sha256":"4b5bb04b2f8209b7ba19ec163dd63da127eb1259f47e0568af4969244d76eaac","sha512":"22cd9ff98c08e04ba437060d36e586375edb257a71a216123cdebaa79429ef9a6c6559b06dc35b94998f0da92ab65c2cbc7d97fd157a5189e64ff1c6a3c460bb","ssdeep":"96:wHmIn3eTa8XjAXMp5mXUVM2tLb48vsLGzNr8OCO+J8k41OSDL/GYdQ/:wGU3eDzNYDHm+J8kKOSDL/GYA","tlshash":"2722543dba582738ac3bd196bad84fccf119ba01e6939dd4fa1756222cc72e7153018d","first_seen":"2026-07-10T15:17:20.203989Z","last_seen":"2026-07-13T14:16:28.208249Z","times_seen":6,"resource_available":false,"data":null}},"time_used":837,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":837,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/resource/svg/dark/mengbanzu12.svg?2.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.152Z","timestamp":1783893520152,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /resource/svg/dark/mengbanzu12.svg?2.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pkw5j4cOFynXpPQMuUrJ7%2F6oEQ4NvTXuD2oJAHR%2B3BZmXW5R5FPNRS7aHM5m3WDDOBaj6IgYG4FG2NmoX31BW%2BbbVK6iF1AY%2F%2B7pnKlFRTXsyIi6mYzRKQg1i9whWw%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cc4-8b4\"\r\ncf-ray: a1a34f84ffae568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2228,"size_decoded":1654,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"72aaa2a83835138251edae4db2859da4","sha1":"4fa8a4a198256198dfc93e0c0166f5bb549e880e","sha256":"2ae82836ac102af0a1ceaeadcdbfaf9e6625784ff96b9de9e1bbab3d2fbc2165","sha512":"2dea15f989ccee08fa2140b14d6c6a6a06ab95860a715e7c9f80885e0481a53364058bd519b32ac01c48c1bf56d3dfe63a43c38e3392cdb2d2679a0bb23a8bce","ssdeep":"","tlshash":"72410ffb92a431e0f90b5b81f466c829b23b34b53f240b14c04b8e54ba791a749cecf0","first_seen":"2025-12-09T04:29:57.870595Z","last_seen":"2026-07-13T14:16:28.252504Z","times_seen":9,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/logo-CgTrAdj-.png","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.265Z","timestamp":1783893520265,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/logo-CgTrAdj-.png HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-go.com/assets/index-8dWXjc8b.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\netag: \"6a4f6cd2-27c8a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I84XvY0tjR0jPRUKjYbmqbazw0Wv%2BDwOS0B%2BO3ld%2B%2BpqkDtHf5rGLxz4IS0%2FYj69lISsSjaYB%2FpoluXWmJM%2Fpm9P9br3bD6f56qlx3R8o9mQdXXciHKP%2BRYpMuSHjg%3D%3D\"}]}\r\ncf-ray: a1a34f85afd7568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 162954\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162954,"size_decoded":163653,"mime_type":"image/png","magic":"PNG image data, 782 x 726, 8-bit/color RGBA, non-interlaced","md5":"38ca040f14292c373687d8120fc7f220","sha1":"244dc7bbf05aec334cc63e32704f366947f01e4b","sha256":"2c9bf242dd00fdb32f1906732643b9f88dea1e699ef171402a8a1dc1aa66f5d8","sha512":"591a9c31a41225255e5c8ce812294cca314415a1889f1c8bed3acf1b6d607a194195439ea92794d8ae940ab0bf59d8389538f4d0c8528f6f76951f62a10788a8","ssdeep":"3072:/gWwM01YE71aZrxS/zEEkipLrDlGcS/7YdIvthHEVmXJrki+YgLPfWuK:xEavS46r87+IvthH5JHgrfWuK","tlshash":"8af312ad63bce5e6f81780ae24cabf23137f90ca11d87643eda4771c94e6e60162441f","first_seen":"2026-07-10T15:17:59.660114Z","last_seen":"2026-07-12T21:59:13.937662Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":660,"receive":647,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/vendor-CumRKK6x.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:34.578Z","timestamp":1783893514578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/vendor-CumRKK6x.js HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:35 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rPpeL3YjNn01C8al7D25fno%2FZh2Nl85Ei3XX%2FJMDfYX7r4EFCtZ893jHuzeEwj1jY7EcqWFMFdDBBmmZ9735%2FiDZs%2BKVB5q61pq0tQ1fhlLXu31kYDovUE%2BcqiSRRw%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-1219b0\"\r\ncf-ray: a1a34f621d97568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1186224,"size_decoded":380827,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65506), with no line terminators","md5":"c8ae7dd0965648ab911c1286af26b76b","sha1":"e0c8fab0cfb260a2e42cd04816615b4db41da8bc","sha256":"56387a1eb1cd344359b3fb5e80a376acb70f661e2e7ed25912dfa1935c1341d8","sha512":"e224ab756e9a8123e8e685f9ce284184db3ea2f74e66c7d658afe8d7e9fb72748fe65ca079f82e7701618b126418f2017a96a33fb2986b10b5d327ee6b780955","ssdeep":"24576:IRoPPb+Pd3mp8uZ/+4eh9ZvLUWc8V3a2be9:IRoPPb+Pd3mp8uZ/+4ehTvLUWcMPbe9","tlshash":"dc252ac57292f06147ab25e100bb1006f3396e59740e84a8f16dd8eb7db9d8992b7f3c","first_seen":"2026-07-10T15:17:59.692054Z","last_seen":"2026-07-12T21:59:13.938982Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1912,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":641,"receive":1271,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/index-C30bBO1d.css","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:36.778Z","timestamp":1783893516778,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/index-C30bBO1d.css HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:37 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\netag: \"6a4f6cd2-2a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pk%2BrOxpwQCPfoLqtCiTlFo0b%2BdUmucw0c02r3QUSaY3mmMKh3Go%2FpnyRUY0HHGoddrplcT0e19R16Eo8f172yO0YXNCwKHOvzECsj4kiWseZGvd%2FikeE7HGqlgwZ3w%3D%3D\"}]}\r\ncf-ray: a1a34f6fde4a568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 42\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":728,"mime_type":"text/css","magic":"ASCII text","md5":"c76a69df89555556dd2c2c94d81ba658","sha1":"9c20cf3620af13b02769148e52f374570f843acb","sha256":"b1f9304f7e3412cef02f6da2342816fe4452c9f690ec7e427c415c3947e7aa03","sha512":"a28adb05312351e6f85156ecb4d6fc587fa0e31ca296eda7d32ab0f14b023789c27a27d6c3e9ef304ca48358bb0ea6364182a5ac4a7a91d3d62c437991f9dbdb","ssdeep":"","tlshash":"709004dc511d1cc1f333d55550351d14c5057f034c4140f0c3c154403d43d4535f5315","first_seen":"2026-07-10T15:17:20.200124Z","last_seen":"2026-07-13T14:16:28.240884Z","times_seen":6,"resource_available":false,"data":null}},"time_used":645,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":645,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/useDynamicLineWidth-GVuDsOpb.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:36.784Z","timestamp":1783893516784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/useDynamicLineWidth-GVuDsOpb.js HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:37 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yQY%2FxaDqM%2F8vIfl%2FSrm58ktQPKuisvQijgGkNPWZT97gh%2FHTpRCQ6xdTW7t8%2BDaKFi3gdfqAQUNFggkSYYYiCv0zw%2FxTFrQNNXMHX3BG0zJymlhpCG%2Fc9nrksTnURQ%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-b3d\"\r\ncf-ray: a1a34f6fee4e568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2877,"size_decoded":1793,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2820)","md5":"eebcc038b05f462a53bcb53207981482","sha1":"527a0309c81d8ceb030e190570fac8d1c3f95203","sha256":"889ae76876e29151c372a81d7606e481d5d6b573544a103c2e9e39b13728f48d","sha512":"331e55302318156b60c7be1bf753e763052af3fba9c70f3f6c44a7facc912fb97c7474c52408b82c3a47d0b6c3840b9f2e54e96bdae518e28602d8fb01dbfd14","ssdeep":"","tlshash":"db5123a5f1b15162d2f9402451305388f31f1d93a516cabeb0e95edeb6e5fc25138fb0","first_seen":"2026-07-10T15:17:59.66854Z","last_seen":"2026-07-12T21:59:13.940991Z","times_seen":2,"resource_available":true,"data":null}},"time_used":637,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":637,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/api/common/getAllSetting","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:39.775Z","timestamp":1783893519775,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nlang: en-US\r\nOrigin: https://usdt-go.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:39 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://usdt-go.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LqDtLnhOXE0ZOLUBhYg2nWt54o83p6Pj6JI3wvgiHlhZTeZ33rfgC0ndWWpld6fdLsD7Wq9CwvnzdF4nVu8iom4dv%2Fv50yBZdMsr%2FLNrfL78RJ7BWt8xB%2FOSffd2ig%3D%3D\"}]}\r\ncf-ray: a1a34f829f83568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18889,"size_decoded":5559,"mime_type":"application/json","magic":"JSON text data","md5":"c7d4a3eb3eb1abd039c28ac6b8b97d6a","sha1":"c1e2b169ed94dd5df55caab1625b89b87470b165","sha256":"ecd227357a780bbbf274c8d58c89dd5ff32e24ff82905165b7d312c6da50c0b5","sha512":"8e140e1cddab96f7c082abb5426c63db2d5b5a0aac8a8fb2cdf88a93fa7cb8ead6ffcb8c59e0c943c337e4f59d9dfdac3d806882f89da1d802a873d40882831e","ssdeep":"384:st2Ar/SVQe5tv2v2272wI2EjNiB+ZsTYtIPW:a1xjlW","tlshash":"d582d89d35d8ccb982eb2ad7c0eb7f4db9dd29abe5949c05e4b2ef4c8444971080b00e","first_seen":"2026-07-10T15:17:59.661727Z","last_seen":"2026-07-12T21:59:13.915339Z","times_seen":2,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/api/common/file/preview?path=%2Fminio%2Fsolfare%2Fmarket%2Fcoin-config%2F43_eth.jpg\u00262.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.171Z","timestamp":1783893520171,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /api/common/file/preview?path=%2Fminio%2Fsolfare%2Fmarket%2Fcoin-config%2F43_eth.jpg\u00262.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=foo2yAjwYCAxrOA1lfXwJ%2FOtgn72RlnNraEm8M%2BsH5B6o89sddV%2B6eBSjhZNHz7p%2FV2WlPZXs%2F9cJd6q8ZXH5AM7obGP4%2F5BOIuNS962JU%2BtGdfgQHajjK%2FvIHTWMQ%3D%3D\"}]}\r\ncf-ray: a1a34f851fb9568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9807\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9807,"size_decoded":10529,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"12d9722461759cefff02d9076a3d2718","sha1":"6b763fea0b17257a36b90c465593e1629aee0564","sha256":"af89450e1873196692af0d9d4d0c03218b4be8091171b9d8f7349298d4e82586","sha512":"8eb0f616162be914a3945fb383250796e1134da22e8ae612f403f28804ac04b7fd0f607e132403dc28505d80377c9281601cb23ef1f0814e08584428f3efa05f","ssdeep":"192:4V3ZO9Gxo9H+wp5qh6BKfMPaB2kXTfwoVqO2Rzhj7TfhBcHEhaI9yLKKD:4V4GxoYwp5wQKfMP6LXT7V+RzhzncpLb","tlshash":"7112bf66ab39a301d66d2bbe5cc59302db15ad10dfe14a3fcb840980370c6f9de5a6c4","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-07-13T17:55:34.620775Z","times_seen":740,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/index-Cp_WczF9.css","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:36.773Z","timestamp":1783893516773,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/index-Cp_WczF9.css HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:37 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uB8vuKLmfzRLfkgNe9mHcaeOBkI6TZ98daHKCX%2FIGeLXknV9S7VGkA9bDNFkzdigvNdgBWeAL5dcR89nnt7tHI31Van%2Bb0bEZPm7my%2FrYTyUqF1jHRrhM4qo%2BhbXoA%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-1be\"\r\ncf-ray: a1a34f6fde44568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":446,"size_decoded":893,"mime_type":"text/css","magic":"ASCII text, with very long lines (445)","md5":"5093a0b1d7c0aa3e15369ee74e7680a8","sha1":"2f401810e0040737d946b683075aef0da62a8ce0","sha256":"2de42f91bf56c4eb3d32da227e13c4610b513fdbd4222215867f28bff027275e","sha512":"e2e7354733c4582e1876a516742131a1f15534a8dba56c8af30883f31824745a964878953d9118369c380cd5af4c2d0074d01962d0a9ca08eaee13bbe4b2c087","ssdeep":"","tlshash":"a8f05cd8d0c5c27f7627607d267cd21dd414ac44d8003778f67fa7b006c36c52071210","first_seen":"2025-12-09T04:29:57.822118Z","last_seen":"2026-07-13T14:16:28.250973Z","times_seen":9,"resource_available":false,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":630,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/index-Cp_WczF9.css","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:39.787Z","timestamp":1783893519787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/index-Cp_WczF9.css HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:39 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xqyHwcQcbfPNRdviKO3zum5oFjkekRNdQJanH5FXfiPcsZiwohVGkLzqL0pMmKyfVZu%2BXpOfq8FXFVRqBvt%2FBEodP5Z6QFUCpHK3atQcjcP%2BNQQWo5S%2Bje3Wfdi5YQ%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-1be\"\r\ncf-ray: a1a34f82af88568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":446,"size_decoded":900,"mime_type":"text/css","magic":"ASCII text, with very long lines (445)","md5":"5093a0b1d7c0aa3e15369ee74e7680a8","sha1":"2f401810e0040737d946b683075aef0da62a8ce0","sha256":"2de42f91bf56c4eb3d32da227e13c4610b513fdbd4222215867f28bff027275e","sha512":"e2e7354733c4582e1876a516742131a1f15534a8dba56c8af30883f31824745a964878953d9118369c380cd5af4c2d0074d01962d0a9ca08eaee13bbe4b2c087","ssdeep":"","tlshash":"a8f05cd8d0c5c27f7627607d267cd21dd414ac44d8003778f67fa7b006c36c52071210","first_seen":"2025-12-09T04:29:57.822118Z","last_seen":"2026-07-13T14:16:28.250973Z","times_seen":9,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/resource/svg/dark/user2.svg?2.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.143Z","timestamp":1783893520143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /resource/svg/dark/user2.svg?2.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UdCkhysFdp8wJbTweilt1WFP8Rd1Qa2KeMNmuJjOnRIfV0k6S920kdAhxH9giyeSWzsSK2VXLKTMBZuoFy17w3uvMP9MBnEk0ZcBzfug7M2PswHhAFysy8wxWGQOZg%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cc4-1dc\"\r\ncf-ray: a1a34f84efab568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":476,"size_decoded":959,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c312a158aab1461714e85e1c04a73b73","sha1":"4e79ef0776c4c00844bfa63c49858b91cf26539c","sha256":"d2183915fd95b2bef0cef60418f81c21a0666e6332e8f0483dcbc07c3d40dba5","sha512":"d0b749a12b73e2e3414e81279232c0e0e6117a9ecad45319f07b7c9abf66e1ae67f14df2f1a2b381ce892ee13479e6042d624413058413eb52eac0f8634d5480","ssdeep":"","tlshash":"19f027f0c3ce6898c309d734ba36ba89f50ff0f1be584d64c2881923502187f0c089e1","first_seen":"2025-12-09T04:29:57.824692Z","last_seen":"2026-07-13T14:16:28.232988Z","times_seen":9,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/resource/svg/dark/yanjin-g.svg?2.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.274Z","timestamp":1783893520274,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /resource/svg/dark/yanjin-g.svg?2.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NE%2BnK7bH5I0%2BZ7X14vKSe4qZajQl29DC2CjZ7rNFvlhAbx1%2Fs8lVG8UVEtDyDuhQQ1%2FFJqPlbcV0Z1IF2zZGAt5GhvPzhvNpJBHJgIveqdQ23b9i68JnxlMf0vMkXg%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cc4-56b\"\r\ncf-ray: a1a34f85bfd9568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1387,"size_decoded":1352,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"287f194ae33fd063e69c1390b978c763","sha1":"828841c4f62dab2c4f6eab9137c68f0e97062eed","sha256":"22c8f968f4533ddab4fa28ea848499ca25b660d284729e9090167726784fa353","sha512":"754f05d54970c84993dd20e16ee22c5b6bb7246f21c0e41fbae8836034c0df42f141370a6e812974a3a23296e1596188cf7de92dca05a4a809b7435562714742","ssdeep":"","tlshash":"0a2189d74695f7f0f182ef20ba1bedbc768a38bf7f0896681144d980a55408d09ccd94","first_seen":"2025-12-09T04:29:57.866342Z","last_seen":"2026-07-13T14:16:28.220025Z","times_seen":9,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/index-DxAZV_K5.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:34.576Z","timestamp":1783893514576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/index-DxAZV_K5.js HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:35 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FyTwd1PMCPx%2FuKDVGash5HDyAgyPh4MXB5F01eKsodfWMM%2FHFWUdK%2Bnbl9RRlQeuBdmU%2BG2JQyiuT1Q%2B08nsiB6jkNjgi6R9pGO3E%2FSJobFJX9WQpaZYP3kfsJrRWg%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-1e812\"\r\ncf-ray: a1a34f621d96568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124946,"size_decoded":38974,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (58357)","md5":"06aac247ea21fc64b2629780020b08f8","sha1":"da497238ada5693c8994c7f37be46b3c14b08d18","sha256":"89943598ea734a649ca3f84d38ae07ef9ac8c5610145675dd05784d7c854c089","sha512":"07690a71ba3b2265b36971afd8eb5c6d668673ddf266237a8092c2750b14cf1ce6ca57b34c1316ae3db30a13123cccf42bb93643c348d16b8121da83a03e3cda","ssdeep":"1536:eMPDGSNIWcfkmmGe2SV4yNV7AkUMHwnvhClpd5TBxJB:vGSgkmmGoV4eVEkUoev8L","tlshash":"cec35c8155070eff56fe08882997140031255f56e104cc59ffbe9d7a3baac8ab3aaf35","first_seen":"2026-07-10T15:17:59.675169Z","last_seen":"2026-07-12T21:59:13.945687Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":637,"receive":625,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/platform/dev/config.js?1783893516753","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:36.757Z","timestamp":1783893516757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /platform/dev/config.js?1783893516753 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:37 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aP54kdffr2ywJRhDVDw1gw3R5IoI0d3%2F1BnQsl6WSHDwvB06YYBfaB7A3aUmCNhX589S4ws64EvnitVWKnlEJLO0bKOKVUcVRGvcyWKLal5u38Bnv0E5mFpTlbMvaA%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cc4-17e\"\r\ncf-ray: a1a34f6fce3d568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":382,"size_decoded":952,"mime_type":"application/javascript","magic":"ASCII text","md5":"e5b2d14d21bf45992ec083408f892f36","sha1":"ea0676026f6951a8f24bd9d0ecae136eb148fa49","sha256":"600378e8acb9d09724ad658249830e95de4a79579f9d12eaa2d4668d2755ba1c","sha512":"93f487b83bcb716539d3dff7e7f3ed3012bb69ea2fb62e778d327ed589bc4a7113dd7b77c0e71278020613d2cc326c52e19ccbc874bc4ce055bf432cae3c1d7e","ssdeep":"","tlshash":"fee0f8fb3238c1b050809e1a2cec502bf3db25738c9c0a2ef484aa082e4de6c217c090","first_seen":"2025-06-03T16:32:00.298116Z","last_seen":"2026-07-14T17:49:40.776737Z","times_seen":21,"resource_available":false,"data":null}},"time_used":635,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":634,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/platform/CRY/favicon.ico?2.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.005Z","timestamp":1783893520005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /platform/CRY/favicon.ico?2.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9FNtLKvRTHhc8iqM0fssvYxXW8iBY0d0UBaajmnfWkRfy643ISAp5cim0VxclA1xvR7WOlTCYMzVQXItDOyRw7gTZUMMaLUya9uSgQzQbsp5GaAPNoV1gjQ4LlFnLg%3D%3D\"}]}\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1a34f840f9e568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8467,"size_decoded":3727,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094)","md5":"53022ec2bbc7554f139cb352313ab9b0","sha1":"89bc60be877da168fe7c039844e75922ec26da6a","sha256":"a4cd7162f363a63fbc835d6188775ed3ec1fa9d3ac0e22303f96a14bbed303d7","sha512":"7676c026d9d483cc4987e53acecbaab4364a5467e791eeb70273498de926df12d2c6a4c35a2bdbe19f28deb38ca8582e0de8959ef8d1c9c38f28604bd0169ea2","ssdeep":"192:TFz9YiINmSCyzy3+jVBOK4SZCxfi2nfD3bLuB1XiYi6fo:1YXX5ZCxK2USX6A","tlshash":"9d029777ec74cd2603a5d12ba9e6b504e9611247884a6c18739c40ee4f99fed84efb3c","first_seen":"2026-07-10T15:17:59.683063Z","last_seen":"2026-07-12T21:59:13.90526Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/resource/svg/dark/zu447.svg?2.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.163Z","timestamp":1783893520163,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /resource/svg/dark/zu447.svg?2.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QitI27yl2L0yXIFOvYLXTooZt3Hdwbkpo4Btx3ZmnzPqkFLoOGdmL95801te30GpA9ns7HaVh5pzIhtUxbtO95UweTcSS7F373aAZ8ielgiySmZBII%2BV%2FS0BEQGdyA%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cc4-377\"\r\ncf-ray: a1a34f850fb3568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":887,"size_decoded":1183,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"892c2fc5cd01eb5de623d367ecaec9e1","sha1":"40520502a5e8c83e6edfec748c53a89cf86bd5a8","sha256":"f716abf03af5ab0cfefef5f5f68c072a8ea279585b49177145960589a45d9e85","sha512":"8eeba96aba31ddd381b9caab6b68260b9408ae0a561003bd7832a8c3017ba5957b3cc95fb49e1da70cab8ce65e9400670ab0eff5ad87b008e2789cb0ea4bcc59","ssdeep":"","tlshash":"c31123c893b7855cdacc0a02c248d865a333a0f57500dc5d6e842955f4080df2cb9fdb","first_seen":"2025-12-09T04:29:57.840517Z","last_seen":"2026-07-13T14:16:28.237918Z","times_seen":9,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/resource/svg/dark/notice-1.svg?2.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.147Z","timestamp":1783893520147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /resource/svg/dark/notice-1.svg?2.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SpLUE6t2ypFRYW6rVTXB4U%2ByBXiK6lcsNFq1TseBkWvvSi8jgeRbJ4m3wn7Axgx5Blc5g%2Fx7t5%2FlrIyHBHCOtctWHia9c2qddq6dAlqEji6Re%2FWxA9NQUG68OFSQaA%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cc4-2bd\"\r\ncf-ray: a1a34f84efad568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":701,"size_decoded":1086,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"97160975fa1268511f51226e167537e4","sha1":"4ef320436ab5df0daebdad83f881e2791f4fe354","sha256":"7eed909f58219ae98c7ab1eb4771b977c3b87d68feb14b17896821bfbcfbf7e3","sha512":"9d365b71ffb25fd02d850d54f03cad4d8dc7f65d424c2fd66ef5506a0390895464832eb1af2fb941a8591a8d9012876ec0acab9329cf5c78b8e7e9b8ad52d554","ssdeep":"","tlshash":"7d01c0f782fca3220502df5c1503de6930f878faa78665850210fb8c64420151c8ea94","first_seen":"2025-12-09T04:29:57.825458Z","last_seen":"2026-07-13T14:16:28.241547Z","times_seen":9,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/resource/images/app-icons/app-tab-home.png?2.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.187Z","timestamp":1783893520187,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /resource/images/app-icons/app-tab-home.png?2.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 09 Jul 2026 09:41:24 GMT\r\netag: \"6a4f6cc4-54d\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZFwFSBrZfFzGRVdb4uW%2BjYN2SNCANZLBtjD8GY5z4EiNzT%2BM6P1zd%2FS2BSrX%2B1fT6vi3pIODQBN1fzZpCdc%2Bt90oYdE4C%2F%2FTM%2BdNfkmystjp8TM%2FgFQoTk%2Fnn24few%3D%3D\"}]}\r\ncf-ray: a1a34f852fc4568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1357\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1357,"size_decoded":2063,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"f225e27c35a707726ccbe95fa96f273a","sha1":"d2bae387cc20ce36f5528395d504b99ae8bf7b70","sha256":"f05aaff13fd7e06e5873c2bc0043622b054ce1c429d85ea7bb2dd54d881b5621","sha512":"13f44c078898d01372ed50db72add49e70d9d4a55de21e7e0b2194debadaffae1c9774cdac7cbab697e8cf44de8cd3553dd92416b476733d767b68895701ed5d","ssdeep":"","tlshash":"3321fbc557119f3fc38c8034069b370085ec33ed2d5a7c95920de9cc9d9b574568eca4","first_seen":"2026-07-10T15:17:20.219344Z","last_seen":"2026-07-13T14:16:28.218573Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/api/user/getCountryCode","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.262Z","timestamp":1783893520262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"POST /api/user/getCountryCode HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nlanguage: en\r\nlang: en\r\nOrigin: https://usdt-go.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://usdt-go.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iTUmiWzNA4i5CCY4w7u1CUuRbcdzcR%2FA2Fu9J56kHMjGXqprGYKkI2mpjuarAjlNcMet9UB4soqtEslPdhFZ0E2%2BCOYE2BX%2Bu2Ya6betYBdlAGFPyLCxpBZbpUC66w%3D%3D\"}]}\r\ncf-ray: a1a34f85afd5568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22018,"size_decoded":6240,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (20211), with no line terminators","md5":"ec520b3418b581b9b42e2cc0d95ab2bf","sha1":"58b482f8adfa2ae036d957b880fd0c0879944736","sha256":"b97120c2c7995a2b13bb06e5ebe79fbea4f97a04eadb63431f57d3b8a0f54ee1","sha512":"bfed4de1b10c5c8095d1363569674d0d8ab162d7ffe682811df3e173c4de42aad0bdb0f0575b267ad0b479509bc0fc495d89b64a71a8840d1ece8e76c0008778","ssdeep":"192:0N412kx/U7/cLVkL/GWJfQXvAYLB4lVDiZ6OU1L2cCDQHk3jnB8LWlAQnZU/6Eun:0NouXcvAz2Z6UFSy2WQ2gn1C","tlshash":"32a22f7e650cfd6dbf24a6e3a04b27390ab5b1bd06c85c1bd5cc9eb2f2d16a92431530","first_seen":"2025-09-21T22:51:26.860054Z","last_seen":"2026-07-13T14:16:28.219409Z","times_seen":92,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/index-b1orZhfn.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:39.784Z","timestamp":1783893519784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/index-b1orZhfn.js HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:39 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FecFQcHASv8dBXSCnyQvb59LK4H30LKCAHbiTlO5VUl9wASDE5M2UVgkr7ZwU35osER8iI8hlZaF8P9O7fkyYBWOkYxVOB056DoumMV%2BB1v1XlAfSZoNeR2JrUw99g%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-1cf0\"\r\ncf-ray: a1a34f82af86568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7408,"size_decoded":3712,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (7391)","md5":"1ac5f51c8141e59b30ae8bda79d8ef47","sha1":"44309113284fa04432b05934d4036e473a9e9351","sha256":"69734d6e50e240da5f0d29aa0c822f29836b53c919f49d24d7bf009c5210ae36","sha512":"5fdd430afe99d7dcabdf8a76f774b220d4de47befb102e7bb14e7b94777d24b44477bbdee1737736d0bb2da8c0272150ac1f56991e8cc8faedd64dd03b57fc54","ssdeep":"192:dMbilVnJzCA2ymE06YR3oCTXGb5HLy8InrlrhvDJvqD1:dMWvnJzCA2ymE0F3oCjs5HudhVCh","tlshash":"70e19589a813c579ab7a185444a81811714cffaaf414cda9f3fe8c0ab774ef9e690371","first_seen":"2026-07-10T15:17:59.664594Z","last_seen":"2026-07-12T21:59:13.950756Z","times_seen":2,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/currencyItem-BOVcjtwy.css","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:39.795Z","timestamp":1783893519795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/currencyItem-BOVcjtwy.css HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:39 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YsSgMYHWpc9Al5X26QPYp9xTx0DbYc0hKacEI6sQx3YzdqFEH1uCwMiF2xXydx0dVSfRttIRbqLvz5st9hwn5iQRq3%2BPh9RXEYznktKE20XvG1empHpghMp0G8HvQg%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-7f2\"\r\ncf-ray: a1a34f82bf8e568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2034,"size_decoded":1272,"mime_type":"text/css","magic":"ASCII text, with very long lines (2033)","md5":"cb3f54f7d86ca1dd7a5d781df82ec644","sha1":"f2250ba8632bb13b7f8f971d6403f913256b19e2","sha256":"3e539f6399544cc345dc104818c1e5abdcd6cfb230deda65541490906975d199","sha512":"687d0ee20c34e9fffd4b863d76495d37bc444e37ca150d46b3b272a29b7c9168a37842c715188ad915ab33dd06d8d58cd5f858ddedfe8de268351f75102d5a6f","ssdeep":"","tlshash":"2241af8463261374e937d49eaea8420cd0643fe1544b92d9e89f4f231ccba935ba0ba5","first_seen":"2026-07-10T15:17:20.20105Z","last_seen":"2026-07-13T14:16:28.225424Z","times_seen":6,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/api/common/file/preview?path=%2Fminio%2Fsolfare%2Fmarket%2Fcoin-config%2F46_bnb.png\u00262.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.175Z","timestamp":1783893520175,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /api/common/file/preview?path=%2Fminio%2Fsolfare%2Fmarket%2Fcoin-config%2F46_bnb.png\u00262.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QrBYJtZCHDwsXsTHHGdEjZeYZv3splXHcUXouJzRB3N8gpECJQl2nb%2B7YCcaLfg4Ophl0Gg95cmMzfYbNDvOzYGdjBjv0g%2F68eh0CTBYxbaJ%2FqOnGltaz87nBWOdpQ%3D%3D\"}]}\r\ncf-ray: a1a34f851fbc568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12869\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12869,"size_decoded":13581,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a533eecdee5a789e7d94f8f79f95d588","sha1":"f1ae6df3a9baf6dbec969c6d1ab622850a282895","sha256":"ea257fac91d01858b7dfd0361f8b480caeb3d57b080570ef4b4f41d5d7e68c90","sha512":"e46ca5c2239c89c783805b1f4e17664118e57e95dff6513b8ff917aaaa763b922c6286b48d0e6daca644ae30c3e821674dade74a056837865353b451c50d074b","ssdeep":"192:3GSu8nGgOCcrSaheqQThcTrOcOAasSqXzcxfuZWfWOKJ6mVgCd7mOOwRB0IG:5/POzrSTThcTaPAaFqXzcqG6ekvP0IG","tlshash":"1442bfd83898c3e455233e69d56e4c138122251a66588517f22a2b7dbf03af27fcf1e6","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-07-13T17:55:34.618583Z","times_seen":830,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/api/common/file/preview?path=%2Fminio%2Fsolfare%2Fmarket%2Fcoin-config%2F50_trx.png\u00262.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.182Z","timestamp":1783893520182,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /api/common/file/preview?path=%2Fminio%2Fsolfare%2Fmarket%2Fcoin-config%2F50_trx.png\u00262.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ARK8Le0kAvO6%2BR6mBPNIZhshU%2BoXwEEJU4grQ6h07BPt1xKhdnMrtX6m8%2BKHQ9A%2BOy87jxml6QKR4wa8lARciVIphZuGMpnfJ82iuJeWlGXnfgI4mxFpz%2B63lHiK4g%3D%3D\"}]}\r\ncf-ray: a1a34f852fbf568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28273\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28273,"size_decoded":28989,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d5ca5f90c7a46cb88e5f57b2d3046ba8","sha1":"4a46fba9e1f7e0419539519e1936e6002f99b3a8","sha256":"a584af003890eeb5d527e91031218b66fc8d429ce7d8ddc5f5ceb9efaf627a40","sha512":"60e2cb71c7155b2f51159c37f53d85c567698b9baec7ffc34ec898df057fb64e2528909f68df9e901bf5243a4ee451f0ff432e210db1635ca0c448073e7811e2","ssdeep":"768:CXuoEFXvWj4CBn04bX73fOlLiRO2lFIVmfSD:9FXvWj4CueDGlLmOuIcqD","tlshash":"b2c2d005f8f592ca744cc6104925cd97f273a15b30a53eda3ddcca6f7f9c9e916a0282","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-07-13T17:55:34.592554Z","times_seen":625,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/api/common/getMt5Amount?coin=xag","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:37.207Z","timestamp":1783893517207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nlang: en-US\r\nOrigin: https://usdt-go.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:37 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://usdt-go.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LMyYRShuc3tDTlBsgS3k6Wsa8pfcrh2sHk6eBmBgO0lDHPinaVmDzhS7USOxphrQ%2F5APnemdjup1C8M%2FgayJBj97cT0TSDSNkTfSb8lBjJWSVr3hfJV2RsPWoT9ufg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a1a34f729e6b568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":866,"mime_type":"application/json","magic":"JSON text data","md5":"2ed77833585e7038fccba2156fbf6b9d","sha1":"0dc73d480eaad506a3d785f6b7284695bafc8c21","sha256":"252d2c1a72b8c6624a09c0511764cfb3a02853bbd15e15192c6e4a4154fefb18","sha512":"17b44e645fdc3fcd9e152ac58ea16c5cef9af659bf672493e0fce28b488e205e9561d146cbe2f1a15927d01413a29bc8eb4cbe3185e10a14fb9a5e5534f0d615","ssdeep":"","tlshash":"779002551c588286ac8340b595065204002435602634d2484d59522590982622040c98","first_seen":"2026-07-12T21:59:13.952953Z","last_seen":"2026-07-12T21:59:13.952953Z","times_seen":1,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/api/common/getCoinList","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:39.776Z","timestamp":1783893519776,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nlang: en-US\r\nOrigin: https://usdt-go.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:39 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://usdt-go.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rdyxZ%2BPzvvCwOF6mtMr4UkzrUfZE7xXYSPV5WNs7o9eSH6vBRwke6MgxkjzNkvsDWEz1l6FzslVCD98Edoaxg8MZwv9u1OwfLh8g0kjO3V0i6IjhHehlbUzG0rg8Hw%3D%3D\"}]}\r\ncf-ray: a1a34f829f84568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24885,"size_decoded":3683,"mime_type":"application/json","magic":"JSON text data","md5":"dcee5c88b8d0df88f353c0c7c8f02739","sha1":"c05baf1026475baf15dac80b1a49a6a972931b8e","sha256":"72f27525ba22dabdbc26ba66339631c2d593967fbc1e9846fe03b61b8aa801a9","sha512":"b8bb678ab95607772cdd8c60505f68a346141df37e48177ac761479022ebe8702c465a84df97ab55c4277dec44478858c40083348907576c8d6d342d4d71de4e","ssdeep":"384:HskrhpJ7t5oYNonuo7FKtx5xqqdy61jG6W/L2zFZqGdEtrc9XL:pD","tlshash":"3bb21f841019587ac47a86d22effbe22109d3bbff9c98d16c6d98dc849e5eb06507f07","first_seen":"2026-07-12T21:59:13.953921Z","last_seen":"2026-07-12T21:59:13.953921Z","times_seen":1,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/index-LycHB41T.css","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:39.788Z","timestamp":1783893519788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/index-LycHB41T.css HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:39 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m3BjfNwZwD48VP%2FhhIPSXKb6lEY7XyuPb2GsA6oXjIDmPjBfNOgD7TU85PXweVsk1ZlJwBiJiF8ptntikkyVFcnbpWJZouHeaToa8pZFLuOysoBQHaaEpd3Yq5nNkQ%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-10c9\"\r\ncf-ray: a1a34f82af89568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4297,"size_decoded":1811,"mime_type":"text/css","magic":"ASCII text, with very long lines (4296)","md5":"704e1cf20a0611ef741cef57f299bd3d","sha1":"903ba60f7093fcccb336b247266f88a672dfc943","sha256":"743fc1d87442e3a6f34f80e3686c9b06a941aeefe1942017530653f60de5cfde","sha512":"d53d21e6dd9423c7681c90a072609474c62e93d3dbb2559bfdbfc324ce3d27eb17bcb809c7d747565fc7f785ed2ef96627f23f065efd644fe7d0858b294a2134","ssdeep":"48:EYAHMEWlTphodXWLKAye0V8hMixuFqgdXGZroyk4GZv7l2BTXKdudDI7daGZLTHD:/IFWllh0OKAy78h9xAKrQHaE","tlshash":"3e911f68f7a911356e73dacf6d24a98cd0182e51e0978e84f217a50607ffae3271139b","first_seen":"2026-07-10T15:17:20.186568Z","last_seen":"2026-07-13T14:16:28.232107Z","times_seen":6,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/en-CrgfCZic.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:37.408Z","timestamp":1783893517408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/en-CrgfCZic.js HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:38 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q0Vpvs%2Ba54Z1hwBeakFdgIR%2Fef3%2BL7IbVQFloGXMYWUX1Bfs41M3TCEMYTjCXhpm%2B6Nd0OPHPL5N6ZprVO1CdX%2Bw%2BojFzDZ9%2FcEhUt2HL9Qe6%2B4tO5IzEbzTmqQoRw%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-b1e5\"\r\ncf-ray: a1a34f73ce74568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T02:18:32.815563Z","times_seen":17253256,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/api/notice/list?key=ROLL_NOTICE","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.160Z","timestamp":1783893520160,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nlanguage: en\r\nlang: en\r\nOrigin: https://usdt-go.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://usdt-go.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vkk2coehGAYhWNmdp1f4oCRFbV5mU0hcx0Gtqzu2PCzESU5qaXx2b55Zj%2BKbiDqw9%2BGOPHe5kE4isF3CqrSmNRUQYnomAwqpj%2BQR7hal2KR2JpOE2sVssZ1ObGHT5g%3D%3D\"}]}\r\ncf-ray: a1a34f850fb2568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":577,"size_decoded":1201,"mime_type":"application/json","magic":"JSON text data","md5":"bc2ac89994548b0f77c2368cc6f44e44","sha1":"bcad3e5beb0a17e412827fcf219847f8673e5134","sha256":"3486a599c14c2c7cf0155a4695b70c0837bfd4ec10415d4173ccdfe3c57c9340","sha512":"6e0b569a5b1c6b2691ce28466fd200ac449b7eaa4fa12af4dddec661e57ac43a4d046927e9682a038cb7ffe197993d52c88bda4e305ce61cef12b78bae01f38c","ssdeep":"","tlshash":"a3f0461e14388e7a4c0644c714c8bdcda5af1647d660cd3489abcf1c82f55ba0a1b948","first_seen":"2026-07-10T15:17:20.205Z","last_seen":"2026-07-13T14:16:28.22182Z","times_seen":6,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/api/common/file/preview?path=%2Fminio%2Fsolfare%2Fmarket%2Fcoin-config%2F48_sol.png\u00262.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.180Z","timestamp":1783893520180,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /api/common/file/preview?path=%2Fminio%2Fsolfare%2Fmarket%2Fcoin-config%2F48_sol.png\u00262.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=txkUNpxjqKo8zfvQKd%2FwPtn1VHqV3h%2BbtBB9IDFsyU3rJ2wE0tz9UniQgesWtCFAfTf6fOQQT3Aeaa7YLcfthFfDYQIRiJY2u42ec4i%2B4sf%2F9v2hcKa7AyDpcs9dFw%3D%3D\"}]}\r\ncf-ray: a1a34f852fbd568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25649\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25649,"size_decoded":26363,"mime_type":"image/png","magic":"PNG image data, 250 x 201, 8-bit/color RGBA, non-interlaced","md5":"670c723abc22056bc5368ca2a97dd6a2","sha1":"5ba69b915180c31e4d35a524a9de7b3409ef80a8","sha256":"11192935f626fdb37ddfd8418d754feee326fc6f0a3ce7aa6e61283a820d8b09","sha512":"546901ff0dd66b4768e7560c2ccdceedc3bdac577eea114e600613d98319bde07a84d4fd8a303f4c34c05b3a26c73f03602ba38aaa5436dfcdac6712e0868652","ssdeep":"768:9SDR4lelsfdJTM1JiB+mP9LsYKPlAgezlYWXu23fgiqs:9Alsfd9MqBZ1L5MGgQuW+2vLqs","tlshash":"feb2d076137254ea4442115b97364e812c39f4e3adea6e2c7507a40c7d4a33b30db6bf","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-07-13T17:55:34.652607Z","times_seen":833,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T21:58:33.581Z","timestamp":1783893513581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:34 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ucC2q9FJyakQOqYylnS1JXksfKw1E7gYMcy15NkuWXA4lAjS0u15lk04ipvzGI%2FkKSTa6vUY3WjchT74Ei1yKy2SaY0fP0oQcvwerR16t6BUkZfB%2F9DDsP7pyGtiFA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1a34f5c6d69568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8467,"size_decoded":3694,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094)","md5":"53022ec2bbc7554f139cb352313ab9b0","sha1":"89bc60be877da168fe7c039844e75922ec26da6a","sha256":"a4cd7162f363a63fbc835d6188775ed3ec1fa9d3ac0e22303f96a14bbed303d7","sha512":"7676c026d9d483cc4987e53acecbaab4364a5467e791eeb70273498de926df12d2c6a4c35a2bdbe19f28deb38ca8582e0de8959ef8d1c9c38f28604bd0169ea2","ssdeep":"192:TFz9YiINmSCyzy3+jVBOK4SZCxfi2nfD3bLuB1XiYi6fo:1YXX5ZCxK2USX6A","tlshash":"9d029777ec74cd2603a5d12ba9e6b504e9611247884a6c18739c40ee4f99fed84efb3c","first_seen":"2026-07-10T15:17:59.683063Z","last_seen":"2026-07-12T21:59:13.90526Z","times_seen":2,"resource_available":true,"data":null}},"time_used":726,"timings":{"blocked":-1,"dns":64,"connect":14,"send":0,"wait":648,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/api/common/getAllSetting","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:36.761Z","timestamp":1783893516761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nlang: en-US\r\nOrigin: https://usdt-go.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:36 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://usdt-go.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XvyU4pwWGY446W5UuPYUnFC6FZbKiabqWyAFi%2FCf7wrB%2F8fvVn0KuJPAjRlHvC4vtB638teiFkjDR5hZeA9RUeC3bpvMIytUWunpZGf%2FVpkJDJtetqXZl9VSiyJ2xQ%3D%3D\"}]}\r\ncf-ray: a1a34f6fce3e568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18889,"size_decoded":5559,"mime_type":"application/json","magic":"JSON text data","md5":"c7d4a3eb3eb1abd039c28ac6b8b97d6a","sha1":"c1e2b169ed94dd5df55caab1625b89b87470b165","sha256":"ecd227357a780bbbf274c8d58c89dd5ff32e24ff82905165b7d312c6da50c0b5","sha512":"8e140e1cddab96f7c082abb5426c63db2d5b5a0aac8a8fb2cdf88a93fa7cb8ead6ffcb8c59e0c943c337e4f59d9dfdac3d806882f89da1d802a873d40882831e","ssdeep":"384:st2Ar/SVQe5tv2v2272wI2EjNiB+ZsTYtIPW:a1xjlW","tlshash":"d582d89d35d8ccb982eb2ad7c0eb7f4db9dd29abe5949c05e4b2ef4c8444971080b00e","first_seen":"2026-07-10T15:17:59.661727Z","last_seen":"2026-07-12T21:59:13.915339Z","times_seen":2,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/info-BTLEttjQ.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:39.792Z","timestamp":1783893519792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/info-BTLEttjQ.js HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:39 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O5JsxoyN3bL4Uc8VtKAmWuLHwL%2FCdYQRKokUZ%2BbXboVqxKb%2FYFpe0MgNEKwGq03zR3s8wBjNKF8GIF9txtGMJVA%2B66iRX4T0cpveZlS7os2XIjh%2F9hgxGdmTTb1MNw%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-12e\"\r\ncf-ray: a1a34f82bf8c568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":302,"size_decoded":882,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (301)","md5":"71fe2c7029607b0e0b1b0ae04a6a3c45","sha1":"4678a2a4ef5eaf2c096c6110c7e598ecdde01f96","sha256":"5ce7bdae3974574e420e9ff1fdaee2d64becb4665b20571b78a0f16365dac0cd","sha512":"b8c8b6f11216a20d27f300b3f7320d015764f76538f2fc2040bcb52841483dcdc434cf4ff9cf1e9278fb9ea07b133fd95295652cbc01b7d4892961c10a6424ee","ssdeep":"","tlshash":"26e0c25e0c03a7f3413918d921c14f012a47422cffd74fec14068c028ae8c82f42ec04","first_seen":"2026-07-10T15:17:59.665638Z","last_seen":"2026-07-12T21:59:13.912726Z","times_seen":2,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/platform/dev/config.js?1783893519771","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:39.773Z","timestamp":1783893519773,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /platform/dev/config.js?1783893519771 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:39 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C%2Ba%2BJh60iiIs2wHsufxDUCXKIQIjNjvUWpOFrvMhf0PrTMYupiiGCJy0NqUGdS8A%2F6WDIg7vjEUPBDt2nLrnKVMF2%2BRgyRW2eMVR5brDwChbIaE7kZh2SSSsIjFk9w%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cc4-17e\"\r\ncf-ray: a1a34f829f82568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":382,"size_decoded":958,"mime_type":"application/javascript","magic":"ASCII text","md5":"e5b2d14d21bf45992ec083408f892f36","sha1":"ea0676026f6951a8f24bd9d0ecae136eb148fa49","sha256":"600378e8acb9d09724ad658249830e95de4a79579f9d12eaa2d4668d2755ba1c","sha512":"93f487b83bcb716539d3dff7e7f3ed3012bb69ea2fb62e778d327ed589bc4a7113dd7b77c0e71278020613d2cc326c52e19ccbc874bc4ce055bf432cae3c1d7e","ssdeep":"","tlshash":"fee0f8fb3238c1b050809e1a2cec502bf3db25738c9c0a2ef484aa082e4de6c217c090","first_seen":"2025-06-03T16:32:00.298116Z","last_seen":"2026-07-14T17:49:40.776737Z","times_seen":21,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/resource/fonts/Arial.ttf","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.108Z","timestamp":1783893520108,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-go.com/assets/index-8dWXjc8b.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 09 Jul 2026 09:41:24 GMT\r\netag: \"6a4f6cc4-ff9e4\"\r\naccept-ranges: bytes\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0OtHDf%2BqQU5pUvYM5uvH4KLydUf3mgBnOBORXHNrl%2FdX5wC6cvFGtsUdG47dX1m8c31HNnP0nZBy6THcyHfVZiFFf5OJnA4Uz1qZRGef0nFVpZK4rGDRqQUKle%2Ff1Q%3D%3D\"}]}\r\ncf-ray: a1a34f84bfa7568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1047012\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047012,"size_decoded":1047727,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-07-14T17:49:40.758322Z","times_seen":2005,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/resource/fonts/DINOT-Medium.otf","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.110Z","timestamp":1783893520110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdt-go.com/assets/index-8dWXjc8b.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 09 Jul 2026 09:41:24 GMT\r\netag: \"6a4f6cc4-11d88\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ckhv3gCmFkYxqTU8CMun4w26vWzZgmwEVyjVsfVkc2zlhvlkQUQ29egGwPHIQp1eyhKHUrbtCtt2gFlMFbGE0R%2BydF%2B3PmChriHYBXQGBgwN3jWw0ojefQPntoPRxg%3D%3D\"}]}\r\ncf-ray: a1a34f84bfa8568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 73096\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73096,"size_decoded":73807,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-07-14T06:19:21.861274Z","times_seen":1586,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/api/common/type/defi_activity_type","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.170Z","timestamp":1783893520170,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nlanguage: en\r\nlang: en\r\nOrigin: https://usdt-go.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://usdt-go.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mw4TkVQ%2FJR4qHbG86Ah2LM4qYZ5kpZO0lwYYUAwhVhSX%2FBxWhf3vbkOqwPM%2FuVxodaaP8r9ZXS8eqHfu1aLHr8xdzbR7C9ZfY5g6%2BJj2QVJGIqccJBPr7gPrWUgZvQ%3D%3D\"}]}\r\ncf-ray: a1a34f851fb8568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":659,"size_decoded":1088,"mime_type":"application/json","magic":"JSON text data","md5":"7db476c8f7e2b9129fcc82813f4fad47","sha1":"eef575b4bfb589cbed25b5845c5e8d6efe069512","sha256":"2ed90a93ac809ed39fd2cb26715bd6ba2f2ae94dcb18d3d3d2f48d0628b6a631","sha512":"30d825ce38d5c48da30c972fa522f51bdda3831be9ffecd8d8fb57c341121a988e91c35b924c3cc38838deb411d6b17f4c86e26c27f71c8b66f3d59760e9b380","ssdeep":"","tlshash":"2301f419393dcebb0d8f55e745ecb818699c0567a4e0aca06caa0f3c5ae4171098920c","first_seen":"2026-07-10T15:17:20.241139Z","last_seen":"2026-07-13T14:16:28.25413Z","times_seen":6,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/resource/images/app-icons/app-tab-assets-active.png?2.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.194Z","timestamp":1783893520194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /resource/images/app-icons/app-tab-assets-active.png?2.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 09 Jul 2026 09:41:24 GMT\r\netag: \"6a4f6cc4-5dd\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ymDYaUmcpTiHx9DP9CJOHgdUqt0KLAwlOFFPhuka0eAUbaYqZ7FM1Q9oBRsZtcxPZ3IxT963jNf4nUjwyPgBZY42tjO2zxMBMgZH9V3Q9GHGBiVnEkiX%2FqTNGL4Ug%3D%3D\"}]}\r\ncf-ray: a1a34f854fcb568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1501\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1501,"size_decoded":2189,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"04c32e5d397109eb3f5cf739d254f31b","sha1":"577e8aef706da60f4f15651e5dcbef003c2cd451","sha256":"66c8387899dbeb0304b31fd58942beed6bb238a83c59e11a2ed3a5e2caf29795","sha512":"3f5a3905e662bb7fb71436ba258fc5a9c685ca5f96fba1f5c28a091fe19bb41b0316a484bafc71240ab7fab6b0044545cca1a93be242bb2e3719c1a7bfcde016","ssdeep":"","tlshash":"ec31e9f260a5f788dae184b6131f7c9095c6cd1d336abcaf9c286297444ea65c331290","first_seen":"2026-07-10T15:17:20.245927Z","last_seen":"2026-07-13T14:16:28.22419Z","times_seen":6,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/index-BU4j9-0T.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:36.768Z","timestamp":1783893516768,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/index-BU4j9-0T.js HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:37 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CNzh%2Fb%2Bx3ctwEddfIfVouV3U0OlVPxRKA9zhXSgPY81s%2BQDuZweX8VZzEVWsJe0NeDAOtDGST5arkfEukQ3dGD6LZ%2BQCwca9v0Dm3ECMw0kMxEvNH01fstEeOLFdsA%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-3264\"\r\ncf-ray: a1a34f6fde40568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12900,"size_decoded":5629,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (12899)","md5":"819cbddcd81c956a7ce1172fc44423f6","sha1":"89ed9664a2c4794b2fc0b2f6ac750fa9bc5aa5fa","sha256":"f03bbafcba6a7633c9c87ccb45ed3b118387ce0c4bf7d3863277606bf894ada4","sha512":"619fccc985ede337245c2fdbc9ee9a0277feba263674c2f240052f706195f1e5ae40bfafef95fe51185711d74dca16e0b13d9f8c09e56ab3f58d208d09695f91","ssdeep":"384:TfnZKe9R4a4cqZZI2hwhgaxF+cROpMfdGq8koek+pOrB:TBJ9R4RjwKIVROpMfoDV","tlshash":"bf42095af90a8938d5f2d4f580992010b62d3fde60069457bafe7c0527b7ef8a345b1c","first_seen":"2026-07-10T15:17:59.686658Z","last_seen":"2026-07-12T21:59:13.932133Z","times_seen":2,"resource_available":true,"data":null}},"time_used":852,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":852,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/charting_library/charting_library.min.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:39.456Z","timestamp":1783893519456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:39 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XVjniDcEQ8i0bAS7JNoqOdw2bdV27bfhxZheSGEuJhmwtL9hKkwPpnFSz7lfRRfJlDvxowQxq%2BQWYdE50L2YAIZW9AhkvEgJs8reGRWD70uKgPnxdPXljE2ElliKvw%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 4\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cc4-2a6a\"\r\ncf-ray: a1a34f809f4f568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10858,"size_decoded":4010,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-07-14T17:49:40.743501Z","times_seen":1275,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/index-LycHB41T.css","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:36.774Z","timestamp":1783893516774,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/index-LycHB41T.css HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:37 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wzyjqPCrBI1bo%2BotVAxzKF7XO9UejsQlCf1DXeQ%2BR%2BM688rnS5wlsKpEPACiKEkzPikpLMzJj9ym9Zo7qOE4832%2Bw2miCA2WSF1P8b5v9jiCz29%2B8h%2BnyO%2Bs31IdYQ%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-10c9\"\r\ncf-ray: a1a34f6fde48568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4297,"size_decoded":1816,"mime_type":"text/css","magic":"ASCII text, with very long lines (4296)","md5":"704e1cf20a0611ef741cef57f299bd3d","sha1":"903ba60f7093fcccb336b247266f88a672dfc943","sha256":"743fc1d87442e3a6f34f80e3686c9b06a941aeefe1942017530653f60de5cfde","sha512":"d53d21e6dd9423c7681c90a072609474c62e93d3dbb2559bfdbfc324ce3d27eb17bcb809c7d747565fc7f785ed2ef96627f23f065efd644fe7d0858b294a2134","ssdeep":"48:EYAHMEWlTphodXWLKAye0V8hMixuFqgdXGZroyk4GZv7l2BTXKdudDI7daGZLTHD:/IFWllh0OKAy78h9xAKrQHaE","tlshash":"3e911f68f7a911356e73dacf6d24a98cd0182e51e0978e84f217a50607ffae3271139b","first_seen":"2026-07-10T15:17:20.186568Z","last_seen":"2026-07-13T14:16:28.232107Z","times_seen":6,"resource_available":false,"data":null}},"time_used":645,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":645,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/vendor-CumRKK6x.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:39.460Z","timestamp":1783893519460,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/vendor-CumRKK6x.js HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:39 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FURqVaBr9Jl%2F2kDn%2F63VALzDAkmc2L7XFrYOBmQ%2Fcsqtb4JC1cpfxGkh%2FnWwq0qPv3lDiC%2FTH0KHvk7PZ5aFASc36%2FSA0WOsbBPzUcy3Mjy7ilK0Wf4lUkhILSeXyA%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nage: 4\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-1219b0\"\r\ncf-ray: a1a34f80af51568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1186224,"size_decoded":376494,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65506), with no line terminators","md5":"c8ae7dd0965648ab911c1286af26b76b","sha1":"e0c8fab0cfb260a2e42cd04816615b4db41da8bc","sha256":"56387a1eb1cd344359b3fb5e80a376acb70f661e2e7ed25912dfa1935c1341d8","sha512":"e224ab756e9a8123e8e685f9ce284184db3ea2f74e66c7d658afe8d7e9fb72748fe65ca079f82e7701618b126418f2017a96a33fb2986b10b5d327ee6b780955","ssdeep":"24576:IRoPPb+Pd3mp8uZ/+4eh9ZvLUWc8V3a2be9:IRoPPb+Pd3mp8uZ/+4ehTvLUWcMPbe9","tlshash":"dc252ac57292f06147ab25e100bb1006f3396e59740e84a8f16dd8eb7db9d8992b7f3c","first_seen":"2026-07-10T15:17:59.692054Z","last_seen":"2026-07-12T21:59:13.938982Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/vendor-BHm7QtJU.css","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:39.461Z","timestamp":1783893519461,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/vendor-BHm7QtJU.css HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:39 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zlm6GvfNXJRGFhH6SsFKzLF5iXQAG4kck7Ls7NJCyv85wlQaHLQYlL%2F6thS7v75x38AGMfNxVE8CSWBsZBReodJzb2tzV6yh4KqzSpOXVih%2FpABS9hutUIaW9mdLlA%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nage: 4\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-16997\"\r\ncf-ray: a1a34f80af52568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92567,"size_decoded":38994,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"73d5ada7e6c7bab90973cf41531fc253","sha1":"225582762a695b4a7f5c894089924753e9f144d7","sha256":"bed6b2959cd5057c70606c6e8dfaca18a993f60f43946261e893fb3cd400c3c0","sha512":"85a3e0b4f2cfda4d32163a957a5ddd4674ec55144495a579339588ad5d65bad97251fe046b2c4dc172d10c45d7646915b74ba21bd2fb5b66392649a4ef8e224d","ssdeep":"1536:ZTIyNBi3MFYaQj73rx3WqyrtpqoSWEDZEnX7X:ZdN0rxmNH9yDWrX","tlshash":"fd93c5a5e9c4a1fc6f26f6659b4766d8f13cf661cc01daa0f109512d0fc7bf50223a2a","first_seen":"2025-11-02T12:35:02.119547Z","last_seen":"2026-07-13T14:16:28.245416Z","times_seen":63,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/index-C30bBO1d.css","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:39.791Z","timestamp":1783893519791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/index-C30bBO1d.css HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:39 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\netag: \"6a4f6cd2-2a\"\r\naccept-ranges: bytes\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zdteS%2BSZBTtf%2BISv0AFz4Xp8Oe45lJQ6ghbqQMFxm62ExhNWh6eOXtR%2FXDOoU3z1OBnYihA5f3X0uFiyAurMgO8nSp4VkOSoSNtTwwMG%2FWfFxkgRA48zbs%2B4ISJoFw%3D%3D\"}]}\r\ncf-ray: a1a34f82bf8b568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 42\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":737,"mime_type":"text/css","magic":"ASCII text","md5":"c76a69df89555556dd2c2c94d81ba658","sha1":"9c20cf3620af13b02769148e52f374570f843acb","sha256":"b1f9304f7e3412cef02f6da2342816fe4452c9f690ec7e427c415c3947e7aa03","sha512":"a28adb05312351e6f85156ecb4d6fc587fa0e31ca296eda7d32ab0f14b023789c27a27d6c3e9ef304ca48358bb0ea6364182a5ac4a7a91d3d62c437991f9dbdb","ssdeep":"","tlshash":"709004dc511d1cc1f333d55550351d14c5057f034c4140f0c3c154403d43d4535f5315","first_seen":"2026-07-10T15:17:20.200124Z","last_seen":"2026-07-13T14:16:28.240884Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/api/common/getMt5Amount?coin=xau","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:37.205Z","timestamp":1783893517205,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nlang: en-US\r\nOrigin: https://usdt-go.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:37 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://usdt-go.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5vDvVhN%2Bgz1P7%2BgIQVQM3sMjU8V2w8uSV6bGBZhRbhD1INU7%2F5iyxsNBIhsE0AwKx%2FqWR5JFlEVpfpWmfaX3OQY9s1xkJ2S9Ym2w5tYqHluvdcZvUZgNxP6Il5n5aw%3D%3D\"}]}\r\ncf-ray: a1a34f728e6a568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":870,"mime_type":"application/json","magic":"JSON text data","md5":"b25bbba4e0a49030de537521a545929f","sha1":"6ea398c83b44827ca0fa1f358fe76f2925e68aeb","sha256":"d7410e1acd74de7515ea1edd5530cc0a06e414b26159a082faa9692a678b0cfc","sha512":"5810665e1b0624f456ffec191c581a63be2a121c1684846efbf3c0fe908f9d6155e4b2306eefb77670082d7d89588405dd3a18602d690d779d7d04032ffbc6b8","ssdeep":"","tlshash":"f89002555c189282a88300e59906520820283160262492889c595125c1c82622040c58","first_seen":"2026-07-12T21:59:13.960287Z","last_seen":"2026-07-12T21:59:13.960287Z","times_seen":1,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/index-DwBs6Umq.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:39.785Z","timestamp":1783893519785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/index-DwBs6Umq.js HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:39 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o4itKSBp6O6GgyU0jE2ics0bA1WuHQpk%2FRLgy4mFVAEAIhTZFuACZ2Ofo4DJDWJkdkZ5OeFn1Xe4T7sHnMYuvCUIr7dCOtaWjPkITVqcAxfVSZlpDMshJv6huFFoqw%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-308\"\r\ncf-ray: a1a34f82af87568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":776,"size_decoded":1172,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (775)","md5":"2d824727b4e6d46a0722da4884c83bf3","sha1":"fdf05b783814237cf7ac5a9efc4b4097c7118e6b","sha256":"cc2f198dd4e58d8ff125cff3d0330a2859faeb682b62c1ecf2cb592165221969","sha512":"72fb531da44e78ebc71e13cbb463df97c76829ff5a67f43c765aa599b8a6519531bcafe031129c10285f26a45a70b5c51a89f61919a6bbd84e900f118dfba6d1","ssdeep":"","tlshash":"4101c5f4f80dae7b0eb2094001813b0120095fcde91028e2a8937d291be1a80ca8eb1d","first_seen":"2026-07-10T15:17:59.662702Z","last_seen":"2026-07-12T21:59:13.922451Z","times_seen":2,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/api/common/file/preview?path=%2Fminio%2Fsolfare%2Fmarket%2Fcoin-config%2F42_btc.png\u00262.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.169Z","timestamp":1783893520169,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /api/common/file/preview?path=%2Fminio%2Fsolfare%2Fmarket%2Fcoin-config%2F42_btc.png\u00262.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j620wI9wn0IXyljWowK3K5aPbuUEKBjKzancm7b8z1BXOlznP06MPCpuuOFm9w6NM%2BoyMPhb7x2ioQJGop31aZgnhAqIYCE3KloWLUy0450Q7TZ9r7KPhmQNxZwZuA%3D%3D\"}]}\r\ncf-ray: a1a34f851fb7568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2691\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2691,"size_decoded":3398,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-07-14T22:00:52.318614Z","times_seen":22253,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://usdt-go.com/ws/20c069d8-4f99-48e4-adf9-9138c4a82774","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:36.755Z","timestamp":1783893516755,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /ws/20c069d8-4f99-48e4-adf9-9138c4a82774 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://usdt-go.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: R7uZvnqDyP+Wvjf46LHx/Q==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Sun, 12 Jul 2026 21:58:37 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://usdt-go.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: nmfd+ZMDwxbqL/r3bxS/In7PonM=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Fkm6BqqymBoVSKDETiA%2Bx%2Fv1n8etRBjTIdSyImOxCLNQLXPPU71SnqwEgC31jcrv0grgRSxbarWtkyjYjoC9K0Cwm43ODLguMB%2FpKk%2BlO%2BzeaoUz0RtT20MybMZsXw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: a1a34f6fda15783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=899\u0026min_rtt=873\u0026rtt_var=292\u0026sent=5\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2860\u0026recv_bytes=1316\u0026delivery_rate=3744000\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=1a20cfc4256f884b\u0026ts=636\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1070,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T02:18:32.815563Z","times_seen":17253256,"resource_available":true,"data":null}},"time_used":663,"timings":{"blocked":0,"dns":12,"connect":13,"send":0,"wait":631,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/api/common/file/preview?path=%2Fminio%2Fsolfare%2Fmarket%2Fcoin-config%2F44_xrp.png\u00262.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.172Z","timestamp":1783893520172,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /api/common/file/preview?path=%2Fminio%2Fsolfare%2Fmarket%2Fcoin-config%2F44_xrp.png\u00262.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z1zcmF56U9KsJQzbL6f1jz97D17%2B%2Fd37LMbzyIODUSJD5SNHXsHZ7W9bWKXK6jGiJ4lOOZtr8GIwn9ww8tkVynR7zX8U6d1XSJxeTVM%2F%2BWtWPpVdmfUXPF5Q3gvQbQ%3D%3D\"}]}\r\ncf-ray: a1a34f851fba568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2274\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2274,"size_decoded":2987,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"674b0999f6083084a2a4b1d8b20f3bc1","sha1":"8d14a526e83604e323723b4d25f8f8066f1ede70","sha256":"632f9cacb6b3fbedece774a8d27c436f37dc359de3bb0872ea19603b70347708","sha512":"4c04d137c2448c0d52a4298c858f95c58116c1d77e75899f5acdf6bb61ed839dbdc99fd5556eb63793b81258de40e515540acaeab007da76664476c9be2e514f","ssdeep":"","tlshash":"cd414bd7c53300ed9128e735b8c3ee819c00628d183bb46b89f5ec60b2346d31a53a98","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-13T14:38:36.86277Z","times_seen":785,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/index-8dWXjc8b.css","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:39.462Z","timestamp":1783893519462,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/index-8dWXjc8b.css HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:39 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=geyip2SOxPFyKe%2FoNGwFPpwoaIi2UP3p68Cr%2Fo4BGV7v48dF4zvEmnbZpUbrjmhKF74UNxdYNLpscmmZMzgtdP0ip8zOt320tEU5z2CJDMqDhPshrmQGC%2B2fOecbAA%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nage: 4\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-4dec5\"\r\ncf-ray: a1a34f80af53568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":319173,"size_decoded":74076,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"ac3b6ee003d86f42422546610b4e3280","sha1":"5db8c8abdda489ba94a06b28cecb9de0cbdd3b24","sha256":"14cc618eacb92796316e5b9a224839e73cecb783cb3d584cc9d57cf9b58772f3","sha512":"53e07c8bac3335d0ff578c9594ccaac08e87483e5a6061848e5b9085a00e6668ccea23f4c06ffefb5b83aecfc66298eac3aba957d0bf0bb1af765f75ab3d7de9","ssdeep":"6144:3dB/9S/Rk4UkZ8w71ZACkFDS3vyf58rBeV05Tf:NB/N4NZ8w71ZACkFDS3vyf58rBeV05Tf","tlshash":"c764d8a9a590117c6f27aa7597ce9ad8f23ce6719c118de8f20150094fc3ffa2363617","first_seen":"2026-07-10T15:17:59.700208Z","last_seen":"2026-07-12T21:59:13.902233Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/resource/images/app-icons/app-coin-bch.png?2.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.183Z","timestamp":1783893520183,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /resource/images/app-icons/app-coin-bch.png?2.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 09 Jul 2026 09:41:24 GMT\r\netag: \"6a4f6cc4-1f67\"\r\naccept-ranges: bytes\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dQVus7sO8%2B5w%2BTeIxcbk68aPPXAuEQbuc2CsU3%2BnLjd0b7M3fcxpyUytKCmSa1Vt7bVh3SMtzNJKI7u7lpt1LegZ84HzEbMVm8qKYZmB9M26NtICUltJLWbYCYmKKw%3D%3D\"}]}\r\ncf-ray: a1a34f852fc0568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8039\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8039,"size_decoded":8732,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"1fbc1e8345ca18b441df31311ff6f78f","sha1":"7dee3465004e891b32744fd1650d7881d270fb7c","sha256":"24d6e5a601c933f9b2a8c14f8f7a048c1d6d52209614b389a17b1c124ddd5d04","sha512":"0b2f77f5a705dc2530d2fc6c2aefbf81df1db61a44af45d55418b9b658d5cd9b4593dbd8ff0c8963f0bfe728ccb88838da41631be9cbaf2f31ffbd322958c49b","ssdeep":"192:WSQWiOGMgrZmLI54uvSP8HIrrl0GMVHyjpdcSNxYHrVMd:5QagGI5tahrrsVCcxMd","tlshash":"9ff1bf8befefac2919005c7763432f8a8ba5634fc5c2401958f4589e564bacd9f6c00d","first_seen":"2026-07-10T15:17:20.178567Z","last_seen":"2026-07-13T14:16:28.258246Z","times_seen":6,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/resource/images/app-icons/app-menu-second-contract.png?2.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.157Z","timestamp":1783893520157,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /resource/images/app-icons/app-menu-second-contract.png?2.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 09 Jul 2026 09:41:24 GMT\r\netag: \"6a4f6cc4-ef1\"\r\naccept-ranges: bytes\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5M7VCzG%2F%2FMhi6n4Tup0E%2BcmrjcbTev1D06bUxWv6MSIJBUclbTQ8m74QjVg6WrpL3RD2i1MEGCsae3rzyRtdfcMM4E%2BnYyXNhOczX3JeqlNgH5M372XekSeRayDYuw%3D%3D\"}]}\r\ncf-ray: a1a34f84ffaf568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3825\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3825,"size_decoded":4519,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"ca339720ef71f550a1ede2611068442b","sha1":"5965dbb1198b61df9984ed08a2b024baf2df4ad6","sha256":"c30ab9b5f41858da743b798f90715ab81103592a75e61e60edc4bc2e7b9b6e5b","sha512":"2e969202e0e35260e6d33245f18d330db6d3bcdf2bdf866567b9f57ce5740a5fc494eaa4cb2ffb30e1b51435f05e26af1d01c144494d90bb585b4dc99b6221a9","ssdeep":"","tlshash":"e9816ded85ad5003b0d804e4b7bf68f1a55d8d8b5c1e48784452e45c18536fd6b8a8fc","first_seen":"2026-07-10T15:17:20.244525Z","last_seen":"2026-07-13T14:16:28.228935Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/useDynamicLineWidth-GVuDsOpb.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:39.796Z","timestamp":1783893519796,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/useDynamicLineWidth-GVuDsOpb.js HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:39 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JW8OZZZOx0qk22yTQF2HMKdk0r8rWbiPmaHqcI%2Bz31ACW6vGDVTOY7rMzZlDoDaMegXwHQEZjwilGoH3TiQi4%2Fs3H2wpX6Ne8p9UUUV%2FWNgGIdYypAJskL3nYxDiuA%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-b3d\"\r\ncf-ray: a1a34f82bf8f568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2877,"size_decoded":1792,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2820)","md5":"eebcc038b05f462a53bcb53207981482","sha1":"527a0309c81d8ceb030e190570fac8d1c3f95203","sha256":"889ae76876e29151c372a81d7606e481d5d6b573544a103c2e9e39b13728f48d","sha512":"331e55302318156b60c7be1bf753e763052af3fba9c70f3f6c44a7facc912fb97c7474c52408b82c3a47d0b6c3840b9f2e54e96bdae518e28602d8fb01dbfd14","ssdeep":"","tlshash":"db5123a5f1b15162d2f9402451305388f31f1d93a516cabeb0e95edeb6e5fc25138fb0","first_seen":"2026-07-10T15:17:59.66854Z","last_seen":"2026-07-12T21:59:13.940991Z","times_seen":2,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/vendor-BHm7QtJU.css","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:34.580Z","timestamp":1783893514580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/vendor-BHm7QtJU.css HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:35 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5u%2By%2BHTEs2qiA6NDowC7vIrY7%2BchIXaZBcEuxlv7f6UnzVjZz%2FB8iFqH4pcmEbqCSRAdLijASUW6TT1Litw3kFkchRbp1wXjORv1wjrVCbLNGxbXGZBCfTXlph0FGw%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-16997\"\r\ncf-ray: a1a34f622d98568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92567,"size_decoded":38518,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"73d5ada7e6c7bab90973cf41531fc253","sha1":"225582762a695b4a7f5c894089924753e9f144d7","sha256":"bed6b2959cd5057c70606c6e8dfaca18a993f60f43946261e893fb3cd400c3c0","sha512":"85a3e0b4f2cfda4d32163a957a5ddd4674ec55144495a579339588ad5d65bad97251fe046b2c4dc172d10c45d7646915b74ba21bd2fb5b66392649a4ef8e224d","ssdeep":"1536:ZTIyNBi3MFYaQj73rx3WqyrtpqoSWEDZEnX7X:ZdN0rxmNH9yDWrX","tlshash":"fd93c5a5e9c4a1fc6f26f6659b4766d8f13cf661cc01daa0f109512d0fc7bf50223a2a","first_seen":"2025-11-02T12:35:02.119547Z","last_seen":"2026-07-13T14:16:28.245416Z","times_seen":63,"resource_available":false,"data":null}},"time_used":1062,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":641,"receive":421,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/index-b1orZhfn.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:36.770Z","timestamp":1783893516770,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/index-b1orZhfn.js HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:37 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L0psi29BkkxjGLJBPIrPcRVbDscD7BJeBIwZtTKg5B2l1WyNEaArSDksqJzh0x%2FsBZFQnmiUkgj%2F%2BHaFHyI%2FKLrhinXFjHRrXAoy6TurLg9%2Be8fUKzInDjdaIzXklg%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-1cf0\"\r\ncf-ray: a1a34f6fde41568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7408,"size_decoded":3711,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (7391)","md5":"1ac5f51c8141e59b30ae8bda79d8ef47","sha1":"44309113284fa04432b05934d4036e473a9e9351","sha256":"69734d6e50e240da5f0d29aa0c822f29836b53c919f49d24d7bf009c5210ae36","sha512":"5fdd430afe99d7dcabdf8a76f774b220d4de47befb102e7bb14e7b94777d24b44477bbdee1737736d0bb2da8c0272150ac1f56991e8cc8faedd64dd03b57fc54","ssdeep":"192:dMbilVnJzCA2ymE06YR3oCTXGb5HLy8InrlrhvDJvqD1:dMWvnJzCA2ymE0F3oCjs5HudhVCh","tlshash":"70e19589a813c579ab7a185444a81811714cffaaf414cda9f3fe8c0ab774ef9e690371","first_seen":"2026-07-10T15:17:59.664594Z","last_seen":"2026-07-12T21:59:13.950756Z","times_seen":2,"resource_available":true,"data":null}},"time_used":641,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":641,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/platform/CRY/logo_144.png?2.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:37.726Z","timestamp":1783893517726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /platform/CRY/logo_144.png?2.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:37 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Ffc6bVI0w4Q99kX8ALCRGJ9hKNYvIvCSLkxVEhV6LJMwXbMrK%2Fzd6%2FmKfySe8x2S9pE6miqdPDncRZTtQJIGAfbkQkZr7jd4RAhxXYngaghVg75kqp3aWI%2Ft16JsSA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a34f75cec3568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8467,"size_decoded":3728,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094)","md5":"53022ec2bbc7554f139cb352313ab9b0","sha1":"89bc60be877da168fe7c039844e75922ec26da6a","sha256":"a4cd7162f363a63fbc835d6188775ed3ec1fa9d3ac0e22303f96a14bbed303d7","sha512":"7676c026d9d483cc4987e53acecbaab4364a5467e791eeb70273498de926df12d2c6a4c35a2bdbe19f28deb38ca8582e0de8959ef8d1c9c38f28604bd0169ea2","ssdeep":"192:TFz9YiINmSCyzy3+jVBOK4SZCxfi2nfD3bLuB1XiYi6fo:1YXX5ZCxK2USX6A","tlshash":"9d029777ec74cd2603a5d12ba9e6b504e9611247884a6c18739c40ee4f99fed84efb3c","first_seen":"2026-07-10T15:17:59.683063Z","last_seen":"2026-07-12T21:59:13.90526Z","times_seen":2,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/platform/CRY/favicon.ico?2.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:37.728Z","timestamp":1783893517728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /platform/CRY/favicon.ico?2.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:38 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pgvG7iuakyFQjS4wuAuTc2mo4pFi7i7JDRMNH6fw81aVIU8hzh%2FMT6FiqNZTZhYBmmpO70g%2BoA0jCNdCwehjL8CqCf82IRpM5eebLRlOEiQNnMd7BFEic2poRPPM1w%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a34f75cec4568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8467,"size_decoded":3724,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094)","md5":"53022ec2bbc7554f139cb352313ab9b0","sha1":"89bc60be877da168fe7c039844e75922ec26da6a","sha256":"a4cd7162f363a63fbc835d6188775ed3ec1fa9d3ac0e22303f96a14bbed303d7","sha512":"7676c026d9d483cc4987e53acecbaab4364a5467e791eeb70273498de926df12d2c6a4c35a2bdbe19f28deb38ca8582e0de8959ef8d1c9c38f28604bd0169ea2","ssdeep":"192:TFz9YiINmSCyzy3+jVBOK4SZCxfi2nfD3bLuB1XiYi6fo:1YXX5ZCxK2USX6A","tlshash":"9d029777ec74cd2603a5d12ba9e6b504e9611247884a6c18739c40ee4f99fed84efb3c","first_seen":"2026-07-10T15:17:59.683063Z","last_seen":"2026-07-12T21:59:13.90526Z","times_seen":2,"resource_available":true,"data":null}},"time_used":646,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":646,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/assets/index-DxAZV_K5.js","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:39.457Z","timestamp":1783893519457,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /assets/index-DxAZV_K5.js HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:39 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WIVz3BORkKCnFNH5vN8ZmqumL%2BB6lzC7m6t3HlLvCvPpzsgnkOS8oCqQw5xZ0S%2FUV6BTANC9dszhqkMjCWSrdd%2F4BQYjwjxdGwgdq%2BxFSwes73BWBszF2RWnuPlJaw%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nage: 4\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cd2-1e812\"\r\ncf-ray: a1a34f809f50568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124946,"size_decoded":38273,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (58357)","md5":"06aac247ea21fc64b2629780020b08f8","sha1":"da497238ada5693c8994c7f37be46b3c14b08d18","sha256":"89943598ea734a649ca3f84d38ae07ef9ac8c5610145675dd05784d7c854c089","sha512":"07690a71ba3b2265b36971afd8eb5c6d668673ddf266237a8092c2750b14cf1ce6ca57b34c1316ae3db30a13123cccf42bb93643c348d16b8121da83a03e3cda","ssdeep":"1536:eMPDGSNIWcfkmmGe2SV4yNV7AkUMHwnvhClpd5TBxJB:vGSgkmmGoV4eVEkUoev8L","tlshash":"cec35c8155070eff56fe08882997140031255f56e104cc59ffbe9d7a3baac8ab3aaf35","first_seen":"2026-07-10T15:17:59.675169Z","last_seen":"2026-07-12T21:59:13.945687Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/api/common/getMt5Amount?coin=xag","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.025Z","timestamp":1783893520025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nlang: en-US\r\nOrigin: https://usdt-go.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://usdt-go.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rOyMxcGL6jGlR2NLHLTgG7RLY4Ud1ctrnsu4z5V1ogIwwe4wUPvH2da%2BVDLOjpEjPdepTazEZ8bFE6Lru3h4wE4ZspcZB9BbWVGN8X3ycmY7QffuTOoMTaVEVCIfBQ%3D%3D\"}]}\r\ncf-ray: a1a34f842fa3568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":864,"mime_type":"application/json","magic":"JSON text data","md5":"b534f549afd8981289d1d30def2c63ae","sha1":"fb785bbfafe2b9cbb38928c8102d404fe8bfc141","sha256":"9345f445eed9bd4a3de37a224bf93a85cc5a13aff3ce8c060b590e94bf70bad1","sha512":"f8f533bcdec88bf6ec9573c5601282ba7e1472bd225d22be0b79864177db8674652d6e12bd0edbb308d832118e38419d47819ac14fb0ad55c21f4d634ef4cf0a","ssdeep":"","tlshash":"259002551d588242ac8300b59506521800243164262492484d59922584982622440c98","first_seen":"2026-07-12T21:59:13.976125Z","last_seen":"2026-07-12T21:59:13.976125Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/resource/images/app-icons/app-tab-assets.png?2.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.213Z","timestamp":1783893520213,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /resource/images/app-icons/app-tab-assets.png?2.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 09 Jul 2026 09:41:24 GMT\r\netag: \"6a4f6cc4-642\"\r\naccept-ranges: bytes\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B7NNdV4pZ463ueet3hKSMwMIR8btikxD8GRWXRJr9pntjRj%2FaMHpSSG4kN3Z8XiqVQkOKsH2xwJzGdgT87xgU2U86C0UAYs%2FZjmh5IhUIzhmkCJ%2BfMaQTKjUwcDwDw%3D%3D\"}]}\r\ncf-ray: a1a34f855fcd568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1602\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1602,"size_decoded":2294,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"38cd9ee7a0792ad757af180886bb3add","sha1":"9e013c61bb600788631fc684cd596023af9c0d2f","sha256":"bcaa5a86d53c8665f93d15c6ae5c1c808f52a522e61e5e94cbc40ccf98a6de6b","sha512":"ea5f7ef7b948c1b12e35a66b7fe987133caf6dff98fb80c564b7f1bf883d03eaea988d719fe2dbfd99cc36ba446a626c04e1a269a377930510040b437f49f8ac","ssdeep":"","tlshash":"3331c8cb9e61f522f82c51fb652b3be4d263a1ffcc16c8557148a92f585ea00d9d8443","first_seen":"2026-07-10T15:17:20.220407Z","last_seen":"2026-07-13T14:16:28.215471Z","times_seen":6,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/api/common/getCoinList","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:36.763Z","timestamp":1783893516763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nlang: en-US\r\nOrigin: https://usdt-go.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:36 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://usdt-go.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TS3aFIR0V8eBLgL%2Bpl%2BG2tedYoz%2BhVl6se%2BRHXQozBiegSX8%2FbGpOIUos7SnQx4Od0Kc7vkBQadyfph01HlR59yL7Jj8Y%2FW31LgyHnn5Ovg0xELhvtyeJMzpb1bsYw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a1a34f6fce3f568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24885,"size_decoded":3717,"mime_type":"application/json","magic":"JSON text data","md5":"5bf335682c2bd109dd3d60031ef24e79","sha1":"ccd967eca3683aa41e91e7f204c9e69781582a94","sha256":"56f6b6841e83ba910fad737beb36699ea30818c80b5c684c1a4f5db39819d179","sha512":"ae771d7c1b2c7170f65f8f493eb083018c6cd080698f4d37580c72b4177e6b296e35591d27ef579b405eaf9bf98a614c87a2b52ccd4a882b726c6d7218d8e844","ssdeep":"384:HPvSf4J7L5osob9Ho7/dtx5xqqdyX1jG6WrgtzTsqGdrtrcZXT:ru","tlshash":"fbb20e841019587ac47a86d22effbe12109d3bbff9c98d17c6d98dc849e9eb06506f07","first_seen":"2026-07-12T21:59:13.978028Z","last_seen":"2026-07-12T21:59:13.978028Z","times_seen":1,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":208,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/resource/svg/dark/mengbanzu13.svg?2.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.167Z","timestamp":1783893520167,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /resource/svg/dark/mengbanzu13.svg?2.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FmZEvdQf30zDacjzIlWDhiSpEXszWIrjMlNgICFFPZ0yrorelP4wLpiYZTKx7%2FN8VF6PZ6%2FlVM0K%2FhwcNVd3jx7voopq%2BiEH3gJUrW7NMjvlkKnBXJGRlA%2BGwaznxg%3D%3D\"}]}\r\nlast-modified: Thu, 09 Jul 2026 09:41:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a4f6cc4-3eb\"\r\ncf-ray: a1a34f850fb5568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1003,"size_decoded":1208,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b67f7a436ba80363541f413f6e24cfbc","sha1":"f0811eb9a98fead3d88b34f10e4df69351850b32","sha256":"54de0a609d56eee90e628322c0188d4b85c6f116a6a9a6d57e8a71d0168e24ea","sha512":"b0ff6dc12353db159ab2382cc368e20a793ecf091b27b5429f4d113bf4461201a70b536c3d6d3fd87350aebaf7edb6b2e2bd4427b143b54c6853030527c157fa","ssdeep":"","tlshash":"d011bdbbb6e892f28705ef2062357420952f745aabcb064112c46f1ab57844fccddf90","first_seen":"2025-12-09T04:29:57.855558Z","last_seen":"2026-07-13T14:16:28.233618Z","times_seen":9,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/resource/images/app-icons/app-tab-home-active.png?2.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.186Z","timestamp":1783893520186,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /resource/images/app-icons/app-tab-home-active.png?2.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 09 Jul 2026 09:41:24 GMT\r\netag: \"6a4f6cc4-3ce\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bz0fp%2FELIlnrWSTGG6uCx9KqBVSINuW%2Fl06a%2FNLOzlCnGMzHGQ4L4LS%2FYVnNYWLLhmM8RJFiAZYXQ5NKhfFPPPOoB4d2%2BzSbHv76gYM8SiCc7MermajcIQ1qXSvsVg%3D%3D\"}]}\r\ncf-ray: a1a34f852fc3568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 974\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":974,"size_decoded":1671,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"3d64fe1020f5951bbe1a4d32ffcb4c7e","sha1":"eaa105b16084218fa6dd33134de0482c05e42fba","sha256":"43e89efbfdf9984128f0b0fa8e9fa917f4fffd11e240bd33c1703b6d2e69df31","sha512":"6fa322ce37a1ac9f2099ad0ce62cba52cd36109eebce64dcc370e2297fe6a68abbe27efda8b9502d1bc592210d2efeaf5307ce5468a78c8944cd4501c8405e91","ssdeep":"","tlshash":"221188a539c5a97ac1fe8f31676f8a738a32137f8d63d509462655b27934220035c0b1","first_seen":"2026-07-10T15:17:20.189621Z","last_seen":"2026-07-13T14:16:28.212531Z","times_seen":6,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdt-go.com/resource/images/app-icons/app-menu-platform-rules.png?2.0.1783590098166","fqdn":"usdt-go.com","domain":"usdt-go.com","tld":"com"},"ip":{"addr":"104.21.81.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdt-go.com/","date":"2026-07-12T21:58:40.160Z","timestamp":1783893520160,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdt-go.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 07:59:50 GMT","end":"Tue, 06 Oct 2026 08:57:30 GMT"},"fingerprint":{"sha1":"F7:B7:38:45:2C:05:9B:A0:40:0A:38:75:C2:9B:B6:AA:2B:49:78:FC","sha256":"E5:AA:62:9A:CE:59:F9:4D:B9:E0:92:88:3C:CB:B6:57:F2:25:4C:E6:F0:B2:0B:98:BD:88:D7:AC:B3:EC:B0:5E"}}},"request":{"raw":"GET /resource/images/app-icons/app-menu-platform-rules.png?2.0.1783590098166 HTTP/1.1\r\nHost: usdt-go.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdt-go.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 21:58:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 09 Jul 2026 09:41:24 GMT\r\netag: \"6a4f6cc4-996\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RIJXbppn2YT9AsHSoJtFL%2FrmtuzOnjeXi0OxA%2BTvOGREIb8glc5MXmB%2F5VeWqUcJGpkVkMGYvD6IPQWqucFr6EHbXJuiZMxPWfR3bVDKODL1h7HQ%2Fg%2BtrtbCpNIQUQ%3D%3D\"}]}\r\ncf-ray: a1a34f850fb1568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2454\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2454,"size_decoded":3150,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"8bd225f4fcb6060a90b89abc82eb8de9","sha1":"fd44da137492397d77d34ba88a9223bc732c0a57","sha256":"f9462195f6df4dbbc7c2942f92157b3b8c5741cf19fe898372d5cc312308d3ed","sha512":"d5a0fee568d58903f1c335ab8a483521fd8fc53cc398e41bce588c2c65898cb5d833a61a6ab05621bee94b743d8ebf4119fac09a08947a09c86d0d2399d21108","ssdeep":"","tlshash":"3f515dd704f50b1082424e33be112c1d8c3b991b67524eed623a301a408a777674e5bf","first_seen":"2026-07-10T15:17:20.217165Z","last_seen":"2026-07-13T14:16:28.214179Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"usdt-go.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}