{"report_id":"8de402a8-d614-4421-9ad3-b316120f8ef5","version":6,"status":"done","tags":[],"date":"2026-02-11T07:07:51Z","url":{"schema":"https","addr":"usdc.snddapp.vip/","fqdn":"usdc.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"172.67.178.178","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"usdc.snddapp.vip/","fqdn":"usdc.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"title":"Mining","dom":{"size":16085,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14620)","md5":"483810645afec7242bcd6c10d0d5ab9d","sha1":"0027962badb8788dd58a6d5a544fbe565caf379e","sha256":"1f9597b670a8784e24f93867168f098323b12402d446f3693ed45cf241044bf5","sha512":"669dc7ec1ef2491a6b7aed579310ff6106f2ef1eae60ff21703175a6841d9e0ead268861593db9f67fafd7a42132e455a0db932b25d0b80cf78bf1598e3759f1","ssdeep":"96:no3+nf3HgJkV+Ku1/XL/6pnTD63tn7SEAx9VgR85RSTxt+Gvy9Amjo81mcOiNofl:oOnPskSXDfoHgRtixIl4pVi","tlshash":"6b7293b09242013f922bced4b4b0db3db496d38ede57948de2bd42e66bc5cc4dc96208","dom_hash":"domhashc609ce295dd16c284b827beaf10d3dca","first_seen":"2026-02-11T07:07:55.76258Z","last_seen":"2026-02-11T07:07:55.76258Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"usdc.snddapp.vip/","fqdn":"usdc.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"172.67.178.178","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-18T07:07:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"usdc.snddapp.vip","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-01","domain_rank":0,"first_seen":"2026-02-11T03:26:44.890081Z","last_seen":"2026-02-11T03:26:44.890081Z","alert_count":0,"request_count":21,"received_data":10364655,"sent_data":9300,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"duapi.bictu.vip","ip":{"addr":"38.85.201.30","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"domain_registered":"2026-02-03","domain_rank":0,"first_seen":"2026-02-03T08:52:24.916214Z","last_seen":"2026-02-11T03:13:39.29452Z","alert_count":0,"request_count":11,"received_data":6491,"sent_data":5486,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.okx.com","ip":{"addr":"172.64.144.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2001-07-03","domain_rank":29351,"first_seen":"2019-04-12T18:26:11Z","last_seen":"2026-02-10T02:18:43.273946Z","alert_count":0,"request_count":1,"received_data":1311,"sent_data":497,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"usdc.snddapp.vip/assets/vendor-modules-ooA4ScDb.js","fqdn":"usdc.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a621b4d538e2a03ad4f1c2f5e06c4fd5","sha1":"08fa7101189bdbcc0b513ef8f8c333c322fc5434","sha256":"b831047bc9076a003489d633ac18e3fc6c11d7b8f6af6f98146314468450e48d","sha512":"7178849fcab05a1a4f7eb81973b8debfe2ba04b4b229bce2622db0877a5d65c7b0e0fd80a35e615ba9752a9c1824f4d8b2d87366e8c00a7b77d681c0d49712cc","ssdeep":"49152:svugAY6ba0qa72fGfQ88L+d0KkFzbi4BqVR39ngEQco3/1SIIBuYPOoN38SNHuHN:/CFfjBq41VGuYPOoN3RAqgY+Z1j","tlshash":"ef265b4df760bc32029365da887a3155b3343f2e7514c0e87d9ca4de1b96adad0b2b39","size":4790036,"data":"","first_seen":"2025-12-28T06:38:48.743335Z","last_seen":"2026-02-11T07:08:47.699174Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.snddapp.vip/assets/index-Cut6xgvA.js","fqdn":"usdc.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e04dffd4ccc12a05eaa5104c0383874","sha1":"9c5af6d8022a13e102cca0ee6b542d325d21b9a8","sha256":"99478d854d7a6ea49a45111a4876bafd474d2412256054c0fa921d22581ba1ae","sha512":"6924a9765fa2d81166e1c0ae6487b6a1263d8f01c02136222c5fab38438093c44c9ab1a0a41beffab626e0fc8b18d131684d597d589d2a7afcbec61fe9650d10","ssdeep":"12288:GUZW4cEv+Z0+AycOh5lqskcVw5x0aBv2u:GUZ//v+ZRqskcVu2u","tlshash":"e9e4a341a3c8e6ec024b5f776b1eb5e8e81b0869b5840cdad1e4ec15f4f9602f9ed274","size":678491,"data":"","first_seen":"2026-02-11T03:25:10.511575Z","last_seen":"2026-02-11T07:08:47.697585Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"usdc.snddapp.vip/pool.png","fqdn":"usdc.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:33.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /pool.png HTTP/1.1\r\nHost: usdc.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.snddapp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 07:07:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 1194\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Dec 2025 16:11:22 GMT\r\nvary: Accept-Encoding\r\netag: \"694427aa-4aa\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J2rKkv3xl4EqJNs%2FIiA%2FWsUT5TOJh%2BW57a0qlpaLvZKgZNO4ju3mFqzjXVV3G01%2BVM8XKGtJfxXyAgPCbcynqUXDAPeW1%2FeycilEPdRw2Qg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2028e9bb4a0cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1194,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 48, 8-bit/color RGBA, non-interlaced","md5":"86177258b97ce77fef7c3006300c8af8","sha1":"e19da3a443ff9d37e606283f24fda13a258d4078","sha256":"97f2e2bd136eb9ca8aa1e60be272d60a815564f731b535cd5e7ec198e5dca6b6","sha512":"da55c58ef2551243370198a57b948d1ea20496698c81e9c56f317735f7611825c4a8a6fed8ed4a4bd7a75a31c1c92bf5bb6717d80d04ea12d1f3b6873ff83132","ssdeep":"","tlshash":"3621da638cd975346300fdf8192772de967333de4445a8560d0cecf9d9819d15da861f","first_seen":"2025-08-21T21:12:17.980703Z","last_seen":"2026-02-11T07:08:47.684868Z","times_seen":19,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/customer-auth/profile","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"38.85.201.30","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:33.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duapi.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 05:16:20 GMT","end":"Thu, 07 May 2026 05:16:19 GMT"},"fingerprint":{"sha1":"B3:50:30:F5:57:0A:5C:D1:2B:B5:D8:62:33:78:32:D9:9F:72:15:DB","sha256":"C7:1C:25:5A:43:77:6F:79:D1:22:DA:4C:A0:2B:61:2A:8F:D0:FD:DD:04:A4:15:01:BC:8A:3B:C4:66:40:4C:51"}}},"request":{"raw":"GET /api/customer-auth/profile HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdc.snddapp.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.snddapp.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 Unauthorized\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 07:07:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 38\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"26-Thj6zqYdlSIGX4o0BAJmYsb0w18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e1ce50c43a83e3e0d1741f0acb3ed551","sha1":"4e18facea61d9522065f8a3404026662c6f4c35f","sha256":"6b4a8ed5918f886412c6efcecfb8f8519862c1999c5b07a43f03eaaee257614b","sha512":"7d7de2ff0fd0b927f15c144a8cf738c08079bf41a135ca3ac732d5cb6c81d5b79d56b37cf3cac3514ed7b34ebcf02abffe54b0913fef1f3209a1b202deda0f18","ssdeep":"","tlshash":"aa80044400401f145303c4d5314554314051445c03511113470c44c5454341d0313550","first_seen":"2025-07-27T23:56:34.012008Z","last_seen":"2026-08-02T15:15:06.953921Z","times_seen":32,"resource_available":false,"data":null}},"time_used":805,"timings":{"blocked":320,"dns":1,"connect":158,"send":0,"wait":160,"receive":0,"ssl":163},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.snddapp.vip/flags/1f1fa-1f1f8.png","fqdn":"usdc.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:33.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /flags/1f1fa-1f1f8.png HTTP/1.1\r\nHost: usdc.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.snddapp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.snddapp.vip/flags/1f1fa-1f1f8.png","fqdn":"usdc.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:33.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /flags/1f1fa-1f1f8.png HTTP/1.1\r\nHost: usdc.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.snddapp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 07:07:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 350\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Dec 2025 16:11:22 GMT\r\netag: \"694427aa-15e\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bo51M8VrgcVlFj5rul0ZPjffOe3RaaR8PKhwxn7oo2zBn7Tcax%2FmxbrGVIq41muJFomqtFzEdcNQ3IbCF1RfbXVcObuK5vMXwJctq%2FBhIBo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2028e9baaa0cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":350,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"8fc9e2f18b56022325cb61f37813b58f","sha1":"35366ecf058d3dd824aab54654796e4167ba8e92","sha256":"f21f8537b9b087805efd4334b8f0904aa547ba84c2c6a647d002fef16f42aa26","sha512":"96bac1f6c0899dbd6147cc9ba8ef66905a464abbd79aa6f0c69f183739f47bc29378b0defd7463a3eb57e6c2adde7e2824b760d54e51ade516fabfcb0506016e","ssdeep":"","tlshash":"1fe020819dd7ee3cc07596ab4d3c1180daa3544af435596330058b5133553c463895cd","first_seen":"2023-07-13T01:52:17Z","last_seen":"2026-08-10T19:49:52.099512Z","times_seen":176,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":520,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.snddapp.vip/assets/vendor-modules-BI7Vve6c.css","fqdn":"usdc.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:29.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /assets/vendor-modules-BI7Vve6c.css HTTP/1.1\r\nHost: usdc.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.snddapp.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 07:07:30 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Tue, 03 Feb 2026 14:02:52 GMT\r\netag: W/\"6982000c-c5f9\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K848p0yIFEx7ZjX21gU%2Be%2BLOWUMdt1IK3bamaimsu8e%2BM6hhd2460tneFVT9prGCmGJqnmKNjaYB7%2BX0fx7DEcNZnZmJeacuoZjVUjhRqBE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc202761db1a0cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50681,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (50550)","md5":"948d20ec45da4003196b451dc0f7e2d6","sha1":"64aed070e88535d8c4f7f6af10c2db9a5b594ef6","sha256":"5e5c2aea9a1d1b69ebc80cd93ddb913101b1679a623a0e43649168e31f5b7d88","sha512":"41a749b93e32110d05e8d9383ca28dc80ac5678f195377d033096eb6d05f2b5b31324105285c5297d3605df5d6ba3b6b7d00f16fd5ab5adcc10861d6fed1902b","ssdeep":"384:mnRRvYvrYKi8UlNl9aybPdWDN9Lr5Gp56ed283ZcW23qWF7O36YgzQ4lYf1oKPFW:MgqWDPLr5Gp56UJoYgzQISoKPFEwi","tlshash":"b333db49bd1e3e3e7123a33980c094ec134bb75fe9b94397f891664d6d8d384226da39","first_seen":"2025-12-28T06:38:48.726641Z","last_seen":"2026-02-11T07:08:47.690728Z","times_seen":16,"resource_available":false,"data":null}},"time_used":657,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":657,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.snddapp.vip/home1.png","fqdn":"usdc.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:33.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /home1.png HTTP/1.1\r\nHost: usdc.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.snddapp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.snddapp.vip/serve.png","fqdn":"usdc.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:33.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /serve.png HTTP/1.1\r\nHost: usdc.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.snddapp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.snddapp.vip/assets/index-Cut6xgvA.js","fqdn":"usdc.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:29.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /assets/index-Cut6xgvA.js HTTP/1.1\r\nHost: usdc.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.snddapp.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 07:07:30 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Tue, 03 Feb 2026 14:02:52 GMT\r\netag: W/\"6982000c-a5a5b\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dntgk2nzwIs6AONotUPXGaQ5LytyGNQC77GCXWpIgyesPkOEDq6MfVsSNZTiP3pQBGAKuEcVm2DC4KXD9JmhWSTnq4yr2OG7Tygl69LbISU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc202761daba0cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":678491,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62517), with no line terminators","md5":"b00f2eba2debf4e40db9fff273f8f977","sha1":"d044c926eafe5c98f7ac60664283040a80ad70e6","sha256":"ebc4590b3f21a341c5d9c3aa86f6ccfb3be3a1e8474183f1a4ae22d6b674e3d7","sha512":"fda87bde0f2b78907203766e39cd6f2286be46cd55114cee239435c75da21b7f9e30c9aaa413a2185acd46e648dd3e78dec087c3635e7c71350e3c1ae870cfb5","ssdeep":"12288:GUZW4cEv+Z0+AycOh5VzqskcVw5x0aBv2u:GUZ//v+ZZqskcVu2u","tlshash":"cce4a341a3c8e6ec024b5f776b1eb5e8e80b0869b5840cdad1e4ec15f4f9602f9ed674","first_seen":"2026-02-11T07:07:55.767128Z","last_seen":"2026-02-11T07:07:55.767128Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":702,"receive":505,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/activities/activities","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"38.85.201.30","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:41.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duapi.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 05:16:20 GMT","end":"Thu, 07 May 2026 05:16:19 GMT"},"fingerprint":{"sha1":"B3:50:30:F5:57:0A:5C:D1:2B:B5:D8:62:33:78:32:D9:9F:72:15:DB","sha256":"C7:1C:25:5A:43:77:6F:79:D1:22:DA:4C:A0:2B:61:2A:8F:D0:FD:DD:04:A4:15:01:BC:8A:3B:C4:66:40:4C:51"}}},"request":{"raw":"GET /api/activities/activities HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdc.snddapp.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.snddapp.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 Unauthorized\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 07:07:41 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 38\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"26-Thj6zqYdlSIGX4o0BAJmYsb0w18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e1ce50c43a83e3e0d1741f0acb3ed551","sha1":"4e18facea61d9522065f8a3404026662c6f4c35f","sha256":"6b4a8ed5918f886412c6efcecfb8f8519862c1999c5b07a43f03eaaee257614b","sha512":"7d7de2ff0fd0b927f15c144a8cf738c08079bf41a135ca3ac732d5cb6c81d5b79d56b37cf3cac3514ed7b34ebcf02abffe54b0913fef1f3209a1b202deda0f18","ssdeep":"","tlshash":"aa80044400401f145303c4d5314554314051445c03511113470c44c5454341d0313550","first_seen":"2025-07-27T23:56:34.012008Z","last_seen":"2026-08-02T15:15:06.953921Z","times_seen":32,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/activities/activities","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"38.85.201.30","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:33.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duapi.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 05:16:20 GMT","end":"Thu, 07 May 2026 05:16:19 GMT"},"fingerprint":{"sha1":"B3:50:30:F5:57:0A:5C:D1:2B:B5:D8:62:33:78:32:D9:9F:72:15:DB","sha256":"C7:1C:25:5A:43:77:6F:79:D1:22:DA:4C:A0:2B:61:2A:8F:D0:FD:DD:04:A4:15:01:BC:8A:3B:C4:66:40:4C:51"}}},"request":{"raw":"GET /api/activities/activities HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdc.snddapp.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.snddapp.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 Unauthorized\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 07:07:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 38\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"26-Thj6zqYdlSIGX4o0BAJmYsb0w18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e1ce50c43a83e3e0d1741f0acb3ed551","sha1":"4e18facea61d9522065f8a3404026662c6f4c35f","sha256":"6b4a8ed5918f886412c6efcecfb8f8519862c1999c5b07a43f03eaaee257614b","sha512":"7d7de2ff0fd0b927f15c144a8cf738c08079bf41a135ca3ac732d5cb6c81d5b79d56b37cf3cac3514ed7b34ebcf02abffe54b0913fef1f3209a1b202deda0f18","ssdeep":"","tlshash":"aa80044400401f145303c4d5314554314051445c03511113470c44c5454341d0313550","first_seen":"2025-07-27T23:56:34.012008Z","last_seen":"2026-08-02T15:15:06.953921Z","times_seen":32,"resource_available":false,"data":null}},"time_used":817,"timings":{"blocked":324,"dns":1,"connect":161,"send":0,"wait":164,"receive":0,"ssl":164},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/customer-auth/profile","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"38.85.201.30","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:37.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duapi.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 05:16:20 GMT","end":"Thu, 07 May 2026 05:16:19 GMT"},"fingerprint":{"sha1":"B3:50:30:F5:57:0A:5C:D1:2B:B5:D8:62:33:78:32:D9:9F:72:15:DB","sha256":"C7:1C:25:5A:43:77:6F:79:D1:22:DA:4C:A0:2B:61:2A:8F:D0:FD:DD:04:A4:15:01:BC:8A:3B:C4:66:40:4C:51"}}},"request":{"raw":"GET /api/customer-auth/profile HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdc.snddapp.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.snddapp.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 Unauthorized\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 07:07:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 38\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"26-Thj6zqYdlSIGX4o0BAJmYsb0w18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e1ce50c43a83e3e0d1741f0acb3ed551","sha1":"4e18facea61d9522065f8a3404026662c6f4c35f","sha256":"6b4a8ed5918f886412c6efcecfb8f8519862c1999c5b07a43f03eaaee257614b","sha512":"7d7de2ff0fd0b927f15c144a8cf738c08079bf41a135ca3ac732d5cb6c81d5b79d56b37cf3cac3514ed7b34ebcf02abffe54b0913fef1f3209a1b202deda0f18","ssdeep":"","tlshash":"aa80044400401f145303c4d5314554314051445c03511113470c44c5454341d0313550","first_seen":"2025-07-27T23:56:34.012008Z","last_seen":"2026-08-02T15:15:06.953921Z","times_seen":32,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/activities/activities","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"38.85.201.30","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:37.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duapi.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 05:16:20 GMT","end":"Thu, 07 May 2026 05:16:19 GMT"},"fingerprint":{"sha1":"B3:50:30:F5:57:0A:5C:D1:2B:B5:D8:62:33:78:32:D9:9F:72:15:DB","sha256":"C7:1C:25:5A:43:77:6F:79:D1:22:DA:4C:A0:2B:61:2A:8F:D0:FD:DD:04:A4:15:01:BC:8A:3B:C4:66:40:4C:51"}}},"request":{"raw":"GET /api/activities/activities HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdc.snddapp.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.snddapp.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 Unauthorized\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 07:07:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 38\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"26-Thj6zqYdlSIGX4o0BAJmYsb0w18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e1ce50c43a83e3e0d1741f0acb3ed551","sha1":"4e18facea61d9522065f8a3404026662c6f4c35f","sha256":"6b4a8ed5918f886412c6efcecfb8f8519862c1999c5b07a43f03eaaee257614b","sha512":"7d7de2ff0fd0b927f15c144a8cf738c08079bf41a135ca3ac732d5cb6c81d5b79d56b37cf3cac3514ed7b34ebcf02abffe54b0913fef1f3209a1b202deda0f18","ssdeep":"","tlshash":"aa80044400401f145303c4d5314554314051445c03511113470c44c5454341d0313550","first_seen":"2025-07-27T23:56:34.012008Z","last_seen":"2026-08-02T15:15:06.953921Z","times_seen":32,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.snddapp.vip/serve.png","fqdn":"usdc.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:33.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /serve.png HTTP/1.1\r\nHost: usdc.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.snddapp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 07:07:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 1218\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Dec 2025 16:11:22 GMT\r\nvary: Accept-Encoding\r\netag: \"694427aa-4c2\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ltqHb7H%2FqpaS6Vp40qKy%2Bq8%2BIh2TrpMgi8cHpKObvbas7%2BuLvwlVONxx8BCeT%2Fn%2FagG%2BxQ1677h76os2YyMkR%2BWEwMfAXIJRbEBqHON%2BGJA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2028e9bb6a0cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1218,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"a6a84267b41d28be4da0212eacd3ad71","sha1":"72e773efd61b38e8377df386dc9a0c96ab608739","sha256":"2721404d226fe6b9692a9588c0f4758c058d7cdff0f30122b73d8071e796fc69","sha512":"5695da79f179bdb54e603fbf4334c998c6cc4915d43788b3e2ecffc3c1304ecb0b5b521f2306979e2140ac8b2d03f20fe5fa4398c5c0f11027c5e033a5a80c7e","ssdeep":"","tlshash":"aa21daf7ca4f29a6c84a52688e223578d256238ec1f11b5617a1bcfd40535db5848705","first_seen":"2025-08-21T21:12:17.998964Z","last_seen":"2026-02-11T07:08:47.692028Z","times_seen":19,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/customer-auth/profile","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"38.85.201.30","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:35.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duapi.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 05:16:20 GMT","end":"Thu, 07 May 2026 05:16:19 GMT"},"fingerprint":{"sha1":"B3:50:30:F5:57:0A:5C:D1:2B:B5:D8:62:33:78:32:D9:9F:72:15:DB","sha256":"C7:1C:25:5A:43:77:6F:79:D1:22:DA:4C:A0:2B:61:2A:8F:D0:FD:DD:04:A4:15:01:BC:8A:3B:C4:66:40:4C:51"}}},"request":{"raw":"GET /api/customer-auth/profile HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdc.snddapp.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.snddapp.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 Unauthorized\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 07:07:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 38\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"26-Thj6zqYdlSIGX4o0BAJmYsb0w18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e1ce50c43a83e3e0d1741f0acb3ed551","sha1":"4e18facea61d9522065f8a3404026662c6f4c35f","sha256":"6b4a8ed5918f886412c6efcecfb8f8519862c1999c5b07a43f03eaaee257614b","sha512":"7d7de2ff0fd0b927f15c144a8cf738c08079bf41a135ca3ac732d5cb6c81d5b79d56b37cf3cac3514ed7b34ebcf02abffe54b0913fef1f3209a1b202deda0f18","ssdeep":"","tlshash":"aa80044400401f145303c4d5314554314051445c03511113470c44c5454341d0313550","first_seen":"2025-07-27T23:56:34.012008Z","last_seen":"2026-08-02T15:15:06.953921Z","times_seen":32,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.snddapp.vip/favicon.ico","fqdn":"usdc.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:32.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: usdc.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.snddapp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 11 Feb 2026 07:07:32 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YyReEIUokxQsRgbs3b92XcpdJNQdR0p0sx8tdFeg9BrwfetKR84YCUspwqby%2BWjeNhFewleoAY2IY4ynYUi9c2b8hUVklGOjMUDGtistgFM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cc202858ed4a0cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-11T00:58:01.579849Z","times_seen":548570,"resource_available":true,"data":null}},"time_used":584,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":584,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.snddapp.vip/nors-BR_U97rM.png","fqdn":"usdc.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:33.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /nors-BR_U97rM.png HTTP/1.1\r\nHost: usdc.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.snddapp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 07:07:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 9288\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Dec 2025 16:11:22 GMT\r\nvary: Accept-Encoding\r\netag: \"694427aa-2448\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SK2sQX7OayA5%2FPGFew6xpLhnvf8J16s%2Fi0om63z6Db%2BmHMFsLlQNCBi0D%2FdsziacOhMlVFAhQojWe9lYGnUuHjz5%2BGgoo0JoIHIluPQIBfc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2028e9baea0cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9288,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 204, 8-bit/color RGBA, non-interlaced","md5":"560b36a165bae4d7c70907ac1ad44ec4","sha1":"f27e2ca7c9a41cde369c50ce42c445629ee0cdee","sha256":"9b7b4a3a9d09160dded5e6b0f7e6d7ca52f7bf97321ebdaff205a0910d3ece61","sha512":"d6db05567b6dd5c69754179f1d6738c640c60a885fdca6522e3d850171da7b6a90d3c547a0d7a6ece7d0abc2bf2b9675d8c18f1f0cbb5a78ce1f896a7329bcc3","ssdeep":"192:Qys+/RKG34zIPCJTiQ4riyj0TUohEao5uN7iO8FthD8+JPMHObT4HMN/FZ:Qys+/RKG3/PQuQ4pjMyuN2O8Ff4+h4OT","tlshash":"5c12c07387396aa4b1d79e196d4f5413353b80bcc078bf419bec1b068a863a3434b433","first_seen":"2025-08-21T21:12:17.990433Z","last_seen":"2026-02-11T07:08:47.693661Z","times_seen":19,"resource_available":false,"data":null}},"time_used":552,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.snddapp.vip/home1.png","fqdn":"usdc.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:33.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /home1.png HTTP/1.1\r\nHost: usdc.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.snddapp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 07:07:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 1068\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Dec 2025 16:11:22 GMT\r\nvary: Accept-Encoding\r\netag: \"694427aa-42c\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N5ChSgY37FMhbWzAPv7guqg7W7LuLonexGbqpG2%2FTEhWVGjenUxqidPqOnZ7TPyCkiOH2GiOtSL%2FSA4QDbcDENN3AYVsyd3icpfXxJ%2FX7C8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2028e9bb1a0cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1068,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ab358df5a5fadd4687ddf8e07d4c51a7","sha1":"0f7960010deafda534489f081be86abd41d9a513","sha256":"bf35f0f4415163816c9593bc726be001fda65a63ab7b8a6b97d27c588d5bd9a6","sha512":"6882952208c4fe767e80630329c7edbb5876cec2bae050d9a4102a4878c370a47fe7ee0257952633e8d0ebdd886a3ad232774e13a1766bb76b50ecdca15931f0","ssdeep":"","tlshash":"4411d80dca9c806893c1455c90f11817fc79c4a8a550333d8dca8fe635ee1ee4ec40ab","first_seen":"2025-08-21T21:12:17.996097Z","last_seen":"2026-02-11T07:08:47.681096Z","times_seen":19,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":558,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.snddapp.vip/user.png","fqdn":"usdc.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:33.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /user.png HTTP/1.1\r\nHost: usdc.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.snddapp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/settings/statistics","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"38.85.201.30","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:33.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duapi.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 05:16:20 GMT","end":"Thu, 07 May 2026 05:16:19 GMT"},"fingerprint":{"sha1":"B3:50:30:F5:57:0A:5C:D1:2B:B5:D8:62:33:78:32:D9:9F:72:15:DB","sha256":"C7:1C:25:5A:43:77:6F:79:D1:22:DA:4C:A0:2B:61:2A:8F:D0:FD:DD:04:A4:15:01:BC:8A:3B:C4:66:40:4C:51"}}},"request":{"raw":"GET /api/settings/statistics HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdc.snddapp.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.snddapp.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 07:07:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 204\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"cc-7rVAkOnEjTJF5MwKgSzsxww8rw4\"\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":204,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a4affc0b67fa74b137f0a514365cd599","sha1":"eeb54090e9c48d3245e4cc0a812cecc70c3caf0e","sha256":"8468c8be6593123fe42fe9783f8a1074f4f36893c94c36fe8fe45a6e3d59d734","sha512":"728741e41670a6458e814b913235d4f4429a92b2bea1b6df863b3d546cc5bd6a4ffe6eafbb9c91caa6408fa87ffbaefd223d58b0a7fbe8686c8cafc8b6d68cc9","ssdeep":"","tlshash":"51d022434a2024b6e626abcf04832a8b8ad610328c0148b4a68ec2689e4c51a3b49d2b","first_seen":"2026-02-11T07:06:51.605623Z","last_seen":"2026-02-11T07:08:47.679689Z","times_seen":3,"resource_available":false,"data":null}},"time_used":808,"timings":{"blocked":320,"dns":0,"connect":160,"send":0,"wait":161,"receive":0,"ssl":164},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/activities/activities","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"38.85.201.30","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:35.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duapi.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 05:16:20 GMT","end":"Thu, 07 May 2026 05:16:19 GMT"},"fingerprint":{"sha1":"B3:50:30:F5:57:0A:5C:D1:2B:B5:D8:62:33:78:32:D9:9F:72:15:DB","sha256":"C7:1C:25:5A:43:77:6F:79:D1:22:DA:4C:A0:2B:61:2A:8F:D0:FD:DD:04:A4:15:01:BC:8A:3B:C4:66:40:4C:51"}}},"request":{"raw":"GET /api/activities/activities HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdc.snddapp.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.snddapp.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 Unauthorized\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 07:07:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 38\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"26-Thj6zqYdlSIGX4o0BAJmYsb0w18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e1ce50c43a83e3e0d1741f0acb3ed551","sha1":"4e18facea61d9522065f8a3404026662c6f4c35f","sha256":"6b4a8ed5918f886412c6efcecfb8f8519862c1999c5b07a43f03eaaee257614b","sha512":"7d7de2ff0fd0b927f15c144a8cf738c08079bf41a135ca3ac732d5cb6c81d5b79d56b37cf3cac3514ed7b34ebcf02abffe54b0913fef1f3209a1b202deda0f18","ssdeep":"","tlshash":"aa80044400401f145303c4d5314554314051445c03511113470c44c5454341d0313550","first_seen":"2025-07-27T23:56:34.012008Z","last_seen":"2026-08-02T15:15:06.953921Z","times_seen":32,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"duapi.bictu.vip/socket.io/?EIO=4\u0026transport=websocket","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"38.85.201.30","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:33.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duapi.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 05:16:20 GMT","end":"Thu, 07 May 2026 05:16:19 GMT"},"fingerprint":{"sha1":"B3:50:30:F5:57:0A:5C:D1:2B:B5:D8:62:33:78:32:D9:9F:72:15:DB","sha256":"C7:1C:25:5A:43:77:6F:79:D1:22:DA:4C:A0:2B:61:2A:8F:D0:FD:DD:04:A4:15:01:BC:8A:3B:C4:66:40:4C:51"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://usdc.snddapp.vip\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: CddFcNSs4OqzbRESu7DMJg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Wed, 11 Feb 2026 07:07:34 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 8QfAfmsxd5tZ0htD4W5/q1U+liM=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":1528,"timings":{"blocked":-1,"dns":523,"connect":680,"send":0,"wait":159,"receive":0,"ssl":674},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.snddapp.vip/assets/index-Sv8bNMT3.css","fqdn":"usdc.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:29.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /assets/index-Sv8bNMT3.css HTTP/1.1\r\nHost: usdc.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.snddapp.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 07:07:30 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Tue, 03 Feb 2026 14:02:52 GMT\r\netag: W/\"6982000c-71f1\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S9T73UUA3dFCehetup4DS8eX4daudx71zI7HOg%2FOsNKj%2FGnU6w6Qdhb%2F7eRVBdY36t4U6QN9RIAn6O7KvV6JDi0FiGzHH%2FUqhBULEF5tg4U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc202761db8a0cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29169,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29168)","md5":"852a9ad2984c35508867051b95027d02","sha1":"15c880baf66c49008d1a17900ed267611ff94c5c","sha256":"3eb1931b64a60e25f6587e381297dc3fb35f9747700bc4f139592dfd74f84a72","sha512":"03aa09465e8a6d52c925cef10f83e41a5448fcd179f1da2d2b209ff8a62be45ea143d9201b0fcd5bb297d3d01e0c5eda42d1491543d591b6fff8c9f4102a0a6b","ssdeep":"192:O9JyW9JyyxwO7dGmJRoDsfxsflsfzsfw6L+QHY9mTnonccLKjHiHxu66LJ1TX/Hg:kweGmJRoQQ4G+c5r6STX/Hxrw5","tlshash":"31d2302dab55003b7c6740f5d6e8aa5df21bb0c1df3a6aeabd82112097d23f71c97604","first_seen":"2025-12-28T06:38:48.737428Z","last_seen":"2026-02-11T07:08:47.687838Z","times_seen":16,"resource_available":false,"data":null}},"time_used":627,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":627,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.snddapp.vip/invite.png","fqdn":"usdc.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:33.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /invite.png HTTP/1.1\r\nHost: usdc.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.snddapp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.snddapp.vip/assets/vendor-modules-ooA4ScDb.js","fqdn":"usdc.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:33.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /assets/vendor-modules-ooA4ScDb.js HTTP/1.1\r\nHost: usdc.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usdc.snddapp.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 07:07:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Tue, 03 Feb 2026 14:02:52 GMT\r\netag: W/\"6982000c-491714\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2d2e1%2BuQn39seu72mAA8DLFQWqP9zDRX5cFWAF4%2BmH7fW6qj1We5fxWct8zmirqsVdARBtdnh7qANLiFqbjquiYVFeDCSBwwfI3qUIJdgek%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2028d686aa0cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4790036,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ba1497cedf66eeba1d545dec2bcf75d6","sha1":"cfe93b693fffa1daf38c18eb227e223b0308a8e7","sha256":"795978023c24b042a57043c712277225f5df50741d6468da93a2c3752023b170","sha512":"aef2ec2fafc9d3a24c09e83617dab241c45cd6de2891ef9e88bbaa7601f6fb030f9818e1664b3bb423a19c22cf65c7e1d7088a01269fbc446f7ecdc18535ee15","ssdeep":"12288:2aGzsO3SxgA3I6ba0qEesTOMoEUP3GZbKJUdWc1YV+TXapVMj8s+Z:svugAY6ba0qaOM2fGfQ88B","tlshash":"7a254b997651f06147e391ea50bf0001f3386e1d740d8064b6acedee3bb9989a1b7f39","first_seen":"2025-12-28T06:38:48.717459Z","last_seen":"2026-02-11T07:08:47.69139Z","times_seen":16,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.snddapp.vip/invite.png","fqdn":"usdc.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:33.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /invite.png HTTP/1.1\r\nHost: usdc.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.snddapp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 07:07:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 1272\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Dec 2025 16:11:22 GMT\r\nvary: Accept-Encoding\r\netag: \"694427aa-4f8\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bmyoJa%2FtxQAuGbF%2BNOjK%2Bfv6HK0gZPXKU6IMcAZNTSjhKVYEieEPoPK9jQVwTMyR8bvK2xXGk8NzQ0o7iNCYybgeK1NlAuatlaZvQnuU6Rc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2028e9bb9a0cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1272,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 48, 8-bit/color RGBA, non-interlaced","md5":"0da0307dfdc46d5d688aad8ce344ea7d","sha1":"64d1a483d46efc5c28b021a34e44bba820b706c4","sha256":"1a03b8f904b902035af9dddebf8789d4c697be1a008c9aad4c17c583ee907290","sha512":"4af243097d99b3cf323b1a251de17c5339ac225fa13b5a9efdbe819ad4cfb0df669a519a35ec30762cfa7de576d00409acdcd8c2a7097c0ab5f1decd460e58e1","ssdeep":"","tlshash":"92211a13139ec8ec4e818d0ae0701002484edb954e0aacdd0b330950d04dd45880ef87","first_seen":"2025-08-21T21:12:17.973931Z","last_seen":"2026-02-11T07:08:47.685757Z","times_seen":19,"resource_available":false,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":557,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.okx.com/api/v5/market/ticker?instId=ETH-USDT","fqdn":"www.okx.com","domain":"okx.com","tld":"com"},"ip":{"addr":"172.64.144.82","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:34.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.okx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 22:11:08 GMT","end":"Tue, 17 Mar 2026 23:11:05 GMT"},"fingerprint":{"sha1":"CC:AB:D8:A7:59:C4:83:2F:DF:88:85:4E:50:6D:A6:91:9D:20:4B:20","sha256":"C3:94:D2:F3:BD:F7:A5:14:7A:9D:97:CA:5A:24:96:2D:A8:0A:FB:42:7B:0A:20:C3:AE:FF:9F:A5:21:91:CA:9F"}}},"request":{"raw":"GET /api/v5/market/ticker?instId=ETH-USDT HTTP/1.1\r\nHost: www.okx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdc.snddapp.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.snddapp.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 07:07:34 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin\r\nb-locale: en_US\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nx-frame-options: SAMEORIGIN, DENY\r\ncontent-security-policy: frame-ancestors 'self'\r\naccess-control-allow-origin: https://usdc.snddapp.vip\r\nx-brokerid: 0\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=0JU4rKGmJEHvCpn.ay0Z95gWY238iyGHxzbj1.51vQ0-1770793654.4789972-1.0.1.1-uVRKweU2B66hSh6baNexOKgE.aRPNokM8qzL4kiSAcDV7NfX7YV6xiC9OAnm9bSTg.3iD0gqa9rU0TIdcv3nhQhIGOJkb77.Ktn.A5TLu9K9HmvVdGtiVsCd6AAFP3Lm; HttpOnly; Secure; Path=/; Domain=okx.com; Expires=Wed, 11 Feb 2026 07:37:34 GMT\r\nserver: cloudflare\r\ncf-ray: 9cc202947e81b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":353,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e12b72e632194b7dbb5a251afa2a7edc","sha1":"f585aebdd0cc1c5960a5176981a44fd6cfcabac7","sha256":"fa7c57c5601cffaea7f4c6185f2ce0dc5943ca5ad6464755767bea6069e91045","sha512":"3efc2cfb9a30ef9073c5d579377fb5cdfdf313600e887c1926e6e02cbed3c90f617c8af009974ce4d34b365e38933a33b28d1b3fc778fa54cea146bed28399ec","ssdeep":"","tlshash":"a4e0c60223983c30842201e120c0f1b82d2a31c04dc1c1827e5a4bb3a0caaef6360e3e","first_seen":"2026-02-11T07:07:55.77214Z","last_seen":"2026-02-11T07:07:55.77214Z","times_seen":1,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":9,"dns":1,"connect":1,"send":0,"wait":249,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/customer-auth/profile","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"38.85.201.30","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:41.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duapi.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 05:16:20 GMT","end":"Thu, 07 May 2026 05:16:19 GMT"},"fingerprint":{"sha1":"B3:50:30:F5:57:0A:5C:D1:2B:B5:D8:62:33:78:32:D9:9F:72:15:DB","sha256":"C7:1C:25:5A:43:77:6F:79:D1:22:DA:4C:A0:2B:61:2A:8F:D0:FD:DD:04:A4:15:01:BC:8A:3B:C4:66:40:4C:51"}}},"request":{"raw":"GET /api/customer-auth/profile HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdc.snddapp.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.snddapp.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 Unauthorized\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 07:07:41 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 38\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"26-Thj6zqYdlSIGX4o0BAJmYsb0w18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e1ce50c43a83e3e0d1741f0acb3ed551","sha1":"4e18facea61d9522065f8a3404026662c6f4c35f","sha256":"6b4a8ed5918f886412c6efcecfb8f8519862c1999c5b07a43f03eaaee257614b","sha512":"7d7de2ff0fd0b927f15c144a8cf738c08079bf41a135ca3ac732d5cb6c81d5b79d56b37cf3cac3514ed7b34ebcf02abffe54b0913fef1f3209a1b202deda0f18","ssdeep":"","tlshash":"aa80044400401f145303c4d5314554314051445c03511113470c44c5454341d0313550","first_seen":"2025-07-27T23:56:34.012008Z","last_seen":"2026-08-02T15:15:06.953921Z","times_seen":32,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.snddapp.vip/","fqdn":"usdc.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-11T07:07:28.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: usdc.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 07:07:29 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 03 Feb 2026 14:02:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ngv7pb%2BDu4n%2BZj8AB8Dq92DNkyXmyw60TFvuOPBCkbyRk3uw1svqMiEZnX8gj%2F5HKZ1Ub8vjFSTo83S%2BWLheZ2GVlCKv80kQQxzFTWke9KE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cc20271689b4eff-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":666,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"e9776b704dfa9346864cb8f88d810f76","sha1":"c4baa26af9d406f8a840849f5a1b7d06786f8151","sha256":"19ef981d081866f45807bb876aa053d4f87c72c6bc68b999d75a088b46f1ae30","sha512":"41e36613da549438c07f0a4a3facddd0370e5ee2951c263daeb7fb18f465952a860bfa2d8148dc2245cf21a5dfc8e9570637f2b21f5ccf1121918f504e853d62","ssdeep":"","tlshash":"98019e0164e18e0643201754fec0e419aec3b78b8209ad5471aea0fd1f85b838edf8bc","first_seen":"2026-02-11T03:25:10.496578Z","last_seen":"2026-02-11T07:08:47.6957Z","times_seen":8,"resource_available":false,"data":null}},"time_used":700,"timings":{"blocked":58,"dns":28,"connect":8,"send":0,"wait":580,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.snddapp.vip/assets/vendor-modules-ooA4ScDb.js","fqdn":"usdc.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:30.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /assets/vendor-modules-ooA4ScDb.js HTTP/1.1\r\nHost: usdc.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.snddapp.vip/assets/index-Cut6xgvA.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 07:07:31 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Tue, 03 Feb 2026 14:02:52 GMT\r\netag: W/\"6982000c-491714\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZPK%2B3NNrCElr7h51dzaG8oXo6nAShh7XOQrnkhx7n2OoJ7yBMkoQn08ken7rtpacqToKFViI%2Bkr11NS13o%2FJyqz2fCfbyha73GmJKbGddXU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2027e1f8fa0cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4790036,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ba1497cedf66eeba1d545dec2bcf75d6","sha1":"cfe93b693fffa1daf38c18eb227e223b0308a8e7","sha256":"795978023c24b042a57043c712277225f5df50741d6468da93a2c3752023b170","sha512":"aef2ec2fafc9d3a24c09e83617dab241c45cd6de2891ef9e88bbaa7601f6fb030f9818e1664b3bb423a19c22cf65c7e1d7088a01269fbc446f7ecdc18535ee15","ssdeep":"12288:2aGzsO3SxgA3I6ba0qEesTOMoEUP3GZbKJUdWc1YV+TXapVMj8s+Z:svugAY6ba0qaOM2fGfQ88B","tlshash":"7a254b997651f06147e391ea50bf0001f3386e1d740d8064b6acedee3bb9989a1b7f39","first_seen":"2025-12-28T06:38:48.717459Z","last_seen":"2026-02-11T07:08:47.69139Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1980,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":681,"receive":1299,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.snddapp.vip/nors-BR_U97rM.png","fqdn":"usdc.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:33.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /nors-BR_U97rM.png HTTP/1.1\r\nHost: usdc.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.snddapp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duapi.bictu.vip/api/pages/home?lang=en","fqdn":"duapi.bictu.vip","domain":"bictu.vip","tld":"vip"},"ip":{"addr":"38.85.201.30","port":443,"asn":8796,"as":"FD-298-8796","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:33.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duapi.bictu.vip","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 05:16:20 GMT","end":"Thu, 07 May 2026 05:16:19 GMT"},"fingerprint":{"sha1":"B3:50:30:F5:57:0A:5C:D1:2B:B5:D8:62:33:78:32:D9:9F:72:15:DB","sha256":"C7:1C:25:5A:43:77:6F:79:D1:22:DA:4C:A0:2B:61:2A:8F:D0:FD:DD:04:A4:15:01:BC:8A:3B:C4:66:40:4C:51"}}},"request":{"raw":"GET /api/pages/home?lang=en HTTP/1.1\r\nHost: duapi.bictu.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://usdc.snddapp.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.snddapp.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 07:07:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"c01-Ct/V3mzaO9E6NWn3xh30k/POUmI\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3073,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"30050c435f782d8f940d9a4db83cdfe8","sha1":"0adfd5de6cda3bd13a3569f7c61df493f3ce5262","sha256":"0e5385ba83c4970e321ec65df798b8b3c2643623ae671e2a6cd4d55915160218","sha512":"d710038ea5b1b2f260a0e368c6db86c1396b09d2e9a73bb8d9aa48fb66ba62b5aa619cec924ed30d3fbe2a23f6769b40c90858fd86ac8d4c4ad06f931ae52ee0","ssdeep":"","tlshash":"ac51dd7f0bb5d0ae8aa156c2c8eb7a95d04a7062c9d019e4e7de4f8cc4547b1de0f950","first_seen":"2026-02-03T08:52:29.961842Z","last_seen":"2026-02-11T07:08:47.694263Z","times_seen":15,"resource_available":false,"data":null}},"time_used":817,"timings":{"blocked":324,"dns":0,"connect":160,"send":0,"wait":165,"receive":0,"ssl":165},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.snddapp.vip/pool.png","fqdn":"usdc.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:33.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /pool.png HTTP/1.1\r\nHost: usdc.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.snddapp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T00:57:15.584388Z","times_seen":17827927,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc.snddapp.vip/user.png","fqdn":"usdc.snddapp.vip","domain":"snddapp.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc.snddapp.vip/","date":"2026-02-11T07:07:33.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snddapp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 01:45:04 GMT","end":"Sat, 02 May 2026 02:42:38 GMT"},"fingerprint":{"sha1":"83:73:DC:25:B0:6F:45:BD:F7:2B:46:DF:19:AA:A2:80:0A:F4:83:0D","sha256":"A0:A6:5F:85:84:85:5B:67:51:49:91:31:CB:71:7A:31:AE:CE:71:E5:1B:82:FD:4C:D2:AA:82:15:DD:73:EA:35"}}},"request":{"raw":"GET /user.png HTTP/1.1\r\nHost: usdc.snddapp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdc.snddapp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 07:07:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 949\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Dec 2025 16:11:22 GMT\r\netag: \"694427aa-3b5\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mXTuYgo2ese6XwrNkRRdhv9mnBVtmjIZYVrfWrcF6LWrz3b8FQ6KoMWPa9hCbFo13A2WD94sQVujjuHqpm1LxqBBDHDB79HLVVTxR2mZIaI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc2028eabbea0cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":949,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 49, 8-bit/color RGBA, non-interlaced","md5":"b08aaa6b69cf360ec7ab29460551aba1","sha1":"230cd06e3299fbadeac285a26313a89304043147","sha256":"92ea4f619982dfecf979f76c7bf675894b6bd7bcee221104f723d66a2227a099","sha512":"ae4160032ca26043e6b2caa6a0d86a0b202a0a271c5aaa874004c78cb286b2e804fc7afc1bae8f80d20ccee021b727db91f5591b12a13d007ff668945918d895","ssdeep":"","tlshash":"361188fbd2f7d41cf11312f54a890cdc2d2260b645e1151895713714ef36f1a0e181ab","first_seen":"2025-08-21T21:12:17.991486Z","last_seen":"2026-02-11T07:08:47.689769Z","times_seen":19,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}