{"report_id":"9d2ad4bd-ef56-43df-b33b-539710faa385","version":0,"status":"done","tags":[],"date":"2026-10-09T08:14:12Z","url":{"schema":"http","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"title":"Blockchain Investment Project Website - Unlock Financial Freedom","dom":{"size":112995,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (57589)","md5":"84b5fe6bf696c493d1f0bd61272e1912","sha1":"c9ecb7e9d4f10508d005f6bdc07c0bbd0960d939","sha256":"01752436843198e1102534015f132b7fb4a6959e5d873a8c6f89390c7f60c2c3","sha512":"da287b97f8dcbef777b76dbea186193b0c940aeaffa371a8a944f7aeab2612cf4f8f26940bca179818ed5b53aca51b0f4613b2c949db43f997fd130feba5b025","ssdeep":"1536:By3ywLRyZ+JTf+B6LVPQGC2Hsxf5H0y2n5yWLMbKtBwx33d3BHggvmdk1q+rOmxb:BkyQ5WCpwiq","tlshash":"46b31f38b0067c166477d5c0f0a46f993192df3ac3548e58e7a927662fcbdf068a9378","dom_hash":"domhasha3d5541f93a8d9a698166e3a297685c3","first_seen":"2026-10-09T08:14:50.938699Z","last_seen":"2026-10-09T08:14:50.938699Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-13T08:14:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"sdk.51.la","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.174.94.0","port":443,"asn":0,"as":"","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-10-03T12:24:40.943443Z","alert_count":0,"request_count":1,"received_data":577,"sent_data":546,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"myip.ipip.net","ip":{"addr":"172.66.155.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2002-04-12","domain_rank":181578,"first_seen":"2016-11-06T18:32:13Z","last_seen":"2026-10-04T09:23:44.653375Z","alert_count":0,"request_count":1,"received_data":385,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sdk.51.la","ip":{"addr":"125.74.108.43","port":443,"asn":141998,"as":"China Telecom","country":"China","country_code":"CN"},"domain_registered":"2005-01-17","domain_rank":347679,"first_seen":"2021-03-08T16:03:51Z","last_seen":"2026-10-06T20:54:02.662213Z","alert_count":1,"request_count":1,"received_data":36510,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"usdc012.com","ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-29","domain_rank":0,"first_seen":"2026-10-09T08:03:34.247656Z","last_seen":"2026-10-09T08:03:34.247656Z","alert_count":76,"request_count":76,"received_data":1877242,"sent_data":62630,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"apis.usdtifa.com","ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-06-28","domain_rank":0,"first_seen":"2024-10-26T21:39:02Z","last_seen":"2026-10-09T08:03:35.01751Z","alert_count":0,"request_count":33,"received_data":6894344,"sent_data":19142,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"collect-v6.51.la","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2005-01-17","domain_rank":348646,"first_seen":"2021-03-08T16:03:54Z","last_seen":"2026-10-07T16:13:40.423936Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":505,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d774fed07205a75db9f9c598203c2b9b","sha1":"a431d5203ffcde744a9025d0d7dbe794bc4b52d9","sha256":"138b79a6155dc1e18b3b0b74d7f108c73ca2ef9818da9bbfaafd03b420fe957c","sha512":"c7809ff091b5db0e57371c7fc960cb39f95047c34bd6c495c64bcf297cfea0f47d51834301b4b6b29d04b42605fe8d667d4df03f06d56675ae1973876631814a","ssdeep":"","tlshash":"72c08cc8a0c32d002602a51020af38e8b034842770481b139da8dc483e730f08233e98","size":147,"data":"","first_seen":"2023-09-19T16:42:51Z","last_seen":"2026-10-09T08:14:51.139586Z","times_seen":287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-img.B9p0v2L0.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"36d03a2b291a13843eee776c15844ef1","sha1":"9aca8308b37f47896b5b643ad6232afcc118cbf9","sha256":"3f06ea0af5df4515eee5eaf2bcf53ca332ab4d5725aaded4cbc1537543e2ca27","sha512":"4cc89bc9b21befb0a752bd51dbaf5507154409581aeaa0d9baa84a7b19934983469014b7aa1796c119a3968d84e4ae28896f5a998d723afafbed2848796d71b2","ssdeep":"","tlshash":"26618528360cbd6f06b684b604340e41615db95ec620abb8f7fc74bb6295c9cb66ca70","size":3433,"data":"","first_seen":"2026-04-19T12:18:29.289472Z","last_seen":"2026-10-09T08:14:50.963718Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/index.D4OwX_lf.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"65653129aa49902b1565df65e866aeee","sha1":"569ba3b08b8e3b393351cfeac7da25faa9505b71","sha256":"7e25cc5ce1f7f90a3fb5802db19644748b28d64104b56338f130cddcc49c8f7c","sha512":"e21c1c9c37735859132d0e4c66fc3148f70dcc618c17c36403a7113521be68c11ddd306df003797e1654d36742a913d7f7b80e84cff7145153887d7de3c3b723","ssdeep":"","tlshash":"9f31c4cd39c5703183d62a4663f35d81b67d9c1d580f4a8cf17854162c20d6dd27be1c","size":1630,"data":"","first_seen":"2026-04-19T12:18:29.307498Z","last_seen":"2026-10-09T08:14:50.972248Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/uni-popup.DOQjiKe5.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1301d20a2b799a528778893a00fef3d","sha1":"8805bf43b104b73025c8e99c4e50384260f03c67","sha256":"2fb7a897674eed576f80cf3baa973f9c02b787ef4e75129fbbd471ffb0b18162","sha512":"a629f6146dcc90ba215d7fabb4828c959789d9f432b6ac2149a4c926a1dc5335c133dc6a8dde75c009ae8ae638a6e1400f85ae8e196bfe5ed81a01e4a5eea3c4","ssdeep":"384:5jB08L4LbQr3y9Pk9wMjxe/gi0lvwoIpFHqdM8uPCWYYxoK/WGbNYDYGFa:7x8Psy9wHxsglvNIpFHqdM8uPCWLxoKV","tlshash":"d652d7c5b99ee92605db82b7505c4a00513859d8b0751b6c7bbdb8fb024ac8c73eb73c","size":14279,"data":"","first_seen":"2026-04-19T12:18:29.257345Z","last_seen":"2026-10-09T08:14:51.088737Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-auth.CLe3Up1U.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2be3a61d9bc0bb75c270cf91c98d3e69","sha1":"d73176906cfcda6bf0ed24618755440601f015ac","sha256":"c8962731463d195201bb58e62a5f0208da7146e5531f737526d91683d7fd04e1","sha512":"e66813329761800dd13cef669ea9f34bb5027934573380cd20adbe92e277565ea84b721fb73030ace76080b981e2451534d4fd3ceb1cd66a461e0a4967bd3d8a","ssdeep":"","tlshash":"3bf0054d3c64c27001c158d85611681051292d5c667974c7e1df65ed1a7506ed82df1d","size":522,"data":"","first_seen":"2026-04-19T12:18:29.386648Z","last_seen":"2026-10-09T08:14:50.962814Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"baf926373a5336bbdd42a02d78239e20","sha1":"a10eb81dee4374480d5414c25abed550d0be55ce","sha256":"8c2eff768a8d2a1c66d635ba46d5c553cc6600d1b5de5f2ac9d5d80e510d322d","sha512":"0aa58d4b1f32058be87a8ff4d8372e8b0aa659cc72d1ea929732905be52f7b9976c965a4a350476d92cdc7c184bafeb8f64d51ed683a8a375a317c11d4d222e5","ssdeep":"","tlshash":"b5c08cc4a0c22e102612a89010af24e8a034402670482b02ac94d8482e224b08233ea8","size":140,"data":"","first_seen":"2023-10-25T16:06:30Z","last_seen":"2026-10-09T08:14:51.140746Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3e352e40da965a477c73b85f45fcbcfe","sha1":"3e723988fae01e9002cd221d32d0b80fc932dc85","sha256":"5437083c1c0938d596758b071b379432c6722f887cbe2dca49cc5dd12e4f48bc","sha512":"36bd9ae9981675720b34b16739e5bd73967018d36cffaf325c4415dede978a5c8950cd9ee99567264cef03b5020fc26def12f1274befcfba2f680291e9f34580","ssdeep":"","tlshash":"e2c08cc4b0c22d003a02a41024bf34e89024402670481b028cd4e8582e230b08233e98","size":140,"data":"","first_seen":"2023-05-19T17:54:23Z","last_seen":"2026-10-09T08:14:51.14168Z","times_seen":873,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/index-DZuPayf0.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c5ccebda320a406ceafed70dcd85d5d","sha1":"fe7d2d1b67f9534a6d5ba91319f016c383808fdc","sha256":"26c518fcd14fec0e03affd0e9a4449a894a059b81df90b074031b660a7d4f5e5","sha512":"a5606a2cc270cbae440ab5aa879921164c27887ef53e2336e70f214430b51bd911589cc9c6509ae5efd8bcb58190ed2d4f78ab9fb0501c19c2bfc9bdf78e64c6","ssdeep":"24576:mOhsHDvQtgcUJ3f5/oGrr9BomjmVttK0sPfwuwuT4hJAmXCyeROeA91pvmi:mOhsHDvQtgcUJ3f5/oGrr9BomjmVttKu","tlshash":"b7159f9a338a702106f536d2706e3631a3745e61f84ac0c876dcdeea25fbc056297f79","size":874592,"data":"","first_seen":"2026-04-07T10:43:03.562323Z","last_seen":"2026-10-09T08:15:39.061206Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-popup.BHa2q1TS.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0d951171a9e4cebac1d6ef88c98459d","sha1":"83646bbe5b36f814dfa93ab169e713638d032fdd","sha256":"e3722c6c62aa0b916fbe31da971e3a2d90bb16e256518d9cb9eaa562ed906542","sha512":"bf8564db747ca6c5101de0a331ea3a220d51a068a44716dfc82a23524401fb6601bdea4a1f6a633d73b014207a689e3a70142e20c1dbb6e16eb580b608b082d5","ssdeep":"96:z0zzb/vvVXaGe2O2smBNk7vYTLMcO0PLFKpcQU4CmRU:z0vr9DF8bYo8Fscl0U","tlshash":"2d81a5943c4cc97a55c59a0b44211a40975a6fec87b53d5df6fd2cff02c3c1a2a84b2a","size":4187,"data":"","first_seen":"2026-04-19T12:18:29.313956Z","last_seen":"2026-10-09T08:14:51.019089Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a7b3de7354307d425e2c87cd30f4ede6","sha1":"dc66414ea415cd874318119239b4af134ba2567b","sha256":"6ce792f41f1371f6d74e42988b05237acaaaf3eabaf18d6f6c7b56b2e58c4823","sha512":"15313ff7e64d913b8e7a1bc9f0802d26ec31225c1e0be7fa325315bc6cebe8d5e070cba2c58e83993c461951180bb947eed81bd1bbd165015772906c7b2599c9","ssdeep":"","tlshash":"73c08cc4a0e23d001602641010af24e8a0244026704c1b028c94d8882e220f08233ed8","size":136,"data":"","first_seen":"2023-05-05T08:00:34Z","last_seen":"2026-10-09T17:11:00.692004Z","times_seen":1062,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bbfdbe498eceeae4b8955afded5953f2","sha1":"8c751893c399c81cfa90910f797e551c903f6f03","sha256":"58b8d2d45f5c38007fb9d52dbfa22b0e70b9fc6eed0dde5c96f3c600a54c387c","sha512":"2ca782e375b5aea7b15ef61611be19449f3ae3efe35807414b2efdce77c2250741e4efc0b626fe817be0c8ff1e221f8a3f95e7bd9306ff3ac87b930c510077c9","ssdeep":"","tlshash":"84c08cc4a0c22e105622641010af28e89034402674489b528c98ec4d3e230b09233eac","size":141,"data":"","first_seen":"2023-05-08T02:54:43Z","last_seen":"2026-10-09T12:27:36.674552Z","times_seen":1047,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-drawer.DfnPa0vP.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"35cd4b2519746ea07ff72c431113d4f7","sha1":"a0d98a4a31da6a1c10f435bc4c55c8c481283a63","sha256":"f876b41e27b65c8e0758c1b9a5cf96d71d8a754053c0e60b14797f56afb058e9","sha512":"1ce2cb7501f8879a61bc7025df12e8dd5ada3a56cb8051238a76c3b1b82f3a7542500651dfa4b504b9a13e24419ffaac22fcb4f1ef9ec95980ee6f3419a535fb","ssdeep":"","tlshash":"1721e11c7a1ca93329d7445d402006001ec967eeeef42ac6f2e6207e875a5a8916db14","size":1194,"data":"","first_seen":"2026-04-19T12:18:29.319056Z","last_seen":"2026-10-09T08:14:51.072832Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5eefe40b85e8c2db9ca6b62c4c3c5399","sha1":"00c3b8914ba6e7b5e9f47b5111b63e9e0ed7a556","sha256":"5e0f7543b9c01385fd8fcf8669408e298108d313227ab99067161b46c5d60ad4","sha512":"8aeda493afb753af1917f681b30c17a5c5941366be426c10cdc863eac91477e17264c4ac13c3b2924fbd47d3df739e703a6b609e7681530d4df3b3889987eaf5","ssdeep":"","tlshash":"a8c08cc4a0c26e005612641210af28e4902440a6b4481b038d94d8482e624b09237e98","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-10-09T17:10:14.444497Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1005da32deab4376491d59586b24ee8b","sha1":"3cf2d20d7daa3600df923fabff48cd2fbf4433d3","sha256":"19d3de9e477f3f88405db21182327670b9dcb2e62f492aaa1d283489a91e3ca2","sha512":"3275c1718077946a6b1faa8c3c3714124bcc953c89c2a4b67883848acea26896fb0e4f0a0d379cef03cc68d7655af54dbd71337b450f38e23e96b84f34658d6b","ssdeep":"","tlshash":"85e0688260eb291c0220816a358ac5171f6509b3ae824ea13c8c67a5cff9e4bc06e868","size":408,"data":"","first_seen":"2026-06-07T17:27:39.185333Z","last_seen":"2026-10-09T08:15:39.067656Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b7c7bf563fd8cfa470a7293fde8e24c","sha1":"e27d2b41fe872c6efb7b49008660fd8f77f43069","sha256":"59ca6350286beaf0b0d9dc5b5ecfd9823b851488954aa9de2c37ea8e401090f6","sha512":"d5f1a6dcb42626035a6cc8c0a8ce0130d0c28134a92b196de35d5d070ef1414223bc80a82c401ee301b95bc6e5d14d2cb1f79de023d0a09d8b2c57b7a28f6d0b","ssdeep":"","tlshash":"d5017d08a3f221b2913f74bc8b5f9614293040037508ef51bd9c5741bf9643486eafc9","size":746,"data":"","first_seen":"2026-06-07T17:27:39.186302Z","last_seen":"2026-10-09T08:15:39.068734Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0dfd02afcc4f3392e3828c0c3d06818","sha1":"c07e1c72f7b153ef29ee32669a659b12e0f79beb","sha256":"61e07e9b65c53cd0cd2aac8f49b695e971e280119df6510c093b9c2667fbf303","sha512":"cb0d4024f1f8e8a0066af771d9d52b92ba0fed994f2d165135b98d3aa7538e9d9c57e49d032d4c14bc24ed217a23023f910030a3e426841ac655b66e3ec4187f","ssdeep":"","tlshash":"35a002f3cd57d7390c5cd0342300580d9ce3078004320c8406972c4318c81007081d83","size":60,"data":"","first_seen":"2026-06-07T17:27:39.191516Z","last_seen":"2026-10-09T08:15:39.073124Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"62d43060f25d6071ed7f399f700359cb","sha1":"028f7e44bba2e4d3d35b54302b2fab39918cfbf5","sha256":"9d2766c4a7db11b54eb3afdb072e397eb0f748d3b42d8dab21bc2928f2b9e67f","sha512":"a8c165dc47c63f29dd94ac8ffd480136f158bd215e0470193ea4fed276173a46a76345392027ecb663995451e8f32807e1513a1828dcc45dce8b46812d610be6","ssdeep":"","tlshash":"2be0d8736f5565744473e02e637f7720753b516b4240c9067a2c868c0fe0a47666d6c9","size":399,"data":"","first_seen":"2024-12-31T04:27:31.855259Z","last_seen":"2026-10-09T08:15:39.073996Z","times_seen":153,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-section.VCywZNMA.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c21b868d6316062c512502d5bca31d1","sha1":"407e66bc38a845e4a01dc07a6ea6921a1a0fca30","sha256":"8700afa9f0270cbf990d60de82b139a03e47b39cdee0216d6241773c4633cfd9","sha512":"285ac7a2682196cff231013589f04d537ff187bae26ca94050470619e30d41bd80778b6363bd533c32d371f5050fd97689e61e81a5bd7a0cc695e50cdd3d7bc6","ssdeep":"","tlshash":"8941206d380caa372d8b0dae70b0230064552f9cee317975f7f1903557a7aaa916cf2c","size":2207,"data":"","first_seen":"2026-04-19T12:18:29.326221Z","last_seen":"2026-10-09T08:14:51.041028Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/ProjectItem.CQna40om.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f67da4ef080954b61e00ac30fc8161f9","sha1":"d542665079fdc590d7066d7cf1f07694d2665b5f","sha256":"7ed7d095fc1f2fd83e0da71631689bef2fe16663bc1a6ba7eeba4a77bc084195","sha512":"d8668989195dc9ac20227b418798e06c388586a08c0a724ade9ba8dd793d13f8cf1e5220c2dacbbbc83a62882b2a8ced6be344b7a756436b1bd6b3fbfa9fca09","ssdeep":"96:gTTbPy5jufGnxFkaTWdkZA222ft9ba2sNmFD:gTTbAlnxTTEkWSrbJscFD","tlshash":"c0a165013e2cf23b29c29a59b1ac45047367acccc92439def1f8a95e135bc6436ad76d","size":4741,"data":"","first_seen":"2026-04-19T12:18:29.28252Z","last_seen":"2026-10-09T08:14:51.11121Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/InputPayPwdModal.B_ZikdHB.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"58f72e705c801ada17235c922cfd89da","sha1":"56b9938a494afc75cfe0cfa0e367fb37dca8e84d","sha256":"c042b787a4c9a960e6d55ccb95594a705f39d9902bbd8a10b826cf9f0f580122","sha512":"fb0b3e910ae5b35eb8cc42e1e46b4199612e0aa65eb49e858268144679febcec08b123125592bcd3c86d28eaaaae3e7022ecc82aff567d1f72ec9189077b25ed","ssdeep":"","tlshash":"d551650a3e3caf3994066178f0816805b41054dd8b46ab58b7fc0e5a0babc46937fb24","size":2457,"data":"","first_seen":"2026-04-19T12:18:29.295802Z","last_seen":"2026-10-09T08:14:51.047523Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-10-09T17:32:24.853401Z","times_seen":15685,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-10-09T17:15:02.075308Z","times_seen":10496,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"43a144a646cd1c3aa47c6e97b8997f16","sha1":"751520d68e01030d76aaa27829bee42de57b33ae","sha256":"7400aff6408f23b72deadda0905ff4dc8eb4af368f7e8026063918149826a7d6","sha512":"85eff0527e8a86cde19b0e67070c8f71528670484865bafb4b88ee54f83b48f575275ed10cf343f0c84d4c0a425f6632b5b1bdfdfbfd75c6702ee856d28f512f","ssdeep":"","tlshash":"14c08cc8a0c22d101a02681414af24e49028442774481b068cd4e8882e230b08233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-10-09T17:10:14.486196Z","times_seen":4721,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c7e852b3890d84ceb019fb49d8fb82f2","sha1":"39fd7387eb73882beca538337c8c3cbcb0e29274","sha256":"5464fd014fa7fc9f785002e31cf3ab6a9c4e5ebd440ae9e313c2e4e2e1310a7b","sha512":"cc52b7193b565d3f3cce8ee54ff11dfee752d80dc7f51d59be7ba83b692e419528bb0a1b726935e56664d7c449fa0d6a1566253431dfb22bc266762e423d6287","ssdeep":"","tlshash":"cfc08ccdb0c72d002602642050af74e89028402670481b029c94d8592e230b48237fd8","size":144,"data":"","first_seen":"2025-08-26T17:30:33.454142Z","last_seen":"2026-10-09T08:14:51.168633Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/pages-user-index-userBoot.Ncjbscbp.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d618c3a72ad4ace586c8fb5ca955672","sha1":"b9e6355579e509573e8353c0e58bbda2fd3eb107","sha256":"c6d55896d7376eae6e7bd2097609571cd28046b5580a092af8b115419f065e43","sha512":"e12347b6564593dac7c290cdd39aa7b9c743f149324c3ab6d78fd6d1d26e566c7f9ee21d4b45abb90aa3df317921a282e560b235e2e05700aa87703479fe5fbc","ssdeep":"384:S5Pbdw3JNaAYHdZtzeul63aAq5Pt7j3OWpdmalbuFB:6dw3JNaAqdZtF634l7LffuL","tlshash":"e0d2f8053f2ce1766f93a528d0da0811b06758ced545f89d73f4cd9e02eac846abe37a","size":30192,"data":"","first_seen":"2026-04-19T12:18:29.262989Z","last_seen":"2026-10-09T08:14:51.11873Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/userIndex.DEM8PT7a.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd703d9e5ae56c0f3be8cbae62dec9ff","sha1":"8b75029be04d978c87878250d51590c391bdb28c","sha256":"1cd270b92c06f69d4aa1e87173050744cf6ae53fb57006c87bd043f93d3502de","sha512":"1c470b7bf289dbebb5e3cd290896e44598b52e28d176cfeac4087d81d7126bc6a8428f78c339283292ec0ced6139dda4ebe4e8bddd3f3f86c7b78fc59307151b","ssdeep":"384:OvMaJwGqXFzXSzABt6bsjHC2vJ+WeOlY+k7VE+rkRRzO53piT8T:OMairXFzCzABt6bsjHC2vJlljkJzkRZ6","tlshash":"1ca21919771cd1297ad1a00e84d40812b20b4c9ea321b9aef3feddbf4399c6d659c736","size":22638,"data":"","first_seen":"2026-04-19T12:18:29.296632Z","last_seen":"2026-10-09T08:14:51.053977Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-banner.Dn6P9rq2.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9b2134f6af223cd499a048f91d56629","sha1":"c82a2637122d98e17714850d2bf4310fb922039c","sha256":"908e934107124579945955a501653dd519eb4fa1cc921e62f951d85cc3fa6d3b","sha512":"c46975f6b9c968b5aaf91e9d14b470173f0b53f377d6aea115ecf881e0023ebfeb557876c6760cee82f2d7871e7b0a33d53d2c2a58b61f0fbc9e61f9af3e1717","ssdeep":"96:gqODD0PWg+IT42fOjqCbCqvuj1t2tK4tPtKltstK7s:gqODaElb5efs","tlshash":"30a1df28352dab37e89789ad00c4050435b929adfbf07776b7f48a3d922344eb91cb59","size":4762,"data":"","first_seen":"2026-04-19T12:18:29.309Z","last_seen":"2026-10-09T08:14:51.079432Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-button.BJMgRMoF.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6205626937d3e850bb0906c2c2939417","sha1":"b6a172ca0cb2ace5853844d6d6ca4b49e1df4b04","sha256":"dbf755e589e8db65a40a3a72e43c99beff9d732365353dcdef2c5600419eb30e","sha512":"d0d7f8b7fe3b11b2b98f9c90861f53ac5135fab8333d8260bb81fda2c1ea1d853886e34ab72574ba4dca086a81d8ad07a888c234947d9e0a3d123adc60ada3be","ssdeep":"","tlshash":"9d514404310af9371dcb8848a07c060693116a9eda695ce8ffb571bd535f854779db14","size":2870,"data":"","first_seen":"2026-04-19T12:18:29.344228Z","last_seen":"2026-10-09T08:14:51.017703Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/z-paging.BxoOF5Km.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ef49370d79ce3dfcb710b53b25de405","sha1":"089a2d712478a98f82ca289a6c22203b01c369f9","sha256":"a6b6527f6f1a5761d34180d1624343fa0df4d45a4c9cb5e0cd2e38c9b588bb30","sha512":"3b9a1873f1f40991d46894db4f555d1ef048b27ecdbba57828abc4c47a27e055480b37479d01ca63c547cb2601dadd89e5b6b2f2dd998e5d9893e5867ef8a58f","ssdeep":"1536:H9kyOg+SJ3TQCIO6a103WSWo6BebaKfSzECftpD1i:H+PoTQbO6+SW2LCftpRi","tlshash":"68b32b923204e42a53caac69f81e330191456c4fa94e55acff69bcffd64cb1832d9778","size":107818,"data":"","first_seen":"2026-04-19T12:18:29.25148Z","last_seen":"2026-10-09T08:14:51.110074Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-popup-bottom.C5jIlEU2.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"faa7a61e12a30e50504c42df33583f30","sha1":"b099ff4cf9b2f55b5c2d4d397bfec0f3f6ce9e3c","sha256":"bf18652f6f1b0b8ed0b83d4019d873898d389a794662c19fa2b78b1f9e4012ad","sha512":"4a230791051907be119deef1517266f6db52ed88ab18eccd9ba4a4b9d9b98b7ff6fe5f1f3ea90849ef58a112e29bf2e1c953a856031c38386bb7ec075fe65b64","ssdeep":"","tlshash":"57211209381db033649f497c52600e40142ccf6ceef43eeeb6d160764f9989ca65db28","size":1312,"data":"","first_seen":"2026-04-19T12:18:29.292628Z","last_seen":"2026-10-09T08:14:50.955933Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-money.IfTwX-o7.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0abe0300f7f315b6150ab97791f09a08","sha1":"c35711c85fb8d66e05f9074072e66e5b9a3973aa","sha256":"02631bf6981f6cc041f2fcd8d7a213b47b03e566ba58c32dbe3362400095f361","sha512":"4886aaba73ca7916633abe2ad80c4eec4555918f938f9cb66a3cd10d6326bbe7f857eaf5edd8785aa82d6e0421dbf2c059dd9f5b84b2162713c8d7ab4c860bdf","ssdeep":"","tlshash":"ed5193a476985da3048b2a1d08485343ea75bd4d9ca83898feb4bcea87278d5385cf34","size":3017,"data":"","first_seen":"2026-04-19T12:18:29.263929Z","last_seen":"2026-10-09T08:14:51.026201Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e9ccdf6128f496cf5fad41555021d5ce","sha1":"79948ffa9e6b239bf806d1be3ee8f33c5b44b47f","sha256":"881fc2e41e6bbf997e99d29a85de0d6b047eb5f7641f0247a82fef78b2a0e615","sha512":"448c3038447b8755d6d73486eb9d3eb05ae55c0a6b1e3e07be4f091caaea70a5d284d994087f3113841facb6baf13f8e8cff818808a38f26f1effbf34daaa313","ssdeep":"","tlshash":"0fc08cc4b0d26e201602652519bf2ce4a034802774482b028c98ed492e220b0833be9c","size":148,"data":"","first_seen":"2023-08-12T11:46:41Z","last_seen":"2026-10-09T08:14:51.169335Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/mp-html.aTbK2hVh.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"24943a0e80d3623401a7881e941ebf89","sha1":"4e57dc7e055b59513da12155f61b458a34a47542","sha256":"97a2edd38f87c45d10ef23e0704a96a8cf723787ca2b7295545e49c774b03f2d","sha512":"4a6da8fdc6798010229bf892cde98826515ccb1fbe8a38068a3d51e5470053f7d4b2779f245a816a82452026c0044338c46303352cfd49dca38f89702190771e","ssdeep":"768:A1LcXOJOCY8/PU1kfSTeC5Umdb24tpxvYL4fVZw2O:yBJ13gAyr/O","tlshash":"27c20a5b728c70390ad884e108b56741a26e660cb54088bfbdbce4fb59d059530bfbfe","size":27070,"data":"","first_seen":"2026-04-19T12:18:29.297796Z","last_seen":"2026-10-09T08:14:51.03147Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5c56bd092d0b0dbebcea0dffc9d3e1c9","sha1":"e63350a080d3edda266861535b89dc0603f2150f","sha256":"8d56b21d15b7fb8d64c62e430f90397e05d7d1c8ff9604577435bcfe68568300","sha512":"fe57381fbb2ad34a6a6750deb2d29f7bb89372dde680dc4be3b99ef6ccf3cc0476c9bd4a550f3586f8d44dd12b07c3be71c2ce454a98ddd01035405ee2ffbfcd","ssdeep":"","tlshash":"eac012c5e0966a211e51a914646f25e49024941a74481746cca9e9d42a121f48123e9c","size":172,"data":"","first_seen":"2025-11-22T10:34:45.647279Z","last_seen":"2026-10-09T08:14:51.173246Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e0cdd733c246a219ef3f620b22d69aa","sha1":"863bf764440755fa39ead6406e3e3e2c61df2fcb","sha256":"30d09f0fb47d204d4f13487482604c49f69eb595608f211f30684ea589eb9ebe","sha512":"c3504ed49777cfe19faaf41429845212358b3c2078bce5d31c43da809c5b631a0d9cf568b55cda87c4307a290ca35f73f6946ddc3e3a6ff8fc0e4035b114ea4b","ssdeep":"","tlshash":"01c08cc4a0d32d002a02a49024af24e49038402670881b029c94d8482e230b08233e98","size":139,"data":"","first_seen":"2025-03-17T10:03:33.622599Z","last_seen":"2026-10-09T08:14:51.175015Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/pages-user-index-userContract.BdOQgNVT.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"32ef5dd899ebe569963dc33cb51f7632","sha1":"f51b8af1962ae720a3cfee932740648a20975259","sha256":"d22665aaf7e9eaf67eb4893d80a59952c8a1728344fc825af744e97eb72c9ef5","sha512":"01cbbcdd5c8b2dacd2cc5ecd672ff5257d506776cbeee5d28ee3fd587c826a046c3f08b01be63d61f45e261ba1ffa21f56d73fc2dd472144a6f46805e3d001cf","ssdeep":"6144:wpdUPGVIJx/9LEwKaCBaL08YQR4XqQIVqpyX:hAw","tlshash":"dc240a85fb65b41542a39079413f0907b336369e944b86acb27ecdda296c4ce3276f3c","size":228662,"data":"","first_seen":"2026-04-19T12:18:29.317245Z","last_seen":"2026-10-09T08:14:50.953461Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1ca49f0e439cf34669924908e59b2897","sha1":"efea6ef6bd12f3ded99d07b429c6af21c23ed826","sha256":"9f9ee6011e8f88513c2761906180f430478c9d9835d4e74a211cafd3c79b955e","sha512":"f5dfd73abfc4c47819a1c10e68b974d2253a67fd9fb113e510809ee5ea650d5dd1f003dedcd6f88235e4e5b696f28c5e2f18526e794579f3b9f5a1d7db17bb21","ssdeep":"","tlshash":"fec08cc4b0c22d102602a91010af24e49024406770481b168c94dc882e224b09237e98","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-10-09T08:14:51.176212Z","times_seen":636,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"36f26a090abdcc337bfc430f7eba2abf","sha1":"bde4b3d8e5ebea671a9a85174cfb4058a4bf0adb","sha256":"217e71e9b0dbcd6bf49e06ed0c8570fc448a800192167db81cba4cbaefddce78","sha512":"a191f331612f086b236bcab8dc8340639cec8859afceb86edcaa7913e42165ff3d184a5a5f4bac7ea93f59aeea3c76e505c456f9f5da206347076658fc271a87","ssdeep":"","tlshash":"12c08cc8a0c72e101a12655015bf24e4a024402a70489b038c94d8482e230b09233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-10-09T17:22:19.408228Z","times_seen":9600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"26ada63688eecf39cb8b0e0741aed2a3","sha1":"3e03adde982a6830c7a2e8c182d4b526ef9b1b59","sha256":"2616c1772127515b4ee84f38249e3dc6acdf300478ef7bc9081803e414323c46","sha512":"2ffecb0c1e9a36948b7104f5dfdf31d79ada71c5f4554a41eb88fdeb7c512e319e317535e184413a44d6b12c3316a354a0b4516cc2af569547755de8222cf787","ssdeep":"","tlshash":"60c08cc4a0c22d805612a92010af34e4a034803bb44c2b429da4dd483e674f48237ed8","size":149,"data":"","first_seen":"2023-04-30T07:46:29Z","last_seen":"2026-10-09T08:14:51.179042Z","times_seen":373,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"82b314192b4dce18e996c2179c3b795f","sha1":"caf6f26b907ac13a6cb9491dee030755bd05e8d9","sha256":"84947a1b1be359bf621fe720ff7be49752dff1864c8b425bd03878586e6f6bf1","sha512":"bddfc79a501dc421a245cbae7b0d55d979c178f44810749081e62296e01f7399ecb87cb0e1e41f7b3769d3ee8c9838563cbec5d0c34eb2841184d4a589afae25","ssdeep":"","tlshash":"90c08cc5a0c22d002602681020bf35e4a024442b7448ab528c94e8493e620f08233eb8","size":143,"data":"","first_seen":"2023-04-17T20:49:21Z","last_seen":"2026-10-09T08:14:51.179742Z","times_seen":358,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"125.74.108.43","port":443,"asn":141998,"as":"China Telecom","country":"China","country_code":"CN"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8a41c9449b73e8ba0224c6be1f0b7e8","sha1":"33d79319d4110bcf5c44c36f7dd4a291972ac546","sha256":"52079c09a7355f4ce3af750602ebb9aebae8238583601f8a06268eecccf13565","sha512":"472d0395a65a3ade2d215559b196a88ffcdacde3ac0f573eb8663b524f201d72c9339bcacbc198d82452a0ac367c0efd407b12795943cdd2755d95a8cf71b977","ssdeep":"768:swetbD3SkE+a/l1jaKUiQU5eqEh9GMXBOXAA/EXBeJMlbJfuPT:BetbD3SVT/3+KUc5eqEh9GMXBYEXBeJ7","tlshash":"dbf23d9577c0317cc3c783ea362b501ae1a69e910059a8bcf345f6907d34e56a37fba8","size":36114,"data":"","first_seen":"2025-03-10T03:40:31.536734Z","last_seen":"2026-10-09T17:12:22.649838Z","times_seen":99970,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/_plugin-vue_export-helper.BCo6x5W8.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41bf66d156aac38dbf7a45b53cb4db18","sha1":"4aa693a2afcc34b6a577e1bfc4be3ef5a458dce0","sha256":"a7dbb0eaed9de79041d555c4563be4bb0514099b8d169a2b548ab2d07102cb55","sha512":"64e1a5c2939052c93692338bf78b66723ae6673121d2915a9fb0848449e4b2657c1a31c8940bc7c9ec77554fd4c04ffae1b787297f0fba23983a987e85caee15","ssdeep":"","tlshash":"40b012e500824138432175c796f444649e08005c394756d144480d52c143080541bc3c","size":91,"data":"","first_seen":"2023-03-26T04:51:44Z","last_seen":"2026-10-09T08:14:51.113206Z","times_seen":1880,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bbb8281a186bd30f570bfca3f66c70bc","sha1":"113ecc8547ecd1d2cf2f7b10d8ce63e725c0ed3a","sha256":"8884166e9156c62e064132d041c98801b482a2cc6a8e146561895510917e1783","sha512":"6e355b11a3f54c746b5420b83caff25fb947695388ee01ab92e3d09fab418893a8fece553161807218370c8344f936de1aaaeab94dfea131fb25ab0c9231f5ac","ssdeep":"","tlshash":"37c08cc4a0c26d001a02a46054af24e49024402770481b029c94d84c2e220b08233ea8","size":137,"data":"","first_seen":"2025-08-26T17:30:33.449562Z","last_seen":"2026-10-09T08:14:51.181139Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-stat.DzCGzzkx.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a425a891902b8b302b4ee59fcb70f214","sha1":"47d0bf8cd1b5ce3863ed8c46a0b4b08f780055e4","sha256":"cfe0289d83fb1fa17266f60f5c32931e6f99e4b503ebca823e8d793c5531da6e","sha512":"c4ce1aa39642116ddd1c5be4b5a1cbdf4c4ed6fe4c8c9a64076cea9b4d9b55f57b13e98c27687ffa8d8586036f3b6b6448fb0a07fd6ea078c04dd09d267789a7","ssdeep":"","tlshash":"63514204792cc57b2893e01e64d0441bb26b2ccdc6b4763f65fa987e13e5c1864adfa9","size":2873,"data":"","first_seen":"2026-04-19T12:18:29.238858Z","last_seen":"2026-10-09T08:14:51.091138Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a7e507f5998c97ab0dbb873768dd748d","sha1":"3eccb50466058830030b932a69b010061081954f","sha256":"a8d5d1e6f993c51f99757071832455971c5c050686ecbfc76c90e32a32ccc555","sha512":"d70d16b17806bd1cf085f7cffb3f94c9492ede6706d498e96f20a093d817c6667cec135fa77a0c3972f7087376993d233a176b4fb7b166da133d6eb9401aaf79","ssdeep":"","tlshash":"1dc08cc4a0c22d002602a51021af34e4a028443670482b12cc94d8582e230b08233e98","size":139,"data":"","first_seen":"2025-08-26T17:30:33.458228Z","last_seen":"2026-10-09T08:14:51.182148Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"11ab169d0bf6e806e9ac049d3b54e3b6","sha1":"71fcbedf3a9a8e22003315106b9910f2bcb258fa","sha256":"3f301446260bd8578ada459db15fa8a65a2334c872ea63fe34a93be0d42943cd","sha512":"6da4335f25d683d37adc45cf7ab8d32a1bb460f0d5a564b6e7750fd6b2aaa59abd6231252a9c4aa7059c43363c77ab2c6515d8b52eb9090da8746fa854dd7805","ssdeep":"","tlshash":"99c080c471c36d0125155520507f35d490644017749c1b568cd4dd552f130b15233d98","size":160,"data":"","first_seen":"2026-01-04T07:38:56.521144Z","last_seen":"2026-10-09T08:14:51.183301Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-confirm.BqkvfG7_.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e6cc686cd1a4f47e5f311aeb581d88f","sha1":"8c9484a4bad511d3ae4264c3b7f1f6822e598240","sha256":"be1eca4586d1b0e449cb9c0897aa83e50458de6abede459f158311e919402afb","sha512":"23cfe32cbc6c5b17d0b2eb3ccbbe66b2358b74423d63591db95e37238ff629b82b85531a24d7ff691933900ef6bb284f06e8226b533f950922a9ce599583ed56","ssdeep":"","tlshash":"7641730dbe1c9271ea839349d541252e723b2fbd72163a0ff0fc1c9e17b0c65b995259","size":2166,"data":"","first_seen":"2026-04-19T12:18:29.285993Z","last_seen":"2026-10-09T08:14:51.059333Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/LoginRegisterModal.DV6LKLAs.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"19f668b313b38587e254317758c87976","sha1":"1aee25b05d9244711bc3d7b99689d05c30157717","sha256":"d92c4c5b9bdeaae0035d76b3864c85bd4c8106bcbbb9fca77060b7a9979f4eba","sha512":"e191c9cb5a264f3e995bc779ed54a5b20ffd67e2fe07bffd1cfc28f186fae02a861bbb7af75e807a262b9f4b5af2cb8924150726b93f1e1a7551374d7d713269","ssdeep":"384:/LrSK/VoBOmek5T1jhJJNCkX/sjFP2rzewPRPbHMq0:jrSK/VoBO1k5TtPstLwPRPv0","tlshash":"1162c509b55cc9335e92b06ce48318246059cc5fd941ac4cb7f8198f26f3d46abba73a","size":15321,"data":"","first_seen":"2026-04-19T12:18:29.379275Z","last_seen":"2026-10-09T08:14:50.995636Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fda026047e8eb1a5882e868c6621ecb4","sha1":"94912222851f4eef4664202cb513d7f3d45993e5","sha256":"389ca4866842c71e748f3385526f79ec5d78e6fc86cf71a48a0c44012c59fd8a","sha512":"c7ddb08213f5190b3cb67a8b6cdb51338e1763bed5a088339a123b7fb1f6e67f25289f103a5664785612b1782a4301d3d9d16f8a6d466cceca1e1c1814af3145","ssdeep":"","tlshash":"d3c08cc4a0c62d002602681111ef28e8a028842a70481b039cd4d8893e620b48233e98","size":141,"data":"","first_seen":"2023-08-10T20:40:22Z","last_seen":"2026-10-09T17:22:19.439804Z","times_seen":420,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5d31ff7e60917b0ed4a4b70d37f66a2b","sha1":"c50f1dcef18065974e84265a1a49bdd0ee29e449","sha256":"aa6fd728eecb263d1055ba5f0b243644492895c8b51fdf396aeb35f2026ac848","sha512":"37b9cf72e1f471ea4b8ab70e1ced41fd251b10d068879907f2f7dd3276ac5c5cd9b0c3b90a731ee5449d42ba3b181ce145207561b4e72ddb32bbf1337361fb8e","ssdeep":"","tlshash":"72c08cc8b0c22d001606641010af24e49024402670482b028dd4d8482e220b48233e98","size":138,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-10-09T17:05:56.089707Z","times_seen":373,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d6e92f200cff0675c6c843ee8980e5e3","sha1":"50ed9a2265e851f6b11abb8d1a5e0443151a7cfd","sha256":"9dcce56c16f2685a0cf3e10c3dd707e1685f9f98294c5a5036b2c3b3e2f30801","sha512":"49e0b72dcff5d666ad61db6e178e5a2a577f95a0b962dbd49bf7b96fadf11b1ebd2596c2b5c7cec7532c2f61809248fac043ac265cfa0c069c864c391c793be9","ssdeep":"","tlshash":"a2c08cc5b0c22d001612641014af24e49024802670881b028dd4d8482e220b08233e98","size":139,"data":"","first_seen":"2024-10-14T16:48:29.18645Z","last_seen":"2026-10-09T08:14:51.188171Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/pages-user-transfer.DcAqd4yP.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f402be9dcbfaac3a9602ad6fec4fe7b8","sha1":"307a297b2adb01a806b7193c58a5b92c856daf43","sha256":"088bc33b6f6cc10a703206d711d68e8caeb343eaeaaf5eb369102c9d7060289f","sha512":"30dbb15187805b8a1fed0c622785b2dd02f56cf04cd2843bcd32e34cac7e8697e967648d141f7326a8253bd46fc0a855dc20d4dcb8f4abdcdab5af91d9002c5e","ssdeep":"96:JBgwrRVZ5u4PSajRftJ02usxc3W+Ucy3OwE+JcyI/tEcD5IOhEuNyosUk:vgwrZ5xjH4YOkoJ5GUk","tlshash":"1fc17405b91c89202a9a7278e0d94d02717cfdcde1407a5cb2f8196e13adca909f9f3f","size":5696,"data":"","first_seen":"2026-04-19T12:18:29.262089Z","last_seen":"2026-10-09T08:14:51.129083Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-title.Hn0NidZC.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89b5838c07f7b0b57071c0821db629f1","sha1":"7c3b930f99149e57d65415d4d6daf2b03b5c69bd","sha256":"488b3bfc185bd85365b9505635043d45f99f2895dad34ac5a207b5698f547a16","sha512":"7794a6ac7d6cbbc4ea280c780ad370220b5294eb69a89faec6f8fd687d23c448883e64661092f141d300204da234873834db81b780b54f21e220fd6eec0b1d1a","ssdeep":"96:MohiGnLTCdX3ULUuFXS9Y5+F89umUekTqNcjett8OFib1kjbdCpYeLD+fMMj+NL4:MoMX3SFXIYQcumUDqpPsYeLxlpu/ew","tlshash":"41d1c4243668fa3729d740885aa00601b1482e8dd730799ebbfcbcf95286c64557ef38","size":6384,"data":"","first_seen":"2026-04-19T12:18:29.249741Z","last_seen":"2026-10-09T08:14:50.967715Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c9906a60bf176582d9c762184036ff97","sha1":"5c61bc5b5cf5f9f82e45f9ed39397d6543de7e6a","sha256":"f72ccf65db7b64c33731893405e035c0d29bbfc704a4d4ad94d6e0d5a7684b20","sha512":"f922a474f726dceac9a7d8ae699f84be6815d0436ba8e3f514a21bb3d6907058ed6cd5544dfe13e21b701e787959e922df9967a2ea5a936b5ef789fe4848cfb9","ssdeep":"","tlshash":"bcc08cc4a0c32d002612681020bf34e49024402670481b438c94d8482e230b08233e98","size":139,"data":"","first_seen":"2023-04-18T06:39:26Z","last_seen":"2026-10-09T08:14:51.189113Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"35e0563db9526e0c5fb582a10302458c","sha1":"a1f9f0f5d0b5c690795b05928ad7ca0c103b9777","sha256":"65edd78a29d50b17ea83883ed1d346bb8e350b5cc13e7bb107b7507199fa8eef","sha512":"c7c38f574d0cda3932f3e34d78956e744ea361286aba39e79003d524f9f19ab05603900fe145662c11a0c04a43898bf00b76ab2f8a3783d319092bf55b430d3f","ssdeep":"","tlshash":"51c08cc4b0c32d002602645050af24e49024802770481b029c94ec492e220b08233ea8","size":141,"data":"","first_seen":"2023-05-05T08:00:34Z","last_seen":"2026-10-09T08:14:51.190834Z","times_seen":735,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/CurrencyList.ByvEvsE5.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3286e76ee552483f66c017337678fa47","sha1":"675cef78c1eaa838fb930bef80f1372e157740c6","sha256":"cc33d48184f8155fc10f37eee7d56f0ce6bb052b24811f1fbbf301cb2581819b","sha512":"7831664a44eafc6f0ada452aea47b116899e62eef05b5464e996559fc8a3e38a8b0699b1eab4377aba577edd200ad18afe48de6a571e1a95c46be74dcbf245ee","ssdeep":"384:UCk4THfWCNzMLU0Ij6m72b8Gpg6CGMEquRTwei0oI1F7:DjnzMLUHjN2b8Gpg6CGMnUvipI1F7","tlshash":"3d82c6653389e43647d9642980b89604a3367f8dea02346d77af9cf9935fe4871acf30","size":18856,"data":"","first_seen":"2026-04-19T12:18:29.290382Z","last_seen":"2026-10-09T08:14:51.080272Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-input.B06LQ4yU.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"97cc11e5aa9023a511961ee1fb97e603","sha1":"60ccfcb7a2c6919d0b6aa997d01f4e4c0e459f2a","sha256":"7f9512f04e96d5ae269eca3da17055b9b5a206e115cef08b736c7cf11c693971","sha512":"f88dc717f24eed3c78198d7e678275e5750e162d02a5b2a26dd7a62ab7453335825d0352198ab4ac8b95a16c568497a45030276ba7a8119b8e32b58d55db72f5","ssdeep":"96:f2gU3EALwgU9svecAntaG2USFKGiP9shkYre9mGeKCeOpd:f2gWQatUfcC9ze9e4d","tlshash":"54c1225a350cee232dcb8c4a6095424115251b8dde3078ecfbe671b5175fc88b2acf6c","size":5698,"data":"","first_seen":"2026-04-19T12:18:29.260975Z","last_seen":"2026-10-09T08:14:51.105979Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-checkbox.0RQzNFsn.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4b66f522303f2aa7916e5b8107450b8","sha1":"b01663f34b742ebbc57f8ec11110793d36733b16","sha256":"ab8d92e15e5628b2689b9f980a9d427e4260bc09712657159ce027d01c4b9722","sha512":"572d0befe7000f353a3ba4ece5ae04750866e00a3c4acbd1e320588bd8faedcaa1ef0214ac63c6684e0803b026cdddfc643c8936169e8bcb6ce4b2e9159fcabf","ssdeep":"","tlshash":"285143157055a5761fdfc4cc50528381a32e239cda103efdbbe824fa5a8bc88916fb35","size":2530,"data":"","first_seen":"2026-04-19T12:18:29.239856Z","last_seen":"2026-10-09T08:14:51.071666Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cada8fb3cc65a39eb36a4df1c90f2caf","sha1":"609ae148c4c2d63e321211f8091ec3f8e0350de9","sha256":"889322541533390498d984110d2c5183e30f68eadbdd3e26d49ff14ddcf0da68","sha512":"9b2cf6f4c703f718d9cef1fa878443517aee40771676b60ef560bfc74e96b94578c7ba9b07041d2716ce040a4c8d786ee32e31f881b9d80443d9a0671f86fa79","ssdeep":"","tlshash":"88c08cc4a0c32e001612646410af28e49034402674481b02dc94d8482e620b49237e98","size":138,"data":"","first_seen":"2023-05-02T22:44:01Z","last_seen":"2026-10-09T18:09:00.304968Z","times_seen":1850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/uni-app.es.C3bR81YU.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"18ef5f2b8d0adecc0396cb955ed75278","sha1":"b62993923b0734d6a6b1ef6328e218a9d5e77fb9","sha256":"779c5d8438379d095451422836700e2302cbbc7d71eba7dcf2c3565778798ecf","sha512":"4d450500b8ef67704c0f4dc081446cf8350d0da8158a8badc2ed4aaf5bf5493cc586679df87b7e62859d6e0f4a18d2f513ddc9414598b3d837a39901717a14e6","ssdeep":"","tlshash":"d9a0120764412072180718500055550a337710d145c8863082d543241af44a5913890d","size":84,"data":"","first_seen":"2026-04-19T12:18:29.306384Z","last_seen":"2026-10-09T08:14:50.954144Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-fab.CgLu8OR4.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f708cd88ecdd073fd6032ba773e97566","sha1":"31f1726882c079c306b6818b33453adabfbf82cb","sha256":"17996911370bf9197e45301b0aa2da14b8f24efc1b4b8b3a6ee202fb23640c8f","sha512":"832b6fdc89904d98564290a6ff7d6d3c5e967bcfa542f4aab19e36abd99f32348d5e7b36aaecb3ffd337ae3996dc9df02a6e50234335a4b9dd7e611698e9f937","ssdeep":"","tlshash":"f05176063a0da0372687087e905446c1720a1e7d97f0362ff2f5f4b64e8191e62dcf34","size":3165,"data":"","first_seen":"2026-04-19T12:18:29.284918Z","last_seen":"2026-10-09T08:14:51.102278Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0ae64cce4f24529caa56156b159bdade","sha1":"3f1c5a480a93a0bfdc86eb0d7769ea098682b7a5","sha256":"99cb12f023e5c6752e9a7e0132343acf246a432e31d1e7326a3fad10704711a5","sha512":"0ce54f9c86d027c6895c449a7be022ab96d9df608d39f56a3eb0c2721f49aac55b9f82668c5265ba231c626d7a841bcb68c13b169f5f5f9be40244d0c3abec61","ssdeep":"","tlshash":"eec08cc8a0c22d002602a45010bf38e4a024842770481b028de4dc4c3e230f08233e98","size":141,"data":"","first_seen":"2023-04-14T14:41:51Z","last_seen":"2026-10-09T12:27:36.673991Z","times_seen":2869,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1faebd0b8ec83d9258948f07393e454f","sha1":"44d5ca89f13c7829bb8153a66ba0d76047eeb290","sha256":"9b72256f8545b5a7756926fc56e1d8634a74b0efdf96ee8291b743ac3434846f","sha512":"14dede173aa4e1c8244528fef9c867f813d3f391f66f1a356c2887fed20294f9df7265d0e8d5bab67bf8e1e1a3ca2238d1da9a6b806c008154a19ef701877830","ssdeep":"","tlshash":"dec08cc4a0c22d001602a41018af24e490248427704c1b428c94d8483e220b08233ee8","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-10-09T08:14:51.194623Z","times_seen":358,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2cbead8d777092847714cf3153123fb4","sha1":"452bae521f1a8f32e2f02902edabfa48d6ca4626","sha256":"998e7a7ab80aa20b3d2f7b6d9ad8e897a24f43eed54b95dcd2b478a8fa66a56b","sha512":"bfd5838ce47877b46e3e446203789929a5843be24b0a3dd95da4f1fb4260367bc11ab9d5e4304b7f45ecf2e227c31a9ac2789b0eed2c1b0e7cbdb5c59ad46192","ssdeep":"","tlshash":"82c08cc8a0ca2e001a02641855af24e49024402670481b02cd94d8582e620b48233e9c","size":141,"data":"","first_seen":"2023-05-31T15:16:52Z","last_seen":"2026-10-09T08:14:51.195628Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e40acf04b9e1d2e7ad1d35c70f89add8","sha1":"826ac96f076cc09f10b4e38ca8bd6b67ba79149b","sha256":"6b702ffc46910b485fdcbb4791eaa2bcfdbfdaa8e3d4ca7b513ed029c875223e","sha512":"278dfd3d6830050797905e4e5a3565c6ee3210ca91bb415e630400808b555459f7e2bd154395aa08f55d6f69cfe49628964796446ced9ea429f1e8d18f768eef","ssdeep":"","tlshash":"23c08cc4b0d22d102602641410bf34e490248027b0485b028c94d8482e230b08233e98","size":137,"data":"","first_seen":"2023-04-21T12:20:40Z","last_seen":"2026-10-09T08:14:51.198024Z","times_seen":323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"usdc012.com/assets/s-button-BpzWQUlV.css","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.102Z","timestamp":1791533520102,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/s-button-BpzWQUlV.css HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 19 Jan 2026 08:47:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa1-162d\"\r\nexpires: Fri, 09 Oct 2026 20:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XNSz30zcxsi3KUfNnLrNmEJkUFq%2F%2F%2FwSZC0fTaONfUrG72QrFBkybCY44FBvNmL7RGzbNLptLFFwvNIjPoJSBfDqUctpkM2GX0oIBynA2O7ZudRDMk%2BlMTikE0modw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a47beaf4aabb35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5677,"size_decoded":1893,"mime_type":"text/css","magic":"ASCII text, with very long lines (5676)","md5":"119264cd3c80acfe78ffad71134d788d","sha1":"8cda9c0b48b8d22eed34808e6cca43caa59c891e","sha256":"08e80d2433a59c8e2371d0268b7c42e849404c218150ea0eb043037743bb53f7","sha512":"f52bafe7171cc2ff034930bce798aeff2d138762d357c8142740fa28459931675db2df6a1ccc5c76f9b3df8bbeb511a547571fc102ac076c630e429b926ee69d","ssdeep":"48:jPwdIWejFN9UGzb7GDBpX9rU9E7hEVhRQeESmjxfkgshmhMv2k/IS5O1V:jPw6WejFN9UoiDDXtz8Lm1fLsQGvvg/","tlshash":"70c137e6f3cc48693a6bd29a43667b7d1c6e72c7c2040f26f4673a644f220d2357218a","first_seen":"2025-08-26T17:30:33.372003Z","last_seen":"2026-10-09T08:14:50.947947Z","times_seen":24,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/pages-user-index-userContract.BdOQgNVT.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.154Z","timestamp":1791533520154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/pages-user-index-userContract.BdOQgNVT.js HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-37d36\"\r\nexpires: Fri, 09 Oct 2026 20:02:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n5Rq%2FC4lsyaNISgxfuYs%2B4zoq68yVJCwMn%2Fqv25ZLChfMr2v%2BMgBR9K81P0kHCG6s03PvKK141OL47SH0SYaZpK%2B4vKYNwFeX0MdbHaMNhvwUVJl0mcpZhTM5iC%2B6w%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a47beaf4fb0035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":228662,"size_decoded":59673,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"32ef5dd899ebe569963dc33cb51f7632","sha1":"f51b8af1962ae720a3cfee932740648a20975259","sha256":"d22665aaf7e9eaf67eb4893d80a59952c8a1728344fc825af744e97eb72c9ef5","sha512":"01cbbcdd5c8b2dacd2cc5ecd672ff5257d506776cbeee5d28ee3fd587c826a046c3f08b01be63d61f45e261ba1ffa21f56d73fc2dd472144a6f46805e3d001cf","ssdeep":"6144:wpdUPGVIJx/9LEwKaCBaL08YQR4XqQIVqpyX:hAw","tlshash":"dc240a85fb65b41542a39079413f0907b336369e944b86acb27ecdda296c4ce3276f3c","first_seen":"2026-04-19T12:18:29.317245Z","last_seen":"2026-10-09T08:14:50.953461Z","times_seen":6,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/uni-app.es.C3bR81YU.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.064Z","timestamp":1791533520064,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/uni-app.es.C3bR81YU.js HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\npriority: u=1,i=?0\r\nexpires: Fri, 09 Oct 2026 20:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\netag: W/\"696defa2-54\"\r\nage: 578\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HFvfUjJ01cnTSotNBICFzDf7Trj57u1KkKbgiGncTcjfQllom6VekriUPrgEXbxiJqYWvnS3yLRtskmxl2PBOClHPNWQ07k%2FC7ARdRDq104vnvqo8YINHBfcJywwGg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47beaf46a9735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84,"size_decoded":865,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"18ef5f2b8d0adecc0396cb955ed75278","sha1":"b62993923b0734d6a6b1ef6328e218a9d5e77fb9","sha256":"779c5d8438379d095451422836700e2302cbbc7d71eba7dcf2c3565778798ecf","sha512":"4d450500b8ef67704c0f4dc081446cf8350d0da8158a8badc2ed4aaf5bf5493cc586679df87b7e62859d6e0f4a18d2f513ddc9414598b3d837a39901717a14e6","ssdeep":"","tlshash":"d9a0120764412072180718500055550a337710d145c8863082d543241af44a5913890d","first_seen":"2026-04-19T12:18:29.306384Z","last_seen":"2026-10-09T08:14:50.954144Z","times_seen":6,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-popup-bottom.C5jIlEU2.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.129Z","timestamp":1791533520129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/s-popup-bottom.C5jIlEU2.js HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-520\"\r\nexpires: Fri, 09 Oct 2026 20:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wf68yJanMWVpbZCZ7SH9nbFGFKlWLvfm1HtQsRI4ne99mImVnccGCs5oI0e8VCIZ1irD6vduQqbmID%2FBpZoHYiziRKIra6Ls%2FXTlV4STxr%2FCJgFbGyPuCkw3CsCfoQ%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a47beaf4cada35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1312,"size_decoded":1495,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1311)","md5":"faa7a61e12a30e50504c42df33583f30","sha1":"b099ff4cf9b2f55b5c2d4d397bfec0f3f6ce9e3c","sha256":"bf18652f6f1b0b8ed0b83d4019d873898d389a794662c19fa2b78b1f9e4012ad","sha512":"4a230791051907be119deef1517266f6db52ed88ab18eccd9ba4a4b9d9b98b7ff6fe5f1f3ea90849ef58a112e29bf2e1c953a856031c38386bb7ec075fe65b64","ssdeep":"","tlshash":"57211209381db033649f497c52600e40142ccf6ceef43eeeb6d160764f9989ca65db28","first_seen":"2026-04-19T12:18:29.292628Z","last_seen":"2026-10-09T08:14:50.955933Z","times_seen":6,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-checkbox-7UAD-_pA.css","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.149Z","timestamp":1791533520149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/s-checkbox-7UAD-_pA.css HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 19 Jan 2026 08:47:29 GMT\r\npriority: u=2,i=?0\r\nexpires: Fri, 09 Oct 2026 20:02:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\netag: W/\"696defa1-342\"\r\nage: 578\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B3%2F3FsK26AQ212gm9z9KOjMEuahX%2BHQH4yv%2BCcLvbw%2F1nQTu6su%2FSRW4yCdGb3awZ9qNn5PTFbK7lkSRxDfZqgJsZnYbkEckT6gdEzRjgjUetzkl1p1TpVish8kDiQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47beaf4eafa35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":834,"size_decoded":1191,"mime_type":"text/css","magic":"ASCII text, with very long lines (833)","md5":"1d133a333267da931a20d39afae27197","sha1":"9c1ef3abf336ec77b39598b7bca0158d9c1371d7","sha256":"3f115aead4f822dc2e19473faedf8f874eeeab803c7a8b278af6e5a394547196","sha512":"998e29f964a04a62bbefd183c08b6bdc2fcbe0ae92b362679ca01e5f70fa510ba732f25fa5bf8561dcbbb86dca3e1099b5dacb817b2e5f7a3eae44f43da2c4e6","ssdeep":"","tlshash":"fc01cc33fa882518a233c7013391decd563a8381d766061ab39069144ccf78e2ea7649","first_seen":"2025-08-26T17:30:33.400114Z","last_seen":"2026-10-09T08:14:50.95687Z","times_seen":24,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/api/second_contract","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.704Z","timestamp":1791533520704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"OPTIONS /api/second_contract HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,think-lang,token\r\nReferer: https://usdc012.com/\r\nOrigin: https://usdc012.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:01 GMT\r\nallow: GET, POST, PUT, DELETE\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With, *\r\naccess-control-allow-origin: https://usdc012.com\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NyUWrdPUUDhoclMb4TJV05UEz6R7KiAhIZf31LGtLVfD6PYCpSnaeN%2BbKvKZjvV3vBFlXr9BwbYNXAJUHy6fwMNWm2FJRWLoiF4nIE0Z9fFz5nv1yMClJkx9TcaBo%2FD0hUjc\"}]}\r\ncf-ray: a47beaf86bb9c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":947,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":675,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":675,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/storage/file/20241030/d4dc8b79827c3ca5392ebc8abd6f6ee1.png","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:01.779Z","timestamp":1791533521779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"GET /storage/file/20241030/d4dc8b79827c3ca5392ebc8abd6f6ee1.png HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 30 Oct 2024 02:08:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6721952b-a00\"\r\nexpires: Sun, 08 Nov 2026 08:02:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nage: 577\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FLcSTnvC1%2BccoACgSJb1MZeMnGP5OtHKgVNA5BLWQVuYOPDB1iyKBJ%2BjXGdLXGdOiX7zDOgpVSxuGTw91ammgMuAdQoSEO7OzwG1XCqT5j3HkG%2BHQlCTfStMj1bCCaLF0iRN\"}]}\r\npriority: u=5,i\r\ncf-ray: a47beaff1808c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2560,"size_decoded":3409,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"cb84d3ca48a52e3df1025731a8bef4ec","sha1":"b059f2eb3aaf93145fd62647cb908c5532e06795","sha256":"0f4502d8c5254df1eb0eb8d124c7684b4f02e2a5004525d5bd7acd18a6ebb9fc","sha512":"d7cd5d9aface1bb4718d418d1f7108bbbde7e8e24e926ce4bd4a88f51c715759e55741de3d6b17e7e54dea502761817e093e768a337fc0030a259fe9b4338151","ssdeep":"","tlshash":"7e513a6a47020c971334d44f89fc3eea1d6edc1ad421e0aeee0197fa18101c18dbe343","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-10-09T17:24:31.116223Z","times_seen":1812,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/static/images/home/qa.png","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.762Z","timestamp":1791533520762,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /static/images/home/qa.png HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-6de\"\r\nexpires: Sun, 08 Nov 2026 08:02:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 577\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m6771mesnfyGdDgK1IPuA4P7TL8uzCisUFO1YChBWOyjTWWW8uwFHw0CzO5nN570JAKFI0Riik7%2BeYKpKo7ac5%2B7GtZmxCnZf1EDLilT3sPHgevWDyiHZBO3xgblxA%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47beaf8cd2635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1758,"size_decoded":2570,"mime_type":"image/png","magic":"PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced","md5":"4a7c2a4168178e7cee64ec6c3f50fc2f","sha1":"dd475369b3668262539099d6c50ca028c848d0a2","sha256":"2cec8d95ad061d4d1766de686f5aa726087094befa91b90391275dec59d7bf09","sha512":"cc73b8c639c9278e99cbadd03e0c02a2d358d4c6e3e32caec7ef46c75dc2e1bf49bc89d261128be8b10cfd60d1435c3b0006b9f8061b1bf1ba5929b87e01eb85","ssdeep":"","tlshash":"cd310b810b70289dec1f4d3fa01d87648da58f9c35167d280486d04bf59cf8d77a4a60","first_seen":"2025-08-26T17:30:33.426988Z","last_seen":"2026-10-09T08:14:50.961978Z","times_seen":18,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-auth.CLe3Up1U.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.161Z","timestamp":1791533520161,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/s-auth.CLe3Up1U.js HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\npriority: u=1,i=?0\r\nexpires: Fri, 09 Oct 2026 20:02:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\netag: W/\"696defa2-20a\"\r\nage: 578\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nZN6GVk1%2Fkm4q5miTBrvzu9mfGoEZ%2BVjZx24YPC8ngSKfUeK%2BN6pnO2142KRKpvuu6kxpNeUrkp4%2B%2Fm6RewxvSKOW3s%2B9yK7hmYwhYzX%2FUDVmAqcaDXh%2BlLL%2Bnfi1Q%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47beaf4fb0935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":522,"size_decoded":1198,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (511)","md5":"2be3a61d9bc0bb75c270cf91c98d3e69","sha1":"d73176906cfcda6bf0ed24618755440601f015ac","sha256":"c8962731463d195201bb58e62a5f0208da7146e5531f737526d91683d7fd04e1","sha512":"e66813329761800dd13cef669ea9f34bb5027934573380cd20adbe92e277565ea84b721fb73030ace76080b981e2451534d4fd3ceb1cd66a461e0a4967bd3d8a","ssdeep":"","tlshash":"3bf0054d3c64c27001c158d85611681051292d5c667974c7e1df65ed1a7506ed82df1d","first_seen":"2026-04-19T12:18:29.386648Z","last_seen":"2026-10-09T08:14:50.962814Z","times_seen":6,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-img.B9p0v2L0.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.066Z","timestamp":1791533520066,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/s-img.B9p0v2L0.js HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-d69\"\r\nexpires: Fri, 09 Oct 2026 20:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ypO2HdK4QOh2PPvjyfpvWJj363kg4xSj1LLzTbyywUYUl8JT43EIDgtzw6SW3P5G6wEIMrUEhKAKjg4tXGlmdQ0AJXB7WHvHvbvSM9Jol6gQm7GPHfXXNBlakWs5Lg%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a47beaf46a9835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3433,"size_decoded":2180,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3408)","md5":"36d03a2b291a13843eee776c15844ef1","sha1":"9aca8308b37f47896b5b643ad6232afcc118cbf9","sha256":"3f06ea0af5df4515eee5eaf2bcf53ca332ab4d5725aaded4cbc1537543e2ca27","sha512":"4cc89bc9b21befb0a752bd51dbaf5507154409581aeaa0d9baa84a7b19934983469014b7aa1796c119a3968d84e4ae28896f5a998d723afafbed2848796d71b2","ssdeep":"","tlshash":"26618528360cbd6f06b684b604340e41615db95ec620abb8f7fc74bb6295c9cb66ca70","first_seen":"2026-04-19T12:18:29.289472Z","last_seen":"2026-10-09T08:14:50.963718Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/api/system_param","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.272Z","timestamp":1791533520272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"OPTIONS /api/system_param HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,think-lang,token\r\nReferer: https://usdc012.com/\r\nOrigin: https://usdc012.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\nallow: GET, POST, PUT, DELETE\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With, *\r\naccess-control-allow-origin: https://usdc012.com\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IkNx6FigPJDAOB0kuZGgjTyOgqkc%2Bg17AtsUlZ2Rt%2FTpRfV%2BuFoOYNVNezVv%2BBfO%2FG5Opfe6QmUfivFEdRrcmO7JzbWkHsyvbhmKUbz1VGwbs5uv4GQtuD59QQqgjJdsHxBZ\"}]}\r\ncf-ray: a47beaf5c930c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":953,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":708,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":692,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/storage/file/20240815/4a3f1438218baf51638caf1b4fc2d260.jpg","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:02.052Z","timestamp":1791533522052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"GET /storage/file/20240815/4a3f1438218baf51638caf1b4fc2d260.jpg HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 15 Aug 2024 02:25:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66bd6701-e3271\"\r\nexpires: Sun, 08 Nov 2026 08:02:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2UPyR9txGS1l%2BahM6t90gQYvkEsjhzahlO%2BjZK%2B5NvMKzd1oHEDjdnYXZDp%2FhbZ8i%2Fbuxas3UJ7XvIXofPkJZ8NCQVTD2D%2F6wQmwZ8%2BF%2BtlaU8quZW7gqHGK3GGEZ%2BHPkc7w\"}]}\r\npriority: u=5,i\r\ncf-ray: a47beb00d963c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":930417,"size_decoded":931413,"mime_type":"image/png","magic":"PNG image data, 1170 x 682, 8-bit/color RGB, non-interlaced","md5":"9947488e46a0233ed6a983fe27a3113c","sha1":"873f7e5877c8aec3f32fe5f0c1fa5ab2579f5857","sha256":"b4352fe49d0c7e8e0454934c98989847cc983bd338068f521abb76954bb81f9e","sha512":"d5732f57fb858e9f021fc1072efae6be027f92dca5aa4b712ccfdd47884703d8d5c00b1165771c4440398bba52d7c063301e14183c592018d4ac14e26b8a8afc","ssdeep":"12288:LT4KBD1gl7hOkfLM+jihoB4C92WOAKL3uD+NEKYXuv0IgZDKX6wAZFOthTEh42DW:31gNhOkw+EoBb03Ra/1M0ZQ6X2Y4qmqW","tlshash":"38152399b2eccc5bd2d23d476321a355badeb40924fa93f8e52249b4c09d29c70643f7","first_seen":"2026-10-09T08:03:44.780708Z","last_seen":"2026-10-09T08:14:50.964934Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/api/second_contract","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:14.467Z","timestamp":1791533534467,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"OPTIONS /api/second_contract HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: clientip,clientipaddr,content-type,think-lang,token\r\nReferer: https://usdc012.com/\r\nOrigin: https://usdc012.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:14 GMT\r\nallow: GET, POST, PUT, DELETE\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With, *\r\naccess-control-allow-origin: https://usdc012.com\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ksAFxu3W33Se62FMSpXWIbBEP1KYm0gYFHMgutkIddc3brnseVcsdAWbCZeQicrfH3nJcKKXTd3YNqXF4mi6WMm85EWrwDREwVnDE7itqh5SQncwdOkxJgQQCIyQTdcVC6ou\"}]}\r\ncf-ray: a47beb4e6ea5c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":943,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-stat-DueXHMM-.css","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.142Z","timestamp":1791533520142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/s-stat-DueXHMM-.css HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 19 Jan 2026 08:47:29 GMT\r\npriority: u=2,i=?0\r\nexpires: Fri, 09 Oct 2026 20:02:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\netag: W/\"696defa1-385\"\r\nage: 578\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rUTxegvMS%2BDKGKqybQRwshUsIfsRu3FBIoOocIlbMwPJJ3Y6M49suX6VWe9eN7ox9sNyE9o8e9KbNenM68eDidTg%2FyF%2BHxh%2BLi1j85I4YbT%2BInZcNrYJBNSySwO6gA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47beaf4daea35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":901,"size_decoded":1144,"mime_type":"text/css","magic":"ASCII text, with very long lines (900)","md5":"64b30841961e87a65747d84305f9aaad","sha1":"51d82963ba5f45331d3b5f72c4179286e5e7a547","sha256":"530e0ce2b3c9c76d652a1900d5aa26c3f33ce153582006f8fabccdc61da9f7d7","sha512":"a7a32cb7493e2a50b887a5d266318c22cc42db510d9c7f2e2fb66ecb976ec0582fbaced07fac83d1a86abeeebe8a92902a4a14586e48cd48d516331600a7c8c2","ssdeep":"","tlshash":"8611593a36c4fe54fab7d96029613b8f0110e6748963518d86a3e5bec5f71021e983ed","first_seen":"2025-08-26T17:30:33.403051Z","last_seen":"2026-10-09T08:14:50.966954Z","times_seen":23,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-title.Hn0NidZC.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.171Z","timestamp":1791533520171,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/s-title.Hn0NidZC.js HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-18f0\"\r\nexpires: Fri, 09 Oct 2026 20:02:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SZSdTZKT0W1fAXTXOur0gMdygGjmBUj44lCT2vcMZFL3BgMdoZ%2BTLlu1jH%2BE6yFc77erVHUVqKMGQUOQw0Y6avHpEC2u%2BcEKzoRCH6vuPQ9E988t7KO%2B7GRa2q%2BFYQ%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a47beaf50b1035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6384,"size_decoded":3314,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (6123)","md5":"89b5838c07f7b0b57071c0821db629f1","sha1":"7c3b930f99149e57d65415d4d6daf2b03b5c69bd","sha256":"488b3bfc185bd85365b9505635043d45f99f2895dad34ac5a207b5698f547a16","sha512":"7794a6ac7d6cbbc4ea280c780ad370220b5294eb69a89faec6f8fd687d23c448883e64661092f141d300204da234873834db81b780b54f21e220fd6eec0b1d1a","ssdeep":"96:MohiGnLTCdX3ULUuFXS9Y5+F89umUekTqNcjett8OFib1kjbdCpYeLD+fMMj+NL4:MoMX3SFXIYQcumUDqpPsYeLxlpu/ew","tlshash":"41d1c4243668fa3729d740885aa00601b1482e8dd730799ebbfcbcf95286c64557ef38","first_seen":"2026-04-19T12:18:29.249741Z","last_seen":"2026-10-09T08:14:50.967715Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/favicon-DYZFR1kO.ico","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:01.304Z","timestamp":1791533521304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/favicon-DYZFR1kO.ico HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:01 GMT\r\ncontent-type: image/x-icon\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 19 Jan 2026 08:47:29 GMT\r\npriority: u=6,i=?0\r\nstrict-transport-security: max-age=31536000\r\netag: W/\"696defa1-1083e\"\r\nage: 575\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iFPI5i3VdxX%2FbgPijPob6z4QnAukPWKps7yTWlfxdkxpSgSOIx%2B1RQQfJt%2B7XwJYM9ybrRCWbac9V6di4BAtDHFc6BBvxXm1SLwWmLHHHBKsZdlUvaNgso2IFByiuQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47beafc2ed935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67646,"size_decoded":7996,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, -128x-128, 32 bits/pixel","md5":"c1e95980fa943781f0eb7e84beceec34","sha1":"16b7f463692369ba1c2f87ca8b2a9c0b78b0b1a5","sha256":"388ee33538664826ebace6ad3583c68031fbb50a9b64d6a4cf3f1b83ad16edf9","sha512":"ab7f0b44e2b8319476526d8868da0cddf44cbe13d234da08db0380653cae1899796f1f6219bdadcc9894a0576f7b0af8db8b8e6007ede7ca136e36ab836ea278","ssdeep":"384:8bcUhWm+++vR9wORuO4AGoNVwKOqr7IwV:EcUhbTrObxDwKOqrswV","tlshash":"cd637aaea6119d3cfc450e7ca4618c0409aa5f8e381dd2fb64e03a09677b7d8c85fd76","first_seen":"2024-11-30T03:53:11.674099Z","last_seen":"2026-10-09T08:15:39.066542Z","times_seen":129,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/api/second_contract","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:12.464Z","timestamp":1791533532464,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"OPTIONS /api/second_contract HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: clientip,clientipaddr,content-type,think-lang,token\r\nReferer: https://usdc012.com/\r\nOrigin: https://usdc012.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:12 GMT\r\nallow: GET, POST, PUT, DELETE\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With, *\r\naccess-control-allow-origin: https://usdc012.com\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OpW%2BlVFpP05mzcG6KtPdDK4NfA9puDRzYXBA2WMTpdSdze1N%2Fekbqxhc%2Fkor0ESnU2GY4UBGHWLhkkt3LKZJsF7gmmB8Mq4LE1NLkQUqV8qck7jKKIOvoafsV9LvugW%2FGLIX\"}]}\r\ncf-ray: a47beb41ec29c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":951,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/index.D4OwX_lf.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.120Z","timestamp":1791533520120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/index.D4OwX_lf.js HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-65e\"\r\nexpires: Fri, 09 Oct 2026 20:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bEU8Rz6l82N9UyRVKDjCfs2WaV9SO4tzvQWqhmNRYxfNUs8UIyDRLskYhlgvFhZGZ8DX3Xrhwzrg7Dfag95mUsg51WenNE1ICfNjJfDrNnRA2JOw4Q%2FfffjYkuuCSw%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a47beaf4bacc35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1630,"size_decoded":1585,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1539)","md5":"65653129aa49902b1565df65e866aeee","sha1":"569ba3b08b8e3b393351cfeac7da25faa9505b71","sha256":"7e25cc5ce1f7f90a3fb5802db19644748b28d64104b56338f130cddcc49c8f7c","sha512":"e21c1c9c37735859132d0e4c66fc3148f70dcc618c17c36403a7113521be68c11ddd306df003797e1654d36742a913d7f7b80e84cff7145153887d7de3c3b723","ssdeep":"","tlshash":"9f31c4cd39c5703183d62a4663f35d81b67d9c1d580f4a8cf17854162c20d6dd27be1c","first_seen":"2026-04-19T12:18:29.307498Z","last_seen":"2026-10-09T08:14:50.972248Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-input-CrT96B3I.css","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.127Z","timestamp":1791533520127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/s-input-CrT96B3I.css HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 19 Jan 2026 08:47:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa1-6dd\"\r\nexpires: Fri, 09 Oct 2026 20:02:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vOyO2iz73J1o6sjuvGgGsb%2FXsMfgDo44%2BAT4nSBLyBlwyFoXXefvdB3R3dBggpnQjM6TqNpR2UjwR36QXDjH5vnw5nNlNhLombJFZ9HWFCbRgHBVvx12X33iRK0q9w%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a47beaf4cad635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1757,"size_decoded":1378,"mime_type":"text/css","magic":"ASCII text, with very long lines (1756)","md5":"0b886cf1a1bdf47ff7dc92d7d99331a2","sha1":"8aa130ace09d333c7817ed114f2161247c6e9681","sha256":"11e33fcbf5534a186ed16416f1b65b27bfcd069cd373f2541e3a100acce43809","sha512":"020bd3e989b492df1bbf6b8eb66f6dc870f32853b481ecf40aea027369efadcd1d5b85d4752e5ed69f32f228e15fd6d77229301681437564d56e755a8b3c6f18","ssdeep":"","tlshash":"323111327d491855392be60efbc0be9d456462a2d393008df6d05b3a0847982fc6dcdc","first_seen":"2025-08-26T17:30:33.401018Z","last_seen":"2026-10-09T08:14:50.972982Z","times_seen":24,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/static/images/tabbar/investment.png","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.596Z","timestamp":1791533520596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /static/images/tabbar/investment.png HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-739\"\r\nexpires: Sun, 08 Nov 2026 08:02:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 577\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k4fXqeRiq%2BS2Gdv2r2GjKJziUHNJYx%2BIRVGAWwjeaWB1xb%2FGHy1kBHB4v8cvwv3c6eWac5wedW%2Fqng3lfvfSzQJDro6pkMGIM30dhCInH9rfGCW%2Bed66RLuNjthidA%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47beaf7bcc035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1849,"size_decoded":2662,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"9490e4bc3ebc85b5e2dc4708e2f56808","sha1":"9abebe68c6df85bdaed853aaa347cde80763330c","sha256":"e2302dd0233206ccdca07f8bafd9afbba39037d12f19d9f18c88bc50c331ba46","sha512":"b8b5742ffdab2e82f571854147a613b5ceab68ce68dd5f753af23095e70ef1abec6ac642942c79d18edfddd2bf2d4d95e0539c4c2e8414e608c924f858c53443","ssdeep":"","tlshash":"7a31f979cd34a184d8f581b7dadb7dd488a84a832a4ab696c18957bd6ef000430f23cc","first_seen":"2025-08-26T17:30:33.417883Z","last_seen":"2026-10-09T08:14:50.977411Z","times_seen":20,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/ProjectItem--WQEwVja.css","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.121Z","timestamp":1791533520121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/ProjectItem--WQEwVja.css HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 19 Jan 2026 08:47:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa1-548\"\r\nexpires: Fri, 09 Oct 2026 20:02:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gktykqtow7QNmJ%2BkqJ5qE6VZhr%2FPrs3Oyi1TzmoqArmu63xtWQgDawmUArCaSFUbNSG02EK0eyd00XK%2B3M2%2Bc%2Bguwc76b%2FDQi4VJ4HSLzDzCojZsixCmosFiy22wug%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a47beaf4bacd35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1352,"size_decoded":1334,"mime_type":"text/css","magic":"ASCII text, with very long lines (1351)","md5":"30c73a40912b2d57d2bcf3a9eaadefad","sha1":"d3313e7a5377930b330338beb0648d139c26c7db","sha256":"6de8272c94e2df8961626816b63c5b4b55e5b190670faf3826bdc18798feef9b","sha512":"a8436f768e1d29d40ec7b43a04f77026c58e6653bcccaffdb5bfb23f7baa4379466cd7dbd502c4d6c51853f8dde2fc7d9dbba70d405d55ffe47325081ca9d77a","ssdeep":"","tlshash":"a121cb21bb4c60087037c90912c98a8d1279b247a11a0afd9a7e3099df476b3303a3c9","first_seen":"2025-08-26T17:30:33.405062Z","last_seen":"2026-10-09T08:14:50.979931Z","times_seen":24,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/notice-pop-B_iwAnHR.png","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.591Z","timestamp":1791533520591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/notice-pop-B_iwAnHR.png HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Jan 2026 08:47:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa1-512e\"\r\nexpires: Sun, 08 Nov 2026 08:02:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 577\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fMMjZO8ufHyl2ikQptdC3zBGx68cTr0QfcpHI9VLUWNYpDQEDgssx%2Bg2EzoS1Nbl3A77WwZTYQQEcMsDQDH8keDkQzuTAVuOuxmtBntZe%2FJqpRyFOm0JD8cMxCweFw%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47beaf7acb935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20782,"size_decoded":20365,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"e8b6d6a684174fe592319167d41b794b","sha1":"8b27940304e963797b5a1d7bd01d715a1c486bb5","sha256":"8813d7728e298924f626b9d7d594a59a08d8a91994446342e408a47989e5908a","sha512":"a06c8d5e4ce8d9b7dd77826c64b264ea442523bd75618efa3fba4188995b81eebd6508212054f4b0ba32908cf225bc9a7489c28cba9962747bcfb2fc8ac24c7e","ssdeep":"384:bwxN5HRAbw5oxF2rn1jtdd/NqJEJeMIQFK9YYolYyvibnqMLq2CX0iN5XSmOXXXx:bwxNJRjGAj1j9/GEVIZyh2nDL21NpOXx","tlshash":"8692c19216a902d1adb8eed13bbebd5799865b94862c6c00fb1d3d3798c4d0117c4fb8","first_seen":"2025-08-26T17:30:33.408647Z","last_seen":"2026-10-09T08:14:50.982318Z","times_seen":31,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/storage/file/20241030/53354a635cd0d249713c7d7dd2845a05.png","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:01.783Z","timestamp":1791533521783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"GET /storage/file/20241030/53354a635cd0d249713c7d7dd2845a05.png HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 30 Oct 2024 02:09:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6721956b-4c2\"\r\nexpires: Sun, 08 Nov 2026 08:02:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nage: 577\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bl9rMuPxskQDE60eb%2F9Zef5%2BAeb0mjcSG%2BnuW73lR4TP2EiZ5UR6ipmjRYcyapUqPfsWLX%2BN%2BNaV8kzKAG0a%2FgYHkrCnHXHCp1kI%2FvvTzyqydxiYQqMvXTzmi3Z%2F3Ftvq%2BYA\"}]}\r\npriority: u=5,i\r\ncf-ray: a47beaff280dc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1218,"size_decoded":2077,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"d34183db66626408066857b67f7900d4","sha1":"83c65e97df3ff99ddc360cbb4f00e0aab9b46157","sha256":"c62e4c60cffc895ab8c244858fe3e536c8951cdfe3424e5af1cd6d92dd796c8b","sha512":"7ee53dd7c95dd200c67ef1a94d0a658cc28e6681bb7e9b80f25eda71cd907a57f11cba0074b512f7c554ac84364439cba30d0b0706b1d2e0b0d102fe045b5d05","ssdeep":"","tlshash":"6421e7a0a34da662fa3b2945e79700f0712a5431a90659974af74124c21c9462ac057a","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-10-09T17:15:27.951791Z","times_seen":402,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/static/images/home/notice.png","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:02.186Z","timestamp":1791533522186,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /static/images/home/notice.png HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-113a\"\r\nexpires: Sun, 08 Nov 2026 08:02:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 577\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D9G5axrBWj2D2qdn0xoMCfUBUTwu5CV5EyJ%2FQrBQlduParH%2FpT6gkt4HN5XNp8%2FbX521BiiHJot%2B0NBIGujRUmWhhbsuMlfUwdN5KYPseQOlRJDQNyc9EojIMNA3BQ%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47beb01aa2135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4410,"size_decoded":5227,"mime_type":"image/png","magic":"PNG image data, 50 x 52, 8-bit/color RGBA, non-interlaced","md5":"e6e538dbdcd0b78c187113d176c766a0","sha1":"64fa3eb7b441d398729f1ff6c2ae00f8d013745c","sha256":"2692a3e296fd0b79b395702deae839c908b45c1209c8791c75ffc6901e809bb1","sha512":"865d6c9cb1b4effe1caba57abd8cec15b8b0c564bd3465574773335ba4567c171c09d2369ec0e0bd4f7d4d6a6a5d4efacec0740cbd47055c8f9d2c2df5eb3674","ssdeep":"96:b3QfbyWoYuM7n+wv5fzwwjoulxn2/SkajtyZ5iXiw:b3UyWoU+cxfcuvOSkajAZ5ix","tlshash":"5391ae71c3d484685c7ae27d1937556b61b60378ff8e3c0a88a39e08c843b8824d549f","first_seen":"2025-08-26T17:30:33.367064Z","last_seen":"2026-10-09T08:14:50.990937Z","times_seen":18,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/uni-popup-Fqn9N-Zi.css","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.115Z","timestamp":1791533520115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/uni-popup-Fqn9N-Zi.css HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-6ea\"\r\nexpires: Fri, 09 Oct 2026 20:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VkMvg%2FGHwgRcSzTO8PpPrazRwtI35gRh%2FWsT%2FuyRuQS1e8a0d9GREvUui%2FMX0eIo7uOkTf%2BqR2vA59YxlKwa8VHtSE7fSb3Uy43GzRmjKEM2jAkr9eKvfcrqDCiJuQ%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a47beaf4bac635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1770,"size_decoded":1336,"mime_type":"text/css","magic":"ASCII text, with very long lines (1769)","md5":"d082db8500b272c2e43675d8c52d8fdd","sha1":"b6a165928e6ca58ee847e1b9316b0954a0a7b126","sha256":"2567b7b7dff7c1b3092ef67294d1adf734c4a26d1e6ba21ba15fa4ab2404ea01","sha512":"ec6a79cd5137ebe2eb07f48e22b5c1bf70afabb63a1685e49aac0b7b73479b1e9994369488db30971644dffc33bae8310432891df182d4cba8c0d735d7f7f4e2","ssdeep":"","tlshash":"9f3170723c1d351984afc0e6689aef46432c72339553b6946678f4180cdf9e23e5b6bc","first_seen":"2025-08-26T17:30:33.414771Z","last_seen":"2026-10-09T08:14:50.993819Z","times_seen":24,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/LoginRegisterModal.DV6LKLAs.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.124Z","timestamp":1791533520124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/LoginRegisterModal.DV6LKLAs.js HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-3bd9\"\r\nexpires: Fri, 09 Oct 2026 20:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T%2FD8gP8LRoTxsE2A4vYik4OPdcxe338YiAbXhCavOlWKx%2Fdhabe%2BE3Mexb2%2FTu52Ns9VYs8ulcLCprirnqYxxWfqrePhclDLmaFmVPcv1rOMLyFEyixMbDo5WWNC2A%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a47beaf4cad335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15321,"size_decoded":4529,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (15272)","md5":"19f668b313b38587e254317758c87976","sha1":"1aee25b05d9244711bc3d7b99689d05c30157717","sha256":"d92c4c5b9bdeaae0035d76b3864c85bd4c8106bcbbb9fca77060b7a9979f4eba","sha512":"e191c9cb5a264f3e995bc779ed54a5b20ffd67e2fe07bffd1cfc28f186fae02a861bbb7af75e807a262b9f4b5af2cb8924150726b93f1e1a7551374d7d713269","ssdeep":"384:/LrSK/VoBOmek5T1jhJJNCkX/sjFP2rzewPRPbHMq0:jrSK/VoBO1k5TtPstLwPRPv0","tlshash":"1162c509b55cc9335e92b06ce48318246059cc5fd941ac4cb7f8198f26f3d46abba73a","first_seen":"2026-04-19T12:18:29.379275Z","last_seen":"2026-10-09T08:14:50.995636Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-section-CDcYCXgd.css","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.145Z","timestamp":1791533520145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/s-section-CDcYCXgd.css HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 19 Jan 2026 08:47:29 GMT\r\npriority: u=2,i=?0\r\nexpires: Fri, 09 Oct 2026 20:02:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\netag: W/\"696defa1-174\"\r\nage: 578\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SrVV3lwhcL5JWWnDjEQVLliYsl0BwUEpQ0GB8Ov4RTG4mPvROXHLvq5ugR4RACyHKfyIr4yKtIV6lwDw5pALMRTHoGYU56L%2F9EYJhMQWu0TfIxnHxxt8uxzoLENTow%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47beaf4eaef35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":372,"size_decoded":958,"mime_type":"text/css","magic":"ASCII text, with very long lines (371)","md5":"006a7f142fdc4795801553a74c5f0ccf","sha1":"c2889babfcb0370ab068512f13e74f12fdb00094","sha256":"7225c3b57051f107a8e638cb536668f1ca88fa9925544670a7f44050adcd535f","sha512":"ed7cca52ec98758a50462be334b7891e70aa95301a74c308bc171395a674418e646e20ac865eda6848f12fe81972e650b794ba6a806c856c2bbde59d2b502c4f","ssdeep":"","tlshash":"b1e09b16778eb54c642bd73b34a2bdc80124d621c277c10d6671a3584da734711026fd","first_seen":"2025-08-26T17:30:33.40408Z","last_seen":"2026-10-09T08:14:50.996672Z","times_seen":24,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/api/system_param","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.185Z","timestamp":1791533520185,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"POST /api/system_param HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ntoken: \r\nthink-lang: en\r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://usdc012.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: *, *\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fDzAgAH6ASSHUalzKemtLBXFc8nM%2BG1DsZXkkZwHWyUgTx%2FmiwgFGidelJNGBkodOS2YGVx9REep2dQXn%2Bafwg7ofM9omZEwAsiuqltFDnW%2FlbH996q34P4NW8DoKslUJBIA\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a47beafa2cd5c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":152608,"size_decoded":34466,"mime_type":"application/json; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (51193), with no line terminators","md5":"2fb55e745bc26b6176c71c9fcbe84ae9","sha1":"c71e9113e4df800562af48ec5150167eac2aef66","sha256":"85bd4aaf6acdd3dd7a2502eb50cc6e47e7a6a089c6145f312a587072d737e389","sha512":"9243d5add488c1589e5151102af4cf017c51a98819e4c7c0cf8b257566a1f572f7a1d90559a8c225cf4b6729738621a24e2c6ec2c1e78e5eee8195000db6cf99","ssdeep":"3072:g7PC6Hy1ZEAIEPaL5Wfdg94Isij2Iu89dQCV:J6HAIEPk5WfPIss2I/9dQG","tlshash":"62e3f85eebd51122c84351cdd2c2fa7bd07838227745edeea0478be905c6a09993b1fb","first_seen":"2026-01-04T07:38:56.352845Z","last_seen":"2026-10-09T08:14:51.001362Z","times_seen":5,"resource_available":true,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/static/images/home/withdrawal.png","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.753Z","timestamp":1791533520753,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /static/images/home/withdrawal.png HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-e3b\"\r\nexpires: Sun, 08 Nov 2026 08:02:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 577\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HKfo27ZF9qcMkv%2F21B3EDjoWVM1%2BI3tnAFy10f6EFkR6pNZNw9l7ZQvYJe8RISD2Kzv%2BfpMO%2FsEak%2BMxPS%2Fl4mkbJSPNWfEzl%2Bs2B%2Bhq70NnSL2J8oOf6C6C0tOYTw%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47beaf8bd1d35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3643,"size_decoded":4434,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"81650cf5a60e4d3b7b11bd67e8b654f2","sha1":"2064205c7f1f25b6c6946a6332d62a2bbda4f6fd","sha256":"f77eaf76a0bea7a25280a55558e85f24f5f449522d90b4b8d2dc57104d2ed7b7","sha512":"fb037a6fc4289ac03fb40587a062d1f60ea4a01239bb5b1d2e31fc449c7564bfbeae58dd5496745f80d57fd211cdd5630cac851caec4a858013e18f884be3a8e","ssdeep":"","tlshash":"f4718de7c36864a0cc40aa00052b19a337b6d78b1d567081fa4d4a53bfb8933c0f1bb3","first_seen":"2025-08-26T17:30:33.432Z","last_seen":"2026-10-09T08:14:51.00441Z","times_seen":18,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/storage/file/20241030/f1ab28980a94c39778563da9f366d3ea.png","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:01.787Z","timestamp":1791533521787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"GET /storage/file/20241030/f1ab28980a94c39778563da9f366d3ea.png HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 30 Oct 2024 02:10:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67219592-456\"\r\nexpires: Sun, 08 Nov 2026 08:02:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nage: 577\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oCZS51DdpPYOHgzeujOz1WZB7Vdtnk9IRyrA68hz2JULvZZnX9Jx9ypOqmFMiAu35D4e%2FuZUVPM3QAPFMq5RKld0Gz%2FTUcoRE%2B%2Fj70GgUD%2BmxBnzwX0DxDVOkHiIAmAYdU7%2F\"}]}\r\npriority: u=5,i\r\ncf-ray: a47beaff2811c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1110,"size_decoded":1963,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"155f85dfe1fe971302126e81ecbeeda0","sha1":"a41ab8f31d2461f114a1a0625ab6a9520c7f90fb","sha256":"b15f065d7ef77728658b464df170ed55c4592b33fbd5114a6c9ba6959c4fc9ff","sha512":"c6e452c6fe1d358a72107c34475ddf3de212e4bc2ef539bedcb655643313154b68ede92cc37c68e9a2c55adf219821059bfdf9a67f33572c49687f30dd8b34e9","ssdeep":"","tlshash":"2711ecd5b3cacee484b9380fd583059d0d98454bd1304bdc54bd5336d5914cc1a07f67","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-10-09T16:49:36.042241Z","times_seen":299,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/uni.734051d8.css","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdc012.com/","date":"2026-10-09T08:11:58.783Z","timestamp":1791533518783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/uni.734051d8.css HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:11:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-8019\"\r\nexpires: Fri, 09 Oct 2026 20:02:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 579\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VFeTZqoSK8ABQTEALZhgPpvKsWwFwgw0bXyMULkcrSYOC28uvEke5mVAvbdHZf%2B1kQQIMu6gXFqRc4gWCE1jkV7qrM1qH9dpTUN7tjnTOuqnHVum9kmtXLpbykumjg%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a47beaec6d7235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32793,"size_decoded":8182,"mime_type":"text/css","magic":"ASCII text, with very long lines (32792)","md5":"dd5eb10f1e082900e8fc9f5294a20ea7","sha1":"0cb5185449f798d94746d77f3d50592cef306b81","sha256":"734051d81039fde90b77b4172ad966afe58f19ccca555fd849fd990d5cf327b1","sha512":"a7bc4f19c6eff7dedcae0d639d4f3ed9aa54fb0abbd517c4503b1b75693ceeddc1cb8e9c9813e373b81f4e0e4c7b735c4d8ce02cd16f296a1140519488bcda4c","ssdeep":"768:UoL4zei+XH7eryHDAtrEW1xBiM5TiDMBNXpriBdG54mZr9YnDcwpH:UoL4qxHHaISCmZrirt","tlshash":"dee2d6325e012939f8b7ca2668d1db8f2331c173d5531b6deb7975288b8e8c9167b384","first_seen":"2024-12-20T22:15:00.546241Z","last_seen":"2026-10-09T08:15:39.055769Z","times_seen":41,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-confirm-CVVpLVF0.css","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.083Z","timestamp":1791533520083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/s-confirm-CVVpLVF0.css HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 19 Jan 2026 08:47:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa1-cd5\"\r\nexpires: Fri, 09 Oct 2026 20:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ajMQK7AAq2%2B%2B4NDivtAFFdI1HkZdmPlvCOE0HnyL8uwozhXdMLthKOdqztTcw%2BTr8fUO%2FcFRLZoGhav4s%2FADlW8b14%2BBVSoy%2F%2FwVYRqvAHfBG7rEKyCbk8pPTcxoA%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a47beaf48aa835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3285,"size_decoded":1520,"mime_type":"text/css","magic":"ASCII text, with very long lines (3284)","md5":"4218a36f7a6fccc299ffb3577bca67ae","sha1":"dd996d34c9100398526782d5af26887184ae3c38","sha256":"ae5f566f4f2fbfb0d3ce7aa0a5941a934f9483719e107b1c184cb1ed77d63601","sha512":"4c1ec008efdc5e5ee2e280c8890bd89a315dac3fe55fd4ca2c9659314c789bf9b382c59f7a6795ee423078d5a6f0fa82aa14971493303526fc584762f18febc8","ssdeep":"","tlshash":"27618f20ae692c848277c661aec05e49d379eb877af6094f7a4c4c134e8711e15fefe4","first_seen":"2025-08-26T17:30:33.418855Z","last_seen":"2026-10-09T08:14:51.010141Z","times_seen":23,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/userBoot-BzD3tkpn.css","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.178Z","timestamp":1791533520178,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/userBoot-BzD3tkpn.css HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 19 Jan 2026 08:47:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa1-1c12\"\r\nexpires: Fri, 09 Oct 2026 20:02:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pPYVKEhTEMahUxx10rzMtb%2FCj75Bu%2FyTp1u876XSoJars2fYBJsq7F21%2BlVjIoVwsCQ3J4D7vYLsXiFTHDyugcNpG0WBnCpNyYp4OZr1fTMmiMmbnh5W38sMLOlAfA%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a47beaf51b1435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7186,"size_decoded":2459,"mime_type":"text/css","magic":"ASCII text, with very long lines (7185)","md5":"12b3de5bedc5d044cbf7560368f63d2a","sha1":"162705eacf8a88fca84088caa60a7de174a56d8e","sha256":"292bf74952b3710282a57b3f82421b100c587d5a2a6efc853ae0821da3617c7d","sha512":"90278bf1e15bf610333c03ca099ad4ab968cb0298e3cd344e785b5047ce2870c5e21cab4c9fb4321b1317c9da1a922c93cb1bdb076e1057b83683b8090f8f977","ssdeep":"96:JkydSwIx/+nVqSMSBavXwXYGv4FTW4z28rfcvu2k9k14TwlqIiqR/6/jdDqjMU4j:qOSe022y1krWG","tlshash":"ace142383d5e201eb5bfd102b4b152de0275b35ad341c6eeaa677a24cf971c628339d4","first_seen":"2025-12-31T19:20:07.071433Z","last_seen":"2026-10-09T08:14:51.012511Z","times_seen":19,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/iconfont-BQrkpu4W.woff2?t=1668947853265","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.576Z","timestamp":1791533520576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/iconfont-BQrkpu4W.woff2?t=1668947853265 HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/assets/index-C2R1XfRB.css\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 19 Jan 2026 08:47:29 GMT\r\netag: \"696defa1-2eb0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 577\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ES8%2F3wqNEgSAM73YZR6eFkhjkSDY41oIIIR1FbuSdcxl43kKBUP6D%2Bh8iLinNnhvgk6CQM53nniJWC0S80xd1Zv934qFG2pJ3aOhwRunAvSAn0K59FJZqrgzngQPRQ%3D%3D\"}]}\r\ncf-ray: a47beaf79cb235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11952\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11952,"size_decoded":12695,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11952, version 1.0","md5":"9ccc2f107ff8412def4cb549ab006ec2","sha1":"17c86325a22b37017136c6ca36c1d36164a17bc0","sha256":"85e60cc2bbd7a6a41285f6e28e96a2d9cafdcd3edbb024b91a1d4a27db9e8ad7","sha512":"f0d06e94316fba28fd215279f3d48123a85a0e257f20468561a39a687b6e6769795ceed3bc5164dec86100a1305e92caf48bc7e136b372f6f82529971ffb11db","ssdeep":"192:n/31M8Q+z+R+gKmjHD+xIe2pEP7Yil9PEo/DtFmoNu4XMyn48KxKvPnQy8Fdmv9D:bQ+zc+gKmj4kilRDtFmy/Myn4MPQve9D","tlshash":"a432c09c5b485c895cac4da00b91a9b4c58e37c072157aaf8c4b56e06f8ab323383d5e","first_seen":"2025-08-26T17:30:33.435551Z","last_seen":"2026-10-09T08:14:51.014482Z","times_seen":20,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"collect-v6.51.la/v6/collect?dt=4","fqdn":"collect-v6.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.015Z","timestamp":1791533520015,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /v6/collect?dt=4 HTTP/1.1\r\nHost: collect-v6.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Length: 379\r\nOrigin: https://usdc012.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-img-AdHTCu8Z.css","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.068Z","timestamp":1791533520068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/s-img-AdHTCu8Z.css HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 19 Jan 2026 08:47:29 GMT\r\npriority: u=2,i=?0\r\nexpires: Fri, 09 Oct 2026 20:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\netag: W/\"696defa1-13f\"\r\nage: 578\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TQDVNsQ1fnDGIxuB1JvD23wEowDYd4S0XH4c4NI9gDgphUlHCV6ysKDCP8WMhLquaiS6Wc4mA59gMmJ1CcjQCGg0KStHkY8DqUb3i%2BJx662iN9v9EfHl3GrXtm%2FhNA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47beaf46a9b35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":319,"size_decoded":944,"mime_type":"text/css","magic":"ASCII text, with very long lines (318)","md5":"caad3ce25d72effb824a029ed4548224","sha1":"464bc035b1972a6b3c45a92cdb00b6627146d6df","sha256":"a68414fe0955a195cccc7130dfbaa6de5308a690fd5a9ae0cd02b57eb135be85","sha512":"ea3eddb3c854ecc7ad8270ac5b60f0ab72f275818311a0102cf88c3edd900aec87ad714bc5158732ec3665ce7355335c0c05ff458203f736a3b2016ee3b7b008","ssdeep":"","tlshash":"c3e026ba2368788008ebf10039f4ea484138a9b3eba3049fc5801390ca0f6017609aa9","first_seen":"2025-04-22T02:10:48.304952Z","last_seen":"2026-10-09T08:14:51.016714Z","times_seen":25,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-button.BJMgRMoF.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.095Z","timestamp":1791533520095,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/s-button.BJMgRMoF.js HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-b36\"\r\nexpires: Fri, 09 Oct 2026 20:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mo20kLBgxWqCHd91kOSY5vLYYCUtpE7vayY6v6bOGzB9fyLALpgp42z6gNATK6HVgXfDCf2wz4dACNH%2F7lBASXtKfg5dE51gaCJKNtKqhwCDBNXKaLEYuqbVlRShag%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a47beaf49ab735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2870,"size_decoded":1966,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2869)","md5":"6205626937d3e850bb0906c2c2939417","sha1":"b6a172ca0cb2ace5853844d6d6ca4b49e1df4b04","sha256":"dbf755e589e8db65a40a3a72e43c99beff9d732365353dcdef2c5600419eb30e","sha512":"d0d7f8b7fe3b11b2b98f9c90861f53ac5135fab8333d8260bb81fda2c1ea1d853886e34ab72574ba4dca086a81d8ad07a888c234947d9e0a3d123adc60ada3be","ssdeep":"","tlshash":"9d514404310af9371dcb8848a07c060693116a9eda695ce8ffb571bd535f854779db14","first_seen":"2026-04-19T12:18:29.344228Z","last_seen":"2026-10-09T08:14:51.017703Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-popup.BHa2q1TS.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.108Z","timestamp":1791533520108,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/s-popup.BHa2q1TS.js HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-105b\"\r\nexpires: Fri, 09 Oct 2026 20:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iwg9UvL027DLtALbp8mT1ksfB%2BOAS3ryk67D5uVEmc9mkXtGUfW5YsZBTEuKzJFIo05LkVo8dyQTbUUaXRfrd0c6KRGu%2FliddMBv3o4eHvDKU7ey54pwqSIsAOfx4g%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a47beaf4aabe35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4187,"size_decoded":2363,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4036)","md5":"c0d951171a9e4cebac1d6ef88c98459d","sha1":"83646bbe5b36f814dfa93ab169e713638d032fdd","sha256":"e3722c6c62aa0b916fbe31da971e3a2d90bb16e256518d9cb9eaa562ed906542","sha512":"bf8564db747ca6c5101de0a331ea3a220d51a068a44716dfc82a23524401fb6601bdea4a1f6a633d73b014207a689e3a70142e20c1dbb6e16eb580b608b082d5","ssdeep":"96:z0zzb/vvVXaGe2O2smBNk7vYTLMcO0PLFKpcQU4CmRU:z0vr9DF8bYo8Fscl0U","tlshash":"2d81a5943c4cc97a55c59a0b44211a40975a6fec87b53d5df6fd2cff02c3c1a2a84b2a","first_seen":"2026-04-19T12:18:29.313956Z","last_seen":"2026-10-09T08:14:51.019089Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/static/images/sign-icon.png","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.767Z","timestamp":1791533520767,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /static/images/sign-icon.png HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-1e36c\"\r\nexpires: Sun, 08 Nov 2026 08:02:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 577\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yIttxw6Q3gcwmllTivnabAf1IjWzwrSNERSnY1fNmt0vHHr%2BHvzZsNqdJFx4Qfm3wa%2FzYsJK0ixpryJnxwQ0JGkLNaMlGDVZ5bJcJZRtpNcm6J8EROZa2mMZaw9%2BJg%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47beaf8cd2c35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":123756,"size_decoded":124602,"mime_type":"image/png","magic":"PNG image data, 378 x 370, 8-bit/color RGBA, non-interlaced","md5":"17721091aaf118d6cd6abc16d2aeba11","sha1":"97bdf3e117ac6d61d646712c8d8e8e4e51198285","sha256":"4dda0b6c1c108a5fa0efebdd996a869e3dea1ad2b747dd0c9749a5bcfb4b57c3","sha512":"ff36aff822a6a3d8d5d25aeb108ee010d9b573eaa87a32c34c65292abcf58de4cd4a1dcf71522744071878652eab110954472b8efd1f26b03511c84804efb215","ssdeep":"3072:7Ut+EYbRGwcF59XAtmaIBxO3unW+QV1d9cYuUM2+:nEYtGx/QEauO3aTQV1ruX2+","tlshash":"93c31218a091f4e8aaa713254ff17314425689bc4fbbf6fdb36c429f70d645807d13aa","first_seen":"2025-08-26T17:30:33.392612Z","last_seen":"2026-10-09T08:14:51.020324Z","times_seen":18,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.174.94.0","port":443,"asn":0,"as":"","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:03.065Z","timestamp":1791533523065,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 20 Sep 2026 00:00:00 GMT","end":"Tue, 06 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"4F:35:3A:96:51:3A:BA:A6:46:B8:B9:BC:97:39:74:7E:49:B4:6F:98","sha256":"F8:18:FA:28:6B:ED:A5:CC:73:11:D3:85:FB:0F:80:CA:B3:EF:76:89:C6:F1:62:90:E2:2C:5A:F5:E2:42:57:56"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 08:12:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Fri, 09 Oct 2026 15:12:03 GMT\r\ncache-control: max-age=25200\r\nset-cookie: __uni__uid=rBACZWrIodOh3tTsA2vmAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__uni__uid","value":"rBACZWrIodOh3tTsA2vmAg==","quoted":false,"path":"/","domain":"dcloud.net.cn","raw_expires":"Thu, 31-Dec-37 23:55:55 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__uni__uid=rBACZWrIodOh3tTsA2vmAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":577,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-10-09T18:51:42.531491Z","times_seen":20678,"resource_available":false,"data":null}},"time_used":872,"timings":{"blocked":0,"dns":5,"connect":217,"send":0,"wait":217,"receive":0,"ssl":433},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/api/second_contract","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:08.523Z","timestamp":1791533528523,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"OPTIONS /api/second_contract HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: clientip,clientipaddr,content-type,think-lang,token\r\nReferer: https://usdc012.com/\r\nOrigin: https://usdc012.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:08 GMT\r\nallow: GET, POST, PUT, DELETE\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With, *\r\naccess-control-allow-origin: https://usdc012.com\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DoybcmJjIBaxEce5jgPx%2FsI1qyNMLuNNGL0H2a5stWQwQ0gNmuC8P1g2QLjWJagbL48psXe9sKTMqlvCgA%2FhZBu3%2BZeb7qYjxLDzCA9yzIuDasWv2SWreGLEp0JpVNtSimD7\"}]}\r\ncf-ray: a47beb294980c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":949,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-money.IfTwX-o7.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.138Z","timestamp":1791533520138,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/s-money.IfTwX-o7.js HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-bc9\"\r\nexpires: Fri, 09 Oct 2026 20:02:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TgQgVoJIqNU6W5DBypFmJpqhueSfRjadDrcjQxVbBwpWzc%2BSzQ4t7KCSL4aUBVmXCR5eeNJGdqVsGKEo4KxXNnXH%2FvesW66L4GXIMgcGSXEhIrpJqYQNTzaCeGIlgg%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a47beaf4dae335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3017,"size_decoded":2100,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (2900)","md5":"0abe0300f7f315b6150ab97791f09a08","sha1":"c35711c85fb8d66e05f9074072e66e5b9a3973aa","sha256":"02631bf6981f6cc041f2fcd8d7a213b47b03e566ba58c32dbe3362400095f361","sha512":"4886aaba73ca7916633abe2ad80c4eec4555918f938f9cb66a3cd10d6326bbe7f857eaf5edd8785aa82d6e0421dbf2c059dd9f5b84b2162713c8d7ab4c860bdf","ssdeep":"","tlshash":"ed5193a476985da3048b2a1d08485343ea75bd4d9ca83898feb4bcea87278d5385cf34","first_seen":"2026-04-19T12:18:29.263929Z","last_seen":"2026-10-09T08:14:51.026201Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/mp-html.aTbK2hVh.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.122Z","timestamp":1791533520122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/mp-html.aTbK2hVh.js HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-69be\"\r\nexpires: Fri, 09 Oct 2026 20:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2AvTehIfFBc6DbJoMxmG1awURQpKZzHJv5NIzba6gOREXJQZw9d7dh%2BnGf7qYLD%2FzUxwLMibw6OCR8sM1pMJJupO6p%2B5URDtUza7HvStMrWblDYqSd7ptFc7b%2Ft23g%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a47beaf4cacf35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27070,"size_decoded":9944,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (27039)","md5":"24943a0e80d3623401a7881e941ebf89","sha1":"4e57dc7e055b59513da12155f61b458a34a47542","sha256":"97a2edd38f87c45d10ef23e0704a96a8cf723787ca2b7295545e49c774b03f2d","sha512":"4a6da8fdc6798010229bf892cde98826515ccb1fbe8a38068a3d51e5470053f7d4b2779f245a816a82452026c0044338c46303352cfd49dca38f89702190771e","ssdeep":"768:A1LcXOJOCY8/PU1kfSTeC5Umdb24tpxvYL4fVZw2O:yBJ13gAyr/O","tlshash":"27c20a5b728c70390ad884e108b56741a26e660cb54088bfbdbce4fb59d059530bfbfe","first_seen":"2026-04-19T12:18:29.297796Z","last_seen":"2026-10-09T08:14:51.03147Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/static/images/home/transfer.png","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.755Z","timestamp":1791533520755,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /static/images/home/transfer.png HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-9ed\"\r\nexpires: Sun, 08 Nov 2026 08:02:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 577\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xopRmzzpKWtVJYh65PV1lCpwLv2FCbapo8mz4H3BSwAiV5pEQAl8urx64EXaHOl1SFm1kgUIgCLWSgO5CNB7bq%2BbIyrsTCZ%2F5lwUz2T5R1w0xAe%2FlYD7HlXJUR6Q5Q%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47beaf8bd1f35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2541,"size_decoded":3355,"mime_type":"image/png","magic":"PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced","md5":"2351a17787b8fe12c8c46607290131aa","sha1":"3c3750c93598dc5ac06e061d60e4442f73ba9053","sha256":"e454f01d73229cd93c51a814c99acea6742329f10bfebd19be15940b749128be","sha512":"94dbd0d6a747edf27221cf5c30118add873b10cd047dcd85eb7f0c120077b1894e0ef06ca4bce57c484c741a7c60d500adca491a602f4749bd37040ab96738e3","ssdeep":"","tlshash":"3251091afb0c56c0e00abd9f96320504ea4e73f05d930a0d7c509bd48e334d67786bab","first_seen":"2025-08-26T17:30:33.432881Z","last_seen":"2026-10-09T08:14:51.037897Z","times_seen":18,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/storage/file/20240815/a7a3459b81ea4da81e5825ad6f8907c7.jpg","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:02.057Z","timestamp":1791533522057,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"GET /storage/file/20240815/a7a3459b81ea4da81e5825ad6f8907c7.jpg HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 15 Aug 2024 02:20:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66bd65d0-d84f3\"\r\nexpires: Sun, 08 Nov 2026 08:02:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nage: 577\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d5AYZ0wTaJ0nx0eumf9WTgP9r5noO1IwplUWUV46vPYBNynLvdHvUBfyrIHimKWYj%2BzwHUTr%2FA4jJzkAuUSpUvVY7kPnw0SAcpnzBLg%2F5IMmG%2F%2F3HZWxusqCu%2BsxcbWNp5FZ\"}]}\r\npriority: u=5,i\r\ncf-ray: a47beb00d96cc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":886003,"size_decoded":887007,"mime_type":"image/png","magic":"PNG image data, 1170 x 682, 8-bit/color RGB, non-interlaced","md5":"8649e11a3fbe8350e65f3171beb89556","sha1":"b016782e4dfc97342e768d01d471cee442deded1","sha256":"64281e9e44041ff6f25cdb043f790b0689466ea7bbe10e90d5d70d4cd03afaae","sha512":"f5b98c4db7170e6694312a31609be81fa612754819289340c1094530edcbd6f4975e23dd4b0d75c8da22b5c24be059cdaf676607ebcd4e169bd1cfae48ce3bd7","ssdeep":"24576:8GCoUcZoXLhIpD3zGimGG9pOpv2zWzTywE:nzoXkzCb0OJ","tlshash":"d81523dbf7532eb0cd9eb623c1291e444d9040702b564b60a857e1cbaed5f66c6e0bd3","first_seen":"2026-10-09T08:03:44.456026Z","last_seen":"2026-10-09T08:14:51.039021Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-section.VCywZNMA.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.143Z","timestamp":1791533520143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/s-section.VCywZNMA.js HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-89f\"\r\nexpires: Fri, 09 Oct 2026 20:02:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HQFVN0%2FKpyoIwFnrZk1Rb14m1cI4EbhnGnH02aB5jbXsvczSo9qPja1Z2le2CwrCdgJPqiuKrSLXODcUYiTn%2FppX5FDda%2F3IIPItc3yKmpwzML2uAcCHFlgvhqBE%2Bw%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a47beaf4eaeb35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2207,"size_decoded":1684,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2206)","md5":"4c21b868d6316062c512502d5bca31d1","sha1":"407e66bc38a845e4a01dc07a6ea6921a1a0fca30","sha256":"8700afa9f0270cbf990d60de82b139a03e47b39cdee0216d6241773c4633cfd9","sha512":"285ac7a2682196cff231013589f04d537ff187bae26ca94050470619e30d41bd80778b6363bd533c32d371f5050fd97689e61e81a5bd7a0cc695e50cdd3d7bc6","ssdeep":"","tlshash":"8941206d380caa372d8b0dae70b0230064552f9cee317975f7f1903557a7aaa916cf2c","first_seen":"2026-04-19T12:18:29.326221Z","last_seen":"2026-10-09T08:14:51.041028Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T08:11:57.694Z","timestamp":1791533517694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:11:58 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9RZ6sgcxUlupNSusL%2BFjIkrzjwgvZCgqHE2rzencP1Xoc4owBZ2f%2FF3QdOgo3BA7ByEhc3pkFzX1ehZsgA4uKAJzaODE4araXAcl3vjY5Jo7IDmjYb0FH6rJeNy18Q%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a47beae5c96a35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3593,"size_decoded":2275,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (464), with CRLF, CR, LF line terminators","md5":"0e57f6bff26342d5fec0ac257d8e8563","sha1":"75df596c418fe977497eec255cba2f9b2cbac183","sha256":"e3c3514567614a6d879ed0b39a0dd6d0507bf813bd874ac4a073766f94de9d84","sha512":"6c8f6610810cbac69e257beea35e82b52f7359181c4653963d786dd1f05f75e27514bf8f485a0340d4674cbeb163298c8ab6adce8fdd9a3bebae21c5514cd9a8","ssdeep":"","tlshash":"0571b505ad90942402318a287fb3e21def3240735200e9a038dc971b9ff4a46ccabdec","first_seen":"2026-04-07T10:43:03.558814Z","last_seen":"2026-10-09T08:15:39.053034Z","times_seen":21,"resource_available":true,"data":null}},"time_used":594,"timings":{"blocked":-1,"dns":5,"connect":28,"send":0,"wait":560,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/index-C2R1XfRB.css","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdc012.com/","date":"2026-10-09T08:11:58.788Z","timestamp":1791533518788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/index-C2R1XfRB.css HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:11:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 19 Jan 2026 08:47:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa1-79c7\"\r\nexpires: Fri, 09 Oct 2026 20:02:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 579\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FCZaGckqDsJNb8d84knarTlnXN8jLZEp2v6LIDhEjuffra%2B5fnLqpGVCK8yG%2FLyHZRgjAsjQ0jNN71w86cXOop%2BA1OPkMgjZwFmBMx6W%2B%2FhKeKs%2F07%2BO7LbtXYus0A%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a47beaec6d7935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31175,"size_decoded":14170,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (30950)","md5":"92b434074c6cf3e47cb9a2658db8ff08","sha1":"ea753d3fe316f85264e01edf521521958668a9b5","sha256":"4014fcaa52dda1b273304725500679ec91f70da9bd54c6fedc9c63a6fdfd382e","sha512":"b59cb7e09b90d2f7d5941e1d87bdcb210f324a997cf94887c8f9ddf59b02a712d80b6f0927d4475b7044f11c7ea01677a0345031273a8d82697305b2792af083","ssdeep":"384:qeDzFzaU5couyYDdnsf0VSxa15tVjaXeCcrUUf2GWthmohI:dDpOHFVdS+SE7wfcrzf2RDI","tlshash":"ace2c5bf598d14c873baca43e75077ec2d25f52ac362489ef067294ccdc72a31a5266c","first_seen":"2025-08-26T17:30:33.412092Z","last_seen":"2026-10-09T08:15:39.064662Z","times_seen":39,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/api/home","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.710Z","timestamp":1791533520710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"OPTIONS /api/home HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,think-lang,token\r\nReferer: https://usdc012.com/\r\nOrigin: https://usdc012.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:01 GMT\r\nallow: GET, POST, PUT, DELETE\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With, *\r\naccess-control-allow-origin: https://usdc012.com\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QfWHUr1wvck7DT72n58xsGgQ9GU8iUwKQYkFIV5dloKqmeN8F6bmhfScbhV%2FLCUMWapY0hdtptSj6j6nRfY1cTt2RiVh0Cf3EAQ08gurzaRWlzZ3bN84SqSR7qW5%2BOShV%2FPu\"}]}\r\ncf-ray: a47beaf86bbec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":949,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":680,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":680,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/api/second_contract","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:16.465Z","timestamp":1791533536465,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"OPTIONS /api/second_contract HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: clientip,clientipaddr,content-type,think-lang,token\r\nReferer: https://usdc012.com/\r\nOrigin: https://usdc012.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:16 GMT\r\nallow: GET, POST, PUT, DELETE\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With, *\r\naccess-control-allow-origin: https://usdc012.com\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E35iphaTRjPj0cLbBVsvhtjsoevi3v5lMcWO5It4mtfb0ySENbdAQ%2FjGr4Dzx9%2F1gjlByyrvnbg%2F07JL8RKWzx8fSss2ekgRVNWrUUX3xwnkZhWEPOjqmOwAmQc2Bv4SaIYd\"}]}\r\ncf-ray: a47beb5ae967c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":949,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/storage/file/20241030/b56e1890d60214abf6d8b42c5b107ff6.png","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:01.781Z","timestamp":1791533521781,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"GET /storage/file/20241030/b56e1890d60214abf6d8b42c5b107ff6.png HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 30 Oct 2024 02:09:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67219552-5d5\"\r\nexpires: Sun, 08 Nov 2026 08:02:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nage: 577\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WvTBG8KkLudP0WiLUZi%2F2MTktXWuLioGy6aQTotgv4QpkYJGed569IDiYUxMNEQZyXemmMcfWDnwNDpol2H3A%2Ffm%2FlIwadiaen1l43faDt8Yf%2FgDz5gRwgU8tMvxGTACdznX\"}]}\r\npriority: u=5,i\r\ncf-ray: a47beaff180ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1493,"size_decoded":2342,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"ed07f6029bf0a1c3a23807c8c584cf1a","sha1":"c4b319ce81032f615b2e3c41ed15d437eef8c708","sha256":"c9f8f330098924d66839ea621329988bcefc4f157fc28469a18b138994ff27ea","sha512":"a4b87ba6dbfe56303510cfba8a4b4d01d51fd78c8f2691c907df34d117b41b226ea59dd1e4724a8c6dfb05bafddb78b0cd0da1c6e929401822e536eeb5fbcb18","ssdeep":"","tlshash":"ce31e980bf2489fad6a0d135064a1622808027be4921e36b1ee09c3d271a5ac40f0f2a","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-10-09T08:14:51.04666Z","times_seen":154,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/InputPayPwdModal.B_ZikdHB.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.150Z","timestamp":1791533520150,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/InputPayPwdModal.B_ZikdHB.js HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-999\"\r\nexpires: Fri, 09 Oct 2026 20:02:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pDUtZwkkTN6Sey9Gac68X6PYCVv0JeQvjEPw%2BtiUX27Ru%2BP7UGGRVwhSpbhYHk%2BlA54BpWzSjiZgUs0OMpKmDcFCS6Cz5WD3VqUQrxg2kHmXU8kXxSfAExftq13Ofw%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a47beaf4eafc35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2457,"size_decoded":1873,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2456)","md5":"58f72e705c801ada17235c922cfd89da","sha1":"56b9938a494afc75cfe0cfa0e367fb37dca8e84d","sha256":"c042b787a4c9a960e6d55ccb95594a705f39d9902bbd8a10b826cf9f0f580122","sha512":"fb0b3e910ae5b35eb8cc42e1e46b4199612e0aa65eb49e858268144679febcec08b123125592bcd3c86d28eaaaae3e7022ecc82aff567d1f72ec9189077b25ed","ssdeep":"","tlshash":"d551650a3e3caf3994066178f0816805b41054dd8b46ab58b7fc0e5a0babc46937fb24","first_seen":"2026-04-19T12:18:29.295802Z","last_seen":"2026-10-09T08:14:51.047523Z","times_seen":6,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/static/images/tabbar/medal.png","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.600Z","timestamp":1791533520600,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /static/images/tabbar/medal.png HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-f92\"\r\nexpires: Sun, 08 Nov 2026 08:02:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 577\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YeHO5eRJGPWuyrsQ6t29vPtd2mC5oul2q7TWWEmu12mpjGMmQBImyUWB6EzlO6iDmIlu8SOTCh%2B8W4PsSYwHvKFhh4d1pytlQ2XaiZEjkDa0oz%2Fu%2BZfg1P5lmwHUxw%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47beaf7bcc535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3986,"size_decoded":4749,"mime_type":"image/png","magic":"PNG image data, 104 x 104, 8-bit/color RGBA, non-interlaced","md5":"fa001c1299a945ee1d3de0650c3341fb","sha1":"be83462007c10263c255b9b2e35d73d0e1ae3c7d","sha256":"56856e5041077dd63e48a42e29e7cb063fe25960cb324bce740ccd329c2e21a4","sha512":"fa822003aa8a5199c3ae2f0c3913dda1f534bf43496f40fea804d311973340741088223a645f0891a857a82355f30a32ea02bc0c14c815e2b8def8f0a9a6ccce","ssdeep":"","tlshash":"a7816b5db85781ed49bd673f0480e9dd9bfb07c9810ac11e0827832aa01e735b883c67","first_seen":"2025-08-26T17:30:33.441802Z","last_seen":"2026-10-09T08:14:51.049025Z","times_seen":20,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/static/images/home/message.png","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.747Z","timestamp":1791533520747,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /static/images/home/message.png HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-8da\"\r\nexpires: Sun, 08 Nov 2026 08:02:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 577\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HcvKDkA2aN24DQD8rTzya%2FS3FxfvcDEyFNNZa50o1VOrZFODTSlUHdSONniRTaNbUn1BtYhet4Y2Fe86UaahrwCY2KYU2fhgsE7k57PjKRVzs3LrwbemgOlOzJyLTQ%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47beaf8ad1435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2266,"size_decoded":2998,"mime_type":"image/png","magic":"PNG image data, 82 x 94, 8-bit/color RGBA, non-interlaced","md5":"37012d79841b66014ba8cad9da7adf9e","sha1":"8036e4412ed7b3382f54b263b3ed31f4e73baa72","sha256":"a48ece7c63208f04720d485810e58d939080a65ef1d50323d269778e592074f4","sha512":"6eaad6c89f200a827070455898199d848d5cb59bfb0af6ed3047bfa01f8191fbf7d9260f8229a467e2dd20781b1bd083d75efc4998fb966b5993f28fac1e78b7","ssdeep":"","tlshash":"05414b23fab89c4b490fbee7d493e619d3a8db29041730aec21b0e45d8702c784fe250","first_seen":"2025-08-26T17:30:33.416951Z","last_seen":"2026-10-09T08:14:51.05126Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/userIndex.DEM8PT7a.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.074Z","timestamp":1791533520074,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/userIndex.DEM8PT7a.js HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-586e\"\r\nexpires: Fri, 09 Oct 2026 20:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OEpPFeSAzcB1TPG8YH6gt79fL4zCAmn91Ii%2FG%2FKag9QqHoJ6BGtA33ZCmSZ164IzMKLlxHXoxurwqy8C%2FtF0PqCrZ02XF94GPxU0rcZ6tqH%2FZLn6CnKLWjGXSVdH0g%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a47beaf47aa135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22638,"size_decoded":7160,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (22511)","md5":"cd703d9e5ae56c0f3be8cbae62dec9ff","sha1":"8b75029be04d978c87878250d51590c391bdb28c","sha256":"1cd270b92c06f69d4aa1e87173050744cf6ae53fb57006c87bd043f93d3502de","sha512":"1c470b7bf289dbebb5e3cd290896e44598b52e28d176cfeac4087d81d7126bc6a8428f78c339283292ec0ced6139dda4ebe4e8bddd3f3f86c7b78fc59307151b","ssdeep":"384:OvMaJwGqXFzXSzABt6bsjHC2vJ+WeOlY+k7VE+rkRRzO53piT8T:OMairXFzCzABt6bsjHC2vJlljkJzkRZ6","tlshash":"1ca21919771cd1297ad1a00e84d40812b20b4c9ea321b9aef3feddbf4399c6d659c736","first_seen":"2026-04-19T12:18:29.296632Z","last_seen":"2026-10-09T08:14:51.053977Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/api/home","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.708Z","timestamp":1791533520708,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"POST /api/home HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ntoken: \r\nthink-lang: en\r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://usdc012.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: *, *\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JngBmz%2Bvfy6e%2BRjmsx2RyxVIlXdSSvxN%2BEGtiXlikwjlilfe%2BQT0Wrh7yF87Hlsi657W1sW7E%2FNmD26sUU1bL98FGAVhgsij9pPoyyPSplG3FrsTFs1kOw9owNhElwE6lboU\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a47beafcae40c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":431453,"size_decoded":87675,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5c03f87317ef6463eb90709048e747e0","sha1":"99acb7224706c00aface4bf4a95753f39189a71d","sha256":"0b47be07d641d1c8370ebcff977da2f2610acd348fdb6da1637ea26acce41e4c","sha512":"d725f8a0c984217b00b59b53d21803d672d25c4c5420ab4cb0ea3cfc3985d646264147c8ad7f3b35caf809b3f7780d3e13b2a496019ca54d47fa9beb3aac04af","ssdeep":"6144:K6HAIEPk5Wf5ZSLjOhLjODagvLjOI8+uLjOKQxf/JUs6A90Tn5eP9EhT:nw/SLjyLjsLjXuLjtGZ9EZ","tlshash":"25944c2ea7ecb2244c8932ca72857f3bd55c30367745eedc4586cba612d0b6885369f3","first_seen":"2026-10-09T08:14:51.055223Z","last_seen":"2026-10-09T08:14:51.055223Z","times_seen":1,"resource_available":true,"data":null}},"time_used":466,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":308,"receive":158,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/static/images/home/vip-icon.png","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.758Z","timestamp":1791533520758,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /static/images/home/vip-icon.png HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-d1e\"\r\nexpires: Sun, 08 Nov 2026 08:02:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 577\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IvDe%2BCezJNcVSqP1oStdI7rjMU31EzPdEKX1UQy5TNUFGXbuQ%2FFdLsU%2FSHeP%2BAOa0YUTJmGn%2BCRk9iGgS6UtQrJAqbC%2FujApodcDrydPo1zKyTdNuPYxDDCa3XkGGg%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47beaf8bd2135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3358,"size_decoded":4081,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"95c29573bc4958142f4bbff771f82895","sha1":"b03b76fe266d70f1bb068deb4abe211b7db56f31","sha256":"400154b273cf2dfba3d1f4da5199639507a0932b4fc67eab4c0bbe53a7307686","sha512":"2f7a3ec619b6dfa1d314d593c51d959c877e6f6f07999416e3429aa455af638d0949d794ebabd0810dd5ac5e49320dfcac3f7e5fbb24754a2b59e22731dbd759","ssdeep":"","tlshash":"20614b69f721fd24c1c946a09fb80d091e507c429bc9d79a7295b0174031bc8a814dee","first_seen":"2026-01-04T07:38:56.313899Z","last_seen":"2026-10-09T08:14:51.058365Z","times_seen":15,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-confirm.BqkvfG7_.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.080Z","timestamp":1791533520080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/s-confirm.BqkvfG7_.js HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-876\"\r\nexpires: Fri, 09 Oct 2026 20:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ConzuDyyZM4KBgVFWGKcO79T5tSvMWuLcs51Hh4IjrJHu6R9L%2BrxdOUjC4kYHBXA2rOV1eRIF42wuGlmOBPM9AkXv%2BwwPNOK1kfN7E4n3%2F8fG9lqhJr7YqCaV9Fafg%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a47beaf47aa435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2166,"size_decoded":1771,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (2157)","md5":"4e6cc686cd1a4f47e5f311aeb581d88f","sha1":"8c9484a4bad511d3ae4264c3b7f1f6822e598240","sha256":"be1eca4586d1b0e449cb9c0897aa83e50458de6abede459f158311e919402afb","sha512":"23cfe32cbc6c5b17d0b2eb3ccbbe66b2358b74423d63591db95e37238ff629b82b85531a24d7ff691933900ef6bb284f06e8226b533f950922a9ce599583ed56","ssdeep":"","tlshash":"7641730dbe1c9271ea839349d541252e723b2fbd72163a0ff0fc1c9e17b0c65b995259","first_seen":"2026-04-19T12:18:29.285993Z","last_seen":"2026-10-09T08:14:51.059333Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-popup-D2Okk1oU.css","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.112Z","timestamp":1791533520112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/s-popup-D2Okk1oU.css HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 19 Jan 2026 08:47:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa1-10a3\"\r\nexpires: Fri, 09 Oct 2026 20:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1lidjNgDZdH9jV4Lyn6VHCaLFpcl%2BnfWhdQgEeMIfgu4a6FJhV%2FFP3ixp2ufxt4nxN%2BNWxieOQtFaQHoUnnHiqU2gragpJbf0bBUiaqm0gmCoOwmu89xO9KTNcXK6w%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a47beaf4bac035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4259,"size_decoded":1767,"mime_type":"text/css","magic":"ASCII text, with very long lines (4258)","md5":"06fcd30ff5c377c4a2f9f9f3ebfe3adb","sha1":"de7ecd01b1875701a718f6a23b13b42098eedcbe","sha256":"0afd9914f132bf3d55d12ad6b79db6a7759c03ca76fc0cf5721e027ac1b1f31d","sha512":"ddf5528973b5af2bd222c1c70f559eeb4e03950c583846b024d74695801159b855d3e250196077c0efa68283579470f0f8c62461d881caab4c2fb43f5751702c","ssdeep":"96:u/l9Nh+ecD+wB9u/BifBAoBESBOojkbHIDD2GA:iNMTD+wB9u/BifBAoBESBOojkbHIDD2p","tlshash":"c791c134abcd202cc0bfd37165d05e8a4276e79ebb660f2f61a50d134aa354d316afe4","first_seen":"2025-08-26T17:30:33.439943Z","last_seen":"2026-10-09T08:14:51.068238Z","times_seen":24,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-checkbox.0RQzNFsn.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.147Z","timestamp":1791533520147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/s-checkbox.0RQzNFsn.js HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-9e2\"\r\nexpires: Fri, 09 Oct 2026 20:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TjmWxxZ2Kl3a9AiKSnro7oaLoybWnRIpOqPDQX72ClYEytkUtCiEET78PVWD1kRrr3PlACcXUK4kWcugtTaDyDK7Y5gQjoyKKXlsgNQ1WVafyCd67%2F3ZgkN0xiyArA%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a47beaf4eaf235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2530,"size_decoded":1878,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2529)","md5":"e4b66f522303f2aa7916e5b8107450b8","sha1":"b01663f34b742ebbc57f8ec11110793d36733b16","sha256":"ab8d92e15e5628b2689b9f980a9d427e4260bc09712657159ce027d01c4b9722","sha512":"572d0befe7000f353a3ba4ece5ae04750866e00a3c4acbd1e320588bd8faedcaa1ef0214ac63c6684e0803b026cdddfc643c8936169e8bcb6ce4b2e9159fcabf","ssdeep":"","tlshash":"285143157055a5761fdfc4cc50528381a32e239cda103efdbbe824fa5a8bc88916fb35","first_seen":"2026-04-19T12:18:29.239856Z","last_seen":"2026-10-09T08:14:51.071666Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/api/second_contract","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:10.475Z","timestamp":1791533530475,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"OPTIONS /api/second_contract HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: clientip,clientipaddr,content-type,think-lang,token\r\nReferer: https://usdc012.com/\r\nOrigin: https://usdc012.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:10 GMT\r\nallow: GET, POST, PUT, DELETE\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With, *\r\naccess-control-allow-origin: https://usdc012.com\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oPBMRnUiEIKqmO6KeB%2FzKcrstmAQpuO8Uw4Rpv8r4BRtcxqxX2EPF13gJoS61l8u7y1rMSbGk9W9bL3TYtd63CkNChk5UbWu22BD6fFQF7qcefshGgZP2T8oiTaEe8gubKRz\"}]}\r\ncf-ray: a47beb357a77c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":945,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-drawer.DfnPa0vP.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.155Z","timestamp":1791533520155,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/s-drawer.DfnPa0vP.js HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-4aa\"\r\nexpires: Fri, 09 Oct 2026 20:02:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XDpSIhXUYV0P6BYo8S7dG%2FlpdY6GHAsr1LxbNEUo15yC7u%2BDZxd7oE9xGIRRIizYSIXVOE6hCfJuGbluc2sXkoNigTqSdDB47qTnumkyv%2Bl0SLN3sFuvwmYRWIpfkg%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a47beaf4fb0135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1194,"size_decoded":1408,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1193)","md5":"35cd4b2519746ea07ff72c431113d4f7","sha1":"a0d98a4a31da6a1c10f435bc4c55c8c481283a63","sha256":"f876b41e27b65c8e0758c1b9a5cf96d71d8a754053c0e60b14797f56afb058e9","sha512":"1ce2cb7501f8879a61bc7025df12e8dd5ada3a56cb8051238a76c3b1b82f3a7542500651dfa4b504b9a13e24419ffaac22fcb4f1ef9ec95980ee6f3419a535fb","ssdeep":"","tlshash":"1721e11c7a1ca93329d7445d402006001ec967eeeef42ac6f2e6207e875a5a8916db14","first_seen":"2026-04-19T12:18:29.319056Z","last_seen":"2026-10-09T08:14:51.072832Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-title-CVAcbwdi.css","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.173Z","timestamp":1791533520173,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/s-title-CVAcbwdi.css HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-c6c\"\r\nexpires: Fri, 09 Oct 2026 20:02:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T0VIpWgNBfX3yGHxB1luSfX2lvRoPnMTC5nJp2Fclm2H%2BlbExSs8tcEPmZu2n00jbg0senY%2BT1yv%2FNPueBceF3Zm6fHi%2FAcObhJA%2Fnp%2B8TJl40uRwtfL9b9IIgagaA%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a47beaf51b1135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3180,"size_decoded":1671,"mime_type":"text/css","magic":"ASCII text, with very long lines (3179)","md5":"5177a0864313a3a5c4e35c97a88cc6dd","sha1":"0a600582603bc21aa49ea90db47c1f8fe75c0128","sha256":"0e3b38377ba563f6800ce39abb9bff953b64f949e0dd9f290bbbadff2da62356","sha512":"899a86a4d2e07cfb5ffabe2906b3a8403e720483e9b0099222a6c4d6ed79a1af784822b8f141943d6408d4693d93eb7a11c4e48d0fd6f56ed957d76ebc2c9a0c","ssdeep":"","tlshash":"1c6131316919121c8e33e7222ca037c99534f1a9f7d7116d53a7283e9dc764714faaec","first_seen":"2025-11-22T10:34:45.560659Z","last_seen":"2026-10-09T08:14:51.073768Z","times_seen":21,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/transfer-BRg7NsZa.css","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.174Z","timestamp":1791533520174,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/transfer-BRg7NsZa.css HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 19 Jan 2026 08:47:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa1-568\"\r\nexpires: Fri, 09 Oct 2026 20:02:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h4V%2BAEfUVqbo%2BJeNWY3Yu%2Bjpojzxxi2nWd%2B2yQzqkBlgwisxmKSE2bxUx2QsRRW1hsrnp4J1p4LTooLVuLyVx6ef8GvW67G96Wa9INatTIHbBqH7csIfFWicmtBIMA%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a47beaf51b1235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1384,"size_decoded":1305,"mime_type":"text/css","magic":"ASCII text, with very long lines (1383)","md5":"8732b3e9351dbf0b861b02335c964d20","sha1":"6cad70740f42e02a06acdd1d47acc4397644e789","sha256":"d0fcdcfeb22f78ed82a487b1713e7102184a57059d7a278b811ba1a2a3970a8c","sha512":"ac3ad5cd570bf9a4c872df2c1f6f9ce2eafaf9cb843cadd1397e8eadadbd2d7aa77d147cae133564c8a5d68fcd8ac935340df1571fdd45966ab8da23915a8010","ssdeep":"","tlshash":"0c21475df54c2d6664b7db0a18f287cd9922b6b6c801565dbc6b3b10ccab3c3241678e","first_seen":"2025-12-31T19:20:07.098297Z","last_seen":"2026-10-09T08:14:51.07473Z","times_seen":19,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/api/second_contract","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:22.471Z","timestamp":1791533542471,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"OPTIONS /api/second_contract HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: clientip,clientipaddr,content-type,think-lang,token\r\nReferer: https://usdc012.com/\r\nOrigin: https://usdc012.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:22 GMT\r\nallow: GET, POST, PUT, DELETE\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With, *\r\naccess-control-allow-origin: https://usdc012.com\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=is1nP0p4CzLEhqThfU0DAsa%2BzePH60toCEH6yM4tkTGnPoYZuyYoltiswtYPTxOEDxvLUuVOE6sqH1qHearSoa5BAsCB7bvmMxLHlbO1EyEQ9feyW6U9iCveOWB1A6VLZS8u\"}]}\r\ncf-ray: a47beb806c48c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":945,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/index-DZuPayf0.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc012.com/","date":"2026-10-09T08:11:58.787Z","timestamp":1791533518787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/index-DZuPayf0.js HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:11:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-d5860\"\r\nexpires: Fri, 09 Oct 2026 20:02:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 579\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eN%2BSmL%2B79CFQNnLjcA8bM0lPKWsxZ5VVeBxQjJXOnTRWJitc90Pt473OqCMTu7usclH0MbSXcSB7RV8pouGvZ4i0j32lo3mfX3BzGriHofHJWmGUU06qRc1BVr6Sbg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a47beaec6d7835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":874592,"size_decoded":273592,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (26861)","md5":"8c5ccebda320a406ceafed70dcd85d5d","sha1":"fe7d2d1b67f9534a6d5ba91319f016c383808fdc","sha256":"26c518fcd14fec0e03affd0e9a4449a894a059b81df90b074031b660a7d4f5e5","sha512":"a5606a2cc270cbae440ab5aa879921164c27887ef53e2336e70f214430b51bd911589cc9c6509ae5efd8bcb58190ed2d4f78ab9fb0501c19c2bfc9bdf78e64c6","ssdeep":"24576:mOhsHDvQtgcUJ3f5/oGrr9BomjmVttK0sPfwuwuT4hJAmXCyeROeA91pvmi:mOhsHDvQtgcUJ3f5/oGrr9BomjmVttKu","tlshash":"b7159f9a338a702106f536d2706e3631a3745e61f84ac0c876dcdeea25fbc056297f79","first_seen":"2026-04-07T10:43:03.562323Z","last_seen":"2026-10-09T08:15:39.061206Z","times_seen":22,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myip.ipip.net/json","fqdn":"myip.ipip.net","domain":"ipip.net","tld":"net"},"ip":{"addr":"172.66.155.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.183Z","timestamp":1791533520183,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"myip.ipip.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Aug 2026 03:28:17 GMT","end":"Sun, 22 Nov 2026 04:28:14 GMT"},"fingerprint":{"sha1":"CF:AE:02:92:7F:3D:C0:D2:75:74:E8:8C:36:5E:0E:D6:94:CA:EE:98","sha256":"6E:0E:B4:1E:0C:2C:A3:0D:9A:25:57:B9:B9:C1:56:66:C0:EC:1D:2C:16:45:9A:DA:94:67:68:D9:69:30:02:23"}}},"request":{"raw":"GET /json HTTP/1.1\r\nHost: myip.ipip.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://usdc012.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 09 Oct 2026 08:12:04 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a47beb08fb6235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106,"size_decoded":370,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"eb210668a680ed9753db01175a4656cb","sha1":"f2e296a9cc1e247b6c202a0c5db01b9982fe0e09","sha256":"c4c0f2621d694949e9af1241a6d898a7235a9291b7e848af05cc04f884194839","sha512":"1729e44dd93919dbf11ae3f866114b5c442a953f25b1fdea15f6808dd940cfc7df737dda0bbeaa6b75ae56031443f92e6dc4e22f90f087349c6016075fda48ca","ssdeep":"","tlshash":"cdb012f1522b280495c11787440d4873608ebcce1941e9d186727f25cad82fcb111638","first_seen":"2026-06-08T03:13:03.269435Z","last_seen":"2026-10-09T08:14:51.076654Z","times_seen":8,"resource_available":true,"data":null}},"time_used":3951,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":780,"receive":0,"ssl":3165},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/storage/file/20241030/58cd471733833cec036d051d7399f5d5.png","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:01.770Z","timestamp":1791533521770,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"GET /storage/file/20241030/58cd471733833cec036d051d7399f5d5.png HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 30 Oct 2024 01:55:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"672191f8-465\"\r\nexpires: Sun, 08 Nov 2026 08:02:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nage: 577\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zUcUkTESBT9%2B4i1lFuHB2EOWq34pwYvvlMVygSpX%2BHAPJ4X1cDpS6UQB%2F%2FopgcKEPldhojO8%2BAfACNrdGKrlBIXuYQXzuZlWrO6nF%2BM9ki2Rrx8PPT37wrmsopQYeVx%2BoXFR\"}]}\r\npriority: u=5,i\r\ncf-ray: a47beaff0802c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1125,"size_decoded":1980,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"75f196b437f9d87fdc198bc904c66c4c","sha1":"79b6e300761520f7ad41856878999dbc1fafc137","sha256":"f72b9a231c13012613217eec2bec27b923204e8c6cebc2b2ae51485d2b5d679d","sha512":"de4633885db64868d13a4a4699631acf0b00af0b2cda542c5be26b4dce3a1f8b4e071949280ddd9f3c59eb7a236d5d8d7003ffcb9633e0749fb62d46c780ac60","ssdeep":"","tlshash":"2421f9d3df09102ec4029c9cd4730c6bcc287a963410445b5f7c823fcc0b6496864b67","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-10-09T17:24:31.098571Z","times_seen":2096,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/api/second_contract","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:02.417Z","timestamp":1791533522417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"OPTIONS /api/second_contract HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,think-lang,token\r\nReferer: https://usdc012.com/\r\nOrigin: https://usdc012.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:02 GMT\r\nallow: GET, POST, PUT, DELETE\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With, *\r\naccess-control-allow-origin: https://usdc012.com\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9YISnZJzSoBj0%2FpaH65VfUHmYpl5mL269%2B6Cz4Q57zugbCd2GGc%2FLKVmX0XxKUVc%2F8YgNCmmuvmb1wqeMqwKwGZAoOgHOk33aqvoWx2WhwWfvyT84GLqkMo8HOcwGDHh%2B%2FUr\"}]}\r\ncf-ray: a47beb031b13c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":955,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/api/second_contract","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:26.467Z","timestamp":1791533546467,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"OPTIONS /api/second_contract HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: clientip,clientipaddr,content-type,think-lang,token\r\nReferer: https://usdc012.com/\r\nOrigin: https://usdc012.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:26 GMT\r\nallow: GET, POST, PUT, DELETE\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With, *\r\naccess-control-allow-origin: https://usdc012.com\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pnb3KgBz8Dr9Po%2FLQrycCjOfaKdnTcq5WUvEUTbtBicGkW5tI9no6ujFXsOyR3ifIgrRMhVnXltSU81YxVPBYejrZks7ccUbmoj7i6Cw9iMdi272Vh1PO1tswgiTzAxJqkMT\"}]}\r\ncf-ray: a47beb996e52c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":945,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-banner.Dn6P9rq2.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.076Z","timestamp":1791533520076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/s-banner.Dn6P9rq2.js HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-129a\"\r\nexpires: Fri, 09 Oct 2026 20:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 577\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L1%2B2PKuRRzuz8YI61R0tjbuaXAO8JeuceSBtEF0ZiOsY74fxnPII%2FqEG54P5d2RuZx35ZXbjQUsHsHMqhApD6cippGf9hw1o%2B82ug3nGw%2BSBKFzYszhJBxkbltEeAg%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a47beaf47aa235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4762,"size_decoded":2041,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4751)","md5":"e9b2134f6af223cd499a048f91d56629","sha1":"c82a2637122d98e17714850d2bf4310fb922039c","sha256":"908e934107124579945955a501653dd519eb4fa1cc921e62f951d85cc3fa6d3b","sha512":"c46975f6b9c968b5aaf91e9d14b470173f0b53f377d6aea115ecf881e0023ebfeb557876c6760cee82f2d7871e7b0a33d53d2c2a58b61f0fbc9e61f9af3e1717","ssdeep":"96:gqODD0PWg+IT42fOjqCbCqvuj1t2tK4tPtKltstK7s:gqODaElb5efs","tlshash":"30a1df28352dab37e89789ad00c4050435b929adfbf07776b7f48a3d922344eb91cb59","first_seen":"2026-04-19T12:18:29.309Z","last_seen":"2026-10-09T08:14:51.079432Z","times_seen":6,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/CurrencyList.ByvEvsE5.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.113Z","timestamp":1791533520113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/CurrencyList.ByvEvsE5.js HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-49a8\"\r\nexpires: Fri, 09 Oct 2026 20:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f11nOr%2FVaY61jOl76hf305AO9spYXPQSIUAZBIWDCS5%2FfWeMTJevqQnS%2BOHj21%2Bb0VNz0BpG%2B0Irbqwotha%2FkW%2FtLLjb%2BLq%2FmWYPiEJTpRtXV0bszW9qJKxrmfkhjA%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a47beaf4bac335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18856,"size_decoded":6690,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18855)","md5":"3286e76ee552483f66c017337678fa47","sha1":"675cef78c1eaa838fb930bef80f1372e157740c6","sha256":"cc33d48184f8155fc10f37eee7d56f0ce6bb052b24811f1fbbf301cb2581819b","sha512":"7831664a44eafc6f0ada452aea47b116899e62eef05b5464e996559fc8a3e38a8b0699b1eab4377aba577edd200ad18afe48de6a571e1a95c46be74dcbf245ee","ssdeep":"384:UCk4THfWCNzMLU0Ij6m72b8Gpg6CGMEquRTwei0oI1F7:DjnzMLUHjN2b8Gpg6CGMnUvipI1F7","tlshash":"3d82c6653389e43647d9642980b89604a3367f8dea02346d77af9cf9935fe4871acf30","first_seen":"2026-04-19T12:18:29.290382Z","last_seen":"2026-10-09T08:14:51.080272Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/userIndex-yvkidZCu.css","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.135Z","timestamp":1791533520135,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/userIndex-yvkidZCu.css HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 19 Jan 2026 08:47:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa1-1ce0\"\r\nexpires: Fri, 09 Oct 2026 20:02:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TLj9NerViU0DfgnxPtdGO0oULhNOAslAEnGnysVD2XvEtADLpho59TjwBJ51WjtrVT3CdHyK6mU41xw3aQpGSUUXVY2H%2F12GQ0s4jNZVRvB%2F15SRit4hTbYBOxtr%2Fw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a47beaf4dadf35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7392,"size_decoded":2235,"mime_type":"text/css","magic":"ASCII text, with very long lines (7391)","md5":"be34723763a118d67d255cd364b2f45e","sha1":"9fd33f03dc8dc12add2f57b33b979ffaf4712ab0","sha256":"f9cd2efd4a2892c48cbb0d5ca111aaf3a7cfd568df9062e2aae6dfa74739fe66","sha512":"4f5420319587696d050708df9ef45d7d26a3c7659ea46307d603ff69eef6c7d3f9da0d7fec769020ba7cb35cc217bfe02ca5c089ca676cbb33f420dbd2ee1ffa","ssdeep":"96:I3+puM7NbHnDu09iTZUQXaQEInlQAr+RWoKb:IUBHTWTt","tlshash":"f3e1d834778d3a04aa3bce6884f0774ea110e38be9479a8c648375768cd70d33a795f8","first_seen":"2025-12-31T19:20:07.101137Z","last_seen":"2026-10-09T08:14:51.082159Z","times_seen":19,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-money-DEKo3EMj.css","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.140Z","timestamp":1791533520140,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/s-money-DEKo3EMj.css HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 19 Jan 2026 08:47:29 GMT\r\npriority: u=2,i=?0\r\nexpires: Fri, 09 Oct 2026 20:02:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\netag: W/\"696defa1-1fb\"\r\nage: 578\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=glwJMGxUTlzEwe48gGop8IMFG0W6sz1dYGMq%2FZnGeHVtuc9n2vgHFz1FtqvGJ4T%2BBY0PMDclfLVIi48Ol62emvuX2vGW1xJzf0wWbm6L1rR2LgkbKCZfsvjdrn742A%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47beaf4dae835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":507,"size_decoded":1004,"mime_type":"text/css","magic":"ASCII text, with very long lines (506)","md5":"1ec6a4f0444037a6b44b2a56d62f8120","sha1":"affa6da1860222fe4c4dbc1835b3311775cdafdf","sha256":"c054f4bb46d90822b76fad8d952402cae3ac9c39abb03bef2091f6b0a76570bb","sha512":"2ac2092c0bb97e180253f6e958287c951ea46f464a60071737ac5fa634824d6182478ed13d74ed52686ea05b4569e71e76f3c5af7cb97224c1d9fa50849401f8","ssdeep":"","tlshash":"f6f09ee07bb41f00db3f6d18296727a2d6323e836de143b48351a3a44e5b179150e988","first_seen":"2025-08-26T17:30:33.438038Z","last_seen":"2026-10-09T08:14:51.0841Z","times_seen":24,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-drawer-joDNLxy7.css","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.156Z","timestamp":1791533520156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/s-drawer-joDNLxy7.css HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 19 Jan 2026 08:47:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa1-67e\"\r\nexpires: Fri, 09 Oct 2026 20:02:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 577\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rJIklfGcBq3PfapUkO2OGugI3rHeBq3WqUouFlQYmNlEFhJFRWVOkc8ipadqHmsxSbfMi%2FzviGfapUj4nS8S7Ab8gGsGoCbYfWMsakel%2FeCvB8JGjLXmXG2jfuJekQ%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a47beaf4fb0235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1662,"size_decoded":1333,"mime_type":"text/css","magic":"ASCII text, with very long lines (1661)","md5":"c459d8c22b13969efd179467452eb13b","sha1":"0c10dad7104de3185801252919cd93876687f9f0","sha256":"da10cabef00245f7c0337951d5ff5cbc9a8a1f6c83efce5dc26b6230c2edaf1b","sha512":"1d8d798bd83557544abb5df3e3251afd3bc7834f2f24521fccfa19be96e04d5a1c6844f28658fdd5e33d7316796e66cb5e0496a6fab13ebef553a676865a80f1","ssdeep":"","tlshash":"53318a325d553c18767fd316d4e1d9a80f3cd2d3daf2acce6209652b0a4b9b9205b582","first_seen":"2025-08-26T17:30:33.419712Z","last_seen":"2026-10-09T08:14:51.085059Z","times_seen":24,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/api/second_contract","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.702Z","timestamp":1791533520702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"POST /api/second_contract HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ntoken: \r\nthink-lang: en\r\nContent-Type: application/json\r\nContent-Length: 46\r\nOrigin: https://usdc012.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":46,"data":"{\"page\":1,\"product_category_id\":1,\"is_hot\":\"\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: *, *\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YkxDyzCWXTOKZK5foZpv%2B3QUK7ausVt2uOKkuRILm61yfU5UyhDir2oRrs2MNR0P6aE1L0N7lZqPsq5IvPyw95xn9iNRXLrnkpkIArkPjQimp7x8mVYQBUEkVsYEPcLw1DSO\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a47beafc9e2fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5503,"size_decoded":1939,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e8c9db677631a8f2176e5087eb3a4a82","sha1":"29f105a928c676e99d3fb93c3a55639e5a0a78c3","sha256":"ed81d35b7992949e934ba25bda1833a4863d8a3da96b8a79189a6bcbf0cd5a07","sha512":"a4852d4de5c6bd1328bc1e2f42f0e6800df418f9ef31171d75a6959cabdcd9c98e9eef0d55d183ef2ea84668e5a981db5b01044d544ae6db00e40d6ec88229d7","ssdeep":"96:3Vil5Z6/kIrQLaVI2DJeivqICPIWvHxIR+aGIM9RRI5GjI+j6IunGFI478IxVIEs:lifZ2qLGJeiibHhaY9aGHmnG/POf2m","tlshash":"4bb19f5627cc7c35aa733547928b78ee85c9b147bdcd7fb94b8edbbd0865a19300a800","first_seen":"2026-10-09T08:14:51.085734Z","last_seen":"2026-10-09T08:14:51.085734Z","times_seen":1,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/storage/file/20241030/52797f54b8c56bd7d30f615432d4fe0e.png","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:01.784Z","timestamp":1791533521784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"GET /storage/file/20241030/52797f54b8c56bd7d30f615432d4fe0e.png HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 30 Oct 2024 02:10:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6721957e-509\"\r\nexpires: Sun, 08 Nov 2026 08:02:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nage: 577\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=95dnfcoBPSCHzA228miNo25P6l9uu7BODq7eX%2FpOKh%2BnjZwFalXSFsn6%2BeB0ggGcb5cFBJvaAkjSIje5p%2BZ4oqqpAJDam9tCugGSivuwj94uNZvC7vAg1JWMwgclEDvwTe2p\"}]}\r\npriority: u=5,i\r\ncf-ray: a47beaff2810c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1289,"size_decoded":2138,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"7290ed52436b197f22dec959794a77cf","sha1":"dfbcc5de182c12a8dc3aecce574718835228d8e3","sha256":"eedb605b601d24286034b55b362387e5627b346a0ef69e2afd92177968e1e755","sha512":"d51b24f577360a4c430ffb8e6559e53e0664c35601daca1a6aef27f48521fee3f172b95e23a9fde17f53659f65c4b80a3f8dd9d25f2df9379e8e7c0a171d4a7d","ssdeep":"","tlshash":"bd21c5782b9a422ec24dc9762e7a03001d2d8131a04c5cf8db69096b6e80d7e426cfa1","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-10-09T17:15:27.999124Z","times_seen":352,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/uni-popup.DOQjiKe5.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.114Z","timestamp":1791533520114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/uni-popup.DOQjiKe5.js HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-37f7\"\r\nexpires: Fri, 09 Oct 2026 20:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bd%2BtiLx0hKIiUCItnTPUInPlLBXaxAPC9dWZJt68j1xtXMhlf0P%2FHEM8qaOa45VbHxpu6DgfnPolSrfLESs%2Fh3Km3M35h0h8wh1rLuKy7lT%2BXtgAoZ5zoZGGKif2XQ%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a47beaf4bac435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14327,"size_decoded":5454,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14230)","md5":"e1301d20a2b799a528778893a00fef3d","sha1":"8805bf43b104b73025c8e99c4e50384260f03c67","sha256":"2fb7a897674eed576f80cf3baa973f9c02b787ef4e75129fbbd471ffb0b18162","sha512":"a629f6146dcc90ba215d7fabb4828c959789d9f432b6ac2149a4c926a1dc5335c133dc6a8dde75c009ae8ae638a6e1400f85ae8e196bfe5ed81a01e4a5eea3c4","ssdeep":"384:5jB08L4LbQr3y9Pk9wMjxe/gi0lvwoIpFHqdM8uPCWYYxoK/WGbNYDYGFa:7x8Psy9wHxsglvNIpFHqdM8uPCWLxoKV","tlshash":"d652d7c5b99ee92605db82b7505c4a00513859d8b0751b6c7bbdb8fb024ac8c73eb73c","first_seen":"2026-04-19T12:18:29.257345Z","last_seen":"2026-10-09T08:14:51.088737Z","times_seen":6,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/CurrencyList-DB3FY5Nt.css","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.117Z","timestamp":1791533520117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/CurrencyList-DB3FY5Nt.css HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 19 Jan 2026 08:47:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa1-d28\"\r\nexpires: Fri, 09 Oct 2026 20:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DxyeuE2CYz%2FVS4mBVS1Cm1peWgt7gd5a6Ncn6JCI9OAAXAYKv19KOI9ADXHzMD1KRfBUaPtJ0G3SGwFUKmRsSl1lKfyXKr0MqPFgu6A33Fwj5dDb4W3%2B%2BE2SohfBDg%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a47beaf4bac835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3368,"size_decoded":1785,"mime_type":"text/css","magic":"ASCII text, with very long lines (3367)","md5":"ab4d4be3845fee6ddae159b928238d55","sha1":"aecb5477019c06f5ccade269a9809ad5d72e1382","sha256":"066336f842b881e4d5caef0d4e7e4b32d5d9b11b73c9ed167156a79528051eaa","sha512":"1f367e2773a96df74a43d53040eebf39882b832b85690b00f984e682d73829c9b9fc1fd832fdace7762518b4e4e2fd6b545213ec9ac1564cab17b1ddf12ae107","ssdeep":"","tlshash":"dc613e6d764c322e457ff6096dd55bcf1230e31ac36215cda9833b34ad8ba432e224d8","first_seen":"2025-12-31T19:20:06.986084Z","last_seen":"2026-10-09T08:14:51.089771Z","times_seen":18,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-stat.DzCGzzkx.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.136Z","timestamp":1791533520136,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/s-stat.DzCGzzkx.js HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-b39\"\r\nexpires: Fri, 09 Oct 2026 20:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y567pBtAwNkAbMe1SwUmmyElGazihpJbUG3DCJvA6slR2Eci3YHtoOdjrMFku67GdNy6a4aJGD8hqZwZ3Cgky5ahYnicQkcuZur%2Frw013uRt58NS%2FIP5cSWG36Xkxw%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a47beaf4dae235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2873,"size_decoded":1911,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (2834)","md5":"a425a891902b8b302b4ee59fcb70f214","sha1":"47d0bf8cd1b5ce3863ed8c46a0b4b08f780055e4","sha256":"cfe0289d83fb1fa17266f60f5c32931e6f99e4b503ebca823e8d793c5531da6e","sha512":"c4ce1aa39642116ddd1c5be4b5a1cbdf4c4ed6fe4c8c9a64076cea9b4d9b55f57b13e98c27687ffa8d8586036f3b6b6448fb0a07fd6ea078c04dd09d267789a7","ssdeep":"","tlshash":"63514204792cc57b2893e01e64d0441bb26b2ccdc6b4763f65fa987e13e5c1864adfa9","first_seen":"2026-04-19T12:18:29.238858Z","last_seen":"2026-10-09T08:14:51.091138Z","times_seen":6,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/storage/file/20240827/0eaf4f9fa94e740a747679065022f328.jpg","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:02.054Z","timestamp":1791533522054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"GET /storage/file/20240827/0eaf4f9fa94e740a747679065022f328.jpg HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 26 Aug 2024 23:53:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66cd1569-335f4\"\r\nexpires: Sun, 08 Nov 2026 08:02:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nage: 577\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P8OscMnw7v9Fiyq2PWYhI7bk5amPI%2BAjr5PjUX63xep593bBleWtZx54SOSm6hlzaTKkRPWWkQWX3AbWlEptqYH%2BLZlhM3pcGZdLzGBxXKpNUfNYYs%2B1WrUjdU1SvqJ82xkn\"}]}\r\npriority: u=5,i\r\ncf-ray: a47beb00d96ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":210420,"size_decoded":210097,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1170x682, components 3","md5":"edbcf0529becf1c6025001f30cdcabe2","sha1":"67e48dcda2462cb34a9e5eae50842eeb7eada264","sha256":"e6a7bae02ae5b510d53a7ad1773cd5bb4f2fdb73579e1445d1d44e5aae4c5e1d","sha512":"9aa6726036e777a294dbf8150317e0246aa673b827e4c9bd2c6399f2564b286c15458d3b71d168ef625e42c570401d63280a3c010f77f26c025057c23e75f141","ssdeep":"6144:biPDTKTjfo4T9bl9aKgtyXYKZdWoVMGadiZW:4Sfo8XaKW6tW","tlshash":"d92423c9ba95c14ac1120a7cf3ebd9c8a1433478f8a3e7ce351e258b47ea0550de4ed9","first_seen":"2026-10-09T08:03:44.53371Z","last_seen":"2026-10-09T08:14:51.091936Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/api/second_contract","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:02.414Z","timestamp":1791533522414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"POST /api/second_contract HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ntoken: \r\nthink-lang: en\r\nContent-Type: application/json\r\nContent-Length: 10\r\nOrigin: https://usdc012.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":10,"data":"{\"page\":1}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-headers: *, *\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cto%2Bds6Wv2Mg3tVLU8mPn9%2BkcrtPtHgeHMR18xCmwiUpDFBpCv5z2Zn4d7qY%2Fe%2B4lut3kB7x9P989641eve9UxwD8VwyOzBuBG6yyRf30FRkjCpeTA6KTVV9O1Ki%2BV7%2BKgpm\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a47beb047d16c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5504,"size_decoded":1949,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"42ccb2f68502279f98102f1cc2a436ed","sha1":"09f0fe6967700ca98cb05f7cbbb4929e13a07d07","sha256":"f87979b613a809c6869de8fbd649ba26a7a7f9e1caa85486483ef84ddaa32be2","sha512":"bea886f40da4178d53869b4ba6099c4610a597f35fc76794e6567c4ea77f1b2f2530299007e3d7390a275c2ef9690460d81040f98ae140b949b91d4ed1b94374","ssdeep":"96:3Vil5Z6/QIrQLaVI2DJeivqICPIWvpxIR+aGIM9RRI5GjI+j6IunGFI478IxLIEs:lifZ2mLGJeiibphaY9aGHmnG/P8f2m","tlshash":"35b19f5627cc7c35aa733547928b78ee85c9b147bdcd7fb94b8edbbd0865a19300a800","first_seen":"2026-10-09T08:14:51.094043Z","last_seen":"2026-10-09T08:14:51.094043Z","times_seen":1,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/static/images/home/recharge.png","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.750Z","timestamp":1791533520750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /static/images/home/recharge.png HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-ff5\"\r\nexpires: Sun, 08 Nov 2026 08:02:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 577\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DedTVj2fgSTziJBxBbsXoGTslK4sBNqAnKcbfEZHmu04q9HjzqPLhzotwcRZu236c8Lz33rZ5MOT52VWKuLSJibGjt39sJ8%2FqYLJ9rkOM0CJCApPQZVkQZaX3bSCrw%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47beaf8ad1b35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4085,"size_decoded":4890,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"05317ce08755ee6ff5f6ad591e2f93c4","sha1":"dfe3ef60a32cc18efae83dc8f9662d3fff48ecab","sha256":"b64b6514f61f995aa214c8230bf336ec3d042c80c51bcf05d440ab17c638aedb","sha512":"0dbb9ba8d3c8d006708fd8fa741892a7ccfa7a6174dc36509863a523e6e5ce939520ae0bfd348b0692707198e525dd646aed577d5316adfca93aadb3898bd5f0","ssdeep":"","tlshash":"cd816d8dcf761e45cab7969c268375a0bfc0467c93891d52bd9d403aa287f9d3233848","first_seen":"2025-08-26T17:30:33.391711Z","last_seen":"2026-10-09T08:14:51.097256Z","times_seen":18,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/api/second_contract","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:18.469Z","timestamp":1791533538469,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"OPTIONS /api/second_contract HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: clientip,clientipaddr,content-type,think-lang,token\r\nReferer: https://usdc012.com/\r\nOrigin: https://usdc012.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:18 GMT\r\nallow: GET, POST, PUT, DELETE\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With, *\r\naccess-control-allow-origin: https://usdc012.com\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VNo5HvAeTtDXjNA%2FOrhm2lpx5X0eE5o3mC4H3%2FvJlYogTpOet%2ByRkBNpQtvGTR8hSFLbBYDJc3NrmdovYp1Lp75uXvwA4VbCRe%2FMTaF%2BKyvnux7RoCbc6Tjf2OnJTvZPgaXO\"}]}\r\ncf-ray: a47beb6769bdc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":953,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-fab-D2Ib7dhh.css","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.072Z","timestamp":1791533520072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/s-fab-D2Ib7dhh.css HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 19 Jan 2026 08:47:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa1-c0f\"\r\nexpires: Fri, 09 Oct 2026 20:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qbqj%2BYAgU6fER0BujFqYm9F3opiO153TJjYrp%2BG784v1k20dHzwWEuV9FZtF%2FZUo4o7uPtQU4vS09QObJJUgxmMNvRfKuPhExAXoWFm%2FAo1zKZphaYJLlfcV38o91A%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a47beaf47a9e35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3087,"size_decoded":2491,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (3084)","md5":"1c85c6659c80c6d97d956a08a1be24f6","sha1":"6eb58b78742743606df302b9d1252b6b05970205","sha256":"62e879df98a95ea3c4c4afc1721abb54717a04f954886b352e4db25fd11c3226","sha512":"08e2714d05a5b244f3e9a2bfbd5d739bc0d2d47c9e28c65fec46657dd016ce985197c8bae38d16c5c3d8f1f96f6e1bc71999ccb420ad9a0903e4239438bbd548","ssdeep":"","tlshash":"4d51b83e29192572383fca87c590a9a44c15fd53d6a304cef01f0b1d4d9798b6598f7d","first_seen":"2025-08-26T17:30:33.369834Z","last_seen":"2026-10-09T08:14:51.099121Z","times_seen":23,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-banner-B1KD8OCE.css","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.078Z","timestamp":1791533520078,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/s-banner-B1KD8OCE.css HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 19 Jan 2026 08:47:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa1-81b\"\r\nexpires: Fri, 09 Oct 2026 20:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oUoFNGY6a8c3CsBCl3QK3e0aSe%2FbJbr0vY%2FSGdqAJSFQZs%2BRvAYItLdA361cWNtdiichhATV3fP9Sa%2FjgkfEYcYlTTMsJqMBnlR4r%2Fq%2F1pV2BEQlYSbjzhW46bXnmA%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a47beaf47aa335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2075,"size_decoded":1492,"mime_type":"text/css","magic":"ASCII text, with very long lines (2074)","md5":"12c9420c9ee1805a5a956e6b5f1f5c18","sha1":"ba25371146382376916a6195037fdfba8ae361bf","sha256":"73e4d379d8db798beafdd7dbaa4215ef0b9bfed3fa37057ce464b3072b699023","sha512":"facc5735d2b1329eb247c38cb34659843203756dad339dc9c1e92ccc99511a9f7f4b461fd0debbb236a8cf1ff9d791bfa7026b86803baf8d0246a1cda6ff322f","ssdeep":"","tlshash":"b841892cbc4d3f14957bc72615fa49cc0229b6beb723053d21e3b565aa0be822e02074","first_seen":"2025-08-26T17:30:33.376377Z","last_seen":"2026-10-09T08:14:51.100036Z","times_seen":23,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/storage/file/20240829/c8a54a8e1507db243f7f82d2389ae864.jpg","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:02.056Z","timestamp":1791533522056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"GET /storage/file/20240829/c8a54a8e1507db243f7f82d2389ae864.jpg HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 29 Aug 2024 08:06:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66d02c21-404983\"\r\nexpires: Sun, 08 Nov 2026 08:02:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nage: 577\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7OwKy1fxWmw9t6MfZkhbFMIXvSQEEMZFSIYBuUEh2GgtGkUpx4FuqE6MTY3hFwzYN919EzbKMQ4TrOUOiJ1VlgIQZv0wqjPImq4ruc8o1g%2FSxmOr%2BmwxhoOvhjP1qw2vY6Dl\"}]}\r\npriority: u=5,i\r\ncf-ray: a47beb00d96bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4213123,"size_decoded":4184718,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=682, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1170], progressive, precision 8, 4128x2406, components 3","md5":"3628590e439fd076e718128b79eec2c9","sha1":"78d457f474e247dab9ba72d2a393f31d039a8302","sha256":"12090d14a0d6555e1deb3283356ed3d534d723b1ef580a11962dec3ba5458530","sha512":"1fb6037b188e88133f22c77fc1bf88be9ef5bc317663af6faa2e03ebd3bdab75be765e3dbc14f168dd9dcc7b2c8dc653901952d6be3bad52d8ba9f5643f75daf","ssdeep":"24576:COVASdfupRjuXlLPqGvLkbSuzlnzhf/LEcEuCg:CO3dfI5u1jum6pzhf/vCg","tlshash":"7c25233ea240eb15e0c13dfa9c44fc41492366e87a562d4838de816a67f26d0dd1b9ff","first_seen":"2026-10-09T08:03:44.752082Z","last_seen":"2026-10-09T08:14:51.101546Z","times_seen":2,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-fab.CgLu8OR4.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.070Z","timestamp":1791533520070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/s-fab.CgLu8OR4.js HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-c5d\"\r\nexpires: Fri, 09 Oct 2026 20:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2F7jlNgpQB9UOQ%2FqsoL63ij4PCbT3Xx0NXOaulkhwM8KfabY31acJA4qmwn73O%2FRdMWD2w8e%2Bzn1iVVCPA%2FCAmR7lOI7esLZwGVRXBs9zqsdknE8ahHtprA7s6zrhQ%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a47beaf46a9c35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3165,"size_decoded":2036,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3164)","md5":"f708cd88ecdd073fd6032ba773e97566","sha1":"31f1726882c079c306b6818b33453adabfbf82cb","sha256":"17996911370bf9197e45301b0aa2da14b8f24efc1b4b8b3a6ee202fb23640c8f","sha512":"832b6fdc89904d98564290a6ff7d6d3c5e967bcfa542f4aab19e36abd99f32348d5e7b36aaecb3ffd337ae3996dc9df02a6e50234335a4b9dd7e611698e9f937","ssdeep":"","tlshash":"f05176063a0da0372687087e905446c1720a1e7d97f0362ff2f5f4b64e8191e62dcf34","first_seen":"2026-04-19T12:18:29.284918Z","last_seen":"2026-10-09T08:14:51.102278Z","times_seen":6,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/z-paging-Dz0lgrdA.css","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.093Z","timestamp":1791533520093,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/z-paging-Dz0lgrdA.css HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 19 Jan 2026 08:47:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa1-16b3\"\r\nexpires: Fri, 09 Oct 2026 20:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gZ5Jpkwiod7P5LBOd0r387tQijUs5TONTlQ9zWZoX2yW1XVldIE%2Fl4CEtJsZPaZq8Ha2bYKK%2FZecUOTsF5oYMvQiaOaD%2BDV6V%2Ftz65qfYPuo8NBtw251vynVsf9zSw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a47beaf49ab535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5811,"size_decoded":2101,"mime_type":"text/css","magic":"ASCII text, with very long lines (5810)","md5":"174f196dbdd575437914dabeae885229","sha1":"a1dce8d47bfaf62e197c543e9aedb3664f3f6bca","sha256":"a95bc9745d619306f65889023d4289d026702e73d0bf9bc45e5af4c8e56f508d","sha512":"b045262974cd61251dcd03d860374946efc593315765061de3be9176ea5fc74a88de76e45dd8976f1ee4c957568824eb1a0f0867ca38cfd21bbb47c3bb58969c","ssdeep":"48:kRpuakdxeHDeCa3z4NhamadBaJlLaJ5GaMoSa+J8vasCayagKarUEqFN3YA6J1jS:cYxeHCaJpxIFHHoYs2Fk3keCk4","tlshash":"3ac1232d716db0395577db6e60f49a6c5060e22bd72bea8c6343231bcdc76e539242cc","first_seen":"2025-08-26T17:30:33.429333Z","last_seen":"2026-10-09T08:14:51.105197Z","times_seen":24,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-input.B06LQ4yU.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.126Z","timestamp":1791533520126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/s-input.B06LQ4yU.js HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-1642\"\r\nexpires: Fri, 09 Oct 2026 20:02:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z7CeJ4MB4bR0kXG5XHvWuuMrYkiiGg1ie%2FE03eKvf0t7nBA7bLMEH3UIip8ssV3b0tP95SwoviwB3zI7V93y0O2QrwxyPIsvSp%2B2Sdxk4rPVObpwdn53NLy415pjYg%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a47beaf4cad435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5698,"size_decoded":2685,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5697)","md5":"97cc11e5aa9023a511961ee1fb97e603","sha1":"60ccfcb7a2c6919d0b6aa997d01f4e4c0e459f2a","sha256":"7f9512f04e96d5ae269eca3da17055b9b5a206e115cef08b736c7cf11c693971","sha512":"f88dc717f24eed3c78198d7e678275e5750e162d02a5b2a26dd7a62ab7453335825d0352198ab4ac8b95a16c568497a45030276ba7a8119b8e32b58d55db72f5","ssdeep":"96:f2gU3EALwgU9svecAntaG2USFKGiP9shkYre9mGeKCeOpd:f2gWQatUfcC9ze9e4d","tlshash":"54c1225a350cee232dcb8c4a6095424115251b8dde3078ecfbe671b5175fc88b2acf6c","first_seen":"2026-04-19T12:18:29.260975Z","last_seen":"2026-10-09T08:14:51.105979Z","times_seen":6,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/static/images/tabbar/home-active.png","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.594Z","timestamp":1791533520594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /static/images/tabbar/home-active.png HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\netag: \"696defa2-365\"\r\nexpires: Sun, 08 Nov 2026 08:02:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 577\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eYLSbGM1P%2FstKWU76l8Gcy6ESjM0ibxXMV8ev3YYa47GaLHLUfxwjKRgGW9HAueBv%2Fdy8YC21pmyoQELrgoaCWn9CcwiYA43brm7g0TDq50Yk1QlXaiptA2CI1o4Cw%3D%3D\"}]}\r\ncf-ray: a47beaf7bcbd35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 869\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":869,"size_decoded":1647,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"c6d27404fef95ef239c3280ba0a3fc62","sha1":"6a7e607fa16ac9569e551cb1568c9c96ecbbc6a0","sha256":"ff505dd65e1a13cd126bffa304da50f172050cdf9a4441e19ecf426784c9288a","sha512":"a6af8db057397cf5827f0a83f2e8d3fa7ac1efd4302dbbf4ff086e81000e3079a5149cdbd70e4fecb63ce1e27054130f77acb5a193c78a33452f508fa6672552","ssdeep":"","tlshash":"b3116385af35b672440a70efb6b17439c221100de1d012a74ab90961a9428aab086e5c","first_seen":"2025-08-26T17:30:33.35948Z","last_seen":"2026-10-09T08:14:51.107162Z","times_seen":20,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/static/images/tabbar/transfer-icon.png","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.598Z","timestamp":1791533520598,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /static/images/tabbar/transfer-icon.png HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-167e\"\r\nexpires: Sun, 08 Nov 2026 08:02:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 577\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6DGB6NRVLBGvZB%2F4%2FQzW1AgTpV04dn6ZgNhmYFE1fSvXbM16s%2F5FK%2FYdYHxKNkOUY5VvaN%2B%2Fx3C81v%2Fah70Khw496f9FmM1v5CzVWs6RtuHxkyeH8W9Kqq440a300g%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47beaf7bcc435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5758,"size_decoded":6581,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"79a4540df34c1810b2c287d1eebbc341","sha1":"d7a1de42bddf1b55de67878fc4a65695b1ed035d","sha256":"c00ce1823f739b5844eb607d6e6d8cfda06177227a431136e615fd754ac2b7cd","sha512":"e0707a4643e725529e23ed6fa351cb7234554c5fadc2b701892df2352669c51bd921463183a5dd7f9d52eeeb36b31b906a54a8970a4c916ea37e19481fee152a","ssdeep":"96:7a1FgEpzZ/BtKQe3FO9HMZGx2GNXyI8ghHoR+vJIn9yOzgIP8Jj2:+FpjB1e3FM2G9yb+v6yWgq8Jj2","tlshash":"57c18ff9b10c7155fd5d4c38085502fa9a608ae2430f4715b6accdfa1667d03aac68bf","first_seen":"2026-01-04T07:38:56.390166Z","last_seen":"2026-10-09T08:14:51.107979Z","times_seen":15,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/static/images/language/en.png","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.745Z","timestamp":1791533520745,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /static/images/language/en.png HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-3540\"\r\nexpires: Sun, 08 Nov 2026 08:02:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 577\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8xxQpSseLZv0NEVqNFlpdkDHrqp5V526CwmqySpL2vTGIhGROzsRXgJ22M51L9Lg2xbLiVjWdG1K%2BPiOjzRrPrPsF0OspeVWMKajZQgc5l4fQecsCCKpr4WB1pYTXg%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47beaf8ad1335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13632,"size_decoded":14443,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 8-bit/color RGBA, non-interlaced","md5":"006b7e7d7fde776f342748895f1ed3a4","sha1":"fd0c89c849c4c7a2ecd7ba60f77eaa1ed4386af6","sha256":"c669e7dc48949e9cd63b4d1e70edb8c1798231dd2479056c216a3db7231e9d32","sha512":"60bd0897054b66bcbfaa3fbddf19145c1f63bd868ffed331a40e37b169f1957a5138c6ec84d993eeb3c6fb5eaff30411578281c32341ded04fbf28a4383d1f69","ssdeep":"384:N6oGLPs9AQOZvDRfdpARWKyzlykMASiium50oXx5w5fFmVD:BGMOJZZKyzlaASZumWos5M","tlshash":"8c52d0dd6f184a63fbce03e7a959d98a303de3de19413efac4804618151c3966be3346","first_seen":"2025-08-26T17:30:33.397237Z","last_seen":"2026-10-09T08:14:51.109223Z","times_seen":18,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/z-paging.BxoOF5Km.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.086Z","timestamp":1791533520086,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/z-paging.BxoOF5Km.js HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-1a52a\"\r\nexpires: Fri, 09 Oct 2026 20:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aKwSwDqHKEr2TnBewzSQ9gW7hm98zgUMhxbDyx5RzENZuAO2P0FQFTB75KgvI5U7cWFrW2Jnk9ke6wTic0EBH4P2oUcEr%2FcWFc5%2BgzW%2FQ80d6fPosU0wXE7EyBznRA%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a47beaf48aad35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107818,"size_decoded":35120,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (64022), with no line terminators","md5":"3ef49370d79ce3dfcb710b53b25de405","sha1":"089a2d712478a98f82ca289a6c22203b01c369f9","sha256":"a6b6527f6f1a5761d34180d1624343fa0df4d45a4c9cb5e0cd2e38c9b588bb30","sha512":"3b9a1873f1f40991d46894db4f555d1ef048b27ecdbba57828abc4c47a27e055480b37479d01ca63c547cb2601dadd89e5b6b2f2dd998e5d9893e5867ef8a58f","ssdeep":"1536:H9kyOg+SJ3TQCIO6a103WSWo6BebaKfSzECftpD1i:H+PoTQbO6+SW2LCftpRi","tlshash":"68b32b923204e42a53caac69f81e330191456c4fa94e55acff69bcffd64cb1832d9778","first_seen":"2026-04-19T12:18:29.25148Z","last_seen":"2026-10-09T08:14:51.110074Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/ProjectItem.CQna40om.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.118Z","timestamp":1791533520118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/ProjectItem.CQna40om.js HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-1285\"\r\nexpires: Fri, 09 Oct 2026 20:02:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PsPj4mnqxftkgbOpz9Hn81d0581A6zMXKVvU8S%2FmDACXAED4eDbnrNweFCMHUzCdaxyBw09r8Jq8YEZ7vACWTVQGoShi1Za95BtQE7e4QX6Eg13Q2s4K4rxG9ksBAw%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a47beaf4baca35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4741,"size_decoded":2523,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4740)","md5":"f67da4ef080954b61e00ac30fc8161f9","sha1":"d542665079fdc590d7066d7cf1f07694d2665b5f","sha256":"7ed7d095fc1f2fd83e0da71631689bef2fe16663bc1a6ba7eeba4a77bc084195","sha512":"d8668989195dc9ac20227b418798e06c388586a08c0a724ade9ba8dd793d13f8cf1e5220c2dacbbbc83a62882b2a8ced6be344b7a756436b1bd6b3fbfa9fca09","ssdeep":"96:gTTbPy5jufGnxFkaTWdkZA222ft9ba2sNmFD:gTTbAlnxTTEkWSrbJscFD","tlshash":"c0a165013e2cf23b29c29a59b1ac45047367acccc92439def1f8a95e135bc6436ad76d","first_seen":"2026-04-19T12:18:29.28252Z","last_seen":"2026-10-09T08:14:51.11121Z","times_seen":6,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/storage/file/20241030/3a895fd03da52c5748f5cf21cab59a90.png","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:01.774Z","timestamp":1791533521774,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"GET /storage/file/20241030/3a895fd03da52c5748f5cf21cab59a90.png HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 30 Oct 2024 02:07:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"672194db-44c\"\r\nexpires: Sun, 08 Nov 2026 08:02:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nage: 577\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h4pKep4%2FqEhtjbEp78schPfriKRkkSEIlm1rMKuJGW3EzgVJR3gTPIOyGdSma9eqEeaux8wxaSn%2BfShGdIopP%2B3q%2BIBE0wQyAcrkmCkob1PE37167nTUDRXgROTlZOXrK55u\"}]}\r\npriority: u=5,i\r\ncf-ray: a47beaff1806c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1100,"size_decoded":1947,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"8658d5935ab59ee39d15c39226279d46","sha1":"27463866eb9fa6fe4b6d2bd2cd3d6fd88392cb43","sha256":"595a7c97f329934d40fa297958ccbb31d3cd101c2965b02a32a7c96fd49c9e11","sha512":"0179fd67c6baa7d46fba32986a8f6fe1586f2d9d3c57161bc33ecae609d6e608e8d9bfcdad0459bf41ba087843955a45ce5daca8ea223cb33138de6b4c8b13db","ssdeep":"","tlshash":"f211b6b64261eec7905c8a22da820b38ed2d9718f01c3f06ef73efb39225b045105d0a","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-10-09T17:24:31.111894Z","times_seen":7852,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/api/second_contract","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:06.455Z","timestamp":1791533526455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"OPTIONS /api/second_contract HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: clientip,clientipaddr,content-type,think-lang,token\r\nReferer: https://usdc012.com/\r\nOrigin: https://usdc012.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:06 GMT\r\nallow: GET, POST, PUT, DELETE\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With, *\r\naccess-control-allow-origin: https://usdc012.com\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=80noM9VbUPJ2hUte8LjjN5ZRjFRelJCIsojCA85jzHH8d4kPwK4aVtN4p%2FaEe%2F2NY1HXH%2FJZQnpGy%2Bm4nxyf3X9o6gJ4GmwxlQt%2FKXjilfbZNdL4zrL9jIvY4USQTnsoJStz\"}]}\r\ncf-ray: a47beb1c5ec8c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":953,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/api/second_contract","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:20.467Z","timestamp":1791533540467,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"OPTIONS /api/second_contract HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: clientip,clientipaddr,content-type,think-lang,token\r\nReferer: https://usdc012.com/\r\nOrigin: https://usdc012.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:20 GMT\r\nallow: GET, POST, PUT, DELETE\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With, *\r\naccess-control-allow-origin: https://usdc012.com\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F84bx87qErVO5HDqNJ4x3OEMRaOSJNsIjLJyxlNB7FCv6aH2qZ%2BU8%2FRB%2FDrDMRC07D0U0PdIfb2vME7i8ODdrUhppu6aXZRyMhTDouKrqMNnIyxtRnzYqoRrg6vLOELbn%2BGS\"}]}\r\ncf-ray: a47beb73e9f1c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":951,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/_plugin-vue_export-helper.BCo6x5W8.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.062Z","timestamp":1791533520062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/_plugin-vue_export-helper.BCo6x5W8.js HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\npriority: u=1,i=?0\r\nexpires: Fri, 09 Oct 2026 20:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\netag: W/\"696defa2-5b\"\r\nage: 578\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=607ZmEyft%2FQWImKkiOxfb4T25rBV%2F1nGhfmmuAqRXqxKQ0XeX9IljI9L4jf5u0q8XTDU3JotPRhx6KFz0QMR636OMhxM6Bs3YykSWmFnb%2BtgsLzkR7owUNG4zg2JWA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47beaf46a9135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91,"size_decoded":870,"mime_type":"application/javascript","magic":"ASCII text","md5":"41bf66d156aac38dbf7a45b53cb4db18","sha1":"4aa693a2afcc34b6a577e1bfc4be3ef5a458dce0","sha256":"a7dbb0eaed9de79041d555c4563be4bb0514099b8d169a2b548ab2d07102cb55","sha512":"64e1a5c2939052c93692338bf78b66723ae6673121d2915a9fb0848449e4b2657c1a31c8940bc7c9ec77554fd4c04ffae1b787297f0fba23983a987e85caee15","ssdeep":"","tlshash":"40b012e500824138432175c796f444649e08005c394756d144480d52c143080541bc3c","first_seen":"2023-03-26T04:51:44Z","last_seen":"2026-10-09T08:14:51.113206Z","times_seen":1880,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/mp-html-0ul9zqPJ.css","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.123Z","timestamp":1791533520123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/mp-html-0ul9zqPJ.css HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 19 Jan 2026 08:47:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa1-896\"\r\nexpires: Fri, 09 Oct 2026 20:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j2j7JDRpWsO7kpo%2F4g1lsGO9yulhsoGG88fMjxpQy44JgZQn1UaoctxlYe8G9pcfE9qW5wW2E5cWcPxsaPKXLyjObxBEpRyb6De16cknQGT%2BxdXo6fF08BvvyvIBAA%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a47beaf4cad135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2198,"size_decoded":1442,"mime_type":"text/css","magic":"ASCII text, with very long lines (2197)","md5":"39bf250660e96521f3a35e1ac976e1a2","sha1":"cc7d930bddc88105f7c3d6bbbe74db8f78c7cf50","sha256":"6ddc23e5714d16e58c5fa537109e04b7f45abf79ac4aa1b8f371631ea3520d75","sha512":"4dae98925cc55685a79033199037b61e7370685091480bb4e9c92c5f5a15176a092f868b8a531c1dbc5fa00b41c298d60dab95b8656f89c33954bc319f6a28b9","ssdeep":"","tlshash":"3d41412231fd68b052bfc83a2b84ae9555d77317a0b383f06d1009572d9b86666ca18c","first_seen":"2025-08-26T17:30:33.430307Z","last_seen":"2026-10-09T08:14:51.114115Z","times_seen":24,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/static/images/tabbar/mine.png","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.602Z","timestamp":1791533520602,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /static/images/tabbar/mine.png HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-510\"\r\nexpires: Sun, 08 Nov 2026 08:02:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 577\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FE6VJ6ZaDksVkm1O%2F4IWfjtMuU3ykSnI7FILlAWb%2FdRRwtQeIFw0bWKKKTJGKXJSkF9PAwBlMRGKlefeQtPec7beXp6nbHZzv0Owd1uGIJSkq5ZbuXL%2BlrDR63TsXA%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47beaf7ccc835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1296,"size_decoded":2112,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"dace18712982fa15d863e5f23e80d72f","sha1":"f2f3980d479b44fa5bf3301a27a5c2620a1e7129","sha256":"dc574a5baae2bd1a496a09ba25877a936abeaef569db6612f772f507c7dd025e","sha512":"32b25f6e54e4b478ed228af3af83be9eb7c9ee436ceffc9a72f9143c0b8b4af0b693660554faf0ffc4b0707b52b13fc41c5d604885450241d30530822c381abe","ssdeep":"","tlshash":"2e21c8c7f65574f2535c4c2f336909429d2313de9b2954738cd166a4ac487285985b47","first_seen":"2025-08-26T17:30:33.374175Z","last_seen":"2026-10-09T08:14:51.114902Z","times_seen":20,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/storage/file/20241030/b4b4f09fc005698ba91d26a49572f273.png","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:01.792Z","timestamp":1791533521792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"GET /storage/file/20241030/b4b4f09fc005698ba91d26a49572f273.png HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 30 Oct 2024 02:10:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"672195a2-9a1\"\r\nexpires: Sun, 08 Nov 2026 08:02:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nage: 577\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wDhb3IWoqcT8T0HbrgjERnIVuAj9zenAhIVO7jSbfmmNslQyD0mWsUpIv2E7hnQWFPagUbkdWus73p%2Bt6Tc3eLXOyDa1jYUSsstJIVaJqsvxJlPMWRktuXrNxw5Qle2XNcBN\"}]}\r\npriority: u=5,i\r\ncf-ray: a47beaff3816c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2465,"size_decoded":3281,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2d574c6f9c38368f9f06e63d29b18039","sha1":"e78af72fa9060c186fba34ede7185ba1192c5d36","sha256":"29010655d018a47cc829f855f1bfbfde38147c54323b7943a7acbdcada6e5f6a","sha512":"dc1917c2db6d640d3d6245ca9dfd8a0e59679e127f703fdbee4cd8c076c41f2d721ee3b225be5238004db770da66ce845e5360abe31662490abd0788cb04aed2","ssdeep":"","tlshash":"18513bdece5378edb4a74119c6609f4cdc41fc42cb85ee19a801b94a4c7d26017b271d","first_seen":"2023-05-26T21:25:10Z","last_seen":"2026-10-09T08:14:51.115781Z","times_seen":141,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/s-popup-bottom-BiGtqM4n.css","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.131Z","timestamp":1791533520131,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/s-popup-bottom-BiGtqM4n.css HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 19 Jan 2026 08:47:29 GMT\r\npriority: u=2,i=?0\r\nexpires: Fri, 09 Oct 2026 20:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\netag: W/\"696defa1-276\"\r\nage: 578\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J1bo7UDgFNKJLpUfGIWIyjo1MdAkOm1uT96sqCs%2BAcIVL80wG2%2BWs24m08Nkal5RJq%2BuFEiY0c1Xq%2BAj10OI31utJ17UKfSYnmB55FUerdvjS4QBAERLV%2F%2BDxSZekA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47beaf4cadb35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":630,"size_decoded":1089,"mime_type":"text/css","magic":"ASCII text, with very long lines (629)","md5":"795a7b7857567358cc4f8e630fd824dd","sha1":"687095a0389bcc5580d15fb0ec22ceb131705f84","sha256":"81d2b6e508e695666536446d38bcee719890675c8f4483a5ecfea69dd117b84b","sha512":"4369ca94ce84ebe80b2e9affe1519e7e1de2f166f24f4bc6803a666eec3af351341f0293e777fa0593fbe95a27021e28e38ab0214c92ed2ebfc13711f81730af","ssdeep":"","tlshash":"25f0282879823050687fc75af990ee44423da689fef609de22d516854f0bdca78065d8","first_seen":"2025-08-26T17:30:33.378514Z","last_seen":"2026-10-09T08:14:51.117122Z","times_seen":24,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/api/second_contract","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:04.445Z","timestamp":1791533524445,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"OPTIONS /api/second_contract HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: clientip,clientipaddr,content-type,think-lang,token\r\nReferer: https://usdc012.com/\r\nOrigin: https://usdc012.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:04 GMT\r\nallow: GET, POST, PUT, DELETE\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With, *\r\naccess-control-allow-origin: https://usdc012.com\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=96Jv2sPdnOxs%2BZzIEmWoCbdMEUvL9FiEDCb%2BoTD9pFxpvNE3QMkMFXbBFAjE0YREgUfz%2F%2FUUPgpgFwANs2%2BXHFfXu7Hq3iCsDzIYPoWfYv4m27lnVkx8VqShGYK0e56023Ky\"}]}\r\ncf-ray: a47beb0fce75c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":953,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/api/second_contract","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:24.468Z","timestamp":1791533544468,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"OPTIONS /api/second_contract HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: clientip,clientipaddr,content-type,think-lang,token\r\nReferer: https://usdc012.com/\r\nOrigin: https://usdc012.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:24 GMT\r\nallow: GET, POST, PUT, DELETE\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With, *\r\naccess-control-allow-origin: https://usdc012.com\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pQNYAHtKpc9JwJVqDekPVR1WdFWREQ1Tiks9sHX%2FgLjZk3LtuvaH%2FFP3GWCwOzMdjXEBnrDYtZQ7rcCP29nAos%2BPYsONQbW%2F%2FkqfTUzzMEg1%2BzA0EpZMcL2EVmlftf2xHXNu\"}]}\r\ncf-ray: a47beb8ced9bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":955,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T19:29:41.793778Z","times_seen":18979539,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"125.74.108.43","port":443,"asn":141998,"as":"China Telecom","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc012.com/","date":"2026-10-09T08:11:58.785Z","timestamp":1791533518785,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.51.la","organization":""},"issuer":{"commonName":"Keymatic Secure Domain RSA CA G1","organization":"PKI(Chongqing) Limited"},"validity":{"start":"Wed, 01 Apr 2026 06:48:26 GMT","end":"Fri, 16 Oct 2026 15:59:59 GMT"},"fingerprint":{"sha1":"F0:4F:0E:62:84:89:BD:2B:8E:53:1E:AC:20:70:16:C2:F7:E9:C1:C0","sha256":"54:9F:ED:D0:8F:D4:0A:5F:31:95:55:FD:E0:E6:13:F2:09:8C:39:E1:01:31:98:FA:1D:DC:20:CD:20:19:7C:F5"}}},"request":{"raw":"GET /js-sdk-pro.min.js HTTP/1.1\r\nHost: sdk.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 09 Oct 2026 08:11:59 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: openresty\r\ncache-control: no-store\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nvia: CHN-GSlanzhou-CT20-CACHE27[23],CHN-GSlanzhou-CT20-CACHE27[ovl,22],CHN-HAzhengzhou-GLOBAL3-CACHE111[ovl,1]\r\nx-ccdn-req-id-46b1: 1dd790cc25b6bed07ac3f2d3635deb90\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36115,"size_decoded":36510,"mime_type":"text/plain; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35899)","md5":"b8a41c9449b73e8ba0224c6be1f0b7e8","sha1":"33d79319d4110bcf5c44c36f7dd4a291972ac546","sha256":"52079c09a7355f4ce3af750602ebb9aebae8238583601f8a06268eecccf13565","sha512":"472d0395a65a3ade2d215559b196a88ffcdacde3ac0f573eb8663b524f201d72c9339bcacbc198d82452a0ac367c0efd407b12795943cdd2755d95a8cf71b977","ssdeep":"768:swetbD3SkE+a/l1jaKUiQU5eqEh9GMXBOXAA/EXBeJMlbJfuPT:BetbD3SVT/3+KUc5eqEh9GMXBYEXBeJ7","tlshash":"dbf23d9577c0317cc3c783ea362b501ae1a69e910059a8bcf345f6907d34e56a37fba8","first_seen":"2025-03-10T03:40:31.536734Z","last_seen":"2026-10-09T17:12:22.649838Z","times_seen":99970,"resource_available":true,"data":null}},"time_used":949,"timings":{"blocked":-1,"dns":3,"connect":174,"send":0,"wait":424,"receive":0,"ssl":348},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"sdk.51.la","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/pages-user-index-userBoot.Ncjbscbp.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.058Z","timestamp":1791533520058,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/pages-user-index-userBoot.Ncjbscbp.js HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-75f0\"\r\nexpires: Fri, 09 Oct 2026 20:02:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KWU%2BIkQoyDPzhja20hQuOCA%2FYxxYw5eKVifyBwbmLzRKPOsay2Q%2FjrB4Yg014ZZZ%2FVRkPTMMGhMCxhrbzRCm%2FtoFhYxzI8nAmIUZnrvKx%2BoFPAB7um6tsY0Bfi9nfQ%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a47beaf45a8f35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30192,"size_decoded":9060,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (30185)","md5":"6d618c3a72ad4ace586c8fb5ca955672","sha1":"b9e6355579e509573e8353c0e58bbda2fd3eb107","sha256":"c6d55896d7376eae6e7bd2097609571cd28046b5580a092af8b115419f065e43","sha512":"e12347b6564593dac7c290cdd39aa7b9c743f149324c3ab6d78fd6d1d26e566c7f9ee21d4b45abb90aa3df317921a282e560b235e2e05700aa87703479fe5fbc","ssdeep":"384:S5Pbdw3JNaAYHdZtzeul63aAq5Pt7j3OWpdmalbuFB:6dw3JNaAqdZtF634l7LffuL","tlshash":"e0d2f8053f2ce1766f93a528d0da0811b06758ced545f89d73f4cd9e02eac846abe37a","first_seen":"2026-04-19T12:18:29.262989Z","last_seen":"2026-10-09T08:14:51.11873Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/LoginRegisterModal-C0MgRRGF.css","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.132Z","timestamp":1791533520132,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/LoginRegisterModal-C0MgRRGF.css HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 19 Jan 2026 08:47:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa1-801\"\r\nexpires: Fri, 09 Oct 2026 20:02:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b7Rrk2T5XpHV%2FTCkfDqH6wBWH2ikiOQKozX40oqQBvs7NN%2BPNqN6BX%2F1qTagaay3qW%2BisGdLYKuRd9th9Na2IatChJDUzNfpQ6QvyAWDO0F6OGkqza7ze0Edv4sssw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a47beaf4dadc35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2049,"size_decoded":1479,"mime_type":"text/css","magic":"ASCII text, with very long lines (2048)","md5":"eee85bae3cd742e5e7b74f0883e85942","sha1":"1c2f3bc7dc76ba102bbd309157c435c4942e3a53","sha256":"150da1f7dcbee84fb90720ef16ead3130001ad4936917a2982e1f39c9eb98263","sha512":"a9998ba400d872f30018580a288af850c0807dc103c5b8ba129bf107652604618668db597a6fe1c6eff62937c096f76d8f4b0cb94b5a73456e56c3fa4b44ec46","ssdeep":"","tlshash":"d141b85cf9ec1899107bcf2658f18dde1522a3fe921117bea5f3a0348c4b2832d3e198","first_seen":"2026-01-04T07:38:56.361717Z","last_seen":"2026-10-09T08:14:51.119641Z","times_seen":18,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/InputPayPwdModal-CwjLcKcJ.css","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.152Z","timestamp":1791533520152,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/InputPayPwdModal-CwjLcKcJ.css HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 19 Jan 2026 08:47:29 GMT\r\npriority: u=2,i=?0\r\nexpires: Fri, 09 Oct 2026 20:02:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\netag: W/\"696defa1-10e\"\r\nage: 578\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n0wL%2B2J6rp0CcYGP%2B%2FdUTejaL3lEgqvwdiH01dRXowrspm7Ho3w%2FU6gHO5tX4MAZRqGANV0YCGL23kOsb7zTis1OBLCo1hTmfcyxTkI%2ByzuXgcgtKo19o9Zi18tU8w%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a47beaf4fafd35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":952,"mime_type":"text/css","magic":"ASCII text","md5":"ef857145a2387fa7f0b696d9c04e7309","sha1":"e720751d4d447040d3d1c52ccad4e080be11828a","sha256":"9c5c2bca02b37dc58e30ab5662894d521eb4d8f1c6b509e9b7a0f7a26cb9e67a","sha512":"481f8aafaaed51b3a6c35f90eec289047c3b99c94ecc569f7d430243581db234fb8654f63922025ccbba7b6b50928a94082ccda6553169a76f50556f8233d148","ssdeep":"","tlshash":"56d0c22fb8cd8050dd7fce222498edd98833336b6788148e2cb619a2c9533062221888","first_seen":"2025-08-26T17:30:33.409471Z","last_seen":"2026-10-09T08:14:51.12562Z","times_seen":24,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/userContract-bOONBziD.css","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.159Z","timestamp":1791533520159,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/userContract-bOONBziD.css HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 19 Jan 2026 08:47:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa1-1fda\"\r\nexpires: Fri, 09 Oct 2026 20:02:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OTMrWv6TEIj5SjACIqUhFAXlSyGYKvn0M3HXxA1UqarL3pUqnt2gWEaRmdn5v25Ls2VpSwKEyLJcjnLnNmNy0P9sjIVFKrwHZrk%2FI0a76J2KtTGm5ebUJwYTyuRjBQ%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a47beaf4fb0435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8154,"size_decoded":2732,"mime_type":"text/css","magic":"ASCII text, with very long lines (8153)","md5":"83b83bb797c6007d7f03d48704a72001","sha1":"abc064e41cd4a625c49efc0dffed7848950a976b","sha256":"ca6966fe263d225f57a6a5c2cd8cc06958e3af709b5c287f24e0c0decd3027c8","sha512":"174f97c0a0baee5f6c03a2aab44b0d5799daf8b8b8fe9d77737f987e5395d6a42a721bda78551fc0fffa4b2d1f486ae887f8285d9bba9ec716db6a4638ac4dfb","ssdeep":"96:wfPCD9/4DoLBp34pMMJJqOum8NvupjI/nWpu5Hf7fApa+e1F:CNsD4pMoqJm8NGpjcnWpu5/74paV1F","tlshash":"7af19559bd0d1419e2fbd20a64f05bcd0624f76bf30389dc6253192acd9769b2a12fca","first_seen":"2025-12-31T19:20:07.049418Z","last_seen":"2026-10-09T08:14:51.127439Z","times_seen":19,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/assets/pages-user-transfer.DcAqd4yP.js","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.160Z","timestamp":1791533520160,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /assets/pages-user-transfer.DcAqd4yP.js HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-1640\"\r\nexpires: Fri, 09 Oct 2026 20:02:22 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 578\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zVR5jNUamR%2BMdPCGwOG6FlENyDs43%2FtVQqVc0ykTGZ4wJGGLXeIuv3DQ3qdfZ2p18x%2BuDfmjXVwUVu8V%2B8oYwCaNTWoDlWrxMESa%2BpStmRM1YUlhEVm5W3PA%2FXdCyg%3D%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a47beaf4fb0535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5696,"size_decoded":2832,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5695)","md5":"f402be9dcbfaac3a9602ad6fec4fe7b8","sha1":"307a297b2adb01a806b7193c58a5b92c856daf43","sha256":"088bc33b6f6cc10a703206d711d68e8caeb343eaeaaf5eb369102c9d7060289f","sha512":"30dbb15187805b8a1fed0c622785b2dd02f56cf04cd2843bcd32e34cac7e8697e967648d141f7326a8253bd46fc0a855dc20d4dcb8f4abdcdab5af91d9002c5e","ssdeep":"96:JBgwrRVZ5u4PSajRftJ02usxc3W+Ucy3OwE+JcyI/tEcD5IOhEuNyosUk:vgwrZ5xjH4YOkoJ5GUk","tlshash":"1fc17405b91c89202a9a7278e0d94d02717cfdcde1407a5cb2f8196e13adca909f9f3f","first_seen":"2026-04-19T12:18:29.262089Z","last_seen":"2026-10-09T08:14:51.129083Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdc012.com/static/images/tabbar/customer.png","fqdn":"usdc012.com","domain":"usdc012.com","tld":"com"},"ip":{"addr":"172.67.193.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:00.779Z","timestamp":1791533520779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdc012.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 08:12:56 GMT","end":"Sat, 21 Nov 2026 09:08:56 GMT"},"fingerprint":{"sha1":"20:17:C6:7D:E0:7B:78:61:71:6D:63:75:A2:26:D7:7A:D3:94:80:3A","sha256":"92:C5:0C:A2:42:A5:F5:FF:01:F5:C0:66:64:92:E0:82:75:AF:26:BF:47:B3:D2:4C:C7:9B:95:17:53:78:4E:EB"}}},"request":{"raw":"GET /static/images/tabbar/customer.png HTTP/1.1\r\nHost: usdc012.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nCookie: __vtins__3JnRFYkERItiZhCQ=%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D; __51uvsct__3JnRFYkERItiZhCQ=1; __51vcke__3JnRFYkERItiZhCQ=c255dc44-f9ac-5bc0-b56e-9ee0d01530c2; __51vuft__3JnRFYkERItiZhCQ=1791533520010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__vtins__3JnRFYkERItiZhCQ","value":"%7B%22sid%22%3A%20%229352b2bc-b571-577a-b67d-3b6245814612%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201791535320007%2C%20%22ct%22%3A%201791533520007%7D"},{"name":"__51uvsct__3JnRFYkERItiZhCQ","value":"1"},{"name":"__51vcke__3JnRFYkERItiZhCQ","value":"c255dc44-f9ac-5bc0-b56e-9ee0d01530c2"},{"name":"__51vuft__3JnRFYkERItiZhCQ","value":"1791533520010"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 19 Jan 2026 08:47:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696defa2-188f\"\r\nexpires: Sun, 08 Nov 2026 08:02:23 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 577\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vI0ISdVp0shWRERi5XgR5E2vSFqtXi85HRjdsmZUMuDDKfX9DUpmpmepfpCpEvrjOyo2qcTwppOExYGQZjuHxdKVDnsL41kW8HTxq6FrqZ5Gqbh1wfhoI%2BiufvMh4Q%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a47beaf8dd3335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6287,"size_decoded":7098,"mime_type":"image/png","magic":"PNG image data, 124 x 124, 8-bit/color RGBA, non-interlaced","md5":"d3ebc8acc94fa485045049aadf40a45e","sha1":"7da056e27d5657d96c3b8d9d714f6625ec87917c","sha256":"1efb8c5097407b7f24b202e04d22b91bcd111fa335df306f6e72aa463104572b","sha512":"576568733bfb87420a44a70bd3ada580fbf3335b09c902d89d9faf2f4c915075229ad96d2a5f9cfccaef14a04ca30ab0de300789b4c3ff654b2b53dc1d7cd86c","ssdeep":"192:EAxt3ZnM1dA8sFpeC5voUdlWenVgzKffHNsJl:Pz3dcd5sFkCGegzMNyl","tlshash":"20d18ee11dbd2a5a586959377c158474ebb6b1ad879373cc2e8bd1d8303021a68409b9","first_seen":"2025-08-26T17:30:33.424681Z","last_seen":"2026-10-09T08:14:51.130381Z","times_seen":18,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"usdc012.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apis.usdtifa.com/storage/file/20250219/ae48f4d3d75956640f4129e923950ba5.png","fqdn":"apis.usdtifa.com","domain":"usdtifa.com","tld":"com"},"ip":{"addr":"172.67.154.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdc012.com/","date":"2026-10-09T08:12:02.049Z","timestamp":1791533522049,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtifa.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Oct 2026 06:37:19 GMT","end":"Fri, 01 Jan 2027 07:37:09 GMT"},"fingerprint":{"sha1":"FB:20:A0:AD:1D:35:0C:7F:D2:51:E0:62:63:6B:75:47:30:6A:67:73","sha256":"62:7B:20:62:AA:2B:1A:5E:C1:AD:2A:E4:DF:6D:0C:30:ED:52:24:27:5D:6F:1A:85:72:7B:92:69:C5:97:14:05"}}},"request":{"raw":"GET /storage/file/20250219/ae48f4d3d75956640f4129e923950ba5.png HTTP/1.1\r\nHost: apis.usdtifa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdc012.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 09 Oct 2026 08:12:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 19 Feb 2025 12:55:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b5d4bc-4622\"\r\nexpires: Sun, 08 Nov 2026 08:02:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-headers: *\r\ncontent-encoding: gzip\r\nage: 577\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E5oWWdmetHqsBMHUYt%2F7fDzG86TylaagdB%2Fen81iLPOHewwE%2B8mJJSOwWVuMLJpgQRhKXqoXLiR240FJomZn7vNiY5QcTFIA5SaW3y7e86uYBiq5bVlGKB%2B7gg%2BcgRvXeidG\"}]}\r\npriority: u=5,i\r\ncf-ray: a47beb00c962c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17954,"size_decoded":16492,"mime_type":"image/png","magic":"PNG image data, 917 x 233, 8-bit/color RGBA, non-interlaced","md5":"010936390f20b53cdae8b6ee79770c9e","sha1":"bfab094b76b0e5be50cb313ff66e887b8846ae38","sha256":"a3429f13fc5dccbc133c2887f42596035fd2cf5c7fe1feefaf4e1e2ae46ab9f6","sha512":"a8402d0eedc1e1c3b016c662cbf4cc90c2b9501b31530ce05068ae1911fbddaf0021b4ba0c309eb47eb3cd5924472b783d2d8e1aafbf735c2a491bd2ed80ad6e","ssdeep":"384:M7njSiSF0ndNZ++CiWv0Dyd/ZN4vDetaoSzJJg4qbbTNHZf83dUd2:M7VfJWsDyu/lJJg4qbH839","tlshash":"d082ae58ee32ed705fcbaf04b9ed7121da36d69082859e7095de08098df103ecd41adb","first_seen":"2026-10-09T08:03:44.600134Z","last_seen":"2026-10-09T08:14:51.135928Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}