{"report_id":"9f01cbfc-face-467e-bb70-f64ae18aba7e","version":6,"status":"done","tags":[],"date":"2026-04-08T12:29:03Z","url":{"schema":"http","addr":"usdtcheck.us","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":0,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"usdtcheck.us/","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"title":"VerifyUsdt","dom":{"size":82241,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28413)","md5":"0fb1f991554bb4f36fd5fbc0289b1d68","sha1":"f379f6bfc9329db4ca8bb4ef8f82f65ba226e468","sha256":"c6c5b98702688d2de61c71777b8978afcd7028d4e3dea948a3b5cafeb83a100e","sha512":"c7c0524a28d597546f0ba06e5c4b1f268f03104742f0057f0762f35a7960cde17a271704174a806bac538b46a287df357976f42a26933b8cb5eaaf9cdf39cc9b","ssdeep":"1536:H42M3BO2apqiW1hRM/7FImVLhdyoATaIiNndt404LNmCjPNq:H42M3BOJf3yoAeIOrQNmL","tlshash":"4283f821781c1829762b0756f48a7b356951eb12d6036efab0e0d06c8fc99fb347b79c","dom_hash":"domhashb6e1699393e4e9b4eab9f506d1a975dd","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"usdtcheck.us","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":0,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-13T12:29:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"usdtcheck.us","ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"domain_registered":"2026-04-05","domain_rank":0,"first_seen":"2026-04-08T12:29:06.864018Z","last_seen":"2026-04-08T12:29:06.864018Z","alert_count":65,"request_count":65,"received_data":1350579,"sent_data":28006,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"imagesLoaded","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Material Design Lite","description":"Material Design Lite is a library of components for web developers.","website":"https://getmdl.io","common_platform_enumeration":"","icon":"Material Design Lite.png","categories":["UI frameworks"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.145.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]}]},{"fqdn":"fonts.wp.com","ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":171612,"first_seen":"2022-11-28T22:42:34Z","last_seen":"2026-04-01T22:27:36.462761Z","alert_count":0,"request_count":3,"received_data":147033,"sent_data":1629,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts-api.wp.com","ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":166248,"first_seen":"2022-11-28T22:42:34Z","last_seen":"2026-04-01T22:27:36.554948Z","alert_count":0,"request_count":2,"received_data":33808,"sent_data":964,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-04-05T22:24:03.651898Z","alert_count":0,"request_count":2,"received_data":980573,"sent_data":867,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-04-05T22:35:26.697622Z","alert_count":0,"request_count":1,"received_data":760964,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-05T22:20:18.514512Z","alert_count":0,"request_count":1,"received_data":1362,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"usdtcheck.us/","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b612d50a21dd6e36963ed5952e6bf50","sha1":"8e367e670243e92c3c4fda96bad6bd77b6f17cb1","sha256":"ad328aa249176ae49a8811a5bc8a84402f2763a4630f2a893b50a2e10365357d","sha512":"8eed08f150fb13fa2e7967278278542f5177f8b923aaa2d84e80cc70095b9a8893f98105998a00b7d8d7e47920988e303519028336908ff5750627d28c070226","ssdeep":"","tlshash":"2761b79a37753887317715d2aa2f0e0beb7658361688d034c9f9b7541cb24a3c379e49","size":3255,"data":"","first_seen":"2025-09-02T12:34:09.978831Z","last_seen":"2026-04-08T12:43:35.268242Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"eb081358ef9c92510ce74a9bfc12a76b","sha1":"043ee69d6f6dab7a4455b73ab4de5e8c062aa23f","sha256":"095b9804f7dec52c2a6731c8d49ef355dbc11e0416c4357f6ec45b8d1abc7bc9","sha512":"7beced80a66f2437257b86327c7b6f451bf652183c6c4604d68d110730fc0f1439bda5827c56868a27380e25ed5fbd0b712f4869b7c8ddda9b8cfd88eefd3ed8","ssdeep":"","tlshash":"02d0222005c8088292a003e85e2814f280de63998884d1cbe9eea0be5b93411217e601","size":195,"data":"","first_seen":"2025-09-02T12:34:09.979994Z","last_seen":"2026-04-08T12:43:35.268939Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7ebde1c914338f3a2ea51eeb90163a47","sha1":"5f8a3d139abc761009ed13992ef59f6976cbdf50","sha256":"7f1f7ffd8cacc31f8a98efbd0644040d0aed47bede323750b776e0ab5fb38554","sha512":"66b4e0db562c6a14ab5f27f93ac322ace06bc38effd0d702ee215fb79fc20e87ec176c0d8247759db1e157f6af034a40c7dd5fd77d7cc87c1acb34599aa00945","ssdeep":"","tlshash":"44d0957411831c7641fb24003787bf457192231501516d314cd99246163f9079555ccc","size":265,"data":"","first_seen":"2025-09-02T12:34:09.980969Z","last_seen":"2026-04-08T12:43:35.269329Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ebced974460ad8b1f168f7bd6601ce3f","sha1":"9fdd01445067b323c1e5e3efef02d2e889ffe2f2","sha256":"a38cd852ed2bd05d8578772d5628fe44b62810ad4881a5aa1a359d84b76e7980","sha512":"cbfd5e97c6fa75afa0922e86429c2ce426144076ebfc40bea4b6b6302133bf121b14ef59167744798fbcc963d4eba86e862a525a29f282c4e951df8aeca6f4bb","ssdeep":"","tlshash":"6fb0126f10c021338c5eccc5588080972824227412017302948cd412843ad400c273c8","size":92,"data":"","first_seen":"2023-03-07T01:11:23Z","last_seen":"2026-04-08T13:12:00.255665Z","times_seen":13015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=GT-KDZBSBW7","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4437924fd2e758a1de5cc49cf7b966cd","sha1":"79d2adb4326224a28d6333690296061bb2426107","sha256":"14dafcfb6e85826d4f989ef582f8a69733ac873c34be84358363223aa824f5ff","sha512":"0e208ca6780548cdb69662016844ba1f97239b038fcb37fda9e8a27eba8f55f56d9b594e8c02cde6d8c6ffe07aa3a504b2257dd02294e0e0742c0658321ad611","ssdeep":"6144:NUcujG8PtgiI7W4fHX4zpWAg8OUW3Ub9wbocoiI0lvWYSCo5:F8PtgjtfHX4zpWZ8R2v4","tlshash":"1ec40acfb3c67422529af478943f01cba97b24e2b45cc8aab1d9cce02d3455a5167f78","size":547276,"data":"","first_seen":"2026-04-08T12:29:11.276694Z","last_seen":"2026-04-08T12:43:35.252797Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@5.7.2/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","size":760171,"data":"","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-04-08T12:43:35.253791Z","times_seen":3116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"83bf64d954260fbad0b6dd44a61a28de","sha1":"5ef0d3d39a4fb066ded0ec0796035686ce8ad68e","sha256":"9d92dcec128203d241e8bd8b979c2672d64b7050974463fae68a63a67e23e16f","sha512":"0906872ba37937758a59128824789fc0f3bbda8e40711c4b40fd3fe05c9983c21d61e1d82d7f212bc2af34fa41fa8b6cbea20b12a1aac4aad3fbd806e0f219f4","ssdeep":"","tlshash":"b4019067920c5227142727a15e5e51cf3a3f115355870cb75c5d8a10fbd9873061dff8","size":731,"data":"","first_seen":"2023-11-16T19:52:36Z","last_seen":"2026-04-08T12:43:35.270448Z","times_seen":1121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4176554e5e21d8c2d362bd449fc9bba","sha1":"1610dace84b274ecab38da0b2d1d4d0bf737f17d","sha256":"064ac5b1254eb20dd23fac3967e238be647a4a6e6cba5122abc8f16ea064ab6b","sha512":"0e0beaf270306c248c27b8689e2ca2718ebee4a6aaf5c0b91aa37191db53c9f9b4de5c53c5087bbbfdbb91d241968b4eb37000a53d0fe7c707789acb86e3774b","ssdeep":"","tlshash":"a2c02b88231a0cb141f72741cb3fb600f0023354a8f19935483a23084d20f23d744860","size":155,"data":"","first_seen":"2025-09-02T12:34:09.983202Z","last_seen":"2026-04-08T12:43:35.271026Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4fc7a613a5a843131f1d84d91afd12ea","sha1":"780f341b20c32f03cdc5b63950c16f0f9686bb0b","sha256":"b5a83333afe5aff744b07ca96766acc9cf5a92759585da98dab848891c60823e","sha512":"52343dcb7501d86d837c6dbbbc6792c6083c5c6aec924bc6681f9a5e8b7fa3ea6979f8d838eefdc3c2d91ad3d92d9d22a51dbd2e1d0815ac8f5724f08b793d3b","ssdeep":"","tlshash":"d32132b757d308b3c1b4125a49276377522ac1b0e30978bc2acf040ae3dd9d6ec2a1a2","size":1442,"data":"","first_seen":"2026-03-28T05:07:38.377741Z","last_seen":"2026-04-08T12:43:35.271669Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"usdtcheck.us/js/web3.min.js","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:42.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /js/web3.min.js HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-08T16:06:31.589105Z","times_seen":116904,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/images/cropped-FS_Icon%404x-32x32.png","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:43.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /images/cropped-FS_Icon%404x-32x32.png HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Apr 2026 12:28:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 882\r\ndate: Wed, 08 Apr 2026 12:28:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":882,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"2eff8e11ba3cae1a712e786e02cbcc40","sha1":"46f0a34bf2df18c9dbdc05d6435d3ad1d75c7752","sha256":"158386c547d84b1741b5bb9c08605c32e4a0864edd12d7aae814766e4b78fb9c","sha512":"cbb7855045ebf055c626c66ab47ba06e1e3e11b0abfb7bdf0bf508b379f2d6654e5a679b86d21e44aa6b851cf7322748204cab2ef2bbff24af979ad53ed406d2","ssdeep":"","tlshash":"571196f643d0cd53429149ec562ccd44866e5c1a293d1d57e8ec067423f1e7b282c4cb","first_seen":"2025-09-02T12:34:09.957705Z","last_seen":"2026-04-08T12:43:35.266622Z","times_seen":4,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/css/styles.css","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /css/styles.css HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Apr 2026 12:28:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1144\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2894,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3fd2afa98866679439097f4ab102fe0a","sha1":"dbc9c4139e49d0d9fb41b7191aad1a2db6c555fd","sha256":"ccd31ffa708d025833f954b3e0560cedd58df9a0d2706b2ccee5f501c5b2467b","sha512":"82811ef42abd80cbebd4a74d35475fc3871478fc25a486b08bb7e04921b7824db56c56b2191e9ab56a421552b483a2e64f966396711e5f248afae9d1ded22cb2","ssdeep":"","tlshash":"12511164660028504bff92d77ea9db047b6e7481ce1faf97b0c21a3c5b786851223e5e","first_seen":"2023-11-16T07:59:28Z","last_seen":"2026-04-08T16:33:07.924736Z","times_seen":72914,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/css/flickity.css","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /css/flickity.css HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Apr 2026 12:28:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8113\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":39865,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (39865), with no line terminators","md5":"1783fb16189f6a859a0b1c967772e86d","sha1":"4d5247d23d2c539b7c8ddfb76c9fa8afe56fb6cd","sha256":"8cb9bc9cf917908e89867751ad1e3d4500d1aa893ac27d4d7b9fa9283beabb23","sha512":"d3e0db985a1ea28e41d23707520b955ccff9fbcf1efcdaa59b84a84e5f52d63cf35eea746b55e31d0558e9e9c5a24311b609b7fab493d6853b318953ac049d1f","ssdeep":"384:xbNGjQG1glb+wWp/Wix9nNxoAHqTVkEVpEgJPY70:xbwjQG1glb+wWp/Wix9nAAMkEnJPY70","tlshash":"af030e5d2cac3e08183f77045cd4f154711af822a66209e6f2976c6ea5ceec970af5ce","first_seen":"2024-05-17T10:58:31Z","last_seen":"2026-04-08T12:43:35.262403Z","times_seen":310,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/css/core.css","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /css/core.css HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Apr 2026 12:28:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5072\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23134,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (23134), with no line terminators","md5":"07e3e5bebfd51391fdce8f22e2227f60","sha1":"e68ffe20de185ad1b4bf46c2d8bb958170e34545","sha256":"0ef88a12bb81ac87af9f1264db481ff55b3d81511c4a6b51f0c331b64a69a71b","sha512":"bab7b9859691ac69163f356b8b6851272bd2c1f4ca0b95d344213a539540f25ebf30f58d8d8eb69c5c00e558325cbb2650c5cad7e14dcdcb6715cff70429b0bd","ssdeep":"192:x5aS2lGRGqabW+pRJU4rXN4zbd5lslrkj9Q+b05IZraCjy+kRbbzWl/Zujdbb6B5:WZW+pRJI67Ssa","tlshash":"d5a21c82f8935bec2e93458565c0d7a1072402c6ef3b7cf57dc0fa8c97095af31a65aa","first_seen":"2023-11-20T19:43:21Z","last_seen":"2026-04-08T12:43:35.264919Z","times_seen":894,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/js/js_composer_front.min.js","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /js/js_composer_front.min.js HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-08T16:06:31.589105Z","times_seen":116904,"resource_available":true,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-08T12:28:40.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 24 Dec 2025 18:17:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 41003\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"imagesLoaded","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Material Design Lite","description":"Material Design Lite is a library of components for web developers.","website":"https://getmdl.io","common_platform_enumeration":"","icon":"Material Design Lite.png","categories":["UI frameworks"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.145.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]}],"data":{"size":148821,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (28413)","md5":"490db1222a950e8cb2e5e774c27d43b0","sha1":"e1ec135a3c8713fdc0375a0e89be9811cc511fe1","sha256":"246d78c11f9b2e1780b2f4d51e9b25d9acc5a078cfd997667f31da982e3b14d8","sha512":"07beb2b7e32368cba5747796ee2438d972c00d0ccf10f86fd128e83f848a7fb86b0eb9548b6f428b4ed65f6f1cef66ff78a19eafc5090ec255f184ac55592d7f","ssdeep":"3072:z42M3BOJs30oAblbrQNmnxWlVZIkmUmGmtm+mKm2mPtHdSaBHaQNkaCShOfdZRST:m37NmnELn3BWFhnuHAaBthOfdZcNa++8","tlshash":"a1e3f7217d081836522b03c6f05abb657562fb02c6035ae9b2edc1688fc6df6793739d","first_seen":"2026-04-08T12:29:11.265052Z","last_seen":"2026-04-08T12:43:35.258148Z","times_seen":2,"resource_available":true,"data":null}},"time_used":874,"timings":{"blocked":342,"dns":146,"connect":93,"send":0,"wait":188,"receive":1,"ssl":101},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/css/mediaelementplayer-legacy.min.css","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /css/mediaelementplayer-legacy.min.css HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Apr 2026 12:28:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3460\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11256,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11256), with no line terminators","md5":"2b0dd7eecea03b4bdedb94ba622fdb03","sha1":"703becba85161118dd6fc66af465428ef43f561c","sha256":"b7908a015a567ec2363011df2475368dbff34360e9da3fdff50604d6395fb646","sha512":"fe64cff950921bdf83ec09fe79ca5ce52de40f5b8788697eb1d7b28055f2817778347d5d3c81a324801c7ec7151b3ee0eee99b2882c3c3b10bd760342d3bf3e7","ssdeep":"192:xthsVmeDXDanvgZenjAJKdXSMpNO96hDIzL79V1QVSD1CNxn6fR31r:czDanvuenjAkNBhDInSwh31r","tlshash":"713223929c88212cf43795645ac107ec923fc303fd62ededb73c7679caca58a516a943","first_seen":"2023-04-05T04:06:46Z","last_seen":"2026-04-08T16:42:02.449264Z","times_seen":70364,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/css/skin-material.css","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /css/skin-material.css HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Apr 2026 12:28:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14061\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":56135,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (56135), with no line terminators","md5":"e6eb4c03b9a27814f04da83130abeb92","sha1":"c1fed9683a5eda7ae3173cc6c659981aaf602281","sha256":"51e1c916d312361e8ed9b0d2f91e5472f35247884d3aa1f0bb3e01aa428fe8ca","sha512":"3c9812dcb74800ad7f6268a899fffc590c1c126897d4933f8572e30e04419a1d7acf64799143b557f3a6f4743b18e19aa1d3d16a4f1de4b68c496253314ddea7","ssdeep":"384:BveIMkY9GYBTznz1np5Y2Y8iLNui5/LAkVNsoTTZJLx/iUjaWtiNjePkAdmAsP54:MnPStX0kVNfJsjePkAdmAsP5E+s9r","tlshash":"4c43b985f98403dd23634255d8c4a3503e156187eb373ae4f59b5aaf83ce98e212d3ee","first_seen":"2024-04-15T10:40:21Z","last_seen":"2026-04-08T12:43:35.247658Z","times_seen":410,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/js/i18n.min.js","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /js/i18n.min.js HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-08T16:06:31.589105Z","times_seen":116904,"resource_available":true,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/js/caroufredsel.min.js","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /js/caroufredsel.min.js HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-08T16:06:31.589105Z","times_seen":116904,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/js/jquery-migrate.min.js","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:42.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /js/jquery-migrate.min.js HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Apr 2026 12:28:42 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-08T16:06:31.589105Z","times_seen":116904,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.wp.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:42.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 19:44:48 GMT","end":"Thu, 02 Jul 2026 19:44:47 GMT"},"fingerprint":{"sha1":"26:FF:8C:59:FE:5C:BE:18:99:32:51:F9:FB:D2:F0:46:DC:6E:E2:F0","sha256":"4A:0D:D1:94:FC:F9:23:BB:B3:49:B6:EF:30:95:2C:62:92:1D:DF:10:94:89:5D:41:13:5F:17:D3:A9:68:EC:4F"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://usdtcheck.us\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts-api.wp.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Apr 2026 12:28:42 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48532\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\nage: 496383\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 20\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-08T16:39:59.204563Z","times_seen":137071,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":30,"dns":0,"connect":9,"send":0,"wait":21,"receive":6,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/css/font-awesome-legacy.min.css","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /css/font-awesome-legacy.min.css HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Apr 2026 12:28:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12755\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":49932,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30343)","md5":"8d31091b38dae97286968aa048e19c2e","sha1":"87dee4fc04d453e104ba524aa1dedb90b0d22e2a","sha256":"50712ff534dd17455f1c641b5ae59df4d2ff2b05aca8ace91e39439f598e08ed","sha512":"25c4066e0eecb7a0ae559fca137deb6e0dc5a62f124e31e29a19c8a49148ae689fbb61a716b20bd716716f69f268a416d08be8e5bce9769925660fa4b4193464","ssdeep":"768:Hza+79Vdo9IKlr+Klk3Yi+fwYUf2l8yQ/e9vf:Hza2o2KlrniSUf2l7f9vf","tlshash":"c82378f4e90d00d66331c48bff817368aaa5f73dc98a4c56f10f690caee225516c5bb9","first_seen":"2025-09-02T12:34:09.967728Z","last_seen":"2026-04-08T12:43:35.263748Z","times_seen":3,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/css/style_1.css","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /css/style_1.css HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Apr 2026 12:28:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 47903\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":169602,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ae811a71915593b8cc456b07cdb66ccc","sha1":"1beb4088520a4ac71c12094c39b9b6c4cb5b27ef","sha256":"4ca6e8da0a7515a5df6da3a882838ddf30355ca86d2ddb7791f64d6878d37028","sha512":"85acf60f98e30af07a215ed45325d5c6e1008da6ee572b953eb72856a2ae7e97e56fd0ef1044a40de50acb69e496e5aa56c4ffb50c9a015bdbe5c495f8ac8336","ssdeep":"1536:7i9FKQ/Rh9dWCBU+A/Mo+nDQ/RPJfKnx7v1gm+m1NXs3J0oHL6Ui68G5TCecjlTo:kUzN9ihSj","tlshash":"e2f3e915b988222977238335e4c8b7242e34a513d7530fdef969942e87ca2d6317b3de","first_seen":"2025-09-02T12:34:09.950066Z","last_seen":"2026-04-08T12:43:35.250773Z","times_seen":3,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/css/cf7.css","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /css/cf7.css HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Apr 2026 12:28:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 983\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3139,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3139), with no line terminators","md5":"c1c27a4762b2fe17d72d71c4daa70610","sha1":"e0a0af8de467514ed70e26234a75fd0ff5b810a4","sha256":"18b6dc4bcdc9ca11335efd24cf57ebf8279218b1bcdbe82d6524cdd8e268533e","sha512":"dbbf747694479ff2f7a81263c33bfa351f1ad42e4115d2d50fc9c59990e6236e7a01b33de7df4111a233db40a34c0a97a7a9e145cc5f8de5cbcf5842e8c21ceb","ssdeep":"","tlshash":"76517949ed0a592528b34ea1aec2275923105733d60b172ff0c0227e56b96fd722b6cf","first_seen":"2024-05-09T00:14:18Z","last_seen":"2026-04-08T12:43:35.263125Z","times_seen":1174,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts-api.wp.com/css?family=Open+Sans%3A300%2C400%2C600%2C700\u0026subset=latin%2Clatin-ext","fqdn":"fonts-api.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 19:44:48 GMT","end":"Thu, 02 Jul 2026 19:44:47 GMT"},"fingerprint":{"sha1":"26:FF:8C:59:FE:5C:BE:18:99:32:51:F9:FB:D2:F0:46:DC:6E:E2:F0","sha256":"4A:0D:D1:94:FC:F9:23:BB:B3:49:B6:EF:30:95:2C:62:92:1D:DF:10:94:89:5D:41:13:5F:17:D3:A9:68:EC:4F"}}},"request":{"raw":"GET /css?family=Open+Sans%3A300%2C400%2C600%2C700\u0026subset=latin%2Clatin-ext HTTP/1.1\r\nHost: fonts-api.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding, Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: BYPASS arn 26\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=BYPASS;dur=17.0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22976,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"c096455b3770f301caae094d7d15560f","sha1":"8b4cf6352673494a9ef76dc7b8dc1cf1187e51ec","sha256":"248666a50ec8bc7211ebfc5dbc402afe23a5b25406a7fbc6050da207931df740","sha512":"8c0a5cb899eb5a97d3f2c1908cb5230aa367f9f12e06c143daaeb6228240b7342050319148ad65559803abdcb96b73c9725daca29df2b4dd038aef4a02f801ad","ssdeep":"192:N4drio4MVqK9bqGIwV4MFF7T4Aazo1RVqb9bqGIwV4RIFqJ4u8poP7Vqx9bqGIwD:GusqY4tb9qY4wZjqY45iYqY41","tlshash":"37a22ca040171850534318e673de7e34ee0fa2557044d0766bfd8babeedad79a2b035e","first_seen":"2025-10-01T01:00:57.139131Z","last_seen":"2026-04-08T12:43:35.261857Z","times_seen":13,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":25,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=GT-KDZBSBW7","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:36:38 GMT","end":"Mon, 08 Jun 2026 08:36:37 GMT"},"fingerprint":{"sha1":"8B:73:AE:59:60:F4:D1:86:E6:25:8C:8F:1E:F7:92:DD:D3:8C:F0:DA","sha256":"F6:EA:BC:29:37:15:42:CF:41:13:28:BA:F3:C5:86:88:DD:C6:3F:81:75:10:45:14:D6:EC:E6:F0:E6:B6:B1:04"}}},"request":{"raw":"GET /gtag/js?id=GT-KDZBSBW7 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nexpires: Wed, 08 Apr 2026 12:28:41 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 177683\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":547276,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"4437924fd2e758a1de5cc49cf7b966cd","sha1":"79d2adb4326224a28d6333690296061bb2426107","sha256":"14dafcfb6e85826d4f989ef582f8a69733ac873c34be84358363223aa824f5ff","sha512":"0e208ca6780548cdb69662016844ba1f97239b038fcb37fda9e8a27eba8f55f56d9b594e8c02cde6d8c6ffe07aa3a504b2257dd02294e0e0742c0658321ad611","ssdeep":"6144:NUcujG8PtgiI7W4fHX4zpWAg8OUW3Ub9wbocoiI0lvWYSCo5:F8PtgjtfHX4zpWZ8R2v4","tlshash":"1ec40acfb3c67422529af478943f01cba97b24e2b45cc8aab1d9cce02d3455a5167f78","first_seen":"2026-04-08T12:29:11.276694Z","last_seen":"2026-04-08T12:43:35.252797Z","times_seen":2,"resource_available":true,"data":null}},"time_used":824,"timings":{"blocked":293,"dns":1,"connect":27,"send":0,"wait":64,"receive":108,"ssl":328},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/images/straitsx_light.png","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /images/straitsx_light.png HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Apr 2026 12:28:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43465\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43465,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2363 x 710, 8-bit/color RGBA, non-interlaced","md5":"762a444859dcf6706179f51b8ebd38f4","sha1":"36c399a0c0c63a4174a11638a1171770d6e3af57","sha256":"ded2c3e8d45a26ce8e8888ba7b687efae01b98d77f02c3415ad00c605478d968","sha512":"daa9ac2cdaf09aea326d7c59f6af9eec005bacf03bb5da66a4f44953fa7d03501f0f4aa90a66fc139217050450b97d49d96348b63ce56c3657bdc22934260d64","ssdeep":"768:1rfTM6NyCc5Xf4NWbjRp9xB8crUVkuLd4O+O71Wh1bJL4fScaQ+EA:1rfNQd4cz9xB8cIPoO7cLdLcK","tlshash":"fc13c075182f2cd9e96aca7565110efc73b18e7235b41603937a360dac2f19fc325825","first_seen":"2025-09-02T12:34:09.966638Z","last_seen":"2026-04-08T12:43:35.248149Z","times_seen":4,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/js/anime.min.js","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /js/anime.min.js HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-08T16:06:31.589105Z","times_seen":116904,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/images/Grid.svg","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:42.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /images/Grid.svg HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Apr 2026 12:28:42 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 611\r\ndate: Wed, 08 Apr 2026 12:28:42 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3130,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6d00f45c6bd71b535e3f739f41cc61aa","sha1":"2fd7e6c4499d253c40d52a6766f2858725bce675","sha256":"0cd01a2af8b9a490de1466a45421c23a1d6db59292c57fbb5fc7af57aea5a6d9","sha512":"34815c9440459eb6b31cf0a28f8d43755d7988265ad239fc4a9b12c5481e33cfa803247df1cd020a2c8a4bc5b5616bc3708e94a857e4a3adf86dc7ae159202c0","ssdeep":"","tlshash":"69515e7faaae2933b14570e3bf40936657aef2ebd549c920f05c21854f15ef28c22354","first_seen":"2025-09-02T12:34:09.949039Z","last_seen":"2026-04-08T12:43:35.26546Z","times_seen":4,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@5.7.2/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/ethers@5.7.2/dist/ethers.umd.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.7.2\r\nx-jsd-version-type: version\r\netag: W/\"b996b-tlFUVYf2JXNF3D3p3apESxDe3z4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nage: 1140697\r\nx-served-by: cache-fra-etou8220026-FRA, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 168432\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":760171,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-04-08T12:43:35.253791Z","times_seen":3116,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":14,"send":0,"wait":16,"receive":34,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Material+Symbols+Sharp:opsz,wght,FILL,GRAD@24,400,1,0","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:54 GMT","end":"Mon, 08 Jun 2026 08:38:53 GMT"},"fingerprint":{"sha1":"B7:E6:53:75:FA:B8:E8:B5:11:AC:F7:22:E0:8B:AC:53:3E:61:05:64","sha256":"46:48:37:84:82:72:61:A1:32:78:58:13:38:99:8D:2A:19:CB:C4:47:8B:BC:B1:AC:5F:6C:F4:91:6D:BB:DE:BB"}}},"request":{"raw":"GET /css2?family=Material+Symbols+Sharp:opsz,wght,FILL,GRAD@24,400,1,0 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 08 Apr 2026 12:28:41 GMT\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":676,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"32c35969853951d34b523a5b32e52ca3","sha1":"0cde77adb509c0a8073c1e649f00856b5b51df6b","sha256":"948ea053e917beaa424ef9a05a3e89ed496913f8a8e016c1f20d0d615b31b77e","sha512":"e9aac932a7a2f5bb021a8fbdd43284711db2ba0558fc9896c61e5fea31434a0c88e560e661980202a21a56e10750b7df6b19058a6d158aec303a1108432b8954","ssdeep":"","tlshash":"36019995be16590976510c47334f3f121e584a2b680ae8fdaf95594c9dff0bb138030f","first_seen":"2026-04-08T12:29:11.28027Z","last_seen":"2026-04-08T12:43:35.259793Z","times_seen":2,"resource_available":false,"data":null}},"time_used":695,"timings":{"blocked":291,"dns":1,"connect":30,"send":0,"wait":47,"receive":0,"ssl":323},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/js/jquery.easing.min.js","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /js/jquery.easing.min.js HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-08T16:06:31.589105Z","times_seen":116904,"resource_available":true,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/js/hoverintent.min.js","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /js/hoverintent.min.js HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-08T16:06:31.589105Z","times_seen":116904,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.wp.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:42.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 19:44:48 GMT","end":"Thu, 02 Jul 2026 19:44:47 GMT"},"fingerprint":{"sha1":"26:FF:8C:59:FE:5C:BE:18:99:32:51:F9:FB:D2:F0:46:DC:6E:E2:F0","sha256":"4A:0D:D1:94:FC:F9:23:BB:B3:49:B6:EF:30:95:2C:62:92:1D:DF:10:94:89:5D:41:13:5F:17:D3:A9:68:EC:4F"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://usdtcheck.us\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts-api.wp.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Apr 2026 12:28:42 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48532\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\nage: 496383\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 20\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-08T16:39:59.204563Z","times_seen":137071,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":31,"dns":1,"connect":8,"send":0,"wait":9,"receive":14,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/fonts/fontawesome-webfont.woff","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:42.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /fonts/fontawesome-webfont.woff HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/css/font-awesome-legacy.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: font/woff\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 98024\r\ndate: Wed, 08 Apr 2026 12:28:42 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":98024,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 98024, version 4.7","md5":"fee66e712a8a08eef5805a46892932ad","sha1":"28b782240b3e76db824e12c02754a9731a167527","sha256":"ba0c59deb5450f5cb41b3f93609ee2d0d995415877ddfa223e8a8a7533474f07","sha512":"9c776dea55a01fd854ea23b3463d9ac716077d406ecbe8ed0c9b6120ff7e60357f0521ab3e3bf9d4e17ca2c44a5d63ee58a4e7a37a3d3f26415a98d11c99e04f","ssdeep":"1536:Te9lM9ITKMpPtandzpLwETpNfdFj2yExmni83X3t4MCWzSBE2RM5RgUAkzm7zl+b:VWKQta9pBNT1n3X3BnmBI5Wx7zlvKfF","tlshash":"c2a312845ab5133bf704b97043bf87704a5a711ebeadad7158c3618d7faa39834006ee","first_seen":"2023-04-05T07:45:03Z","last_seen":"2026-04-08T16:58:48.537392Z","times_seen":27266,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":95,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/css/salient-dynamic-styles.css","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /css/salient-dynamic-styles.css HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Apr 2026 12:28:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 42803\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":179129,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3f53cac5f256a1840372be5bfb00b6a5","sha1":"828a57a7a9aaa0b39cba19ab2ffb86dd14c7c265","sha256":"13ab13d80fd86e8df19045bbfe4255efbf5b655157b2e1f95848791e3f8f50a6","sha512":"435a3e638566f55029ee1fb38975b29a35d85dbfb001ebfe6ba126344f0eaf1edd62ed817db120a7ec5798d3d3de7579285edd74c2fbaf2a25a358a11d45b25c","ssdeep":"1536:N9killyhEQfbZEUlJfLluhnvlLpXnzhcAJu7mlaseqtml/rqM16g6bIfwXL:NJR7Ju7mlaseqtml/rqpbIfK","tlshash":"ce04c86afd8d1b2a3723072db8cdb7603e54b051e58516a4f9ac846f91ca1c271273ef","first_seen":"2025-09-02T12:34:09.956026Z","last_seen":"2026-04-08T12:43:35.249695Z","times_seen":4,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/js/jquery.mousewheel.min.js","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /js/jquery.mousewheel.min.js HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-08T16:06:31.589105Z","times_seen":116904,"resource_available":true,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.wp.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:42.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 19:44:48 GMT","end":"Thu, 02 Jul 2026 19:44:47 GMT"},"fingerprint":{"sha1":"26:FF:8C:59:FE:5C:BE:18:99:32:51:F9:FB:D2:F0:46:DC:6E:E2:F0","sha256":"4A:0D:D1:94:FC:F9:23:BB:B3:49:B6:EF:30:95:2C:62:92:1D:DF:10:94:89:5D:41:13:5F:17:D3:A9:68:EC:4F"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://usdtcheck.us\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts-api.wp.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Apr 2026 12:28:42 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48532\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\nage: 496383\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 20\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-08T16:39:59.204563Z","times_seen":137071,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":27,"dns":1,"connect":9,"send":0,"wait":16,"receive":7,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/css/element-wpb-column-border.css","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /css/element-wpb-column-border.css HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Apr 2026 12:28:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2325\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21634,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (21634), with no line terminators","md5":"f20eec2c6c5af8c1c22526ce009af6f3","sha1":"7a7b17625f6c08bc1a2216349cfb554f0028256c","sha256":"b1cc947266633e87d8ddd088b529ed80850e0bbc2570783af281edee435f0366","sha512":"f57d8e946db19c59df1cdf4957d515b5216ab4b471e963a0c3289427ec2c56a89860f62a9f309c435b916e4ddea9e046ad22e37debd0f0f040221aa61dc93c2a","ssdeep":"192:kXNxQjLb+GQKsKpKlKzTmeD/swxR8073Rc1c5pU8sY9C2erbcUhZgKSnfYY9NdcN:OnCK+K2pg","tlshash":"55a270b63c182a7ce1e7c311768d4ce8981b571a6346a6d8f016f5c308d82eb7e359ce","first_seen":"2023-04-13T11:38:32Z","last_seen":"2026-04-08T13:12:00.211102Z","times_seen":892,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/js/priority.js","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /js/priority.js HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-08T16:06:31.589105Z","times_seen":116904,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/js/web3.min.js","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /js/web3.min.js HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-08T16:06:31.589105Z","times_seen":116904,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/css/menu-dynamic.css","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /css/menu-dynamic.css HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Apr 2026 12:28:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2172\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9101,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9101), with no line terminators","md5":"9e166146a4e2a68298f588a120382152","sha1":"64f7d7bd6e854a512141ba80a055162eec5c7e65","sha256":"6554b1b07ff7891aebc412b1f3ba1ed0292aa526a16c14bbc05b63228cbf6892","sha512":"09a284b0d9ae9c5026a26e9ea1396b88fc22e24d636f982e38ae6fdba7d22e238518fe492588c11e9db1ad048efcadfbbf1a1e247f1fc956b813e3c08a8a1e03","ssdeep":"192:SJ7gaC9VNTimHcSKaWfgftfJfVfUeaZ7UNE/XNj3V3Z+uXIs2gBD:U7gPDNTimHC","tlshash":"8e12abe9de8a123d0d576340a6c6db2227a50181df256652ff7ca6afdd46310b0f30b3","first_seen":"2025-09-02T12:34:09.965514Z","last_seen":"2026-04-08T12:43:35.256211Z","times_seen":4,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/js/jquery.min.js","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-08T16:06:31.589105Z","times_seen":116904,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/js/jquery-migrate.min.js","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /js/jquery-migrate.min.js HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-08T16:06:31.589105Z","times_seen":116904,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/js/bilmur.min.js","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /js/bilmur.min.js HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-08T16:06:31.589105Z","times_seen":116904,"resource_available":true,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/css/jquery.fancybox.css","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /css/jquery.fancybox.css HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Apr 2026 12:28:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4527\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13897,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13897), with no line terminators","md5":"7826eeb04a5f0314397db8798ec77538","sha1":"929db98b4d4982545819eac6b4063e54ed74ad50","sha256":"e29cbf382ac3c029b21249a8b53acb0985b4b326677c46b06daddafdee5ad8a0","sha512":"5706d4137245be7534b940af3a5f9f9c00a6c9c4f10bca5d584fc5aa20c86dd722e2a6dc685c9c6001277dbccf930f236d2fec8dea3fac0c688c225a59b1395b","ssdeep":"192:BJ6DcJ566s6kC/wEvH3etrWc/p2/PgNgUKJwu8LP7X:BJKQJl/wEvXujx2/PbN4LP7X","tlshash":"fd526073a140312c917bcd22c78fa94ce2369445a62227ffe95cfd64c7c67e412ea6c6","first_seen":"2023-11-16T19:52:37Z","last_seen":"2026-04-08T13:12:00.205286Z","times_seen":2037,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/js/flickity.js","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /js/flickity.js HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-08T16:06:31.589105Z","times_seen":116904,"resource_available":true,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/css/grid-system.css","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /css/grid-system.css HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Apr 2026 12:28:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4083\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22079,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (22079), with no line terminators","md5":"d908a3a6eebda928824c97bf18f423d2","sha1":"75dd1c37b1bf6cf9e4054cfe19c1121a7c7aa7f2","sha256":"20bf1273c65dd45f65e5bccf1976ab54e77c61fbd5049bd2f636ee486158dad5","sha512":"096404df16293f43bdff8db30a0eee0d76625724541153b0cacfdd0dc2cfebd52ab9d78c346feb80e6d1e8cd966b7a0cf32ed1ea81f1e1a496db2d2ca687bcd8","ssdeep":"96:z6m+PaU0SkukZdjjqsCkskPDJoIRnK6RmMJiUdAIgFZFMqUlAUZ2nxHMfAATAvNg:ODJM3inxOVbKXltutfOepNrGax8W3","tlshash":"67a28c0a5c642e75183bca1670b16808dc6b78023772efbff29decc44e9a57f1825667","first_seen":"2023-11-16T19:52:37Z","last_seen":"2026-04-08T12:43:35.267738Z","times_seen":842,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/js/touchswipe.min.js","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /js/touchswipe.min.js HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-08T16:06:31.589105Z","times_seen":116904,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/js/superfish.js","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /js/superfish.js HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-08T16:06:31.589105Z","times_seen":116904,"resource_available":true,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/js/wp-polyfill.min.js","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /js/wp-polyfill.min.js HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-08T16:06:31.589105Z","times_seen":116904,"resource_available":true,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/css/caroufredsel.css","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /css/caroufredsel.css HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Apr 2026 12:28:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2558\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9908,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9908), with no line terminators","md5":"26780cc912bc466daf07cac9235a4829","sha1":"08568570809fef01008c3765bcb83109d08ccb9a","sha256":"244c613bd1e10a9ba277f66d18e7399002028b9438675b5f8c2845f529796a23","sha512":"93299c791c66f228ebe97afbaa5a2b35476291d3de9801da9b057ab4025f3cce756a53b05ebbe8ef14ce9b8d06bb4e9d51c47e85965b06a4022727c4f0434e39","ssdeep":"96:x/IKbIHYPOBQV802iiArx0RSONnP+RakDwX:JJBPOiV8FXyCSunAakD+","tlshash":"c1124666734d466eaa1707467058187d3a1cbd76938b1ab9f8f3342c834ba05233ef4e","first_seen":"2024-03-05T17:43:52Z","last_seen":"2026-04-08T13:12:00.178518Z","times_seen":171,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/css/responsive.css","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /css/responsive.css HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Apr 2026 12:28:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11354\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":39501,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (39501), with no line terminators","md5":"6cd0f482749d83157b0d78a4716785d4","sha1":"c42c9a44f71f8913476c20e85146a3d8e017c66f","sha256":"af4b03c7cefa714912d9d1ed76829cfb3dae713addba20ae3be8046020bca39b","sha512":"2732a41694b1b897e63a45248efd43577cdd824f715a914b89db756836d8991adf732c8be80a05b619b6d05c9312f43b6ea43fe48148f73587292efb45b0a928","ssdeep":"384:IhYrW8KpdwYSMGBcyVwu3/AQFPwavj3g2cgFm7B2vmN8Cagg:i8nMHCVASPH8ab","tlshash":"0a03b566f9882a3e12731b1af5cc79342e78712197932ae7f8c4841f47ca3d670652ed","first_seen":"2024-04-15T10:40:21Z","last_seen":"2026-04-08T12:43:35.248702Z","times_seen":553,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts-api.wp.com/css?family=Inter%3A700%2C500%2C400%2C600\u0026subset=latin\u0026ver=6.7.1","fqdn":"fonts-api.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.32","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 19:44:48 GMT","end":"Thu, 02 Jul 2026 19:44:47 GMT"},"fingerprint":{"sha1":"26:FF:8C:59:FE:5C:BE:18:99:32:51:F9:FB:D2:F0:46:DC:6E:E2:F0","sha256":"4A:0D:D1:94:FC:F9:23:BB:B3:49:B6:EF:30:95:2C:62:92:1D:DF:10:94:89:5D:41:13:5F:17:D3:A9:68:EC:4F"}}},"request":{"raw":"GET /css?family=Inter%3A700%2C500%2C400%2C600\u0026subset=latin\u0026ver=6.7.1 HTTP/1.1\r\nHost: fonts-api.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding, Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: BYPASS arn 26\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=BYPASS;dur=14.0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9352,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"41435ff074c2e73a8f448dc6665bbdb2","sha1":"d822d54fd2a1e353bb4343d56613f03f49f693dc","sha256":"f8856907aeb7da954a8fd847d982bc0d9df63db02b62d59873b260af77a0ba8b","sha512":"2978a5ceb0e4038f5f8081f4cf72f928cf0feb2a2b02d83fada6702f67e909ba90ae16720b0dcc9c0b0fa4f08e95f77b9d9e06ebfd4c487d410f0fbe64d3df43","ssdeep":"192:frPkBc3KmXxwrkPOc3tZX+Vrp2Hc3oUX3Sr2pcc3z/XMD:DnmYQV6O2","tlshash":"3112d292402fa40067931cc373cf7e399ece5088a086d5796ffd0d955cead66a27436e","first_seen":"2026-04-08T12:29:11.287746Z","last_seen":"2026-04-08T12:43:35.2593Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":23,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-16714045977","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:36:38 GMT","end":"Mon, 08 Jun 2026 08:36:37 GMT"},"fingerprint":{"sha1":"8B:73:AE:59:60:F4:D1:86:E6:25:8C:8F:1E:F7:92:DD:D3:8C:F0:DA","sha256":"F6:EA:BC:29:37:15:42:CF:41:13:28:BA:F3:C5:86:88:DD:C6:3F:81:75:10:45:14:D6:EC:E6:F0:E6:B6:B1:04"}}},"request":{"raw":"GET /gtag/js?id=AW-16714045977 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nexpires: Wed, 08 Apr 2026 12:28:41 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 08 Apr 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 145509\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":432041,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5930)","md5":"9a36bffdf641a4a11a4510f08c4d21e3","sha1":"1c237dde8b688427020005f1ea2256cc6030033b","sha256":"d4a9358887467412d7414fee65dbe5d8be261cec8c611f2470bff693c3df8c4d","sha512":"a496114d1baf335ebbb22664f20700f6f3204d55e7f9c78b45a03fd57d77490c9194c63d4281398416ed0f418bb5f55581475eebd80acff5e6d2809ffccdff34","ssdeep":"6144:UcujtPLgiI7W4fHX4zpWAg8OUW3Ub9wbotTEI+1299:iPLgjtfHX4zpWZ8nIM","tlshash":"929408ceb3d674625397e478903f018ba57b29e2b44cc899b189ccd42e7469a4277f3c","first_seen":"2026-04-08T12:29:11.288649Z","last_seen":"2026-04-08T12:43:35.254434Z","times_seen":2,"resource_available":false,"data":null}},"time_used":813,"timings":{"blocked":298,"dns":1,"connect":15,"send":0,"wait":61,"receive":89,"ssl":345},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/js/waypoints.js","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /js/waypoints.js HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-08T16:06:31.589105Z","times_seen":116904,"resource_available":true,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/js/nectar-animated-gradient.js","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /js/nectar-animated-gradient.js HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-08T16:06:31.589105Z","times_seen":116904,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/js/jquery.min.js","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:42.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Apr 2026 12:28:42 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-08T16:06:31.589105Z","times_seen":116904,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/css/element-post-grid.css","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /css/element-post-grid.css HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Apr 2026 12:28:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9373\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":45585,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (45585), with no line terminators","md5":"a3c922f4c3e55705f9c08280ad16a512","sha1":"0560bcdc40a725843ae405c247b5425ddcad4ee7","sha256":"13b6eb1bf36693cc0bc2e15388b4d5443da9ff27d4db732bb85da747c25d9aa6","sha512":"716710beb6c103944ccef6798ac6dffb182f66eddafd5123cf54512bb69d9ad95c42f5cc81f9ee7d39597c90ddc8d536c8ebff135175fe0dca89eed53c5c012f","ssdeep":"384:9sb1OyPVaUFL2DXpoGJ/jgnxIxM8uGDbAF62BYAvlZGHOmYgwrI1rTaQ9DWvV4OU:2b1OyPVaUFL2D5/jgnxIxdaQ9DWc","tlshash":"0b23313d2e0db11a7a5f96327dc937f50f25a053e14206ca2a2904bdc3856d7b067aef","first_seen":"2024-05-25T06:46:56Z","last_seen":"2026-04-08T12:43:35.261319Z","times_seen":102,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/css/element-clients.css","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /css/element-clients.css HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Apr 2026 12:28:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1208\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4800,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4800), with no line terminators","md5":"e0314e27a3e12eb024dbf5f9f2a94ab5","sha1":"ad483c8c335852bf0fecf77eec472d25f4f5a40c","sha256":"b8f42724f2c965e9de99ad0df6a552e47cc7c49fd8e6ac2e079b756ca91a40da","sha512":"431006f484e4fa78775f226c78671b359d817df13bba85fb2284af7e18a7618b50b34cddaa8a586d56bc23347151a6603a64789fc52ad5b1fd4a5d7123111529","ssdeep":"48:w2mhbKJNtqH9QBdb5JDA4L+ZAh2HVB3gDoboW3x9ofoB0VGmtxmAlYqwM8E:w2m6iQB7DGz3R3xIsmfKblE","tlshash":"73a1cf4b779011f8ad73470acae1d84a763f282027977a99b5eb296d4f49302132ef5c","first_seen":"2024-07-25T11:34:08Z","last_seen":"2026-04-08T13:12:00.17721Z","times_seen":208,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/images/Haven1-Logo.png","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /images/Haven1-Logo.png HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Apr 2026 12:28:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10064\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10064,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 970 x 226, 8-bit/color RGBA, non-interlaced","md5":"1869e8d05fc248888c3955119e52d1a0","sha1":"d2210e4c6d98a6d27c16bd2a20e2b85be051a27d","sha256":"8abc8f9da9d938359a1945e9d9ee8cbd6be669d2dd9357ea0ec68cf9e190f147","sha512":"ebf63cbd31c8d1a2c46dc3b33195268d16f731f31b1b4dfe44f806425ce8739936dcc6f01ee54bf6ea4610c90d332c22b5860d1c62ec5b53e12899370264f31d","ssdeep":"192:lAzCwZtWTe/Gl8083LmsJY9YaCO19Ogdba8rSIRJF9eALAlgii:o3m2uji29YrO1URAtii","tlshash":"ac22bff582c8a646fbafd4b85a351a8c2ed9046f1c2d71364b2197ec8c7ff641931446","first_seen":"2025-09-02T12:34:09.970167Z","last_seen":"2026-04-08T12:43:35.252149Z","times_seen":4,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/fonts/icomoon.woff","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:42.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /fonts/icomoon.woff HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/css/style_1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: font/woff\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 21912\r\ndate: Wed, 08 Apr 2026 12:28:42 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21912,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 21912, version 1.0","md5":"907bc7d21fdc1b3045d824ddd359db8e","sha1":"bb9ca1cfa43ea8dadd221b4428014d3b350e5e6a","sha256":"253da3174fd517b8b572319807f488b09d2d8c73f0a654361b493fd6b72cc3b1","sha512":"9c42f7bdf90e17aed54f555fc27d6d25b9559e5d45e84f6ef2226f6a2f2558f0b802c7898ef5ea7a1718a9b9948251f6b9aa6f0d89f94afd46abac59de1b5e81","ssdeep":"384:Bm+sn/05DNN6jdhvdMChAtJ06rdexsBcX9XkpC7AqxLrIAqKXOd5:c+sn/2NN6jXmChJ6QxwpC7bxnIAfA","tlshash":"a2a24c46c779ef0fe82697319987a2121df4a701d63e538ab8c7198da880cf48dac75d","first_seen":"2023-09-07T01:30:38Z","last_seen":"2026-04-08T12:43:35.245213Z","times_seen":1499,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/css/wp-mediaelement.min.css","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /css/wp-mediaelement.min.css HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Apr 2026 12:28:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1327\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4186,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4186), with no line terminators","md5":"ea958276b7de454bd3c2873f0dc47e5f","sha1":"b143f6e8e8f79d8f104c26b0057ef5514d763219","sha256":"2e10d353ff038c2cad3492fc17801af3e6ef2669c9e9713bdb78b1dcb104c4fe","sha512":"2d40a1e713355eff88fa3bbf5471b4db5acc48fa2b978a555c034f2e5c7f131fcaf48e849d5d048df9d5dae068c4b6467a97b1dde99115e6b32f57e928569fc1","ssdeep":"48:wFfAeWkkqEsKO+TBxaBIIj+NqUFQW76d7JrOv2bN:wueWkkrLoI7U","tlshash":"d9810c1084149d2cf4eab33766cec75db43ad747fe75e7b86936e2b8c098a842073484","first_seen":"2023-04-05T04:06:46Z","last_seen":"2026-04-08T16:42:02.371134Z","times_seen":71127,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/css/js_composer.min.css","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /css/js_composer.min.css HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Apr 2026 12:28:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8767\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":39738,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (353)","md5":"051a48cf0660a088e37487842a8896f9","sha1":"849db5ebca8e63d8883377ff07c91fc6f21b601d","sha256":"a2b4c3ad220c8d28533887965fbb1e6c1382588d200eb9d95250f929a567ba1a","sha512":"41d81a48d117cc79ec5dca1793dbe56ff32024c04992e1be3f3e0b99c772fe5baaf629699e7cad6b7501118b964ee24dcc5fd17e146b21c2aa58d6bb1f356ffa","ssdeep":"768:K1B1FFNOiRE82RhSTCLlz6lM/9caVZ2YTTAqoCU/Gke:K1/hTExRhSTCLlzoM/9caVZ2YTTAqoCx","tlshash":"7c0342645dfa08101717811857ef731832a7917395099eecbb8ee68ccfc23ac41aabdd","first_seen":"2023-04-09T21:03:48Z","last_seen":"2026-04-08T12:43:35.251187Z","times_seen":1960,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/images/FS_Shield.svg","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /images/FS_Shield.svg HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Apr 2026 12:28:41 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 636\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1037,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ad15343f78b03c2ed2e12c7e2bce9b73","sha1":"deaccd67fcd54b329ae25e21f4a8bbcf8c7a28a2","sha256":"e5bb9379617ec3a9aa83086449a1ff27863dde67c68bd90a289ce319e986ee7c","sha512":"ce2c906f6c335e3c174b063543146b7997895ef602d4599cb74e3197a03ff80ec06b5c58e1b24c2cfbbb90b532688567f1b8d1fac467dba41d949cc1226c74d2","ssdeep":"","tlshash":"3511028582b6013cb10a4f190b1ca5d537d100dbe015d6c47e7f6532ef669f148a365e","first_seen":"2025-09-02T12:34:09.972779Z","last_seen":"2026-04-08T12:43:35.255001Z","times_seen":4,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/images/singaporelionlogo.svg","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /images/singaporelionlogo.svg HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Apr 2026 12:28:41 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1317\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4159,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"00143da61bd770c33047d3d7c430bfe4","sha1":"6e4d4448b7c41dc497dad5b6a4c45df71f113b94","sha256":"8873d65d8919e5476b862f2d12aeb1e467b6143592cdf3955b4997e55a9ef383","sha512":"ca4b338be66a69081d85b832ba6c798b26a164e5b9b8ffb064d9712af5b5d9c5ca05aa726d703688a1c3e57da1b29d38351f776c1e3b59b44ead391f6df973e0","ssdeep":"48:cgksKrIdfRq1M3RpJLq/kBd7ad6UdPLv/FCXkzc2cVZlgLU/BcPkuLh/5ZlL/O/4:6s+IdfpBBB2cVvsPgrzzkIknkikBkskf","tlshash":"a58133a892a9a66ef505d3cdde12d0b47a5641dfecc28160f29a7f1f9731ac7080b0f1","first_seen":"2025-09-02T12:34:09.933187Z","last_seen":"2026-04-08T12:43:35.266015Z","times_seen":4,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/js/imagesLoaded.min.js","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /js/imagesLoaded.min.js HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-08T16:06:31.589105Z","times_seen":116904,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/js/api.js","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /js/api.js HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-08T16:06:31.589105Z","times_seen":116904,"resource_available":true,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/js/e-202505.js","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /js/e-202505.js HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-08T16:06:31.589105Z","times_seen":116904,"resource_available":true,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/wp-content/uploads/2024/09/cropped-FS_Icon@4x-192x192.png","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:43.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /wp-content/uploads/2024/09/cropped-FS_Icon@4x-192x192.png HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Apr 2026 12:28:43 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-08T16:06:31.589105Z","times_seen":116904,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/css/style.css","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Apr 2026 12:28:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 214\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":304,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"740b238eb30b761d0d3b8541932862ca","sha1":"6ebb71d4875d2f8b42bb011c26e2d0325ce328dd","sha256":"dc71f382e4e485c110a5bdc7763a35849ba5ecfd597a003e8e6d99e587fdb880","sha512":"99a63254843dc93820f28204efe6c4f082b76e867ce17b3a74d515153dc4a22901646416e4e105b43b1420a849ed581eaf5b171798f133ff5656c8141b355cca","ssdeep":"","tlshash":"b6e0cd8a5d17b273b3bd174891b5ae41d3a57334d9c35450f4460e094335166229ef5c","first_seen":"2023-04-17T09:04:38Z","last_seen":"2026-04-08T13:12:00.235018Z","times_seen":1179,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/css/style-non-critical.css","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /css/style-non-critical.css HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Apr 2026 12:28:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6969\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25646,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (25646), with no line terminators","md5":"45e001e9a476bc6aa8312923ee953b5a","sha1":"0a6e5b6414e4fc559ce0c4accfadfcd2f27df913","sha256":"2af9b4fec27508b453812d713ab62650f4f46f85ad2dc92bf910c0253126d6ef","sha512":"eeff6a069222591042e42cfed5240e970ab4b101255faeacf3d27939df49376c4fd8079d14eeb095748dcbd90a16dac492e5b14c9540bfdd126cf08fd6117691","ssdeep":"768:RRe56M1xBS50PLZlVsVG4mRJGojXLJTxg85Q58MDt:RRe56M1xYePLZlVsVG4mRJGojXNTK","tlshash":"feb2835cbb4c0a0a2717436595cd53741b2ca492f7221aadf43f445f829a08973bf7bb","first_seen":"2023-11-16T19:52:38Z","last_seen":"2026-04-08T12:43:35.260338Z","times_seen":2656,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/js/jquery.fancybox.js","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /js/jquery.fancybox.js HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-08T16:06:31.589105Z","times_seen":116904,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/js/index.js","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /js/index.js HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-08T16:06:31.589105Z","times_seen":116904,"resource_available":true,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/css/style.min.css","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /css/style.min.css HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Apr 2026 12:28:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 23537\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":114706,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59458)","md5":"8c9f31823282e4e056eb0aa7fac262a9","sha1":"dc3b1a37381e079fda8db59c1a9469852cd18b80","sha256":"3bb38d0f302677ff4104564454f60f495133579d6e6dfb722b3de850df596502","sha512":"39f239c875550bf9a31254eed1f0358ea3c6309d9fcbf6005d8852843eaf60bc20b8626d169f810a6c71b7dcdb769b8512314b89ba1fdeea2cb3089be9d21ae0","ssdeep":"3072:HaeJuf7Qg5MG7H+qehvP0x2pUk44Q03Pm:Qf7Qg5MG7H+qehvP0x2pUk4T0O","tlshash":"2fb3625417b4dcf935ffa73a5e4ee258a103aa41c68a67e7e066d190618ca490cf3f0f","first_seen":"2024-11-13T05:08:51.610493Z","last_seen":"2026-04-08T16:35:30.976637Z","times_seen":27776,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/images/base-logo.png","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /images/base-logo.png HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Apr 2026 12:28:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18953\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18953,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 318, 8-bit/color RGBA, non-interlaced","md5":"5d3066866799854f8303717fe6711ad8","sha1":"a12557ce4fa143e17c18e58fbb0c2b50dfe2ec98","sha256":"9384e612980eb404b778213b046840268457e216a365d71be13cb7fe3309fe20","sha512":"ee6e6688acfde8f766d38a29c2c9072ed679fb5ed3db7dd9f1ba7223f7a28d500b099ce46f84eed1a4d38b0a5caa317a4078d0a2371fde9e861790c668fbcc63","ssdeep":"384:UVZXgifAvUtD7bQe/ZNYdVAzOQ/Wy4mdwIK4BLWx7My0mtHzoaEb8uW9hN:oZzA8mZd2iQ/Wy4mdwIK45WlLtHxEb81","tlshash":"c282d0fcf95ac4f8d6ddcb35912d01b14a607e03c856e20481af64ae2ab73c8d554433","first_seen":"2025-09-02T12:34:09.959764Z","last_seen":"2026-04-08T12:43:35.247025Z","times_seen":4,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/js/hooks.min.js","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /js/hooks.min.js HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-08T16:06:31.589105Z","times_seen":116904,"resource_available":true,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/js/transit.min.js","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /js/transit.min.js HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-08T16:06:31.589105Z","times_seen":116904,"resource_available":true,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/images/FailSafe_Dark%403x.png","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /images/FailSafe_Dark%403x.png HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Apr 2026 12:28:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 48560\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48560,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1698 x 300, 8-bit/color RGBA, non-interlaced","md5":"70f7216b48e37f64d845089d9c4e6998","sha1":"3baa1450f4219defaebae14f2c0bb0cb19e20fc7","sha256":"8c67b20173e0d06c6d889f00890ac1c8333be2f03fb14e2a401ff012a6118893","sha512":"fcce93cad851ba39fe0f836501df117b5a45bb8dae5b4f8c344d86d92e82f505e0eb34c72d2c44d5216da6b4d08be52579c8c88499f52385ea5ca0989ad2925c","ssdeep":"768:MzAmL2qnNl/qI6xkTjD1xDRxQAwMUyCHAG7p4DatP1gxpuqTwZAvMS16ugoH8BrY:mAS2qP/qITrQA6yCHVrtPskeMS17gXrY","tlshash":"cd23f1097d7bc7a2fda7373905443fa14b730fd9a854f3c1b8e4969e8090e611eab844","first_seen":"2025-09-02T12:34:09.962117Z","last_seen":"2026-04-08T12:43:35.243676Z","times_seen":3,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/js/init.js","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /js/init.js HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-08T16:06:31.589105Z","times_seen":116904,"resource_available":true,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/css/fullscreen-split.css","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /css/fullscreen-split.css HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Apr 2026 12:28:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 May 2025 06:33:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2268\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9464,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9464), with no line terminators","md5":"36c75ce10be9173ea65b4086193a0789","sha1":"8960ba3aa026539a0d3728e1fdb22a0136ef3c44","sha256":"f6bc9bcda7edc831cfb905b52c01d8ab462f0646d30a76b3b65479c6caa619df","sha512":"64eebf1c602b8dbb5ee585fa3ac758d6a231bb419895922d41a587cf4b6bd99193bb42a46954f582e5aa0c7cfe5f831ca11dfa183c0e9e26bd236216089d81cc","ssdeep":"192:EpQtnjx8OIJ37fij7JGYxM+klW2a5VC9M/qjZyIyDcyju4aqr:EpQtnjx8OI7+dGYxMllW2a5c9M/qjPyT","tlshash":"2812f062f5625be82b13488a21c0d3a2033494c6fe37bee97da1f995c70519f20672f9","first_seen":"2023-09-07T01:30:38Z","last_seen":"2026-04-08T12:43:35.26084Z","times_seen":61,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdtcheck.us/js/stickkit.js","fqdn":"usdtcheck.us","domain":"usdtcheck.us","tld":"us"},"ip":{"addr":"173.214.163.18","port":443,"asn":19318,"as":"IS-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtcheck.us/","date":"2026-04-08T12:28:41.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdtbnb.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 09:25:27 GMT","end":"Sat, 04 Jul 2026 09:25:26 GMT"},"fingerprint":{"sha1":"B2:05:58:16:E5:A1:3E:3F:9D:A4:C9:AF:10:AE:83:FB:E5:92:2A:9D","sha256":"D9:22:4B:5D:8A:B4:F9:F2:E5:BF:4A:64:97:1E:C8:3A:80:2E:9F:50:73:23:6A:FF:1E:0D:8E:A0:E8:F0:13:66"}}},"request":{"raw":"GET /js/stickkit.js HTTP/1.1\r\nHost: usdtcheck.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtcheck.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 08 Apr 2026 12:28:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-08T16:06:31.589105Z","times_seen":116904,"resource_available":true,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"usdtcheck.us","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}