{"report_id":"9fd12d99-be25-4743-9926-233a888e4f72","version":6,"status":"done","tags":[],"date":"2026-03-11T11:41:07Z","url":{"schema":"https","addr":"ustt.work/#/reg?ref=510931","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"104.21.48.224","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ustt.work/#/reg?ref=510931","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"title":"JUST","dom":{"size":20475,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7257)","md5":"340dc52fad60878df9f3fa84e76b0656","sha1":"855870160721a43213a02917af9aeb0576038736","sha256":"1843434167d2478e4a7f5a17ecc989641d998904f0e31b656a250dcf1822bd7c","sha512":"f554a90dc0ccc016c71fc58e80ef586621e7a3d5726e6456fc3fa8c417858fe0afc43183f15f9a26ed0bb1ff041943c3f3206d91f9ca9ec6364076fe1193fab6","ssdeep":"384:ADOj1YKkBzsju8pk9X+OIjlYAuN4qLe9C49lg7mS:TxmoXp4+OI+A1qLmN1S","tlshash":"cc92742b1c9804272233a5e96cb7e74a31b7960f894ea9003d5c43510fe7d78adbcf99","dom_hash":"domhash1378d3614ad669220baced98371d9091","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ustt.work/#/reg?ref=510931","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"104.21.48.224","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-15T11:41:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"api.ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"api.ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-03-04T13:36:33.001491Z","alert_count":0,"request_count":1,"received_data":115283,"sent_data":417,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ustt.work","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-11","domain_rank":0,"first_seen":"2026-03-11T11:41:09.578343Z","last_seen":"2026-03-11T11:41:09.578343Z","alert_count":56,"request_count":28,"received_data":2725786,"sent_data":13888,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sc-static.net","ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-03-16","domain_rank":3142,"first_seen":"2017-09-05T18:35:04Z","last_seen":"2026-03-04T20:34:53.077178Z","alert_count":0,"request_count":1,"received_data":59423,"sent_data":410,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"api.ustt.work","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-11","domain_rank":0,"first_seen":"2026-03-11T11:40:28.783413Z","last_seen":"2026-03-11T11:40:28.783413Z","alert_count":24,"request_count":12,"received_data":101622,"sent_data":7008,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-08T22:15:01.701196Z","alert_count":0,"request_count":3,"received_data":79209,"sent_data":1615,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ustt.work/#/reg?ref=510931","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"10568b780a0d314b06f4ae6be4a339f7","sha1":"2c0ba855511dbe4d8ce3bf061282976a34fd375f","sha256":"97611d5571f8e91da4b84e7fed039c19126ed0d05a358286b229ee99b23e61d4","sha512":"f1d5ba897fc7e7481668825a9b1fc036114a015a88759f3df8a3f52521648c16dcf66dd17116a513a7ccbc3f4d62eff48fde1b11b4905917762aec42d1009705","ssdeep":"96:nfkdoq1aBIBOjsXgInhubwM0eb9X+T60YTHs:nfkdoq1aBIBksXZhu8M0k9X+T60YDs","tlshash":"beb1991b69e56468a703b0ba8c3fa406b521042f099cbd407e0cd7769f8953daab4edd","size":5554,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-06-07T05:03:57.018709Z","times_seen":494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/#/reg?ref=510931","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f7d4fbff71549398ceffe8189db57c5b","sha1":"9ddc56ef19489e0d21f74eebc29c92b469ae6fd4","sha256":"ca663f53ed1b54e1f40c4b17ba2257f76179690249527bf88d268d9d178995a3","sha512":"bb5e60f5eec27743c6cfb79705632ad071bd6cdfffb44d8f0ce4e2c884c1bb531e06e6aa80bee647986c34bb4bad620495cd48c61e8d30441914687444b03b1b","ssdeep":"","tlshash":"e3f09e1b1886b07e53d760b6593bad5b322a11472c5119077d4c80242fe083d7ef5fde","size":623,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-06-07T05:03:57.019407Z","times_seen":494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/BaseLogo.vue_vue_type_script_setup_true_lang-7nWErKjB.js","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c1398055fb6f0f194d4a87200716272a","sha1":"78af884bf064044061312346e7a2a7cf86404d09","sha256":"56bcd2ed3ccaff4779f097f15d833a3155243e95559c03e60606e40fb9e1dbc6","sha512":"55527c1208a85eb2c7123afe8fc40a6467997dcfb26acc43695a60e107532901c2bc6c33fbd0e43a3496a8e3a4ee3a75fc502824bb30200e2319e36ded6748a4","ssdeep":"","tlshash":"9af0e14e5c6e41fa95a3545c2b4b908021084e9ec634ab40f2f827356241c5d741db38","size":585,"data":"","first_seen":"2026-02-05T19:01:16.38331Z","last_seen":"2026-05-17T09:16:47.47021Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/#/reg?ref=510931","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"10e247b1e2fdabc6df5924c7ba030143","sha1":"5ffb3521af2f1de2346aafc24cd370f96eb2492e","sha256":"eecc77cda212e1b84aa604a30d271abf4f89ef8930c7527adb67f3f4e47bfd6a","sha512":"51902aceeb1ae468f85fba2fb32c97f1cd1b3ac9c0a5920ac0f97a073de2974584878855d9a8258bd080d65ee031f548be5238c84ebf1f5186bbc6b0a9b7117c","ssdeep":"","tlshash":"07c08cc8a0c62d202a06e91010bf38e8a038802770891b028ea4dc483e330f48233ed8","size":150,"data":"","first_seen":"2024-08-20T18:12:14.496137Z","last_seen":"2026-06-10T21:35:42.646638Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/#/reg?ref=510931","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"eb11a5046bb7cafe92c775fe17c4baab","sha1":"86aacc0454104493f2bd4b31ea87f57217e2ef5a","sha256":"8636e3e713a2de989bf94ebbeffca1cd1c9cb96c093ee26eaf80678b1d8511aa","sha512":"39afc498d02ecbf73d8f599900ff3d323ddea637777e12e7d486917b596a962879748008ee96320472cb47fe440ed46ecb3f16995f43df8dc295ad0ee4cf0e15","ssdeep":"","tlshash":"15c080c5e0c62d0056026411157f35d49034441e70481f868cdcdc583d230f45337d9c","size":158,"data":"","first_seen":"2025-09-05T02:20:56.045012Z","last_seen":"2026-03-25T09:58:52.058759Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/#/reg?ref=510931","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6900701ff959494d30437499abeb8885","sha1":"7cb4c820fbf30caa6b50d6c2dc4aa7c0c4b644d8","sha256":"3be52a71ee1e4d668cceef779a9942298cef4d68e03183d10681c4aa945c83f5","sha512":"731bc35b44d92adfda91474163cba7cbfe8ebb8faeb76364becb6a0f87c8d62c68a560257759546c0c38da3d0ea220cbee60eed126f77194441f92786231135b","ssdeep":"","tlshash":"b5c08cc4a0c22d101642645420af26e4a028802a70485b128c94d8482e620b48233ea8","size":138,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-13T14:18:03.143321Z","times_seen":7153,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/#/reg?ref=510931","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-13T16:49:33.510503Z","times_seen":6249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/#/reg?ref=510931","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0c9ff6322979beda3ef6a855d997e662","sha1":"df89e42503ff2198d598b2dc8e34228b5200deec","sha256":"964fce1a2e5fd8ed07a5a3a201b1da9b6d89bae1e63735fdbd3b16a64e3512d6","sha512":"3d71fd18cc92149d5259380581dbf2f3a90e0ada91daa3ebbff45d75ca3e69516fbafa6ceb19b313ead5b02af4ba779667522239adcb6642762963dd1fd227e0","ssdeep":"","tlshash":"10c08cc4a0c2ad00a602645064af74e8a024402a7088ab029c98dc482ea24f48233e98","size":148,"data":"","first_seen":"2026-03-11T10:54:58.02843Z","last_seen":"2026-03-25T09:58:52.062627Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/#/reg?ref=510931","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7144169280a69b1c180a70c7fb7c5047","sha1":"286b077ac1ddc843cb5a34c0310fec82d7628167","sha256":"0860f78a352e55f64ab8fa11ce266c6b60f40f4ee95040204fc70884babac6e9","sha512":"2cca64caa2a5ff4fdc390e7127fd89645a0e80135214f066e068f14d9726fdc0965fa5a9e79d7222283d8e0e12c90fd504367f81ae5fb580e3c1bc4c84a12f68","ssdeep":"","tlshash":"edc02bc5b0c33d101602641010bf38e490344027704c1b43ccd4dc583e230f08233edc","size":135,"data":"","first_seen":"2023-04-18T06:39:26Z","last_seen":"2026-06-13T04:46:03.287248Z","times_seen":501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/#/reg?ref=510931","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"caad72fe48a09f8a060e5dd1477935fa","sha1":"f2b5ddb3021c1d3b5df6a518c7b555a7ffaeba39","sha256":"3097fffe06a687f15fda650f93d6f5303679a4fc78db9645da44a7aa4fa902fb","sha512":"1ad398a20e4693fe3fcd02aa2ffd3fa8f2c7bc1cafdc3778ed28300852491cc74174c17f930f387a3d75c02a35aa21100f56df21ee41f5222850cea0d1edee06","ssdeep":"","tlshash":"b731682918ea1118b2177166e17fe70d2725501b2dd4fc097a0cd2240f9997ee6b8cae","size":1591,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-06-07T05:03:57.020035Z","times_seen":494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/index-C7qOuJXN.js","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f9e206909a5ad70e95235707a5b4c75f","sha1":"fdcdd1c8288eb9d60e17a0208bac29b55dd3be2b","sha256":"3fe72c43cff7b0a8558d821d72711db53bbd985d454dd7e4928d2b286f7d47e2","sha512":"fb126ec1c53e674d78aaa5486ee08af7fe4e3d5fea94bcd814672980ff8ab90ff4f9cfa3b2e73b880105d64347ae8de86ea66e985baaf24fb9730b042490c4b7","ssdeep":"","tlshash":"9561956cbed49534c6fb498854270912ba1f4b59562488f2e4ae5d8c2f3e458f13ff2c","size":3203,"data":"","first_seen":"2026-02-05T19:01:16.385038Z","last_seen":"2026-03-25T09:58:52.029437Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/LangLabel.vue_vue_type_script_setup_true_lang-CcP8QcXR.js","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c0473cd6461220374f0e07c0521f296a","sha1":"34fd52fe10007b9d1fcf3a9d3d58464c4066e515","sha256":"168869fb9126a58d9024d703f9509f6e44631020a90ccde48e4686a5b82bd46f","sha512":"01b02ba5bbf3b18b1f5c9dea23495c0990abece02ce753d15f83a11bd03af386a5b31e19e206c3cb2e644303038ab227a71f93b00b05d7e93ee39bb1fe807111","ssdeep":"","tlshash":"2ff0eb6f1c31c630c1b608183a97080010481f6ba224ea40e29a5e134ae286db3feb28","size":555,"data":"","first_seen":"2026-02-05T19:01:16.398885Z","last_seen":"2026-05-17T09:16:47.473056Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/#/reg?ref=510931","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f325222a758aeaf467ffd9902267b129","sha1":"ebb95b3866ab29d0ee9bb0755384b81ab12e000e","sha256":"cb11ef6823d7949b57e01ab9d6bb5c829be6b14322aa0dd5897a6d2d209d0672","sha512":"aa743a98e2ffb65897bee06760376bb5dbb7c2f10613ca12c8cc462ae79e1d3351855f14b3ea70088d449656bb4167061ab22d99f0eb628b9b63dc2a94131292","ssdeep":"","tlshash":"46c08cc4a0d26d001602641020af34e89024802674481b028c94d8482e220b09233ee8","size":138,"data":"","first_seen":"2023-04-14T14:41:51Z","last_seen":"2026-06-13T13:05:36.254221Z","times_seen":2309,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/#/reg?ref=510931","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"43a144a646cd1c3aa47c6e97b8997f16","sha1":"751520d68e01030d76aaa27829bee42de57b33ae","sha256":"7400aff6408f23b72deadda0905ff4dc8eb4af368f7e8026063918149826a7d6","sha512":"85eff0527e8a86cde19b0e67070c8f71528670484865bafb4b88ee54f83b48f575275ed10cf343f0c84d4c0a425f6632b5b1bdfdfbfd75c6702ee856d28f512f","ssdeep":"","tlshash":"14c08cc8a0c22d101a02681414af24e49028442774481b068cd4e8882e230b08233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-13T14:18:03.22661Z","times_seen":4147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/default-CNe2IRBi.js","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"60a75362f1ab1ec1467b15dfa5246ef9","sha1":"2df29d48313b8fc98cc988f8e4420dd305c88568","sha256":"dfecb7161cf4445804ab24de804b75f0a1236851d33de36c7801a00f0275e34c","sha512":"47ddad7d90588e33263f44497f13963a6404b8fe1c8d69050c1f0f62688342621099e46518ed68f4a3ac8cc0840b2583ed03793fecaf2bcc529e2caddca93224","ssdeep":"768:VfOsPOTavO7fqO41qkoaBOfPOizacfqOzbOCFOYObO7aC2DidGrPmML0dhWH/saG:+7dBW0Ls0aJOw2VLDV4FSAGR","tlshash":"1f13a7845807a33fc572da4a484a6881324c5fdbd00c6fa6f3f4951b86cac79773af29","size":44162,"data":"","first_seen":"2026-02-05T19:01:16.377497Z","last_seen":"2026-05-17T09:16:47.495001Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc-static.net/scevent.min.js","fqdn":"sc-static.net","domain":"sc-static.net","tld":"net"},"ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b52900cfd7b47b8a49e66817877b5587","sha1":"f663aa8a4839526f042bb3f74817ab5c0b8fd5d8","sha256":"2a411581195ab46d1eb9c5b0792223215efc0632060d57cc416cc875c4f08bf8","sha512":"1a6fbeff29ad0055e35e5beebdb247714a582a68efefa470466598e4282a4323a33571fcc44e871820a21e0a1bd4acff9403698e2fd5df5d330cb53b98b31ec5","ssdeep":"1536:kQ870ziaaEzjPOevVJm0tlsuHrih9HHVZ1GJV51kxx0Kb:786hTl49dx0G","tlshash":"1643d78cb7e9b02503973472497f541be33bb9646c0bc650c526e5883dbc69e9237eac","size":58763,"data":"","first_seen":"2026-03-02T18:17:41.839776Z","last_seen":"2026-03-16T22:45:13.13991Z","times_seen":1474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/index-2RxFwIil.js","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8d0ca212fa97dac55660e35fa6c7be4","sha1":"a0710c6370e4a89fa9727897292cf7f5c5806409","sha256":"f628ee3c4c7c88206ec25ce128e784a18534716d641cc628b11e52053cc39cf0","sha512":"960a549815085a2394c21b97c90b46e8765feb96c4b7137bb1eff9f727abba52cfbdbfbf177f2a7e67f48ce59b521ee939b1b7a9621d0b3bc61d77fe4a3af96a","ssdeep":"12288:vTbvNHlR30T98cw1NMv+3Lt7NhnquTjgzPpVo2Rek:rbvNH4aV1Ne+3V3nqogz9ek","tlshash":"c755a1281a2bf344e419c0dbf9373c84c59de58aa00764d15fb54bb31ba2797eaacd13","size":1323815,"data":"","first_seen":"2026-02-05T19:01:16.405937Z","last_seen":"2026-05-17T09:16:47.537407Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/BaseUserTab.vue_vue_type_style_index_0_lang-D0m5JvsB.js","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"53fa1f9e18a130da0bba9bf5d92f935b","sha1":"1827bd524e09bb3fbcb08e3c3bdfd3244560f3ef","sha256":"e2d57ec033e87a31160a83ec9a8e95226cebfe17a13b89d1494bb7ec28636aea","sha512":"711ca051a384158bb136448fa109494040e72cdaadc2bd069272001d78c574e663a398aad15c73c574ceabf39c4796fa383ca94964dfe2f793c936c218597abf","ssdeep":"","tlshash":"9011888dacb9cfb604f204ac3e971069e094bf499614c926e09e4431325fdf8e68c32c","size":948,"data":"","first_seen":"2026-02-05T19:01:16.398071Z","last_seen":"2026-05-17T09:16:47.466192Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/#/reg?ref=510931","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"94d71ca3d432c5a150ba0fec148bec8a","sha1":"f149c8d29e80003d26ed2e460cf5890f8bf67978","sha256":"5c8151446c3fb9fb384c25e941b64d83149cba01d5a7905fd2844d6b4679114d","sha512":"9e345046d828729d97f78fe91cdc987f97e0088d6de76d2171141348aec8b658006105e5172bfb5845491d5782b26c57a8c4245f30fab81daf9bd33adbc71ce3","ssdeep":"","tlshash":"24c08cc4a0c62d001602681010af34e49024402670481b428c94ec882e230b08233eac","size":139,"data":"","first_seen":"2023-09-13T19:31:22Z","last_seen":"2026-06-13T10:10:42.621996Z","times_seen":870,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/#/reg?ref=510931","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5bd6185639b8be9b5d6a79cf5af2a9dd","sha1":"f1cadfb16d24785897f89d1da75adbd0f028de58","sha256":"8974133640d35c1c7fff7a94f677c866910b8e07e2830473c9ef84da0f01fa9e","sha512":"4b9b0252665f704d49cafca04e04d96d8ffe1f2348946d655d3d0d7780342b865e6b8451bb687c6acb4f2690473c13fec9b10a1b036f1d2a028a8e34c6dd35a6","ssdeep":"","tlshash":"7ec08cc4a0c23d001a23646120bf34e49038402770881b428d94d8482e230f08337e9c","size":148,"data":"","first_seen":"2023-07-15T02:55:06Z","last_seen":"2026-06-07T22:53:02.952892Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/#/reg?ref=510931","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1d4700e7818854aec11dc4d0591f9626","sha1":"33b2ac2baa38752d6f1edf04c37521182691204a","sha256":"1d5965d8f785900972e887d8981bd26afd51aab614536dce2510a27167b51ff0","sha512":"dfb9f4efd73dc16da30a73a6b0e794e4eb49d92babe6f730363281d2c54dff1e8efb16873a9c361b8531368e7efc4cf6eba61d56628671e7a996ed795a17eebb","ssdeep":"","tlshash":"89c08cc4a0c22e005606641011af24e49028402670481b028ca9d8582e220b08233e98","size":136,"data":"","first_seen":"2023-06-28T20:43:13Z","last_seen":"2026-06-13T11:46:12.381055Z","times_seen":12920,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/#/reg?ref=510931","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c771a56c31bff8ba6299f63241568899","sha1":"3d6509d1f412e744a937e891546180b1093f7ccd","sha256":"c0b3a74335ec3f96e25be399971bafea9e3513f821dd3b4009608de199fd4f2a","sha512":"f859c02090a494b60671d2dea13324fc38d926b315de977edb5889e587917facd9d2e4c1e73e0edb3f0112b5af30b8d05d33a173612c81f4cdbcab5bcf47a03c","ssdeep":"","tlshash":"7b0128e59986483146db31fa2a9e301070318003b908beb0386f15446fdd33ed3f6bd8","size":689,"data":"","first_seen":"2024-11-20T07:54:53.452195Z","last_seen":"2026-06-07T05:03:57.027217Z","times_seen":489,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/BaseInput.vue_vue_type_style_index_0_lang-apEyAGTq.js","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"efb6e3174a45aa61e97dc86f5f7c5a96","sha1":"327a77b82b7d7869cc5a8354d9a27b522e7a4b42","sha256":"b7fe65882b644c08522923e81991d738ed45e03e3208d2b3e731779c0ab5926a","sha512":"4857c017f3d42b49ae1b41487a6af7b497f0f22b0b2108e191ac3550239a4f818c568b268c36bd1091d541fff8187df223249a5d321073ac214edb493b38215a","ssdeep":"","tlshash":"3a515104ec159fa7dab39a4da5db58a0a05c2bdf85088f5110fa551c3f5edf8233af28","size":2490,"data":"","first_seen":"2026-02-05T19:01:16.38417Z","last_seen":"2026-03-25T09:58:52.0474Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/#/reg?ref=510931","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"76811db4a3d5546de19bc46f245652b4","sha1":"065ddba5bf95b5d1f278bb4a908a53fc4f0a41b2","sha256":"237e40d42319f90c108ee79382b7200ea26929d92fe7799cf0bd33efc343ebfa","sha512":"f7d218cf377027fbcbadd061e0a97768fe6955ff69385e531406117b74cd36e368441724eabbcca6f4424131d73e6f50baf10591dde8509fefd6f7cfa727dcf6","ssdeep":"","tlshash":"efc08cc8a0c22d002602a61020af39e4b038802b70485b128da4de483e630f58233e9c","size":147,"data":"","first_seen":"2023-10-29T04:01:47Z","last_seen":"2026-06-12T15:27:34.427917Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/#/reg?ref=510931","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4c9d2c8a613bb2c333bd3d4fa72a910e","sha1":"2423047f8e6e364a5acb86dcc25111580999be9b","sha256":"af7a3b6b0a051456e1921f597368cd81e40a2f593e0431c34cb80be8fc0a30f7","sha512":"ac26f9667cc281339fd388cebde18f00dd39a86f64e57b8a8751705898c10d92feea09eafa210e22841a0b0ee630d3ceada52aeca142270b228bde9cc6f9122f","ssdeep":"","tlshash":"cbc08cc5b0c37d001602652014af24e4a024506671482b438ca4d8482e620b09233ee8","size":144,"data":"","first_seen":"2024-12-02T01:20:06.77716Z","last_seen":"2026-06-01T19:00:20.467531Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/PhoneSelect-Dp1B1C0p.js","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9a08bb51e99405c9bffe55b7162a0792","sha1":"15e8385e775d019f9a8ea876cc214f461ce93ee3","sha256":"449aa8d7b697f59fbd788a570427afef0bc3a5243dfb51bfdfea11297f1bbf46","sha512":"c8eeac5f83a902c0c37c9f31af810c804cde38174a1567bd06a173a7b8ddd54254ec39e92a6cafd7a585f7ba565ab0afe7a088249ffc8b7ec398e45a1521e2ef","ssdeep":"192:qw1xs/hrvvvkR1aCuhPU8mZsdisBTrP2BrhuGQ7w/yYf8/TkqqjNeGQTuOalAtFD:q4xj5a28wa8H5tnzxaF","tlshash":"1862bd6b00b007a6fbf19321f101f8a663c91e862857a5f38dbf136259a00f7b5cb65c","size":15511,"data":"","first_seen":"2026-02-05T19:01:16.378416Z","last_seen":"2026-03-25T09:58:52.037283Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb0a2fecf6cd27fba9cd29610fd2ccdc","sha1":"7546ed807d56be081be97fa1e4859381ecccf58e","sha256":"dc67f1e084e069a3fb629f3154765856fe0aa805a4e138bc42c228bc3d656a78","sha512":"5350795e68c371956350f88354aac62900d7fc5974817e93f49f218fa60becda436da0a8bf17d6239e2ef882cee0b18bfe66e181baa6f1ca04b57817c2920166","ssdeep":"1536:pO5TpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:s5TpRdfcKFU7Rx1H","tlshash":"31b33e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","size":114950,"data":"","first_seen":"2026-03-10T21:38:17.367441Z","last_seen":"2026-06-13T08:38:30.483101Z","times_seen":765,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/#/reg?ref=510931","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a28e056a6989b49de8bf0c6fe7a9078e","sha1":"166889dc07218cf99767d4179177e393a87c50b5","sha256":"5adba9de6f8cd98bd9f208363a88990f71f45bc7eaa3b277fa7fc86d54f0ecbb","sha512":"5fca1b898fe0243788c1e8403086ea2b8f6374b3575b8c71ff971b969f1e1325eb301221aad3fa4f9447bb8df6c43021297674123c156e4fd1a322d5cd3cdcc9","ssdeep":"","tlshash":"acf0ab0b199008319707b17a2a7fec0a1e42201f29646671be0c95109fce97e4664d5c","size":506,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-06-07T05:03:57.026572Z","times_seen":599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/BaseAlarmLogoBtn.vue_vue_type_style_index_0_lang-BlUVKB8I.js","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e0d346fe8fc6ee6d247b669ee7c69c47","sha1":"2811c80b84b9b1389e3f1a12db8ea38e30e04404","sha256":"9c827335a55db1636bedfb00d28e42b6383edcccaf078569766f0c42f826b5f1","sha512":"92ba38f0b1fb1ae19fb0fb39a88c9d880a351d878b215445fd897817b107686deec94338162a8cc4fe45ca905094aa0a192ca597bb499b3e2c48e9c0515560cd","ssdeep":"","tlshash":"2ff0c01c5c11caf9863700493e5660a104580f7e655cba81f9d618119fe20bc3b2b72c","size":531,"data":"","first_seen":"2026-02-05T19:01:16.396385Z","last_seen":"2026-05-17T09:16:47.403141Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/#/reg?ref=510931","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d2b2b050757ba3d24426c42c3e4676f","sha1":"6a3359c5389d7d41f4b9647878b29cf654f5fc63","sha256":"da3abe33f5dd2abd814eb50229fb90d0ab61f7553b0154dae0cf129be7e7980f","sha512":"1c678470e263ef5bc0a5f8b44714ccd7cac330e2a61742d4735579da012208167e3b6672534f5ed217b285ff49c4204cc060936cf2f2d7e1625e10df79bed04e","ssdeep":"","tlshash":"b0f0eb130cd900af6f2710bd2b3faa1236a41113044ac020fc0e8720af20e7c1724acc","size":656,"data":"","first_seen":"2025-09-10T03:49:42.458429Z","last_seen":"2026-06-07T05:03:57.031683Z","times_seen":357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/#/reg?ref=510931","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f325222a758aeaf467ffd9902267b129","sha1":"ebb95b3866ab29d0ee9bb0755384b81ab12e000e","sha256":"cb11ef6823d7949b57e01ab9d6bb5c829be6b14322aa0dd5897a6d2d209d0672","sha512":"aa743a98e2ffb65897bee06760376bb5dbb7c2f10613ca12c8cc462ae79e1d3351855f14b3ea70088d449656bb4167061ab22d99f0eb628b9b63dc2a94131292","ssdeep":"","tlshash":"46c08cc4a0d26d001602641020af34e89024802674481b028c94d8482e220b09233ee8","size":138,"data":"","first_seen":"2023-04-14T14:41:51Z","last_seen":"2026-06-13T13:05:36.254221Z","times_seen":2309,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/#/reg?ref=510931","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"02408d922d2e1998a79d8d6f850a8fa5","sha1":"05881ad7e2edf93b804c00b4998f794b9be830e2","sha256":"2864865ce925856a2bf5886ef5970aa3f3c2c592f2f6963f42fc77308efe5b95","sha512":"d79c14118cc3f703cf56276c6432e4c886ed04c65964fa528d842d1f2efb256ea5cb7f313b5dcf870032fddad8b695ac049c3d0de86f8ceeb0a5932b7586cc2a","ssdeep":"","tlshash":"c9c08cc4a0c26d105602645010af24e490244027b0481b028cd4d8482e220b08233e98","size":137,"data":"","first_seen":"2023-04-18T06:39:26Z","last_seen":"2026-06-13T04:46:03.284891Z","times_seen":985,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/reg-DUFtgkAs.js","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4941c57178e8fa99fcd00e2688c75abb","sha1":"e41b4ee1c89f77a6bd77ec83a90378abb641ce73","sha256":"82f0575636c0ac0d7b1c5a4779003931e8538233af5b43cdd8331ee3805db9d2","sha512":"660039218b601a8de2f72033e0ef9f03ae64a50ea9fd190835876f4439bd715ba1869913419c46a069dcfa794e3eda2167480fff54b8a603ee2ae2561af5871b","ssdeep":"3072:H5BfoyaxmAOX200jOsXoHtzxb/zdMr4pE:H5BfoyaxmAOX200jOsXoHtzxb/zdMr4O","tlshash":"42a3504ce0f9cefb98fb660d79074831b05e6b9fc1005ba6a3bc06555e63cd09a226d9","size":98810,"data":"","first_seen":"2026-03-11T10:54:57.989155Z","last_seen":"2026-03-25T09:58:52.034672Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ustt.work/assets/default-CNe2IRBi.js","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:41:00.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:57:24 GMT","end":"Tue, 12 May 2026 05:57:22 GMT"},"fingerprint":{"sha1":"F3:56:81:F1:C9:37:22:45:D6:3A:0B:FA:E7:C0:5B:3A:F4:5F:59:FB","sha256":"8D:96:E1:44:CF:5B:F4:3C:0C:81:7C:93:B5:26:2D:30:FD:C4:8C:7E:20:D1:44:00:71:A9:29:15:0A:58:A8:0E"}}},"request":{"raw":"GET /assets/default-CNe2IRBi.js HTTP/1.1\r\nHost: ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/assets/index-2RxFwIil.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF; _scid_r=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:00 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wtc27mZwKTDiMYmgn5J2Bc5HXEV%2BsCOcEjNSVg9HwiM9OjIp0J8H%2F7cv0923jmN2NJi7PUbNJbYWL2PfUAoBs3S%2FRePd1XyxTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"db757bf32196c2da9cc0fcac82f5f2a7\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 9daa499ffac0bc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44162,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (44161)","md5":"60a75362f1ab1ec1467b15dfa5246ef9","sha1":"2df29d48313b8fc98cc988f8e4420dd305c88568","sha256":"dfecb7161cf4445804ab24de804b75f0a1236851d33de36c7801a00f0275e34c","sha512":"47ddad7d90588e33263f44497f13963a6404b8fe1c8d69050c1f0f62688342621099e46518ed68f4a3ac8cc0840b2583ed03793fecaf2bcc529e2caddca93224","ssdeep":"768:VfOsPOTavO7fqO41qkoaBOfPOizacfqOzbOCFOYObO7aC2DidGrPmML0dhWH/saG:+7dBW0Ls0aJOw2VLDV4FSAGR","tlshash":"1f13a7845807a33fc572da4a484a6881324c5fdbd00c6fa6f3f4951b86cac79773af29","first_seen":"2026-02-05T19:01:16.377497Z","last_seen":"2026-05-17T09:16:47.495001Z","times_seen":27,"resource_available":true,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/index-C7qOuJXN.js","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:41:01.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:57:24 GMT","end":"Tue, 12 May 2026 05:57:22 GMT"},"fingerprint":{"sha1":"F3:56:81:F1:C9:37:22:45:D6:3A:0B:FA:E7:C0:5B:3A:F4:5F:59:FB","sha256":"8D:96:E1:44:CF:5B:F4:3C:0C:81:7C:93:B5:26:2D:30:FD:C4:8C:7E:20:D1:44:00:71:A9:29:15:0A:58:A8:0E"}}},"request":{"raw":"GET /assets/index-C7qOuJXN.js HTTP/1.1\r\nHost: ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/assets/reg-DUFtgkAs.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF; _scid_r=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:01 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fIUEnwWUXOntVyWyPNWPZNnNimiL1Ec8wknZumoaWA1xVJRZjYPESJiDChJwvB8il0ALeOGuQ2tEZL0rYlV95OzR8a9sY0iVdA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"dcccdc2690e7336ef61637477279fd13\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 9daa49a2af3bbc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3203,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3202)","md5":"f9e206909a5ad70e95235707a5b4c75f","sha1":"fdcdd1c8288eb9d60e17a0208bac29b55dd3be2b","sha256":"3fe72c43cff7b0a8558d821d72711db53bbd985d454dd7e4928d2b286f7d47e2","sha512":"fb126ec1c53e674d78aaa5486ee08af7fe4e3d5fea94bcd814672980ff8ab90ff4f9cfa3b2e73b880105d64347ae8de86ea66e985baaf24fb9730b042490c4b7","ssdeep":"","tlshash":"9561956cbed49534c6fb498854270912ba1f4b59562488f2e4ae5d8c2f3e458f13ff2c","first_seen":"2026-02-05T19:01:16.385038Z","last_seen":"2026-03-25T09:58:52.029437Z","times_seen":15,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/BaseInput.vue_vue_type_style_index_0_lang-apEyAGTq.js","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:41:01.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:57:24 GMT","end":"Tue, 12 May 2026 05:57:22 GMT"},"fingerprint":{"sha1":"F3:56:81:F1:C9:37:22:45:D6:3A:0B:FA:E7:C0:5B:3A:F4:5F:59:FB","sha256":"8D:96:E1:44:CF:5B:F4:3C:0C:81:7C:93:B5:26:2D:30:FD:C4:8C:7E:20:D1:44:00:71:A9:29:15:0A:58:A8:0E"}}},"request":{"raw":"GET /assets/BaseInput.vue_vue_type_style_index_0_lang-apEyAGTq.js HTTP/1.1\r\nHost: ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/assets/reg-DUFtgkAs.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF; _scid_r=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:01 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G7b3TmCjF8arFy74uen%2Fs77leZ6s%2BDQPvU9QdM8XLXdpo6k0H4cUiQDbQHmGwvQ3QGDfMmKd7jPw6enuZNDNOYWeT8SUV9J8uw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"417a62a3778cb67a4c82796a19c79871\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 9daa49a2bf43bc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2490,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2489)","md5":"efb6e3174a45aa61e97dc86f5f7c5a96","sha1":"327a77b82b7d7869cc5a8354d9a27b522e7a4b42","sha256":"b7fe65882b644c08522923e81991d738ed45e03e3208d2b3e731779c0ab5926a","sha512":"4857c017f3d42b49ae1b41487a6af7b497f0f22b0b2108e191ac3550239a4f818c568b268c36bd1091d541fff8187df223249a5d321073ac214edb493b38215a","ssdeep":"","tlshash":"3a515104ec159fa7dab39a4da5db58a0a05c2bdf85088f5110fa551c3f5edf8233af28","first_seen":"2026-02-05T19:01:16.38417Z","last_seen":"2026-03-25T09:58:52.0474Z","times_seen":15,"resource_available":true,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/BaseLogo.vue_vue_type_script_setup_true_lang-7nWErKjB.js","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:41:01.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:57:24 GMT","end":"Tue, 12 May 2026 05:57:22 GMT"},"fingerprint":{"sha1":"F3:56:81:F1:C9:37:22:45:D6:3A:0B:FA:E7:C0:5B:3A:F4:5F:59:FB","sha256":"8D:96:E1:44:CF:5B:F4:3C:0C:81:7C:93:B5:26:2D:30:FD:C4:8C:7E:20:D1:44:00:71:A9:29:15:0A:58:A8:0E"}}},"request":{"raw":"GET /assets/BaseLogo.vue_vue_type_script_setup_true_lang-7nWErKjB.js HTTP/1.1\r\nHost: ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/assets/reg-DUFtgkAs.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF; _scid_r=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:01 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W6QZzZPCEKbwPX0ZTFmkK4iDtJ9cVyUClglcaVHsR826%2F4YCfO2IwxZtRSj7Uwhxh%2FNSK8vceZv9zgbwNLI2uaBf6VNZ64H%2Bsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"e8b14f2061a9946a195984e316c2a84b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 9daa49a2bf50bc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":585,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (584)","md5":"c1398055fb6f0f194d4a87200716272a","sha1":"78af884bf064044061312346e7a2a7cf86404d09","sha256":"56bcd2ed3ccaff4779f097f15d833a3155243e95559c03e60606e40fb9e1dbc6","sha512":"55527c1208a85eb2c7123afe8fc40a6467997dcfb26acc43695a60e107532901c2bc6c33fbd0e43a3496a8e3a4ee3a75fc502824bb30200e2319e36ded6748a4","ssdeep":"","tlshash":"9af0e14e5c6e41fa95a3545c2b4b908021084e9ec634ab40f2f827356241c5d741db38","first_seen":"2026-02-05T19:01:16.38331Z","last_seen":"2026-05-17T09:16:47.47021Z","times_seen":27,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/index-C7qOuJXN.js","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:41:00.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:57:24 GMT","end":"Tue, 12 May 2026 05:57:22 GMT"},"fingerprint":{"sha1":"F3:56:81:F1:C9:37:22:45:D6:3A:0B:FA:E7:C0:5B:3A:F4:5F:59:FB","sha256":"8D:96:E1:44:CF:5B:F4:3C:0C:81:7C:93:B5:26:2D:30:FD:C4:8C:7E:20:D1:44:00:71:A9:29:15:0A:58:A8:0E"}}},"request":{"raw":"GET /assets/index-C7qOuJXN.js HTTP/1.1\r\nHost: ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:00 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fIUEnwWUXOntVyWyPNWPZNnNimiL1Ec8wknZumoaWA1xVJRZjYPESJiDChJwvB8il0ALeOGuQ2tEZL0rYlV95OzR8a9sY0iVdA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"dcccdc2690e7336ef61637477279fd13\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 9daa499e3fa0bc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3203,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3202)","md5":"f9e206909a5ad70e95235707a5b4c75f","sha1":"fdcdd1c8288eb9d60e17a0208bac29b55dd3be2b","sha256":"3fe72c43cff7b0a8558d821d72711db53bbd985d454dd7e4928d2b286f7d47e2","sha512":"fb126ec1c53e674d78aaa5486ee08af7fe4e3d5fea94bcd814672980ff8ab90ff4f9cfa3b2e73b880105d64347ae8de86ea66e985baaf24fb9730b042490c4b7","ssdeep":"","tlshash":"9561956cbed49534c6fb498854270912ba1f4b59562488f2e4ae5d8c2f3e458f13ff2c","first_seen":"2026-02-05T19:01:16.385038Z","last_seen":"2026-03-25T09:58:52.029437Z","times_seen":15,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sc-static.net/scevent.min.js","fqdn":"sc-static.net","domain":"sc-static.net","tld":"net"},"ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:40:46.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sc-static.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 22 Oct 2025 00:00:00 GMT","end":"Fri, 20 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:63:7D:63:F2:DF:8F:C5:65:EF:16:8E:06:3E:E4:66:D9:41:67:CD","sha256":"91:A8:D7:CD:20:36:14:EC:9A:D5:10:BC:DD:44:F1:9D:26:20:78:F8:92:93:7B:37:6A:F8:E9:7B:FC:7E:72:66"}}},"request":{"raw":"GET /scevent.min.js HTTP/1.1\r\nHost: sc-static.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript;charset=utf-8\r\ncontent-length: 24779\r\nserver: CloudFront\r\ndate: Wed, 11 Mar 2026 11:40:47 GMT\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncache-control: private, s-maxage=0, max-age=600\r\nset-cookie: X-AB=a3dc9e51dc86440da194e814bdbd460c;max-age=86400;expires=Thu, 12 Mar 2026 11:40:47 GMT;Path=/scevent.min.js;Secure;SameSite=None\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ed0b1ae4224d4a858ec43080e17ab00c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: h7lsTPtFt3mmkD_ZK1lwPMOsEdexPGxP2nJIPscbXDx-f71LouUXEg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":58763,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (58736)","md5":"b52900cfd7b47b8a49e66817877b5587","sha1":"f663aa8a4839526f042bb3f74817ab5c0b8fd5d8","sha256":"2a411581195ab46d1eb9c5b0792223215efc0632060d57cc416cc875c4f08bf8","sha512":"1a6fbeff29ad0055e35e5beebdb247714a582a68efefa470466598e4282a4323a33571fcc44e871820a21e0a1bd4acff9403698e2fd5df5d330cb53b98b31ec5","ssdeep":"1536:kQ870ziaaEzjPOevVJm0tlsuHrih9HHVZ1GJV51kxx0Kb:786hTl49dx0G","tlshash":"1643d78cb7e9b02503973472497f541be33bb9646c0bc650c526e5883dbc69e9237eac","first_seen":"2026-03-02T18:17:41.839776Z","last_seen":"2026-03-16T22:45:13.13991Z","times_seen":1474,"resource_available":true,"data":null}},"time_used":1058,"timings":{"blocked":422,"dns":45,"connect":284,"send":0,"wait":211,"receive":1,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/BaseAlarmLogoBtn-B1F5Xzzt.css","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:41:00.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:57:24 GMT","end":"Tue, 12 May 2026 05:57:22 GMT"},"fingerprint":{"sha1":"F3:56:81:F1:C9:37:22:45:D6:3A:0B:FA:E7:C0:5B:3A:F4:5F:59:FB","sha256":"8D:96:E1:44:CF:5B:F4:3C:0C:81:7C:93:B5:26:2D:30:FD:C4:8C:7E:20:D1:44:00:71:A9:29:15:0A:58:A8:0E"}}},"request":{"raw":"GET /assets/BaseAlarmLogoBtn-B1F5Xzzt.css HTTP/1.1\r\nHost: ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF; _scid_r=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:00 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sxaCEZy4brrIcZhlbLNt%2FR4Mv251QCTeA3A4okKbr7p97PNccJjqrUzA2ajzfwr6Mv4uZASpFm4Tu%2FlDTFwbmLm%2B8abKoHTvOA%3D%3D\"}]}\r\netag: W/\"b843b98f7d7569052182eead07cb3746\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 9daa499e0f50bc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":374,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (373)","md5":"a0b95e2ac4d02f765d36b86d50825b05","sha1":"a6c56b78ff5416000ca81c9c385f14c4ad745e90","sha256":"018fe58c9101deb6798cb3463760d1abaf1be712f511ec85e3be65cd5de35d13","sha512":"3a38ceda1e85ec5eab12bfda941daef96627543de051677653a7d45d707214789d8cff522362480ff722358f3b78f51f5bdd95642d1442c22f8f30c2cd116ed2","ssdeep":"","tlshash":"fae0924c0d94111b7aef4e2754da4a7500288f537e330d5ea742325622c6ae4317634a","first_seen":"2025-06-18T05:12:49.455026Z","last_seen":"2026-06-09T09:38:27.786609Z","times_seen":88,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/BaseInput-Bza8nYTg.css","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:41:00.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:57:24 GMT","end":"Tue, 12 May 2026 05:57:22 GMT"},"fingerprint":{"sha1":"F3:56:81:F1:C9:37:22:45:D6:3A:0B:FA:E7:C0:5B:3A:F4:5F:59:FB","sha256":"8D:96:E1:44:CF:5B:F4:3C:0C:81:7C:93:B5:26:2D:30:FD:C4:8C:7E:20:D1:44:00:71:A9:29:15:0A:58:A8:0E"}}},"request":{"raw":"GET /assets/BaseInput-Bza8nYTg.css HTTP/1.1\r\nHost: ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF; _scid_r=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:00 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IlUsuIAizAumzYzF7iGPMJTHsL3Ja%2BDy8YMOGxOoSrOZlO7hrCvyqTtCjmrjTKm38VKrBbml5hiCFdSxVFXMhsNsLVQarufOBw%3D%3D\"}]}\r\netag: W/\"1f072beeaf6c83e94e575a93d4390f27\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 9daa499e2f7fbc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1716,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1715)","md5":"2dec063ddcc835dcb02abeee35f28a19","sha1":"4de369e362b979bb2da80eae83575519cbdcff57","sha256":"13805720d9b1ee8f859d1d9c0bb28fbe2b00b92720e8faa8f364f4c0eb7c7df4","sha512":"835a0a498bc59d2be5947eac8765d6364036648e5b821a0f71cf7b9670c60c47bb0267f22da5e902608a2528e9e4147306dd09748d1e798a68f02ec17565b7ca","ssdeep":"","tlshash":"8431af0c1e50df1a18ba5ef3e1c4ea97380954b38fa38d05c040541a87969b52f7fe68","first_seen":"2025-06-18T05:12:49.455997Z","last_seen":"2026-06-09T09:38:27.834324Z","times_seen":43,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/default-CNe2IRBi.js","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:41:00.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:57:24 GMT","end":"Tue, 12 May 2026 05:57:22 GMT"},"fingerprint":{"sha1":"F3:56:81:F1:C9:37:22:45:D6:3A:0B:FA:E7:C0:5B:3A:F4:5F:59:FB","sha256":"8D:96:E1:44:CF:5B:F4:3C:0C:81:7C:93:B5:26:2D:30:FD:C4:8C:7E:20:D1:44:00:71:A9:29:15:0A:58:A8:0E"}}},"request":{"raw":"GET /assets/default-CNe2IRBi.js HTTP/1.1\r\nHost: ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:00 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wtc27mZwKTDiMYmgn5J2Bc5HXEV%2BsCOcEjNSVg9HwiM9OjIp0J8H%2F7cv0923jmN2NJi7PUbNJbYWL2PfUAoBs3S%2FRePd1XyxTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"db757bf32196c2da9cc0fcac82f5f2a7\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 9daa499e2f8dbc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44162,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (44161)","md5":"60a75362f1ab1ec1467b15dfa5246ef9","sha1":"2df29d48313b8fc98cc988f8e4420dd305c88568","sha256":"dfecb7161cf4445804ab24de804b75f0a1236851d33de36c7801a00f0275e34c","sha512":"47ddad7d90588e33263f44497f13963a6404b8fe1c8d69050c1f0f62688342621099e46518ed68f4a3ac8cc0840b2583ed03793fecaf2bcc529e2caddca93224","ssdeep":"768:VfOsPOTavO7fqO41qkoaBOfPOizacfqOzbOCFOYObO7aC2DidGrPmML0dhWH/saG:+7dBW0Ls0aJOw2VLDV4FSAGR","tlshash":"1f13a7845807a33fc572da4a484a6881324c5fdbd00c6fa6f3f4951b86cac79773af29","first_seen":"2026-02-05T19:01:16.377497Z","last_seen":"2026-05-17T09:16:47.495001Z","times_seen":27,"resource_available":true,"data":null}},"time_used":1188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":1053,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/PhoneSelect-Dp1B1C0p.js","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:41:01.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:57:24 GMT","end":"Tue, 12 May 2026 05:57:22 GMT"},"fingerprint":{"sha1":"F3:56:81:F1:C9:37:22:45:D6:3A:0B:FA:E7:C0:5B:3A:F4:5F:59:FB","sha256":"8D:96:E1:44:CF:5B:F4:3C:0C:81:7C:93:B5:26:2D:30:FD:C4:8C:7E:20:D1:44:00:71:A9:29:15:0A:58:A8:0E"}}},"request":{"raw":"GET /assets/PhoneSelect-Dp1B1C0p.js HTTP/1.1\r\nHost: ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/assets/reg-DUFtgkAs.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF; _scid_r=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:01 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D9thjG%2FMf%2B1uEtZ6eyNcJlaee812UbMfb3mZYduddt%2BlFKDF9FheWOTETmATtn8px5wLv0vt3%2BaeILbo%2Bo%2BZTAFK9TTjQu79%2FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"2ccda87a38fe7c322bd916756e822b52\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 9daa49a2bf40bc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15571,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (14209)","md5":"9a08bb51e99405c9bffe55b7162a0792","sha1":"15e8385e775d019f9a8ea876cc214f461ce93ee3","sha256":"449aa8d7b697f59fbd788a570427afef0bc3a5243dfb51bfdfea11297f1bbf46","sha512":"c8eeac5f83a902c0c37c9f31af810c804cde38174a1567bd06a173a7b8ddd54254ec39e92a6cafd7a585f7ba565ab0afe7a088249ffc8b7ec398e45a1521e2ef","ssdeep":"192:qw1xs/hrvvvkR1aCuhPU8mZsdisBTrP2BrhuGQ7w/yYf8/TkqqjNeGQTuOalAtFD:q4xj5a28wa8H5tnzxaF","tlshash":"1862bd6b00b007a6fbf19321f101f8a663c91e862857a5f38dbf136259a00f7b5cb65c","first_seen":"2026-02-05T19:01:16.378416Z","last_seen":"2026-03-25T09:58:52.037283Z","times_seen":15,"resource_available":true,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":203,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/LangLabel.vue_vue_type_script_setup_true_lang-CcP8QcXR.js","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:41:01.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:57:24 GMT","end":"Tue, 12 May 2026 05:57:22 GMT"},"fingerprint":{"sha1":"F3:56:81:F1:C9:37:22:45:D6:3A:0B:FA:E7:C0:5B:3A:F4:5F:59:FB","sha256":"8D:96:E1:44:CF:5B:F4:3C:0C:81:7C:93:B5:26:2D:30:FD:C4:8C:7E:20:D1:44:00:71:A9:29:15:0A:58:A8:0E"}}},"request":{"raw":"GET /assets/LangLabel.vue_vue_type_script_setup_true_lang-CcP8QcXR.js HTTP/1.1\r\nHost: ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/assets/reg-DUFtgkAs.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF; _scid_r=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:01 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q7Jb70FtjlZSDyFjaahVpxv3CDjA3WrNt79HlulOXs96C35D4OxX6GwfQeKVQo%2B%2FSLXPlblisKFMJq8amULlRp%2BWmAq%2FPwk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"17ffa5beaacd28c36d12e41335ff0062\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 9daa49a2bf52bc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":555,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (554)","md5":"c0473cd6461220374f0e07c0521f296a","sha1":"34fd52fe10007b9d1fcf3a9d3d58464c4066e515","sha256":"168869fb9126a58d9024d703f9509f6e44631020a90ccde48e4686a5b82bd46f","sha512":"01b02ba5bbf3b18b1f5c9dea23495c0990abece02ce753d15f83a11bd03af386a5b31e19e206c3cb2e644303038ab227a71f93b00b05d7e93ee39bb1fe807111","ssdeep":"","tlshash":"2ff0eb6f1c31c630c1b608183a97080010481f6ba224ea40e29a5e134ae286db3feb28","first_seen":"2026-02-05T19:01:16.398885Z","last_seen":"2026-05-17T09:16:47.473056Z","times_seen":27,"resource_available":true,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ustt.work/api/public/visit","fqdn":"api.ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:41:01.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:58:11 GMT","end":"Tue, 12 May 2026 05:54:33 GMT"},"fingerprint":{"sha1":"E9:3B:76:B6:64:3A:7F:7A:41:0F:D8:A9:7D:E8:E2:D6:95:44:B8:62","sha256":"CD:3F:BC:A9:48:C5:02:E5:43:8D:F8:B9:F0:4C:02:6A:A8:0B:C6:0F:65:90:9E:2A:A2:06:B5:0B:00:5E:73:71"}}},"request":{"raw":"OPTIONS /api/public/visit HTTP/1.1\r\nHost: api.ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,st-ctime,st-lang,st-ttgn\r\nReferer: https://ustt.work/\r\nOrigin: https://ustt.work\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:01 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ustt.work\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type,st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c34ETx6o%2F80ny7LhmOBnVxRABdwQxmgQOS%2FPO0SdQwg2jANN5akwBLsmwhpgQZ5yTabvzn%2B0r5nhFws6YptvGHoR%2FNErlLh6rQYMKKI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9daa49a5c90b57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"api.ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"api.ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/reg-DUFtgkAs.js","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:41:00.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:57:24 GMT","end":"Tue, 12 May 2026 05:57:22 GMT"},"fingerprint":{"sha1":"F3:56:81:F1:C9:37:22:45:D6:3A:0B:FA:E7:C0:5B:3A:F4:5F:59:FB","sha256":"8D:96:E1:44:CF:5B:F4:3C:0C:81:7C:93:B5:26:2D:30:FD:C4:8C:7E:20:D1:44:00:71:A9:29:15:0A:58:A8:0E"}}},"request":{"raw":"GET /assets/reg-DUFtgkAs.js HTTP/1.1\r\nHost: ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:00 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8UJrMMd7nC0tNVcJsK%2Brm7fiXjRQLthmacDfcmjAiEOupfb3gYhXOcTv2tz8rUzqpFa7zsJPP8HAZ2uqD4iaQJr7GTRhznY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6d0ab495f009977f1275efdb9ac41086\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 9daa499e3f9cbc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98810,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4941c57178e8fa99fcd00e2688c75abb","sha1":"e41b4ee1c89f77a6bd77ec83a90378abb641ce73","sha256":"82f0575636c0ac0d7b1c5a4779003931e8538233af5b43cdd8331ee3805db9d2","sha512":"660039218b601a8de2f72033e0ef9f03ae64a50ea9fd190835876f4439bd715ba1869913419c46a069dcfa794e3eda2167480fff54b8a603ee2ae2561af5871b","ssdeep":"3072:H5BfoyaxmAOX200jOsXoHtzxb/zdMr4pE:H5BfoyaxmAOX200jOsXoHtzxb/zdMr4O","tlshash":"42a3504ce0f9cefb98fb660d79074831b05e6b9fc1005ba6a3bc06555e63cd09a226d9","first_seen":"2026-03-11T10:54:57.989155Z","last_seen":"2026-03-25T09:58:52.034672Z","times_seen":10,"resource_available":true,"data":null}},"time_used":1266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":1039,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/LangLabel.vue_vue_type_script_setup_true_lang-CcP8QcXR.js","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:41:00.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:57:24 GMT","end":"Tue, 12 May 2026 05:57:22 GMT"},"fingerprint":{"sha1":"F3:56:81:F1:C9:37:22:45:D6:3A:0B:FA:E7:C0:5B:3A:F4:5F:59:FB","sha256":"8D:96:E1:44:CF:5B:F4:3C:0C:81:7C:93:B5:26:2D:30:FD:C4:8C:7E:20:D1:44:00:71:A9:29:15:0A:58:A8:0E"}}},"request":{"raw":"GET /assets/LangLabel.vue_vue_type_script_setup_true_lang-CcP8QcXR.js HTTP/1.1\r\nHost: ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:00 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q7Jb70FtjlZSDyFjaahVpxv3CDjA3WrNt79HlulOXs96C35D4OxX6GwfQeKVQo%2B%2FSLXPlblisKFMJq8amULlRp%2BWmAq%2FPwk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"17ffa5beaacd28c36d12e41335ff0062\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 9daa499e3f97bc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":555,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (554)","md5":"c0473cd6461220374f0e07c0521f296a","sha1":"34fd52fe10007b9d1fcf3a9d3d58464c4066e515","sha256":"168869fb9126a58d9024d703f9509f6e44631020a90ccde48e4686a5b82bd46f","sha512":"01b02ba5bbf3b18b1f5c9dea23495c0990abece02ce753d15f83a11bd03af386a5b31e19e206c3cb2e644303038ab227a71f93b00b05d7e93ee39bb1fe807111","ssdeep":"","tlshash":"2ff0eb6f1c31c630c1b608183a97080010481f6ba224ea40e29a5e134ae286db3feb28","first_seen":"2026-02-05T19:01:16.398885Z","last_seen":"2026-05-17T09:16:47.473056Z","times_seen":27,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/BaseUserTab.vue_vue_type_style_index_0_lang-D0m5JvsB.js","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:41:00.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:57:24 GMT","end":"Tue, 12 May 2026 05:57:22 GMT"},"fingerprint":{"sha1":"F3:56:81:F1:C9:37:22:45:D6:3A:0B:FA:E7:C0:5B:3A:F4:5F:59:FB","sha256":"8D:96:E1:44:CF:5B:F4:3C:0C:81:7C:93:B5:26:2D:30:FD:C4:8C:7E:20:D1:44:00:71:A9:29:15:0A:58:A8:0E"}}},"request":{"raw":"GET /assets/BaseUserTab.vue_vue_type_style_index_0_lang-D0m5JvsB.js HTTP/1.1\r\nHost: ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:00 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pRkkAvjTUBFYA4m4FBVEyA3l8FKFVevqt17Wzd1lcjPvE4q7pjb%2BF%2Bfx3zYJWBglaJ7QYBvYrAgcJvmVbTJeKWVCuz16cwtsgg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"fdec92095e1343769293aa3ad3e2c797\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 9daa499e3fb1bc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":948,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (947)","md5":"53fa1f9e18a130da0bba9bf5d92f935b","sha1":"1827bd524e09bb3fbcb08e3c3bdfd3244560f3ef","sha256":"e2d57ec033e87a31160a83ec9a8e95226cebfe17a13b89d1494bb7ec28636aea","sha512":"711ca051a384158bb136448fa109494040e72cdaadc2bd069272001d78c574e663a398aad15c73c574ceabf39c4796fa383ca94964dfe2f793c936c218597abf","ssdeep":"","tlshash":"9011888dacb9cfb604f204ac3e971069e094bf499614c926e09e4431325fdf8e68c32c","first_seen":"2026-02-05T19:01:16.398071Z","last_seen":"2026-05-17T09:16:47.466192Z","times_seen":27,"resource_available":true,"data":null}},"time_used":1381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ustt.work/upload/img/698c1d1b3966.webp","fqdn":"api.ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:41:02.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:58:11 GMT","end":"Tue, 12 May 2026 05:54:33 GMT"},"fingerprint":{"sha1":"E9:3B:76:B6:64:3A:7F:7A:41:0F:D8:A9:7D:E8:E2:D6:95:44:B8:62","sha256":"CD:3F:BC:A9:48:C5:02:E5:43:8D:F8:B9:F0:4C:02:6A:A8:0B:C6:0F:65:90:9E:2A:A2:06:B5:0B:00:5E:73:71"}}},"request":{"raw":"GET /upload/img/698c1d1b3966.webp HTTP/1.1\r\nHost: api.ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF; _scid_r=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11252\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Feb 2026 06:09:31 GMT\r\netag: \"698c1d1b-2bf4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NBilsjL4YJTJO3O1zvFGw931lPsRP99GNFnZmELe5jh7mdq9WCK0v2mrRealLkPuH%2BWBufZqXGFunuz6j6BEEgPLoehQBkSzfdRTY5M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9daa49a9dcbb57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11252,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 165x166, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c77f08f31228b41471f74df3fcbeda26","sha1":"9857dd80e191966627ff8182bc4475dabef0455d","sha256":"afaf31c8337abc17ad9295d6f6e70a7bd1516748cae6496f94a877b575100a71","sha512":"4cde51eeb87d28c53fb98c6a8124ee86332c9a7c1e78e82441b29dfde3c59b2e1b48690f21ab65a5d6ffdbf9f5400f98d8a6a9a781b9cc8b7d53fc0958668f52","ssdeep":"192:9mheq2fxkzeTImrUjd1HzAq2iO/obT5thr5TVPTGrYfAewzfV:02kzUYjd1Eh/05td5hPTCYf9wz9","tlshash":"0d32b0b961e1c8dc24d38d24f7a822517b2bd1c0905ff4bdbe6b29ce0111a115fb52be","first_seen":"2026-03-11T11:40:07.236276Z","last_seen":"2026-03-22T13:45:11.801458Z","times_seen":5,"resource_available":false,"data":null}},"time_used":883,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":385,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"api.ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"api.ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/BaseUserTab.vue_vue_type_style_index_0_lang-D0m5JvsB.js","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:41:01.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:57:24 GMT","end":"Tue, 12 May 2026 05:57:22 GMT"},"fingerprint":{"sha1":"F3:56:81:F1:C9:37:22:45:D6:3A:0B:FA:E7:C0:5B:3A:F4:5F:59:FB","sha256":"8D:96:E1:44:CF:5B:F4:3C:0C:81:7C:93:B5:26:2D:30:FD:C4:8C:7E:20:D1:44:00:71:A9:29:15:0A:58:A8:0E"}}},"request":{"raw":"GET /assets/BaseUserTab.vue_vue_type_style_index_0_lang-D0m5JvsB.js HTTP/1.1\r\nHost: ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/assets/reg-DUFtgkAs.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF; _scid_r=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:01 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pRkkAvjTUBFYA4m4FBVEyA3l8FKFVevqt17Wzd1lcjPvE4q7pjb%2BF%2Bfx3zYJWBglaJ7QYBvYrAgcJvmVbTJeKWVCuz16cwtsgg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"fdec92095e1343769293aa3ad3e2c797\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 9daa49a2bf48bc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":948,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (947)","md5":"53fa1f9e18a130da0bba9bf5d92f935b","sha1":"1827bd524e09bb3fbcb08e3c3bdfd3244560f3ef","sha256":"e2d57ec033e87a31160a83ec9a8e95226cebfe17a13b89d1494bb7ec28636aea","sha512":"711ca051a384158bb136448fa109494040e72cdaadc2bd069272001d78c574e663a398aad15c73c574ceabf39c4796fa383ca94964dfe2f793c936c218597abf","ssdeep":"","tlshash":"9011888dacb9cfb604f204ac3e971069e094bf499614c926e09e4431325fdf8e68c32c","first_seen":"2026-02-05T19:01:16.398071Z","last_seen":"2026-05-17T09:16:47.466192Z","times_seen":27,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/mine-bg-C73gSPUV.png","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:41:01.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:57:24 GMT","end":"Tue, 12 May 2026 05:57:22 GMT"},"fingerprint":{"sha1":"F3:56:81:F1:C9:37:22:45:D6:3A:0B:FA:E7:C0:5B:3A:F4:5F:59:FB","sha256":"8D:96:E1:44:CF:5B:F4:3C:0C:81:7C:93:B5:26:2D:30:FD:C4:8C:7E:20:D1:44:00:71:A9:29:15:0A:58:A8:0E"}}},"request":{"raw":"GET /assets/mine-bg-C73gSPUV.png HTTP/1.1\r\nHost: ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/assets/index-CQTX1o__.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF; _scid_r=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 24528\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"a5376923a066c2c838cdd62306a0f78a\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OlqPBECEyra6CWqF3GWTgM96OKVAfRt8fEfTAuUmp6DXXIn9XA2pq5QhEllXXgB0rA329%2FSXeiL2jwEF3Xc6fRudt4H49i3OdQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\ncf-ray: 9daa49a5bbdcbc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24528,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"ba5b3f2739f6389855777f589591cfac","sha1":"4934370fd51bf8ab79947ac7df8cebf37807df77","sha256":"402f652864cd12fce18a646214f2722cec83c8df29f56072c0ceac9f1f32f851","sha512":"0cb980c6b8c534a29502af7e5dd864431ddbb34c6e08e739393694e6d6382b54f330de79566a8fd0b91ddc3b8a7c7c1784051d5669566e48983954ce9f53984f","ssdeep":"384:Qx/gsw9iU20QctyIOwU26pazmvmeLp7FYTxMqKZOcPeoE3e/3EQK+wU:QxmlQcttrz6pasT9WTErRmU","tlshash":"7cb2e0006f5f4c09c6c6ecf20d2d2adc37475623b5faf1ac5af149b4814ba71ba41d91","first_seen":"2025-01-04T05:54:32.200705Z","last_seen":"2026-03-22T17:21:57.757416Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":952,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbY2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKxTOlOV.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:41:01.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbY2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKxTOlOV.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://ustt.work/\r\nOrigin: https://ustt.work\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21168\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 08 Mar 2026 05:31:57 GMT\r\nexpires: Mon, 08 Mar 2027 05:31:57 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:52:38 GMT\r\ncontent-type: font/woff2\r\nage: 281344\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21168,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21168, version 1.0","md5":"caf0dfde4e448468f09b7bed230206a4","sha1":"3ae621518210e658f2cec928e0c3aede6d0cefe2","sha256":"14425ba9c695763c1547f48a206b7aa60350a33ae23de09f0407877f3fcd89eb","sha512":"901b535ef03d223622abf9f8fb4af14bf80bf474c139229d4a0e50fb6f988569c3ffb2933c107a456052925b102325987d06ceaeee24db628de7598088305757","ssdeep":"384:2r0vIFlaUmbfLh0/QbqqSfF9KpME3dUJ3hPrJvn/86C4KJYHtSuOBFoXqfEeUu:AsIFlaBfVsQLSfFYaw4KJYN/Ov4KEeZ","tlshash":"c292d08f03ee3734f94036f0283bfcc283e95a321ae79236e09c7d455d5595264a6a47","first_seen":"2024-12-28T16:03:38.26782Z","last_seen":"2026-06-13T15:16:55.11251Z","times_seen":1014,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ustt.work/upload/img/698c1d3636d1.webp","fqdn":"api.ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:40:59.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:58:11 GMT","end":"Tue, 12 May 2026 05:54:33 GMT"},"fingerprint":{"sha1":"E9:3B:76:B6:64:3A:7F:7A:41:0F:D8:A9:7D:E8:E2:D6:95:44:B8:62","sha256":"CD:3F:BC:A9:48:C5:02:E5:43:8D:F8:B9:F0:4C:02:6A:A8:0B:C6:0F:65:90:9E:2A:A2:06:B5:0B:00:5E:73:71"}}},"request":{"raw":"GET /upload/img/698c1d3636d1.webp HTTP/1.1\r\nHost: api.ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF; _scid_r=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:00 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11252\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Feb 2026 06:09:58 GMT\r\netag: \"698c1d36-2bf4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c3oz93mSO6PvyLN%2FZfJBBM9mfTBzS90GrEycrubdEO%2Bm2FBUDC9LPBglS8KQ4AZV%2FDXxMErXVGj7goUt6o0UIGpBkzqXqc%2FBbcAXoyA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9daa49994da457e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11252,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 165x166, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c77f08f31228b41471f74df3fcbeda26","sha1":"9857dd80e191966627ff8182bc4475dabef0455d","sha256":"afaf31c8337abc17ad9295d6f6e70a7bd1516748cae6496f94a877b575100a71","sha512":"4cde51eeb87d28c53fb98c6a8124ee86332c9a7c1e78e82441b29dfde3c59b2e1b48690f21ab65a5d6ffdbf9f5400f98d8a6a9a781b9cc8b7d53fc0958668f52","ssdeep":"192:9mheq2fxkzeTImrUjd1HzAq2iO/obT5thr5TVPTGrYfAewzfV:02kzUYjd1Eh/05td5hPTCYf9wz9","tlshash":"0d32b0b961e1c8dc24d38d24f7a822517b2bd1c0905ff4bdbe6b29ce0111a115fb52be","first_seen":"2026-03-11T11:40:07.236276Z","last_seen":"2026-03-22T13:45:11.801458Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1078,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":410,"receive":668,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"api.ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"api.ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:40:59.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v50/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://ustt.work/\r\nOrigin: https://ustt.work\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20612\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 08 Mar 2026 00:18:58 GMT\r\nexpires: Mon, 08 Mar 2027 00:18:58 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 18 Nov 2025 19:00:10 GMT\r\ncontent-type: font/woff2\r\nage: 300122\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20612,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20612, version 1.0","md5":"b07da7aa3e4f363c5cdbc11312239e8c","sha1":"47bf5b2f24ea4a4caafccc89b9d2a6677ef9e3b8","sha256":"e44c11f4834bdd4d6b6da7b8ee5eaebc8acb41250cd6bce5cc82ea8262140eaa","sha512":"420729406b315d8af34b62b78f39e763f5cf33cbf94467457b393fde0573dd7ffc6a23f25680988f9b82a4a3b719876ff76f3e1db047ce82615f544fc3a82532","ssdeep":"384:k5Eu+yl5Y9RpwjjmD/8Qu+POP9w+oB7rezldH9W4EMs8qCr9WvS80M8T4PTEXPFw:YEu+/Jw3FF+WP9DC/ez79jcCrb8BK4Eq","tlshash":"8192df6bce71497ac711262c773917addb8b44f627f91f2ba0562411c7b8e015c2cc7a","first_seen":"2025-01-09T06:25:34.419113Z","last_seen":"2026-06-13T17:07:32.74051Z","times_seen":47070,"resource_available":false,"data":null}},"time_used":1731,"timings":{"blocked":380,"dns":1,"connect":40,"send":0,"wait":194,"receive":773,"ssl":340},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ustt.work/api/public/home?d=1773229259737\u0026language_type=en","fqdn":"api.ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:40:59.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:58:11 GMT","end":"Tue, 12 May 2026 05:54:33 GMT"},"fingerprint":{"sha1":"E9:3B:76:B6:64:3A:7F:7A:41:0F:D8:A9:7D:E8:E2:D6:95:44:B8:62","sha256":"CD:3F:BC:A9:48:C5:02:E5:43:8D:F8:B9:F0:4C:02:6A:A8:0B:C6:0F:65:90:9E:2A:A2:06:B5:0B:00:5E:73:71"}}},"request":{"raw":"GET /api/public/home?d=1773229259737\u0026language_type=en HTTP/1.1\r\nHost: api.ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/\r\nst-lang: en\r\nst-ctime: 1773229259737\r\nst-ttgn: a20b735de0aace0ae01abc535c79b417\r\nOrigin: https://ustt.work\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF; _scid_r=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:00 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ustt.work\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DGAMuCfc%2B4Z7UVpCa5Iyk0AKABPMb5JZLV5igLR9B78N4Uyd5XZUNQjodo7%2BWZXIDIW7X53s6RWMcCSt3wj5kp%2Bw3aVgPun6Q0xocDM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9daa499a990e57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12766,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b468a91eb174e4a074c60a8e16137846","sha1":"043fcfc64a07012fa00a5a64c76f6bbcd2cfa8c9","sha256":"6f59cbc97def2a32557a711a28409be0ea88db53f1ac977f0388a2302674809e","sha512":"6069f86a24d49373bc832757b70877154eda2a56c4f1781ccdcfaf295ae417e9313ad65ea6574851f7c777e78444bdf96b475c98f74b67cbc39ed302cd453e65","ssdeep":"384:/J3+Xl4+OdjIVC2XJQlAK+RRNzpYTKRweMBZJ:B36l4+O9IVC25QlAK+tGeiJ","tlshash":"5e42962b158d4430c6f236c43eceb492636cb1661fc95dad9bbb9f9922d804a167f483","first_seen":"2026-03-11T11:41:11.415483Z","last_seen":"2026-03-11T11:41:11.415483Z","times_seen":1,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":461,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"api.ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"api.ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/index-c7An_eE9.css","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:41:00.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:57:24 GMT","end":"Tue, 12 May 2026 05:57:22 GMT"},"fingerprint":{"sha1":"F3:56:81:F1:C9:37:22:45:D6:3A:0B:FA:E7:C0:5B:3A:F4:5F:59:FB","sha256":"8D:96:E1:44:CF:5B:F4:3C:0C:81:7C:93:B5:26:2D:30:FD:C4:8C:7E:20:D1:44:00:71:A9:29:15:0A:58:A8:0E"}}},"request":{"raw":"GET /assets/index-c7An_eE9.css HTTP/1.1\r\nHost: ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF; _scid_r=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:00 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ReN3C6kw1MHxRIRLhzGgQD4w6FIcCdwLye6WDhQWgU99UoVDj8VZekjpbv5YIivG3%2F8bJytD4hzfWy5k1pdIIHZxihHtd4hEA%3D%3D\"}]}\r\netag: W/\"1701a6ccf3990df83fa5844f5f1083ac\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 9daa499e2f7cbc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2327,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2326)","md5":"7bd4a66586ac0efcaee53f78939a74ba","sha1":"506817c8069af3f01be6682795c718270bdfafa5","sha256":"8f0b1520474e30bcdf8479f160f6e797bfcda0b6391f1227b1bb8d3fa131e74c","sha512":"32e6864dae9dac89056c4ba748f1c9419c58c48447653c67631b2cefd408d585c5e410d7c75734db1122aa6164d5a47b1e864d09915f07449b366f2687c4e2c4","ssdeep":"","tlshash":"ce41f567daa055faaf33a1991f5585cab13ce9208e00df72b180d11c8dcf6f626136ec","first_seen":"2025-05-07T21:58:18.032036Z","last_seen":"2026-05-30T15:36:38.266658Z","times_seen":54,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/BaseAlarmLogoBtn.vue_vue_type_style_index_0_lang-BlUVKB8I.js","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:41:01.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:57:24 GMT","end":"Tue, 12 May 2026 05:57:22 GMT"},"fingerprint":{"sha1":"F3:56:81:F1:C9:37:22:45:D6:3A:0B:FA:E7:C0:5B:3A:F4:5F:59:FB","sha256":"8D:96:E1:44:CF:5B:F4:3C:0C:81:7C:93:B5:26:2D:30:FD:C4:8C:7E:20:D1:44:00:71:A9:29:15:0A:58:A8:0E"}}},"request":{"raw":"GET /assets/BaseAlarmLogoBtn.vue_vue_type_style_index_0_lang-BlUVKB8I.js HTTP/1.1\r\nHost: ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/assets/default-CNe2IRBi.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF; _scid_r=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:01 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3k%2FemoHvLGMGtlz%2Bxw8AS0jAOc1dz9mA5AWevmH3GObkeVEd7IaNwAogNswGdK8WTc2PfOcjmn6HrlukhiE8NtCPh4L9h7kOFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"8a51457d81e671d435123993c8b2bca3\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 9daa49a3a88dbc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":531,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (530)","md5":"e0d346fe8fc6ee6d247b669ee7c69c47","sha1":"2811c80b84b9b1389e3f1a12db8ea38e30e04404","sha256":"9c827335a55db1636bedfb00d28e42b6383edcccaf078569766f0c42f826b5f1","sha512":"92ba38f0b1fb1ae19fb0fb39a88c9d880a351d878b215445fd897817b107686deec94338162a8cc4fe45ca905094aa0a192ca597bb499b3e2c48e9c0515560cd","ssdeep":"","tlshash":"2ff0c01c5c11caf9863700493e5660a104580f7e655cba81f9d618119fe20bc3b2b72c","first_seen":"2026-02-05T19:01:16.396385Z","last_seen":"2026-05-17T09:16:47.403141Z","times_seen":27,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ustt.work/upload/img/698c1d1b3966.webp","fqdn":"api.ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:41:01.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:58:11 GMT","end":"Tue, 12 May 2026 05:54:33 GMT"},"fingerprint":{"sha1":"E9:3B:76:B6:64:3A:7F:7A:41:0F:D8:A9:7D:E8:E2:D6:95:44:B8:62","sha256":"CD:3F:BC:A9:48:C5:02:E5:43:8D:F8:B9:F0:4C:02:6A:A8:0B:C6:0F:65:90:9E:2A:A2:06:B5:0B:00:5E:73:71"}}},"request":{"raw":"GET /upload/img/698c1d1b3966.webp HTTP/1.1\r\nHost: api.ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF; _scid_r=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11252\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Feb 2026 06:09:31 GMT\r\netag: \"698c1d1b-2bf4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yk45FUjL8onughCCdYFyxkKw7p8b7iDyD0LGUz3f3rC5P6pGsrcpmuVpLRQdmiAlXCiC%2Fv%2FaW5EhEF0v2g0kRkw641RhDSlG9VfnbcI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9daa49a53f7157e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11252,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 165x166, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c77f08f31228b41471f74df3fcbeda26","sha1":"9857dd80e191966627ff8182bc4475dabef0455d","sha256":"afaf31c8337abc17ad9295d6f6e70a7bd1516748cae6496f94a877b575100a71","sha512":"4cde51eeb87d28c53fb98c6a8124ee86332c9a7c1e78e82441b29dfde3c59b2e1b48690f21ab65a5d6ffdbf9f5400f98d8a6a9a781b9cc8b7d53fc0958668f52","ssdeep":"192:9mheq2fxkzeTImrUjd1HzAq2iO/obT5thr5TVPTGrYfAewzfV:02kzUYjd1Eh/05td5hPTCYf9wz9","tlshash":"0d32b0b961e1c8dc24d38d24f7a822517b2bd1c0905ff4bdbe6b29ce0111a115fb52be","first_seen":"2026-03-11T11:40:07.236276Z","last_seen":"2026-03-22T13:45:11.801458Z","times_seen":5,"resource_available":false,"data":null}},"time_used":642,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":412,"receive":230,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"api.ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"api.ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ustt.work/upload/img/698c1d1b3966.webp","fqdn":"api.ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:41:02.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:58:11 GMT","end":"Tue, 12 May 2026 05:54:33 GMT"},"fingerprint":{"sha1":"E9:3B:76:B6:64:3A:7F:7A:41:0F:D8:A9:7D:E8:E2:D6:95:44:B8:62","sha256":"CD:3F:BC:A9:48:C5:02:E5:43:8D:F8:B9:F0:4C:02:6A:A8:0B:C6:0F:65:90:9E:2A:A2:06:B5:0B:00:5E:73:71"}}},"request":{"raw":"GET /upload/img/698c1d1b3966.webp HTTP/1.1\r\nHost: api.ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF; _scid_r=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11252\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Feb 2026 06:09:31 GMT\r\netag: \"698c1d1b-2bf4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tXT8sfvZECWQaYx6L%2FEiP8xTzdoclN2iDHYMCSAGUHOd61lKxPnY9dGlM87O18sNgKQ6d%2BuOL0X4kmFDNbDuFd28rOBIj13kZRQMAZ0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9daa49a9dcb757e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11252,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 165x166, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c77f08f31228b41471f74df3fcbeda26","sha1":"9857dd80e191966627ff8182bc4475dabef0455d","sha256":"afaf31c8337abc17ad9295d6f6e70a7bd1516748cae6496f94a877b575100a71","sha512":"4cde51eeb87d28c53fb98c6a8124ee86332c9a7c1e78e82441b29dfde3c59b2e1b48690f21ab65a5d6ffdbf9f5400f98d8a6a9a781b9cc8b7d53fc0958668f52","ssdeep":"192:9mheq2fxkzeTImrUjd1HzAq2iO/obT5thr5TVPTGrYfAewzfV:02kzUYjd1Eh/05td5hPTCYf9wz9","tlshash":"0d32b0b961e1c8dc24d38d24f7a822517b2bd1c0905ff4bdbe6b29ce0111a115fb52be","first_seen":"2026-03-11T11:40:07.236276Z","last_seen":"2026-03-22T13:45:11.801458Z","times_seen":5,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":406,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"api.ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"api.ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:40:45.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Wed, 11 Mar 2026 11:40:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 10 Mar 2026 10:53:09 GMT\r\netag: W/\"69aff815-1c106\"\r\nexpires: Sun, 15 Mar 2026 11:40:46 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":114950,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"bb0a2fecf6cd27fba9cd29610fd2ccdc","sha1":"7546ed807d56be081be97fa1e4859381ecccf58e","sha256":"dc67f1e084e069a3fb629f3154765856fe0aa805a4e138bc42c228bc3d656a78","sha512":"5350795e68c371956350f88354aac62900d7fc5974817e93f49f218fa60becda436da0a8bf17d6239e2ef882cee0b18bfe66e181baa6f1ca04b57817c2920166","ssdeep":"1536:pO5TpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:s5TpRdfcKFU7Rx1H","tlshash":"31b33e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","first_seen":"2026-03-10T21:38:17.367441Z","last_seen":"2026-06-13T08:38:30.483101Z","times_seen":765,"resource_available":true,"data":null}},"time_used":1470,"timings":{"blocked":651,"dns":1,"connect":53,"send":0,"wait":163,"receive":0,"ssl":600},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/favicon.ico","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:40:49.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:57:24 GMT","end":"Tue, 12 May 2026 05:57:22 GMT"},"fingerprint":{"sha1":"F3:56:81:F1:C9:37:22:45:D6:3A:0B:FA:E7:C0:5B:3A:F4:5F:59:FB","sha256":"8D:96:E1:44:CF:5B:F4:3C:0C:81:7C:93:B5:26:2D:30:FD:C4:8C:7E:20:D1:44:00:71:A9:29:15:0A:58:A8:0E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF; _scid_r=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:40:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w3pVlOA2HsotKwj%2F7eWEh4feczJzgXhIWEQm08PlP%2BjbsItLDRlHbcJsaAR%2FRZI%2B4HTYjVH1BtfJWll2wB1ISaNTIdoVpUd9og%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: REVALIDATED\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9daa495a9c6fbc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10439,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"0ecb936a866d705745ab60262a2030b9","sha1":"393a6ab531497f1fe2051e9cedb328ad8edc063a","sha256":"7560ac4589ee5d1878f0b4a93e130e1841a9c7ccd0bd078dae14d202face444b","sha512":"130e16d6a3a8b35471386f3d2a0f04d74e537777d6b97fcdf4b29a8573c6e3d5ce8ce0eb003ecfe2a275dee5ce313e935e865f3a667eef481cda984190f50f20","ssdeep":"192:SUYfkdoq1aBIBksXZhu8M0k9X+T60YDIVkKy5cbjlxixIb8IuQGthsriMHLqj6c6:xYKkBzsju8pk9X+OIjlYAuN4qLlLC1","tlshash":"c2221f5b2ce66028630370ba9d7ff50a7621001b1998ec007d0cd7345f99a7dabb5eed","first_seen":"2026-02-05T19:01:16.393521Z","last_seen":"2026-05-17T09:16:47.39891Z","times_seen":27,"resource_available":true,"data":null}},"time_used":8815,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8774,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ustt.work/api/public/get_lang_json?d=1773229259725\u0026lang=en","fqdn":"api.ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:40:59.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:58:11 GMT","end":"Tue, 12 May 2026 05:54:33 GMT"},"fingerprint":{"sha1":"E9:3B:76:B6:64:3A:7F:7A:41:0F:D8:A9:7D:E8:E2:D6:95:44:B8:62","sha256":"CD:3F:BC:A9:48:C5:02:E5:43:8D:F8:B9:F0:4C:02:6A:A8:0B:C6:0F:65:90:9E:2A:A2:06:B5:0B:00:5E:73:71"}}},"request":{"raw":"GET /api/public/get_lang_json?d=1773229259725\u0026lang=en HTTP/1.1\r\nHost: api.ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/\r\nst-lang: en\r\nst-ctime: 1773229259725\r\nst-ttgn: ff472a5d78fb453b6559e8f3f7578c74\r\nOrigin: https://ustt.work\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF; _scid_r=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:00 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ustt.work\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yns3TOYOm3ES87oG7R6sgN0k2KTA%2FAyQ9qj%2FcPeZJJWOkem0dXdFx2TEtONTyT6%2BkaRsdpd66q%2FlUzdAiIo8CW8tkwmXezWlYK0Lg4c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9daa499a78b957e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28221,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4dc696d167f65a8bb5e05964af550a44","sha1":"da43badbf9bf06a875b911307c11f4c08613b73c","sha256":"9a36aef07a58cdf287e673fa6c3b2ee0c6a3159252d44ee13c571bfaeb09c2a8","sha512":"023c02d5efad933ddba469b9b9df580aa140729747a7ada529b1b374b28d644e12ca6e494b898c0a7433fad548e1ae5475d058028dd22db83944df77eb7fee6b","ssdeep":"768:ddeJv+SvU0zOorYXuIWB6yCvmBX961VC/pM2r:ddO++zOoLIWIyCE9","tlshash":"40c2b44d26170e779fd34bc174ab2e1626fc22d30285484e48ed892852def59f37f68a","first_seen":"2025-11-09T05:08:26.489196Z","last_seen":"2026-03-25T09:59:51.702447Z","times_seen":35,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"api.ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"api.ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/default-CEM5KKZR.css","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:41:00.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:57:24 GMT","end":"Tue, 12 May 2026 05:57:22 GMT"},"fingerprint":{"sha1":"F3:56:81:F1:C9:37:22:45:D6:3A:0B:FA:E7:C0:5B:3A:F4:5F:59:FB","sha256":"8D:96:E1:44:CF:5B:F4:3C:0C:81:7C:93:B5:26:2D:30:FD:C4:8C:7E:20:D1:44:00:71:A9:29:15:0A:58:A8:0E"}}},"request":{"raw":"GET /assets/default-CEM5KKZR.css HTTP/1.1\r\nHost: ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF; _scid_r=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:00 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B7H%2FY4D9FCmGTq3qQM8tT9Im610UkfuC9deL1PDQpqKiIQHIlfOEQD%2BMNnG%2BRymIPM6fkWl0fKtmfPFSIVEZKHCNSos2m3o%3D\"}]}\r\netag: W/\"65abc7629c102df75dddca71b3b932ea\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 9daa499e1f5ebc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7188,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (7187)","md5":"5932e874f4962c033708d400e88008bc","sha1":"729b4ac03cf073218eac93b4a3bd68af07a8c364","sha256":"8052f6ae8cd8b4ad10fae8257eb5dbd6a2e9d8dc37109eb6d3d245f65a0d0b8d","sha512":"243a49507b6ee47f3ec2f1a922fc16cc7c749716d01b6f1062f3b2df5a65180d7477c9d317981a8f379993962443acbd0150d80cf6708f1b307bb08ea8407694","ssdeep":"96:uUkat9lAqhvtjr33m8O+trVG1mhg2/z5LJwyksVuVw:uUkatjtTf33m8O+NVGg6CPwyksVuVw","tlshash":"4fe1bf142438732e9a77f1a766ff518c4824e652d6536b8eb313b50059e7b933132bcb","first_seen":"2026-01-07T14:49:26.950073Z","last_seen":"2026-05-17T09:16:47.499123Z","times_seen":43,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ustt.work/api/public/visit","fqdn":"api.ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:41:01.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:58:11 GMT","end":"Tue, 12 May 2026 05:54:33 GMT"},"fingerprint":{"sha1":"E9:3B:76:B6:64:3A:7F:7A:41:0F:D8:A9:7D:E8:E2:D6:95:44:B8:62","sha256":"CD:3F:BC:A9:48:C5:02:E5:43:8D:F8:B9:F0:4C:02:6A:A8:0B:C6:0F:65:90:9E:2A:A2:06:B5:0B:00:5E:73:71"}}},"request":{"raw":"POST /api/public/visit HTTP/1.1\r\nHost: api.ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/\r\nContent-Type: application/json\r\nst-lang: en\r\nst-ctime: 1773229261663\r\nst-ttgn: d5c9e87681297801790b4de31e7f3e00\r\nContent-Length: 55\r\nOrigin: https://ustt.work\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF; _scid_r=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":55,"data":"{\"code\":\"510931\",\"language\":\"en\",\"device\":\"windows pc\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:02 GMT\r\ncontent-type: application/json\r\ncontent-length: 40\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ustt.work\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VsxjkeRsrruQWo%2F11QIilyf1JITNTceM1MVn0MdPoHrdwN2r7UXrCuttGW0ECvikRFeqP9qnx%2Bc1QUGkMNU8psnz32lMCLsfl9E84Z0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9daa49a6db8357e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dac22ea265ef2b988f6f7e6e88fd6076","sha1":"8eb3ea36343bacab1c48f88e22db10c0883d52e4","sha256":"b7c34be4da9a56e57a6dbb79e887c829a077dac9cbd3d4226d7fc20e5fddbd17","sha512":"5da4520e219e0f158cf84c790a0c0168bd7c1710a2f37e9900cb33e7c9bcab4ffa9e8bdef10cef64656a59ae5ad5a083c3872ee45729428efd78929225f89fea","ssdeep":"","tlshash":"409004111c0454435c403c4d0143475035d13574410503c0405c503cc70d0f5f445c34","first_seen":"2023-06-08T13:28:08Z","last_seen":"2026-06-13T03:38:45.118683Z","times_seen":207,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"api.ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"api.ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/#/reg?ref=510931","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-11T11:40:44.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:57:24 GMT","end":"Tue, 12 May 2026 05:57:22 GMT"},"fingerprint":{"sha1":"F3:56:81:F1:C9:37:22:45:D6:3A:0B:FA:E7:C0:5B:3A:F4:5F:59:FB","sha256":"8D:96:E1:44:CF:5B:F4:3C:0C:81:7C:93:B5:26:2D:30:FD:C4:8C:7E:20:D1:44:00:71:A9:29:15:0A:58:A8:0E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Mar 2026 11:40:45 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jigTNyBtQ6zK2vbYiwB4d8%2B4g0WkpVfKETSAp5SeYGFsd0WTk%2BXyUDSseOg7ND5cV1fqBGWFgkFhMnz0woH2TdseELSrJkeHdA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9daa493f3981b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10439,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"0ecb936a866d705745ab60262a2030b9","sha1":"393a6ab531497f1fe2051e9cedb328ad8edc063a","sha256":"7560ac4589ee5d1878f0b4a93e130e1841a9c7ccd0bd078dae14d202face444b","sha512":"130e16d6a3a8b35471386f3d2a0f04d74e537777d6b97fcdf4b29a8573c6e3d5ce8ce0eb003ecfe2a275dee5ce313e935e865f3a667eef481cda984190f50f20","ssdeep":"192:SUYfkdoq1aBIBksXZhu8M0k9X+T60YDIVkKy5cbjlxixIb8IuQGthsriMHLqj6c6:xYKkBzsju8pk9X+OIjlYAuN4qLlLC1","tlshash":"c2221f5b2ce66028630370ba9d7ff50a7621001b1998ec007d0cd7345f99a7dabb5eed","first_seen":"2026-02-05T19:01:16.393521Z","last_seen":"2026-05-17T09:16:47.39891Z","times_seen":27,"resource_available":true,"data":null}},"time_used":1236,"timings":{"blocked":553,"dns":50,"connect":40,"send":0,"wait":126,"receive":0,"ssl":464},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/index-CQTX1o__.css","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:40:45.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:57:24 GMT","end":"Tue, 12 May 2026 05:57:22 GMT"},"fingerprint":{"sha1":"F3:56:81:F1:C9:37:22:45:D6:3A:0B:FA:E7:C0:5B:3A:F4:5F:59:FB","sha256":"8D:96:E1:44:CF:5B:F4:3C:0C:81:7C:93:B5:26:2D:30:FD:C4:8C:7E:20:D1:44:00:71:A9:29:15:0A:58:A8:0E"}}},"request":{"raw":"GET /assets/index-CQTX1o__.css HTTP/1.1\r\nHost: ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:40:45 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FB%2BRQG%2Ft%2F6SPesJLyZapNgheYkKqv2mHQuYq30VsTTNrdZxsnF1TExDLvyYfOgJ0BXcqnmM0A3DbCk8iHNY%2FRmvese%2BvrH%2FdRQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c9a692ef329cbb4c55aa6ed216290797\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\ncf-ray: 9daa4940dc95bc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":988907,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"37cc90a6f337deca7f3ee541f675b7a9","sha1":"642563d1e3030ac8974ad7f64e6b23b974b57c23","sha256":"5cc7df09482dbb0cdb97a69c43ede6c2b8039c54eca476179a8ae5fb05cf235a","sha512":"d7d772a8c6015329252f48af0c33dfcddef8547b84d487e7b26738a6074c216e74ee1a24ec4befe814a859a9082d8f3a6c8cb42baaba0aca22f161901e93605a","ssdeep":"3072:UnNIClDsIxuVSg8khUcd6fwefeRAkNGaKF2HrHE4hB+JIusF3QoU8XTW8icfy0ZB:Unxsag8mdkfMNA2NB+AqBQTZguucD","tlshash":"c425f9723701882ce9fb8e3302db6d0c7019e11a7b33456de11e5e7447aa29b976636f","first_seen":"2026-01-15T21:47:31.421139Z","last_seen":"2026-05-17T09:16:47.491495Z","times_seen":29,"resource_available":false,"data":null}},"time_used":2920,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":2839,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ustt.work/api/public/init?d=1773229258618","fqdn":"api.ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:40:58.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:58:11 GMT","end":"Tue, 12 May 2026 05:54:33 GMT"},"fingerprint":{"sha1":"E9:3B:76:B6:64:3A:7F:7A:41:0F:D8:A9:7D:E8:E2:D6:95:44:B8:62","sha256":"CD:3F:BC:A9:48:C5:02:E5:43:8D:F8:B9:F0:4C:02:6A:A8:0B:C6:0F:65:90:9E:2A:A2:06:B5:0B:00:5E:73:71"}}},"request":{"raw":"OPTIONS /api/public/init?d=1773229258618 HTTP/1.1\r\nHost: api.ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-ttgn\r\nReferer: https://ustt.work/\r\nOrigin: https://ustt.work\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Mar 2026 11:40:59 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ustt.work\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yMMBJxnRASQGR7PlAE6f1ExYLGnoIPjxuGpNQV9xlXjqWuLpCYl3Ow0tGe7W4xWcqwyCOKUF%2BzqZX9SQanOGnmzHNhAfsdmh7qJgpAg%3D\"}]}\r\ncf-ray: 9daa49942b9b9e07-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":935,"timings":{"blocked":261,"dns":1,"connect":40,"send":0,"wait":413,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"api.ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"api.ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/BaseUserTab-DVdcH4fp.css","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:41:00.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:57:24 GMT","end":"Tue, 12 May 2026 05:57:22 GMT"},"fingerprint":{"sha1":"F3:56:81:F1:C9:37:22:45:D6:3A:0B:FA:E7:C0:5B:3A:F4:5F:59:FB","sha256":"8D:96:E1:44:CF:5B:F4:3C:0C:81:7C:93:B5:26:2D:30:FD:C4:8C:7E:20:D1:44:00:71:A9:29:15:0A:58:A8:0E"}}},"request":{"raw":"GET /assets/BaseUserTab-DVdcH4fp.css HTTP/1.1\r\nHost: ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF; _scid_r=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:00 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KsBsz2EfAYdnNZeIwJ%2BsT9sthqY6MaQdQB31%2BiC6stLbR683ZfkwCDF%2Bt%2BKL1CeItEQJxNYobiJ6bk3FLLnBVLD%2FCdYbYqNgcQ%3D%3D\"}]}\r\netag: W/\"d220730bd5c0a69dcefb0e619cfae803\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: 9daa499e2f83bc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":220,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2571e9c1678f7890b2944076ddacb4af","sha1":"d36697fae0e1aecd7f151e50ea3808c9f155e5f0","sha256":"d27ee7a4a4e398c3fd2bb36d227fa8d1a2c0d648ababbf68b900c279709230b2","sha512":"6c1a50c9b8cc632500a99e5ed2e7b6b4f1ef621db803b52a9c4a59fbcf03bd6fce5ae57bda4b07f1b4bef632dde82ace2b87e26ebbf6a3aeaa64b620a5147500","ssdeep":"","tlshash":"37d0a91c0894f0be28c9b2a81fa852dc08aa2205fe035fa83024bd2101d6af5213bc6f","first_seen":"2025-09-11T15:59:47.603631Z","last_seen":"2026-06-10T21:35:42.622457Z","times_seen":94,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/BaseAlarmLogoBtn.vue_vue_type_style_index_0_lang-BlUVKB8I.js","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:41:00.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:57:24 GMT","end":"Tue, 12 May 2026 05:57:22 GMT"},"fingerprint":{"sha1":"F3:56:81:F1:C9:37:22:45:D6:3A:0B:FA:E7:C0:5B:3A:F4:5F:59:FB","sha256":"8D:96:E1:44:CF:5B:F4:3C:0C:81:7C:93:B5:26:2D:30:FD:C4:8C:7E:20:D1:44:00:71:A9:29:15:0A:58:A8:0E"}}},"request":{"raw":"GET /assets/BaseAlarmLogoBtn.vue_vue_type_style_index_0_lang-BlUVKB8I.js HTTP/1.1\r\nHost: ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:00 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3k%2FemoHvLGMGtlz%2Bxw8AS0jAOc1dz9mA5AWevmH3GObkeVEd7IaNwAogNswGdK8WTc2PfOcjmn6HrlukhiE8NtCPh4L9h7kOFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"8a51457d81e671d435123993c8b2bca3\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 9daa499e3f94bc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":531,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (530)","md5":"e0d346fe8fc6ee6d247b669ee7c69c47","sha1":"2811c80b84b9b1389e3f1a12db8ea38e30e04404","sha256":"9c827335a55db1636bedfb00d28e42b6383edcccaf078569766f0c42f826b5f1","sha512":"92ba38f0b1fb1ae19fb0fb39a88c9d880a351d878b215445fd897817b107686deec94338162a8cc4fe45ca905094aa0a192ca597bb499b3e2c48e9c0515560cd","ssdeep":"","tlshash":"2ff0c01c5c11caf9863700493e5660a104580f7e655cba81f9d618119fe20bc3b2b72c","first_seen":"2026-02-05T19:01:16.396385Z","last_seen":"2026-05-17T09:16:47.403141Z","times_seen":27,"resource_available":true,"data":null}},"time_used":1147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":960,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/BaseLogo.vue_vue_type_script_setup_true_lang-7nWErKjB.js","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:41:00.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:57:24 GMT","end":"Tue, 12 May 2026 05:57:22 GMT"},"fingerprint":{"sha1":"F3:56:81:F1:C9:37:22:45:D6:3A:0B:FA:E7:C0:5B:3A:F4:5F:59:FB","sha256":"8D:96:E1:44:CF:5B:F4:3C:0C:81:7C:93:B5:26:2D:30:FD:C4:8C:7E:20:D1:44:00:71:A9:29:15:0A:58:A8:0E"}}},"request":{"raw":"GET /assets/BaseLogo.vue_vue_type_script_setup_true_lang-7nWErKjB.js HTTP/1.1\r\nHost: ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:00 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W6QZzZPCEKbwPX0ZTFmkK4iDtJ9cVyUClglcaVHsR826%2F4YCfO2IwxZtRSj7Uwhxh%2FNSK8vceZv9zgbwNLI2uaBf6VNZ64H%2Bsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"e8b14f2061a9946a195984e316c2a84b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 9daa499e3f9abc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":585,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (584)","md5":"c1398055fb6f0f194d4a87200716272a","sha1":"78af884bf064044061312346e7a2a7cf86404d09","sha256":"56bcd2ed3ccaff4779f097f15d833a3155243e95559c03e60606e40fb9e1dbc6","sha512":"55527c1208a85eb2c7123afe8fc40a6467997dcfb26acc43695a60e107532901c2bc6c33fbd0e43a3496a8e3a4ee3a75fc502824bb30200e2319e36ded6748a4","ssdeep":"","tlshash":"9af0e14e5c6e41fa95a3545c2b4b908021084e9ec634ab40f2f827356241c5d741db38","first_seen":"2026-02-05T19:01:16.38331Z","last_seen":"2026-05-17T09:16:47.47021Z","times_seen":27,"resource_available":true,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/PhoneSelect-Dp1B1C0p.js","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:41:00.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:57:24 GMT","end":"Tue, 12 May 2026 05:57:22 GMT"},"fingerprint":{"sha1":"F3:56:81:F1:C9:37:22:45:D6:3A:0B:FA:E7:C0:5B:3A:F4:5F:59:FB","sha256":"8D:96:E1:44:CF:5B:F4:3C:0C:81:7C:93:B5:26:2D:30:FD:C4:8C:7E:20:D1:44:00:71:A9:29:15:0A:58:A8:0E"}}},"request":{"raw":"GET /assets/PhoneSelect-Dp1B1C0p.js HTTP/1.1\r\nHost: ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:00 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D9thjG%2FMf%2B1uEtZ6eyNcJlaee812UbMfb3mZYduddt%2BlFKDF9FheWOTETmATtn8px5wLv0vt3%2BaeILbo%2Bo%2BZTAFK9TTjQu79%2FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"2ccda87a38fe7c322bd916756e822b52\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 9daa499e3fa3bc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15571,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (14284)","md5":"409f3ac318e8a3cadb3cb6fb0e14c459","sha1":"6365a46baa9116a0ebc5785b488c29c31a7a71e7","sha256":"bf86807a4a2d3a3eb3cda973947dd0840bf63902cbafcd6c328aa16a57385d3c","sha512":"ac64260a19a5d579073a88df858f2250bba8265dfd4731fc57f618043a80b10c3fa815e2704edae7111357a78bce00edfce24c5a2a490ea294b2ba6a1166e75e","ssdeep":"192:qw1xs/hrvvvkR1aCuwvUAGZsdisBTrP2BrhuGQ7w/yYf8/TkqqjNeGQTuOalAtFD:q4xjKa28wa8H5tnzxaF","tlshash":"af62be6b00b007b6fbf19325f101f9a623c91e866956a5f38d7f036299a00f7b1cb65d","first_seen":"2026-03-11T11:41:11.421901Z","last_seen":"2026-03-11T11:41:11.421901Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":1118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/reg-DUFtgkAs.js","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:41:00.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:57:24 GMT","end":"Tue, 12 May 2026 05:57:22 GMT"},"fingerprint":{"sha1":"F3:56:81:F1:C9:37:22:45:D6:3A:0B:FA:E7:C0:5B:3A:F4:5F:59:FB","sha256":"8D:96:E1:44:CF:5B:F4:3C:0C:81:7C:93:B5:26:2D:30:FD:C4:8C:7E:20:D1:44:00:71:A9:29:15:0A:58:A8:0E"}}},"request":{"raw":"GET /assets/reg-DUFtgkAs.js HTTP/1.1\r\nHost: ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/assets/index-2RxFwIil.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF; _scid_r=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:00 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8UJrMMd7nC0tNVcJsK%2Brm7fiXjRQLthmacDfcmjAiEOupfb3gYhXOcTv2tz8rUzqpFa7zsJPP8HAZ2uqD4iaQJr7GTRhznY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6d0ab495f009977f1275efdb9ac41086\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: 9daa499ffab3bc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98810,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4941c57178e8fa99fcd00e2688c75abb","sha1":"e41b4ee1c89f77a6bd77ec83a90378abb641ce73","sha256":"82f0575636c0ac0d7b1c5a4779003931e8538233af5b43cdd8331ee3805db9d2","sha512":"660039218b601a8de2f72033e0ef9f03ae64a50ea9fd190835876f4439bd715ba1869913419c46a069dcfa794e3eda2167480fff54b8a603ee2ae2561af5871b","ssdeep":"3072:H5BfoyaxmAOX200jOsXoHtzxb/zdMr4pE:H5BfoyaxmAOX200jOsXoHtzxb/zdMr4O","tlshash":"42a3504ce0f9cefb98fb660d79074831b05e6b9fc1005ba6a3bc06555e63cd09a226d9","first_seen":"2026-03-11T10:54:57.989155Z","last_seen":"2026-03-25T09:58:52.034672Z","times_seen":10,"resource_available":true,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":348,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/index-2RxFwIil.js","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:40:45.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:57:24 GMT","end":"Tue, 12 May 2026 05:57:22 GMT"},"fingerprint":{"sha1":"F3:56:81:F1:C9:37:22:45:D6:3A:0B:FA:E7:C0:5B:3A:F4:5F:59:FB","sha256":"8D:96:E1:44:CF:5B:F4:3C:0C:81:7C:93:B5:26:2D:30:FD:C4:8C:7E:20:D1:44:00:71:A9:29:15:0A:58:A8:0E"}}},"request":{"raw":"GET /assets/index-2RxFwIil.js HTTP/1.1\r\nHost: ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:40:45 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6NoRIyO80GGrmg3SBxYLPufZYVf%2Brqu7R6SLRL1y7a71pRXUpAm9P9OwoP3coSTm9shtIWIcfqeMcA2rQJ2ASxBhabjFXNft7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d78a30246491aa049a064e410b9394fd\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\ncf-ray: 9daa4940dc92bc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1323815,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16718)","md5":"94fa5145a26f85301d96ed679f6ffd7c","sha1":"b80be7ee22abed3f1a93c861b3735f0871a24900","sha256":"c01a7eb7d6b4f6d03aff7a0a6edecfbd96d4135d42c1b3644ed17f295a5d17cf","sha512":"7db8b9229410a0dad4eada8f84e59aebeb605b624bd25cae23d5fedf7cbf5c6d651762f58742e82f4c3071444f19d4388d4e9d89b5060c092bb09c7b1b33afb7","ssdeep":"12288:vTbvNHlR30T98cw1NMv+3Lt7PNnquTjgzPpVo2Q:rbvNH4aV1Ne+3VVnqogzs","tlshash":"492539282a5bf344e419c0dbfa373c84c59de18aa00b64d15f7547b31ba2797eaacd13","first_seen":"2026-03-11T11:41:11.422835Z","last_seen":"2026-03-11T11:41:11.422835Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12794,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":12670,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ustt.work/api/public/init?d=1773229258618","fqdn":"api.ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:40:59.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:58:11 GMT","end":"Tue, 12 May 2026 05:54:33 GMT"},"fingerprint":{"sha1":"E9:3B:76:B6:64:3A:7F:7A:41:0F:D8:A9:7D:E8:E2:D6:95:44:B8:62","sha256":"CD:3F:BC:A9:48:C5:02:E5:43:8D:F8:B9:F0:4C:02:6A:A8:0B:C6:0F:65:90:9E:2A:A2:06:B5:0B:00:5E:73:71"}}},"request":{"raw":"GET /api/public/init?d=1773229258618 HTTP/1.1\r\nHost: api.ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/\r\nst-ctime: 1773229258618\r\nst-ttgn: 028508822c2c2a35aa8eebc7cb0cb229\r\nOrigin: https://ustt.work\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF; _scid_r=zxDniS1czW1DQz7V0PqbSJ8low0GTRuF\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:40:59 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ustt.work\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eTXpgp0b7coA7Jdmu%2BpxiI7QGdJxf6GfflXKeND46l2FRxAkIkM3FFAMfsB5Slpns4FtIWRyXBdWnGXwPWlXq%2BJX3TNv5ehsOJ4O7Bo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9daa49971fa357e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6689,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f24da79fff9d866b9cc5661027b1a701","sha1":"28b30b67054e3d6b83443e9bc18783353ee02ea5","sha256":"668ea00e52725bbc2b10f64235ef6daba68294c02d788f78600f4c60da9310cd","sha512":"02ceedd38d1a46f2d9985045e1a5b238e55e23f8acfc644e66c8f172b32beeba5a52139a8795e1263360b3654a13c3d6497c3479a45866a0229c867b9fced743","ssdeep":"192:IlS21BgV3yRyhywbyKeeLDDzfPPtTr7N/kI+nptujBKu:Kg/kpjkv","tlshash":"33d10c15305adc7be5e7bed42bcb31148a8d7c9eaccc8bd29b6cdda605d80a6102f503","first_seen":"2026-03-11T11:41:11.423726Z","last_seen":"2026-03-11T11:42:30.611835Z","times_seen":2,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":297,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"api.ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"api.ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ustt.work/api/public/get_lang_json?d=1773229259725\u0026lang=en","fqdn":"api.ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:40:59.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:58:11 GMT","end":"Tue, 12 May 2026 05:54:33 GMT"},"fingerprint":{"sha1":"E9:3B:76:B6:64:3A:7F:7A:41:0F:D8:A9:7D:E8:E2:D6:95:44:B8:62","sha256":"CD:3F:BC:A9:48:C5:02:E5:43:8D:F8:B9:F0:4C:02:6A:A8:0B:C6:0F:65:90:9E:2A:A2:06:B5:0B:00:5E:73:71"}}},"request":{"raw":"OPTIONS /api/public/get_lang_json?d=1773229259725\u0026lang=en HTTP/1.1\r\nHost: api.ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-lang,st-ttgn\r\nReferer: https://ustt.work/\r\nOrigin: https://ustt.work\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:40:59 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ustt.work\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Z8PLtiNHrBVwNizMQR67ZmUO0sapMbOqGix%2FbSd90nR1XcsGtTU9RM0yDKI5%2BPKGwgEPT82yOsAdZuN9g%2BmvPMfCAIIw3XK%2BC5KmQI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9daa49996df257e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"api.ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"api.ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ustt.work/api/public/home?d=1773229259737\u0026language_type=en","fqdn":"api.ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:40:59.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:58:11 GMT","end":"Tue, 12 May 2026 05:54:33 GMT"},"fingerprint":{"sha1":"E9:3B:76:B6:64:3A:7F:7A:41:0F:D8:A9:7D:E8:E2:D6:95:44:B8:62","sha256":"CD:3F:BC:A9:48:C5:02:E5:43:8D:F8:B9:F0:4C:02:6A:A8:0B:C6:0F:65:90:9E:2A:A2:06:B5:0B:00:5E:73:71"}}},"request":{"raw":"OPTIONS /api/public/home?d=1773229259737\u0026language_type=en HTTP/1.1\r\nHost: api.ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-lang,st-ttgn\r\nReferer: https://ustt.work/\r\nOrigin: https://ustt.work\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:40:59 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ustt.work\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NT1DzmvdHzz5HswWLchK1BPAMwzJqMvvPafxlArVCw7OP9hvj51FKdtqF54qbXlSuaxj4Ty38q7vjq8z3Wzg0HGP64JK0TYMmMKwgiA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9daa49998e4257e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T17:33:37.826371Z","times_seen":16391923,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"api.ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"api.ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:40:59.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://ustt.work/\r\nOrigin: https://ustt.work\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 08 Mar 2026 05:34:53 GMT\r\nexpires: Mon, 08 Mar 2027 05:34:53 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:19:11 GMT\r\ncontent-type: font/woff2\r\nage: 281167\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34924, version 1.0","md5":"4a8b9af22b314f408f66a17f71e28908","sha1":"6b5600d84c178cd28b23b583bbcaa4eb12efff25","sha256":"dabae363ac0ae6c3b2a137a32f7132b42520a8af252f87aa6c2198f2a79cf91c","sha512":"17dbf975ba4d4a818f25bb52dfdec52ff0ad6291c37981bce0313075c13751180a30ec81db40e1b2092a92e9491d275fa253e879e3e62d97ba235295da4ddd74","ssdeep":"768:C4rzLlWA+tpuAdMEUDz1whQjKgz63b6G8tWbxfw6abvdNwGFbML:xz+/uAdMEUDZKYI3bqtMY6WvkGFML","tlshash":"e3f2f1d39beb766c5e3fa89c32b3d2653969580430737119b0a2674842e274c56e6d03","first_seen":"2025-09-02T19:57:23.465236Z","last_seen":"2026-06-13T17:03:22.522345Z","times_seen":18693,"resource_available":false,"data":null}},"time_used":873,"timings":{"blocked":299,"dns":0,"connect":40,"send":0,"wait":224,"receive":49,"ssl":258},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ustt.work/assets/BaseInput.vue_vue_type_style_index_0_lang-apEyAGTq.js","fqdn":"ustt.work","domain":"ustt.work","tld":"work"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ustt.work/#/reg?ref=510931","date":"2026-03-11T11:41:00.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ustt.work","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 04:57:24 GMT","end":"Tue, 12 May 2026 05:57:22 GMT"},"fingerprint":{"sha1":"F3:56:81:F1:C9:37:22:45:D6:3A:0B:FA:E7:C0:5B:3A:F4:5F:59:FB","sha256":"8D:96:E1:44:CF:5B:F4:3C:0C:81:7C:93:B5:26:2D:30:FD:C4:8C:7E:20:D1:44:00:71:A9:29:15:0A:58:A8:0E"}}},"request":{"raw":"GET /assets/BaseInput.vue_vue_type_style_index_0_lang-apEyAGTq.js HTTP/1.1\r\nHost: ustt.work\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ustt.work/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Mar 2026 11:41:00 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G7b3TmCjF8arFy74uen%2Fs77leZ6s%2BDQPvU9QdM8XLXdpo6k0H4cUiQDbQHmGwvQ3QGDfMmKd7jPw6enuZNDNOYWeT8SUV9J8uw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"417a62a3778cb67a4c82796a19c79871\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 9daa499e3facbc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2490,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2489)","md5":"efb6e3174a45aa61e97dc86f5f7c5a96","sha1":"327a77b82b7d7869cc5a8354d9a27b522e7a4b42","sha256":"b7fe65882b644c08522923e81991d738ed45e03e3208d2b3e731779c0ab5926a","sha512":"4857c017f3d42b49ae1b41487a6af7b497f0f22b0b2108e191ac3550239a4f818c568b268c36bd1091d541fff8187df223249a5d321073ac214edb493b38215a","ssdeep":"","tlshash":"3a515104ec159fa7dab39a4da5db58a0a05c2bdf85088f5110fa551c3f5edf8233af28","first_seen":"2026-02-05T19:01:16.38417Z","last_seen":"2026-03-25T09:58:52.0474Z","times_seen":15,"resource_available":true,"data":null}},"time_used":1382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-11","alert":"Sinkholed","trigger":"ustt.work","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}