{"report_id":"a66c792c-2b9b-42f4-b9de-704ef4f65878","version":0,"status":"done","tags":[],"date":"2026-10-15T21:59:13Z","url":{"schema":"https","addr":"send-usdtbep20.com/","fqdn":"send-usdtbep20.com","domain":"send-usdtbep20.com","tld":"com"},"ip":{"addr":"172.67.160.98","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"send-usdtbep20.com/","fqdn":"send-usdtbep20.com","domain":"send-usdtbep20.com","tld":"com"},"title":"Trust","dom":{"size":2146,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1712)","md5":"2ea98dbfeaf63d3a645ad28867ff7325","sha1":"c3e4fbfe27e39d4b7c55efcd0f8b376416f4e51a","sha256":"691d1bf8420ebf78baac7730dd5e5bc5aeb86c24b375696bc3d6cde2caf725e3","sha512":"11b4ff584a0c4885486014efa89ba448543154aeeb186cfcc4d81431bbe850605af928f44fe8e2672c7676c0d2d3e903b29583a9c52c84a561f446c9f1e7c413","ssdeep":"","tlshash":"5f411131694e5a2ff11386d6d9a0fb2420ca519fcb4e506cf1ad02b547e5ecaac3b478","dom_hash":"domhash44c093d0dd62961e5a507b7698772e83","first_seen":"2026-10-15T21:51:47.846438Z","last_seen":"2026-10-15T21:59:30.662545Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"send-usdtbep20.com/","fqdn":"send-usdtbep20.com","domain":"send-usdtbep20.com","tld":"com"},"ip":{"addr":"172.67.160.98","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-19T21:59:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"send-usdtbep20.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"send-usdtbep20.com","ip":{"addr":"104.21.66.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-03","domain_rank":0,"first_seen":"2026-10-15T21:51:39.894381Z","last_seen":"2026-10-15T21:51:39.894381Z","alert_count":9,"request_count":9,"received_data":5242412,"sent_data":4435,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"send-usdtbep20.com/index-BJ-Db907.js","fqdn":"send-usdtbep20.com","domain":"send-usdtbep20.com","tld":"com"},"ip":{"addr":"104.21.66.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"35fcc2d0d527ab3337ccc8268c69fe2b","sha1":"b4e1dc8b18968c2d8e0b9b2f057c838bcc1a3419","sha256":"eb794c83f991525fd5dffce4481b12c2cabbc0eb6a3396b79a8c2eee5620330a","sha512":"0e881d6027bc5e972280d707ea51bfcd8c58b6a5a3b6e0147c6344b3e683e47b2f2f8b42faed88db61492a6e7b13be6ec0c3d89fa78e9b1d40eb3c671d24d3f6","ssdeep":"24576:Wy5HLsWUCjEa2SJwTCaScJ+DV2LW8ffcUGdSTA8HukRhcwln2:WypLsWUCjiSJwTCaScJ+DV2LW8ffcUG/","tlshash":"3f3541496af620319303f0790e5fd805b235a80b1a8dec597e4c96a49f4d47c8bf6fe9","size":1092152,"data":"","first_seen":"2026-10-15T21:51:48.056296Z","last_seen":"2026-10-15T21:59:30.685709Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"send-usdtbep20.com/connectors_false-DfcE2qQJ.js","fqdn":"send-usdtbep20.com","domain":"send-usdtbep20.com","tld":"com"},"ip":{"addr":"104.21.66.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d466ef6158cb1c350952820431f5f5c7","sha1":"39797d4ad4811af8e6ca8a58be9364772a4920c4","sha256":"5c27193386cb365cf1b560a070eb348db52f682aeeb6f4b49323c8e96694d47d","sha512":"78ca470e64e7189ae763ca7d3341e4c5ec1cb02f57226e20710dbeaeeace8135c695d9ee4347534ea53241948fadb4910df3a1c4158c125cfaa0479840c37c0f","ssdeep":"","tlshash":"7fc02b1080e3c1ec0be31c47210193f8aa1917a4370d0ba4338d0734f5236c48fe4742","size":146,"data":"","first_seen":"2026-05-15T19:23:33.7112Z","last_seen":"2026-10-15T21:59:30.675469Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"send-usdtbep20.com/arrow-icon.png","fqdn":"send-usdtbep20.com","domain":"send-usdtbep20.com","tld":"com"},"ip":{"addr":"104.21.66.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://send-usdtbep20.com/","date":"2026-10-15T21:52:56.269Z","timestamp":1792101176269,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send-usdtbep20.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 11:30:37 GMT","end":"Thu, 31 Dec 2026 11:30:36 GMT"},"fingerprint":{"sha1":"D2:D1:85:C1:C4:EA:09:30:1E:FD:F9:BE:05:57:D2:DB:32:03:D0:03","sha256":"F3:18:B3:CB:2D:FB:8D:47:90:93:26:A5:5C:4A:CB:D5:62:46:81:24:B4:53:B4:62:35:3E:EC:8D:E5:58:F0:E3"}}},"request":{"raw":"GET /arrow-icon.png HTTP/1.1\r\nHost: send-usdtbep20.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://send-usdtbep20.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 15 Oct 2026 21:52:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 02 Oct 2026 12:25:34 GMT\r\npriority: u=5,i\r\netag: \"6abfa2be-1220\"\r\nexpires: Sat, 14 Nov 2026 21:43:49 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\naccept-ranges: bytes\r\nage: 546\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WpfTq%2FL6KoseGGDFnYRclPz8TyXwkvwgLh0gnDSrILU2wO2JBDNaVg1gLd%2F8e%2FAQ%2F8RXfsbvjswDHZL2ff%2BgsjrROiY9dHUWCSnJpArS3NVZI8fd04jc3RvZNpTlqiimlwLhvYs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b20dbfae19712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4640\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4640,"size_decoded":5409,"mime_type":"image/png","magic":"PNG image data, 110 x 82, 8-bit/color RGBA, non-interlaced","md5":"b4957ade183c5592436f8121c66c532f","sha1":"273a88f8f87d4156cb2af17f46de0b0d95c533bd","sha256":"da5f12369c3c516a870cb81ed9d08d9384a878904c9258f1fff3dd188804a6ca","sha512":"7c8baa01725ae3600585ca8a6e4b8ac36706e6877efdb522a842638c0986ae2de28d0e913b1ccec22d85f1dd791669462fdeab0d990232a53b1f5dd6ddb1dc3a","ssdeep":"96:q2BUSX20Y22ycigV8XKAbfbluehcC1f/Pxcl8TIA0Y61SqqR:lNXoZ/VS19uehR5pciTIA0nSqqR","tlshash":"aea18d8320c0c1e9f1ab67e700f801d8b513a9d056d1d3962f0eaff22b189830e32519","first_seen":"2026-02-03T08:50:13.212645Z","last_seen":"2026-10-15T21:59:30.666403Z","times_seen":24,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"send-usdtbep20.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"send-usdtbep20.com/processing-dark.gif","fqdn":"send-usdtbep20.com","domain":"send-usdtbep20.com","tld":"com"},"ip":{"addr":"104.21.66.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://send-usdtbep20.com/","date":"2026-10-15T21:52:56.311Z","timestamp":1792101176311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send-usdtbep20.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 11:30:37 GMT","end":"Thu, 31 Dec 2026 11:30:36 GMT"},"fingerprint":{"sha1":"D2:D1:85:C1:C4:EA:09:30:1E:FD:F9:BE:05:57:D2:DB:32:03:D0:03","sha256":"F3:18:B3:CB:2D:FB:8D:47:90:93:26:A5:5C:4A:CB:D5:62:46:81:24:B4:53:B4:62:35:3E:EC:8D:E5:58:F0:E3"}}},"request":{"raw":"GET /processing-dark.gif HTTP/1.1\r\nHost: send-usdtbep20.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://send-usdtbep20.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 15 Oct 2026 21:52:56 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 02 Oct 2026 12:25:34 GMT\r\npriority: u=5,i\r\netag: \"6abfa2be-1ae028\"\r\nexpires: Sat, 14 Nov 2026 21:43:49 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\naccept-ranges: bytes\r\nage: 546\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3SmCmu2lW6i2RzI1gAbZ1mnPyrV2oGoMTveca%2BsiOMSzTEy1Fd3u4Vi7V2To3CXbVFu3qiFY7kNLfeRATHEIJFtWT%2FAOtlRv9bvZYSF2uUdL0NVHcMUt3cS%2Bb5wwapkDPoskisc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b20dbfee1f712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1761320\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1761320,"size_decoded":1762090,"mime_type":"image/gif","magic":"GIF image data, version 89a, 416 x 464","md5":"b05d1ae779844d45d2c400cc79faf461","sha1":"7b3bdd6a011fb695422dff3549c462845d888b10","sha256":"bd2dfad8900be56202f8e8db56a0ff2ba9aacde90cff3b4309b9920dc7411af2","sha512":"85d3cd4ca6cc9c2b26fdaef1fd4469e302be8fc9a2340e717903cc04cfcd7cf3e623e1ff34bfad4514e3c81ed0f8dfc65a1a9cb097de259545efbbd39ca556e5","ssdeep":"12288:lAqnA5xKw+gGXJx+XQIG3hgC79vcfuDVm7L1S2ClutroLcnBMpGdyDoTgcJJfjsp:+MA5vZiAXIvmAVGg2CQNH/bnK55ImN","tlshash":"f825227cb33067b4db1301b4608e54ea48ae587ca7b8566bae74f7d2598c33d7ad4803","first_seen":"2026-02-03T08:50:13.21418Z","last_seen":"2026-10-15T21:59:30.668625Z","times_seen":24,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"send-usdtbep20.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"send-usdtbep20.com/","fqdn":"send-usdtbep20.com","domain":"send-usdtbep20.com","tld":"com"},"ip":{"addr":"104.21.66.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-15T21:52:55.661Z","timestamp":1792101175661,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send-usdtbep20.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 11:30:37 GMT","end":"Thu, 31 Dec 2026 11:30:36 GMT"},"fingerprint":{"sha1":"D2:D1:85:C1:C4:EA:09:30:1E:FD:F9:BE:05:57:D2:DB:32:03:D0:03","sha256":"F3:18:B3:CB:2D:FB:8D:47:90:93:26:A5:5C:4A:CB:D5:62:46:81:24:B4:53:B4:62:35:3E:EC:8D:E5:58:F0:E3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: send-usdtbep20.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 15 Oct 2026 21:52:55 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 02 Oct 2026 12:25:34 GMT\r\nvary: accept-encoding\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w9b8iOyWTkcWpGG7yHUmZXMZOdEdJ53HKmUga8%2B%2BrM6%2FYdoInj9dUcInEPBJF9CEzFS438VeXON%2BFWFvjeg2uoXkNwXoSMwSK53qOxonPhyYryxGJwDviYvQE8nhduEZyBTumRY%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a4b20dbc3dc9712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":453,"size_decoded":954,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"73cc37dbd481d359e52f378f5475e5cf","sha1":"e25d907bfb218136abe69336c50cfbc5ce7bae23","sha256":"f9dc5490ce0c7877bc314466302cab83ab1e5e651ab6a805552e6df81b063487","sha512":"8fb83a38adc69dd966f7c53f1f57cd94174da2bc86d5bccd6b203a53a5f806fc8a8e7dde173c366309496b845d7ae1f0969219f882d0689754a8561ee494819b","ssdeep":"","tlshash":"f7f05c43d481c90a83200776ad91f5145487dac9c789ac8066dfa07d4ac8785cebf0ec","first_seen":"2026-10-15T21:51:48.027311Z","last_seen":"2026-10-15T21:59:30.670194Z","times_seen":2,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":22,"connect":34,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"send-usdtbep20.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"send-usdtbep20.com/index-BJ-Db907.js","fqdn":"send-usdtbep20.com","domain":"send-usdtbep20.com","tld":"com"},"ip":{"addr":"104.21.66.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://send-usdtbep20.com/","date":"2026-10-15T21:52:56.070Z","timestamp":1792101176070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send-usdtbep20.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 11:30:37 GMT","end":"Thu, 31 Dec 2026 11:30:36 GMT"},"fingerprint":{"sha1":"D2:D1:85:C1:C4:EA:09:30:1E:FD:F9:BE:05:57:D2:DB:32:03:D0:03","sha256":"F3:18:B3:CB:2D:FB:8D:47:90:93:26:A5:5C:4A:CB:D5:62:46:81:24:B4:53:B4:62:35:3E:EC:8D:E5:58:F0:E3"}}},"request":{"raw":"GET /index-BJ-Db907.js HTTP/1.1\r\nHost: send-usdtbep20.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://send-usdtbep20.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 15 Oct 2026 21:52:56 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 02 Oct 2026 12:25:34 GMT\r\npriority: u=3,i=?0\r\netag: \"6abfa2be-10aa38\"\r\nexpires: Sat, 14 Nov 2026 21:47:01 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\naccept-ranges: bytes\r\nage: 354\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Brva5TE13yn5izNcRhVYX4rBdYz3glKTmKEWvQAQ2mloaa7%2BwxPbJV73SoQrjAfdM0BzYKdUrOEtn%2BqGYMUFq7ErwWiotHYc2N%2FAM%2FAtpxTawu2hvjUJrLSwmsJJ%2FRBrlHE%2BITI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b20dbe6dfe712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1092152\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1092152,"size_decoded":1092944,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (420)","md5":"500197b2e6eb75eff6ca4d92b5490de5","sha1":"40227a9b37e75ed17020b04c4994b5cf68e4e6b6","sha256":"416a2e28a305e00c2866d4ea86e43084dd345435c65572717adbd5a45b54aa8a","sha512":"b2c36fff7ba0d103456d67f6887d4d176bfb8f68b57e16a8cfd7a43b69ac33a1058d676beaa3aac521956bd6eec792c7e547e2bf32231caa4f37f62ce85d4ca1","ssdeep":"24576:Wy5HLsWUCjEa2SJwTCaScJ+DV2LW8ffcUGdSTA8HukRhcj:WypLsWUCjiSJwTCaScJ+DV2LW8ffcUGL","tlshash":"7d2541496af620319303f0790e5fd805b235a80b1a8dec597e4c96a49f4d47c8bf6fe9","first_seen":"2026-10-15T21:51:48.033643Z","last_seen":"2026-10-15T21:59:30.673026Z","times_seen":2,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"send-usdtbep20.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"send-usdtbep20.com/connectors_false-DfcE2qQJ.js","fqdn":"send-usdtbep20.com","domain":"send-usdtbep20.com","tld":"com"},"ip":{"addr":"104.21.66.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://send-usdtbep20.com/","date":"2026-10-15T21:52:56.260Z","timestamp":1792101176260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send-usdtbep20.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 11:30:37 GMT","end":"Thu, 31 Dec 2026 11:30:36 GMT"},"fingerprint":{"sha1":"D2:D1:85:C1:C4:EA:09:30:1E:FD:F9:BE:05:57:D2:DB:32:03:D0:03","sha256":"F3:18:B3:CB:2D:FB:8D:47:90:93:26:A5:5C:4A:CB:D5:62:46:81:24:B4:53:B4:62:35:3E:EC:8D:E5:58:F0:E3"}}},"request":{"raw":"GET /connectors_false-DfcE2qQJ.js HTTP/1.1\r\nHost: send-usdtbep20.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://send-usdtbep20.com/index-BJ-Db907.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 15 Oct 2026 21:52:56 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 02 Oct 2026 12:25:34 GMT\r\npriority: u=3,i=?0\r\netag: \"6abfa2be-92\"\r\nexpires: Sat, 14 Nov 2026 21:47:02 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\naccept-ranges: bytes\r\nage: 354\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xOAcIEsTPWqFi3LJ3QuWXucFpfc8%2FyG2rFC7g0zHu6sl9kCpD0eN3iTZzyW%2F5P7ObilrUz7CwugHeY35GMmA5P%2Bp%2FXYxr7rcUb47izt0vclwzDjc%2FE2Y3DBmwPXxZ0gFZ8JJzqY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b20dbf9e15712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 146\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":928,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"d466ef6158cb1c350952820431f5f5c7","sha1":"39797d4ad4811af8e6ca8a58be9364772a4920c4","sha256":"5c27193386cb365cf1b560a070eb348db52f682aeeb6f4b49323c8e96694d47d","sha512":"78ca470e64e7189ae763ca7d3341e4c5ec1cb02f57226e20710dbeaeeace8135c695d9ee4347534ea53241948fadb4910df3a1c4158c125cfaa0479840c37c0f","ssdeep":"","tlshash":"7fc02b1080e3c1ec0be31c47210193f8aa1917a4370d0ba4338d0734f5236c48fe4742","first_seen":"2026-05-15T19:23:33.7112Z","last_seen":"2026-10-15T21:59:30.675469Z","times_seen":9,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"send-usdtbep20.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"send-usdtbep20.com/bsc.png","fqdn":"send-usdtbep20.com","domain":"send-usdtbep20.com","tld":"com"},"ip":{"addr":"104.21.66.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://send-usdtbep20.com/","date":"2026-10-15T21:52:56.267Z","timestamp":1792101176267,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send-usdtbep20.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 11:30:37 GMT","end":"Thu, 31 Dec 2026 11:30:36 GMT"},"fingerprint":{"sha1":"D2:D1:85:C1:C4:EA:09:30:1E:FD:F9:BE:05:57:D2:DB:32:03:D0:03","sha256":"F3:18:B3:CB:2D:FB:8D:47:90:93:26:A5:5C:4A:CB:D5:62:46:81:24:B4:53:B4:62:35:3E:EC:8D:E5:58:F0:E3"}}},"request":{"raw":"GET /bsc.png HTTP/1.1\r\nHost: send-usdtbep20.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://send-usdtbep20.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 15 Oct 2026 21:52:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 02 Oct 2026 12:25:34 GMT\r\npriority: u=5,i\r\netag: \"6abfa2be-66f\"\r\nexpires: Sat, 14 Nov 2026 21:43:49 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\naccept-ranges: bytes\r\nage: 546\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rh3oXKWgFMUQI9%2FFf9fd9TPoXNTnB3CODYKmcU7Vdh3VD%2Fu1DKYwrASM5fvmUsdfuFyB3nzh6NOR0brz6zIprfPt2pjs%2BOUuKYmFO3K1Kz8pcPa%2B2WmS4K1T%2BUrg98mZdQRYQwE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b20dbfae18712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1647\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1647,"size_decoded":2415,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"8fd1984a4ab55fc2743ab4d38404412b","sha1":"35a1f61867d01b939c5f0c9fc58a0beff6c5d130","sha256":"f5f087e4d8e0babca121d6466e409dfc3a20c6c30a38a12b084d3d3ff754a2f8","sha512":"c489416572a315fe9e60723bde7687d3aff1a5d43c755bec30c56157c5f467be38057ccb9b56b830718cce62f0ca738eb0add21a0e512670d3a190c6eaaf274b","ssdeep":"","tlshash":"cd31e8fe46d76d4d8ff4177092b91ce0d1d4ab854b6d22a90e3b124f83bf0a28460d83","first_seen":"2026-10-15T21:51:47.911266Z","last_seen":"2026-10-15T21:59:30.677187Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"send-usdtbep20.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"send-usdtbep20.com/vite.svg","fqdn":"send-usdtbep20.com","domain":"send-usdtbep20.com","tld":"com"},"ip":{"addr":"104.21.66.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://send-usdtbep20.com/","date":"2026-10-15T21:52:56.310Z","timestamp":1792101176310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send-usdtbep20.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 11:30:37 GMT","end":"Thu, 31 Dec 2026 11:30:36 GMT"},"fingerprint":{"sha1":"D2:D1:85:C1:C4:EA:09:30:1E:FD:F9:BE:05:57:D2:DB:32:03:D0:03","sha256":"F3:18:B3:CB:2D:FB:8D:47:90:93:26:A5:5C:4A:CB:D5:62:46:81:24:B4:53:B4:62:35:3E:EC:8D:E5:58:F0:E3"}}},"request":{"raw":"GET /vite.svg HTTP/1.1\r\nHost: send-usdtbep20.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://send-usdtbep20.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 15 Oct 2026 21:52:56 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 02 Oct 2026 12:25:34 GMT\r\npriority: u=6,i=?0\r\netag: \"6abfa2be-252\"\r\nexpires: Sat, 14 Nov 2026 21:43:50 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\naccept-ranges: bytes\r\nage: 545\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5r9K6g4ADBXCWfdvOC%2BqTcIUxe%2F4DWXofapT8PJzoYPivft8Yzov9p0SocR8M%2Bv8rzS2WblcRyZhAi3%2B29qxjIw2D2lCvMQqT2yRiNBdvQauoacVWHeNCvzqHpr8mg298cz%2B3TI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b20dc0be2e712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 594\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":594,"size_decoded":1368,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6f26bd45fef7f8765a86eaff0a3d110a","sha1":"46e20bd1447ae202f37cff60ce5ff087a671dcc6","sha256":"f70c33c05b9d9f3118e3c6bb90d5e0dd95a9b1872e29e463ca065841599de429","sha512":"74290b4842e0d482059799ea47c75223316ad789c7ea00ff48b23e449057a6d2f4cf1918cb22bfea5c4743c2e3df9dbc0cd5ed9634738fc240745284cd884243","ssdeep":"","tlshash":"a2f04c69d5c8556b9138c182ed7499eac31fc54350475764b1566d5f3f330c39c0bab8","first_seen":"2026-02-03T08:50:13.195437Z","last_seen":"2026-10-15T21:59:30.680139Z","times_seen":6,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"send-usdtbep20.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"send-usdtbep20.com/processing-light.gif","fqdn":"send-usdtbep20.com","domain":"send-usdtbep20.com","tld":"com"},"ip":{"addr":"104.21.66.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://send-usdtbep20.com/","date":"2026-10-15T21:52:56.312Z","timestamp":1792101176312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send-usdtbep20.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 11:30:37 GMT","end":"Thu, 31 Dec 2026 11:30:36 GMT"},"fingerprint":{"sha1":"D2:D1:85:C1:C4:EA:09:30:1E:FD:F9:BE:05:57:D2:DB:32:03:D0:03","sha256":"F3:18:B3:CB:2D:FB:8D:47:90:93:26:A5:5C:4A:CB:D5:62:46:81:24:B4:53:B4:62:35:3E:EC:8D:E5:58:F0:E3"}}},"request":{"raw":"GET /processing-light.gif HTTP/1.1\r\nHost: send-usdtbep20.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://send-usdtbep20.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 15 Oct 2026 21:52:56 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 02 Oct 2026 12:25:34 GMT\r\npriority: u=5,i\r\netag: \"6abfa2be-2414d4\"\r\nexpires: Sat, 14 Nov 2026 21:43:49 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\naccept-ranges: bytes\r\nage: 546\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OrPHIOWT7pU7T9N6pAdRS17W69xOorHOFwDExhjQXJUsdwWexBzhP%2BnhvU7hI23nMJ%2BhizRark5WVxSAniiqd2Es%2FWBwgUBYZzK9JTomVZCFE7WBjY%2FZtFL22QPpJi2RyjKnYFY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b20dbfee20712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2364628\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2364628,"size_decoded":2365400,"mime_type":"image/gif","magic":"GIF image data, version 89a, 384 x 480","md5":"622ff2c1c6aa463b18bad9fb632930d2","sha1":"464109efcfa26d2c1e93964a9002aa4123e13127","sha256":"68f6377bad4e62b3621a9b679bc1fefc631b86363bbc77856d07c6760e64f646","sha512":"4853b99c3c464398303167cf38e56057e0f6d95e0a542c3a09b7e9e5d4c12a66c79ea7364ae4ebdeeb78b00ebea39252840c1ee1970b961e8533693631b348c6","ssdeep":"24576:7quS+Q4toBEGk+ozURnCLJK3Jn0kLLhtbnI4CDafb5ybJaBIUBmmEzp:7BtHKBEN+ozwn6K3JDTkDob5M0BrmH","tlshash":"5425232bd3360830e4e675f5645f25e94c538caa16a7e9336496bfef4a4001a2c3ccb7","first_seen":"2026-02-03T08:50:13.192239Z","last_seen":"2026-10-15T21:59:30.68198Z","times_seen":24,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"send-usdtbep20.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"send-usdtbep20.com/index-DXCZXbGR.css","fqdn":"send-usdtbep20.com","domain":"send-usdtbep20.com","tld":"com"},"ip":{"addr":"104.21.66.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://send-usdtbep20.com/","date":"2026-10-15T21:52:56.072Z","timestamp":1792101176072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"send-usdtbep20.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 11:30:37 GMT","end":"Thu, 31 Dec 2026 11:30:36 GMT"},"fingerprint":{"sha1":"D2:D1:85:C1:C4:EA:09:30:1E:FD:F9:BE:05:57:D2:DB:32:03:D0:03","sha256":"F3:18:B3:CB:2D:FB:8D:47:90:93:26:A5:5C:4A:CB:D5:62:46:81:24:B4:53:B4:62:35:3E:EC:8D:E5:58:F0:E3"}}},"request":{"raw":"GET /index-DXCZXbGR.css HTTP/1.1\r\nHost: send-usdtbep20.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://send-usdtbep20.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 15 Oct 2026 21:52:56 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 02 Oct 2026 12:25:34 GMT\r\npriority: u=2,i=?0\r\netag: \"6abfa2be-2703\"\r\nexpires: Sat, 14 Nov 2026 21:47:01 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\naccept-ranges: bytes\r\nage: 354\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jh5mvr0DPXu836V%2FOOp3XGSCbLwHmX9Tg5CytVJfKtBLOF5z%2Bag6GSHj3m%2Bvpeme3ZLOj%2FkkV%2BXzA7494VLEzEwoZcUyVpkXOTe9f0fj7Zn36i8MzbutyiuSCpRHvYPy5luMLC4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b20dbe6dff712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9987\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9987,"size_decoded":10758,"mime_type":"text/css","magic":"ASCII text","md5":"1d3d71a933fc2d85d7dccc7b05fa83f6","sha1":"1fec45569445bc02bac6736f4266e2ddb2a6c36f","sha256":"338996489f559749238bcb5d68197e13341cc626e6854f6a091f3d3d65d268f6","sha512":"cb95603e036abbd5fc63b5ca0e1cf7052d116eaaaf3b546e27d3c79fc1d050a39e94f962f295d63e8085e2f3bc00474a4c45a056d5e5a0f1c96fe00c49b962d9","ssdeep":"192:Fmx1dxwzDoX2BZtlsnap19h1Z0g2MgH0exlt48j6+jEynoOsbt/EgfVXFoQ:i/mP1RB8txl87e4XFZ","tlshash":"ee220d5166b35889b4178a693ffa4745722c7047440bddbd7fc472888f882ec6ab9f8c","first_seen":"2026-10-15T21:51:47.870254Z","last_seen":"2026-10-15T21:59:30.68329Z","times_seen":2,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"send-usdtbep20.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}