{"report_id":"ac49cd5d-39cb-48bd-8806-46ef9e8ddb00","version":6,"status":"done","tags":[],"date":"2026-02-01T16:56:58Z","url":{"schema":"https","addr":"loansusdt.cfd/","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"loansusdt.cfd/#/login","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"title":"Login - CRYPTOCURRENCY LENDING PLATFORM","dom":{"size":5127,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2584)","md5":"96261ddd597ec83698bc7fd585f01dad","sha1":"09af7006a1c5a4aebc76bc7988bbb18ac2133a2d","sha256":"b01ed5e3d742f46a26b68e687bdb1b73a5116db54ed5edb6fec7b8222ad5cc7d","sha512":"d72c32e91f7c8914ec0aede67a6a3ee6ef445ac3dbed5e93f19fc38519f98114ee87f0629bf420278f59a4543062829bcf3cc73f9f6fe1016d43da98912ccfd0","ssdeep":"96:xzuY0JwsLil5ztXfVKjb2M6xooGHoM3VOG:b0JwsLcZPVKjnpXb","tlshash":"02b1f0056415045b03339ac0ece1ee9978e0f71ec90ed52099ad43e91fefe719d6ea71","dom_hash":"domhash282c01dc43aacf43a22194c5dc6a2f1f","first_seen":"2026-02-01T01:42:31.570639Z","last_seen":"2026-02-01T16:57:00.611246Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"loansusdt.cfd/","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-08T16:56:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"loansusdt.cfd","ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-09","domain_rank":0,"first_seen":"2026-02-01T01:42:28.054377Z","last_seen":"2026-02-01T01:42:28.054377Z","alert_count":38,"request_count":38,"received_data":1128808,"sent_data":17070,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"loansusdt.cfd/assets/LanguageSwitcher-CYHu5LxW.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"330c28db88ddd5e872cd74c288773445","sha1":"e072701916322c1390eba31a5a806da91269ca88","sha256":"2c4cfc14bd5837a77b9cdd2cce51bc3d2d207e48cbc23deb31b3e45ab78cfc71","sha512":"2601d3930d6fb261d00360a5ad0042c1a040011466913d45053f5db6da1d489bb20c684c1bf46669d70b92929fcfe15ca9ef850cfdb59428da91d8f3782429a2","ssdeep":"","tlshash":"ce21a7fe7401c4f893f2147892274d5e3264a395f37c91a0e19e09143ff6a64ba0f750","size":1197,"data":"","first_seen":"2026-02-01T01:42:31.571558Z","last_seen":"2026-02-01T16:57:00.641006Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/vue-vendor-Bu9wOpDZ.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"546947f07fdcd0a408c73a99ba816f65","sha1":"40325a22cbc246a71c13f54932d82e821d853a6f","sha256":"e688a76b13def6a5c663948af5074fb6b411760021b58b58cfcddc1de5e98146","sha512":"8c878c3ee83a974b7643e97c1caeca3e5377fdff06417e6e7d2f107e7d1cf391a7a6db864169409249662bd3871caa533451d84e734ec89a16c1fa5339209444","ssdeep":"3072:z2agNhYP39YnMI4GxJ+qB6uZdex0CzyMDpTZ:ipgfSn5p76uzLCzyMDpl","tlshash":"8fe319e93182b06253ba19e7107b1001f33e1a59380ed494f1adaddb3d3795a82b7f6d","size":150877,"data":"","first_seen":"2026-02-01T01:42:31.574509Z","last_seen":"2026-02-01T16:57:00.631577Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/index-Bobn9nWg.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3be892ca5aedfd6d1d0223a22bb1f1bc","sha1":"690cc5acc940d8719ef3e9e548a311c7b4e89762","sha256":"299aabfc8ae871e38fe93345cd3fe7653575ffb401dbf40ccce4b22d1d6873c3","sha512":"af610c1f81cbf029e5ed6d9d524404df874a348f79173160706fc02b907ab53ee2d9b3e53f9a9db3775046c1b435148ede0b163b79bbb878df7b6189ed0795ef","ssdeep":"768:jXByvD3aVLVKo9XpUzVgpVhEDzY96RqV0g2eFGWjXtSgsIs5u4b1iXOqTeNGPDPm:jREa6oFlED896Rbg2+GGL4zi+qDbuXKG","tlshash":"4723198e720258ac1af707a57cdb221071b44bc5d459c434bde9447933fae2da33bba9","size":45675,"data":"","first_seen":"2026-02-01T01:42:31.582691Z","last_seen":"2026-02-01T16:57:00.649254Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/notification-BMmUkL1K.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f165239ce032a6dc35115200d7e1e927","sha1":"35526d5126edb4587e637b5bb2041d801ca06781","sha256":"f4137cda99b8e7ba4def8dcec03486afe70b09b6f1b3dde6567f5339bf8ce85c","sha512":"6c2db55f0fa24e4865587a6f13f39edbcac051c99f76838f364c61ae1498db417f4837492d748a55ac0e5e48e8498c2f8255a91f305e2b8a7689cbc3bec92f6e","ssdeep":"","tlshash":"3051a3ce7483f0d27bb68477a0bf569b513b7bc524a641d0f58781553839e2ae332a24","size":2591,"data":"","first_seen":"2026-02-01T01:42:31.588003Z","last_seen":"2026-02-01T16:57:00.635042Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/pages-CZLy1aSW.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae40ec31be42fa3652a188121ba3b77d","sha1":"f2d32fd062d678015117d6003352cb3273d5f397","sha256":"4744943e029073a939d91f8e78c78e53975edf38c8b87c6b26d2548b159e81cd","sha512":"e959a4a2a6a56690ab1451851dbc3c6859ff508f09549827d9c1792799f812cceabed37b43fb7673563da9a13d42577d24cf9a04ac4156896b47726c040cef3d","ssdeep":"192:PdUpC2JB3wRAxrQ0sekI42IbvyiRKyVGMVoLIFujr:PEqRqs0seC+IG","tlshash":"e102955af042cafdf4b780b9991a20647e503fddc0244566f1fe9c092b29da9a70db3d","size":8949,"data":"","first_seen":"2026-02-01T01:42:31.579403Z","last_seen":"2026-02-01T16:57:00.638185Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/wallet-I0zhNFg0.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f493f35f26907c31a8c4f88b5b5055bf","sha1":"fcd43e214f8a688ce3380724f2245f4d17adfd86","sha256":"b7464951ecbfb588f6f5b0b98123eb1b7901056d82cf1a80811cf9d0dfda0dfe","sha512":"1d9d33483234d2289d277549e35b75913571eac36604a05a32ba96cb7b0a9379725fe315dd4b8bd8ae434404f8f6651360a2fce300da8f2da2619efc6df055f9","ssdeep":"","tlshash":"e051e2c97983b0c197758465a0bf66bf51397bc0106ad3e0f55f4541383ae7ee232d28","size":2502,"data":"","first_seen":"2026-02-01T01:42:31.578681Z","last_seen":"2026-02-01T16:57:00.645567Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/login-Bs0OV7ny.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"425e510f04d12786a9e807e8ff01ab2d","sha1":"5067285f3d15a775fb51af28a1f19f99df9b8b3d","sha256":"fe7fcc44a886a15baede8da9695b82a28268391b08bedbeeaac56b002d939162","sha512":"6eb3813efaa82141b1742aaab8e1b449379ce0ed827c0923a967415694316dbac71cc5c79070eeba08be4aa89ac3ad9d4b6e9f0bbe550e23a7b02bf073d5e428","ssdeep":"","tlshash":"9b41424ce822ccfe94765468a44b04242440b97e61758515e3fe1934ffaaee5ce1e326","size":2410,"data":"","first_seen":"2026-02-01T01:42:31.584446Z","last_seen":"2026-02-01T16:57:00.636587Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/rolldown-runtime-CxJ8HZ7q.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c7243515d1b8762f7965325bd26ad8a0","sha1":"26cf7e711d7dffce79caf99fdaf5466ba83792b8","sha256":"92e259033f95291f5e3c738023b88e1182fde091da96bbb13c87c6f879fd544c","sha512":"33ee3eb563f46d079db4cabfb2931ab4ef50fe398e15a42ba8079b815a823ebcc56fc78c67c677df957f7ca813a715415639ec9f2f5424f6616d5cf386dbcc5b","ssdeep":"","tlshash":"64019ea77d60bbf613d792cac4785685e2082c3e55b4b4d08bf88dfaa9c00472098e33","size":667,"data":"","first_seen":"2026-02-01T01:42:31.577151Z","last_seen":"2026-02-01T16:57:00.642181Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/pinia-DQPo-rze.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b998800f68881de50e7a3a79cf9b3576","sha1":"a4c56a2a84f6e46ed290254bf64935c7ef45fde6","sha256":"bd5843740e241ef8985cf395e1097f6f1f178595431855d94902689bf2bd9ee5","sha512":"c318d55b2b7d796758deb79267af5778f633e0f471eb1c4bbe1d2a355173172842aa4cf2296ff1daa8e79787b7e527544da5579ec132fb9e45e2646190f0040e","ssdeep":"192:1ry+360rE9UFr0wnvAshrToWngbncCWg4xZFBhggF9vyKMX565ZCzGAaack:k+3NE9UFrV4YoWngbncpnFTR7BMX5KG","tlshash":"c902d6cab256b0700b7710f9907f5515f239602e300b58c0b26decf9393656e926babe","size":8889,"data":"","first_seen":"2026-02-01T01:42:31.581906Z","last_seen":"2026-02-01T16:57:00.618231Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/vant-BokNV7wa.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a464914cd6e0e2765d2b21fa97d463f8","sha1":"61481aa475c99e59f625a74bbbcc1bbef36e0c15","sha256":"1af6e1882aa89600e01bf76951930053821ddbae610e824fdb8ad2288fad7302","sha512":"beca049b37b2a287a92ba86c7c55541347e2f6717ec2aad8d9f6d8db36ba4ae865476619d5b8ce811ee1989767da4027dc27561ec6635c52230498564c8f152b","ssdeep":"3072:/g7wI8JMW3i0GhCDJWWCLp8Q+zJtf56qwH2JumMNwVbrITQ1QoNtQAOrWHQiQN1:+Q3i0GhkxC+R6qwJw9rIuxgBX","tlshash":"92b32bc1b995b43587bbd5d5806b045072391b48b009d1e0f0bdad4a3aadee5b2fbf2c","size":114916,"data":"","first_seen":"2026-02-01T01:42:31.577941Z","last_seen":"2026-02-01T16:57:00.64808Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/utils-Cf57fSvr.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"055e2af6c147dd20f21ceecf5c1664d6","sha1":"03a464cc64cc871283ce9923f9e2a255194c25c2","sha256":"50b8bc9cecd77a15c82510b99954c7c33c02f6623d323c8ec572447c9153365e","sha512":"7772b61d83f226686df3ea309b9090c7b53b0dd55f67709c2bab09db146d6682968e50bcad258b7d138f708213654336f7a5d603d539578b5a55ab4f283c3636","ssdeep":"1536:Nsi7v0we8XvVIq1CCC9JJ6dK1m8RTuvUtD:N9/ewvVly9JJ6dK1m8RTV","tlshash":"4f531ad972e1b06253ab61e6403f0806f3be9925740d44a8fa5c9cd7bc7594a82b7f2c","size":64543,"data":"","first_seen":"2026-02-01T01:42:31.585187Z","last_seen":"2026-02-01T16:57:00.620572Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/loan-DgdNoR4J.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"40b15fc0a04f98a5e3b1e3a7041f9fb6","sha1":"46200949ef0574074ee68930bebe6c7e72107348","sha256":"950efccaf75ebc759b0242b0f72cae6c5726b29568ee39c9f9fd9170e5e4e235","sha512":"5debd230ef576b998cf00f36a4ee1be1168ab2ec751b3da5343da3b17e7edfd873a58c20e851e9f12f4e72ce18d59e8af8ed09baec29fa51a88ea4ceb4b3fb99","ssdeep":"","tlshash":"ba71bfc978d3f0d1a7b5847590bf624f9a696fc1305b8380b95906913c3ae3eb272e58","size":3594,"data":"","first_seen":"2026-02-01T01:42:31.580247Z","last_seen":"2026-02-01T16:57:00.62275Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/empty-DqntuIUV.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"592e9ad27f16f8412f8a63689df34531","sha1":"420d0103f36bbc622ef645ccc63dcc56179f2ed1","sha256":"bf6be88c96a0b1400a94b5b70d58bb5c7b612596c6e8c955c1a49273570e5547","sha512":"d918a2feac0ed013d9a1f06b7ffa32b062cb84fe29c150367d726bbf42a78b7434a7159a68a038a6e6fd7543491a4ce64823fe201098a3806715de75a3e67fd7","ssdeep":"","tlshash":"c8f0ab1cb80f86fe598298a4b715a11632ac3579933e358145d85920633a2bc521eb20","size":439,"data":"","first_seen":"2026-02-01T01:42:31.576148Z","last_seen":"2026-02-01T16:57:00.629442Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"loansusdt.cfd/assets/index-C8PxEI73.css","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:38.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /assets/index-C8PxEI73.css HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loansusdt.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nvary: Accept-Encoding\r\netag: \"696a4a85-68c1\"\r\nexpires: Mon, 02 Feb 2026 04:56:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iAe2CgEyGEyTQ8zxguXxS0AbzFgDTeacbrA5M8KRZ%2Bi%2BF6iNBInKopOMw1m0Lx%2FEUBZXtXW%2BBuRM4M6oHRw6ZAe8y%2FfBTaGhgziJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72fbb97fdab521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26817,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26816)","md5":"c24405b36ac5d399fe534f3ba173d419","sha1":"a9dcc8f58376099f49e42abc3b3b30ea494f4661","sha256":"0e42f7251e44a18baadfeaccb241625f10de79e94a38166b6532bcd45dc7e1b0","sha512":"7fd07147f60958394ee85b9aeee99ab9824b69a7ad379ea518c8834ff570721c274b8d3730f8c9a1d37246ac6f23268354f486638f12abdb394bfbd8ad529e20","ssdeep":"192:f1ZEt3xwd5k+ny5lrLAPXOubHh7H0FiW9qbfiWEZQlaofhb7t5D6LsTCZQoXDZsI:flk+NZ6Z9PlteTyWmqFi","tlshash":"78c28564f1c4753af923da8786c4e2ac943ea523de024feae12476665fd3aff0071604","first_seen":"2026-02-01T01:42:31.573274Z","last_seen":"2026-02-01T16:57:00.614862Z","times_seen":2,"resource_available":false,"data":null}},"time_used":937,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":937,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/pinia-DQPo-rze.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:39.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /assets/pinia-DQPo-rze.js HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loansusdt.cfd/assets/index-Bobn9nWg.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nvary: Accept-Encoding\r\netag: \"696a4a85-22b9\"\r\nexpires: Mon, 02 Feb 2026 04:56:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H65L9%2Bo7mej%2BtBN8WCMZYhwRpcV6pCM0z4iVM1B0W9LV1nPGLbL%2Bex6yLr6UIcMmwfe%2BcvhwkbOVCKHOx967GQyVo7cLJ7HZ0mIK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72fbbf780fb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8889,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8889), with no line terminators","md5":"b998800f68881de50e7a3a79cf9b3576","sha1":"a4c56a2a84f6e46ed290254bf64935c7ef45fde6","sha256":"bd5843740e241ef8985cf395e1097f6f1f178595431855d94902689bf2bd9ee5","sha512":"c318d55b2b7d796758deb79267af5778f633e0f471eb1c4bbe1d2a355173172842aa4cf2296ff1daa8e79787b7e527544da5579ec132fb9e45e2646190f0040e","ssdeep":"192:1ry+360rE9UFr0wnvAshrToWngbncCWg4xZFBhggF9vyKMX565ZCzGAaack:k+3NE9UFrV4YoWngbncpnFTR7BMX5KG","tlshash":"c902d6cab256b0700b7710f9907f5515f239602e300b58c0b26decf9393656e926babe","first_seen":"2026-02-01T01:42:31.581906Z","last_seen":"2026-02-01T16:57:00.618231Z","times_seen":2,"resource_available":true,"data":null}},"time_used":932,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":932,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/utils-Cf57fSvr.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:39.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /assets/utils-Cf57fSvr.js HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loansusdt.cfd/assets/index-Bobn9nWg.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nvary: Accept-Encoding\r\netag: \"696a4a85-fc1f\"\r\nexpires: Mon, 02 Feb 2026 04:56:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OX28PLciq58PWh1PJvF5pLmBqRieIIQB0rf7gHPOXp0uewh1gQ0hWmws39B1U6pobz46TCL3%2BO3p5B2Vkl4o6N6hSJqSe%2BONQjX2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72fbbf8810b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64543,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (64543), with no line terminators","md5":"055e2af6c147dd20f21ceecf5c1664d6","sha1":"03a464cc64cc871283ce9923f9e2a255194c25c2","sha256":"50b8bc9cecd77a15c82510b99954c7c33c02f6623d323c8ec572447c9153365e","sha512":"7772b61d83f226686df3ea309b9090c7b53b0dd55f67709c2bab09db146d6682968e50bcad258b7d138f708213654336f7a5d603d539578b5a55ab4f283c3636","ssdeep":"1536:Nsi7v0we8XvVIq1CCC9JJ6dK1m8RTuvUtD:N9/ewvVly9JJ6dK1m8RTV","tlshash":"4f531ad972e1b06253ab61e6403f0806f3be9925740d44a8fa5c9cd7bc7594a82b7f2c","first_seen":"2026-02-01T01:42:31.585187Z","last_seen":"2026-02-01T16:57:00.620572Z","times_seen":2,"resource_available":true,"data":null}},"time_used":942,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":941,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/loan-DgdNoR4J.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:41.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /assets/loan-DgdNoR4J.js HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loansusdt.cfd/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nvary: Accept-Encoding\r\netag: \"696a4a85-e0a\"\r\nexpires: Mon, 02 Feb 2026 04:56:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G1zBRbHkgLpz8Vj6q6u%2F4jV8fKknrPhJZ6z8LTPB%2B1VgzubQ4iUq0Qs%2FA5w8oGlWJGJuYcszYchuYQxJ0l%2FeRiLBGtwkJrQoq8Ez\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72fbcc28a6b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3594,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3594), with no line terminators","md5":"40b15fc0a04f98a5e3b1e3a7041f9fb6","sha1":"46200949ef0574074ee68930bebe6c7e72107348","sha256":"950efccaf75ebc759b0242b0f72cae6c5726b29568ee39c9f9fd9170e5e4e235","sha512":"5debd230ef576b998cf00f36a4ee1be1168ab2ec751b3da5343da3b17e7edfd873a58c20e851e9f12f4e72ce18d59e8af8ed09baec29fa51a88ea4ceb4b3fb99","ssdeep":"","tlshash":"ba71bfc978d3f0d1a7b5847590bf624f9a696fc1305b8380b95906913c3ae3eb272e58","first_seen":"2026-02-01T01:42:31.580247Z","last_seen":"2026-02-01T16:57:00.62275Z","times_seen":2,"resource_available":true,"data":null}},"time_used":973,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":973,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/loan-DgdNoR4J.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:42.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /assets/loan-DgdNoR4J.js HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loansusdt.cfd/assets/pages-CZLy1aSW.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nvary: Accept-Encoding\r\netag: \"696a4a85-e0a\"\r\nexpires: Mon, 02 Feb 2026 04:56:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=74N43HNWHTlN%2Fh4YHj2UirPKWfF86ItRQmsL64yljviHvXJC8SMIwG12657dvKv2OFEmR8FusTEgWsROowk7W%2FlCOTNvnvTQMqnZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72fbd238efb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3594,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3594), with no line terminators","md5":"40b15fc0a04f98a5e3b1e3a7041f9fb6","sha1":"46200949ef0574074ee68930bebe6c7e72107348","sha256":"950efccaf75ebc759b0242b0f72cae6c5726b29568ee39c9f9fd9170e5e4e235","sha512":"5debd230ef576b998cf00f36a4ee1be1168ab2ec751b3da5343da3b17e7edfd873a58c20e851e9f12f4e72ce18d59e8af8ed09baec29fa51a88ea4ceb4b3fb99","ssdeep":"","tlshash":"ba71bfc978d3f0d1a7b5847590bf624f9a696fc1305b8380b95906913c3ae3eb272e58","first_seen":"2026-02-01T01:42:31.580247Z","last_seen":"2026-02-01T16:57:00.62275Z","times_seen":2,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/api/v1/notification/unreadCount","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:42.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /api/v1/notification/unreadCount HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nthink_lang: en-US\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loansusdt.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: PHPSESSID=1243ab0998f359d9e18798a8b874043e; expires=Mon, 02-Feb-2026 16:56:42 GMT; Max-Age=86400; path=/\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mAR0lC1tk9w8HqyQ1JQUP66DaZa8jrwDLOHfgeE3EHppve3cfgqsXu8DVbL7qodVXKlfHXZx8%2Bbm6u29XFRWDCJTVNT7FECsfleI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72fbd338fdb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":79,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"53713175e46877e70551ae9a1a364d5b","sha1":"bf6493b4fdf0c548a68c83e15e156f778d7b8ed9","sha256":"1005a3558b32ce924715c34e005f899d1304ad9f0752389d7a84bf1895709eaa","sha512":"40b487c84284bf578f633afeafed597a2f87bec8ab93acd7aeb11e0d52b67d54251c3d4e3f593b1157983f2e40f3ccafdd283db502b19433952f1c101a180306","ssdeep":"","tlshash":"9ca0120104062b1875160190a4e439800e6c118388400c090848db5442544117007631","first_seen":"2026-02-01T16:57:00.624926Z","last_seen":"2026-02-01T16:57:00.624926Z","times_seen":1,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/empty-CpyEx0oe.css","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:43.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /assets/empty-CpyEx0oe.css HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loansusdt.cfd/\r\nCookie: PHPSESSID=f14acbe7cc6904fdc6718c4612c7bcb7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:44 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 02 Feb 2026 04:56:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: REVALIDATED\r\netag: W/\"696a4a85-124\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qDn4GHSqQIaxFIMxleOxWq4GVTb95R9KanHC7Ob4c%2B0X55LoB%2FLkUb587UEavggCQt5FOt2foVeZJJbjNchELd96EHlKQ2mJoEOi\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9c72fbd55917b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":292,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"66f60c2d7bbf866725f03f46e2a703b8","sha1":"0a6c7e148c674e6556ec2636a37791a8532fcca5","sha256":"d8fb1c764c56e680dd7c277c960fb4b967fc3a98d0dfc531487db7d3b853cfd7","sha512":"35b707afb75b9a282dc1e036a56424c9e47162645ad7f05f15f3448db21865dd2830603c3dd5949339614be43294977403bab0c46b9b338f56cfb1afee311a00","ssdeep":"","tlshash":"f1e0ec10751e2c255cebc211d5c0a9ae826ce3579e33489a7b9a69874a6358822bc3c3","first_seen":"2026-02-01T01:42:31.589934Z","last_seen":"2026-02-01T16:57:00.627284Z","times_seen":2,"resource_available":false,"data":null}},"time_used":922,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":921,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/empty-DqntuIUV.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:43.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /assets/empty-DqntuIUV.js HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loansusdt.cfd/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:44 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 02 Feb 2026 04:56:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: REVALIDATED\r\netag: W/\"696a4a85-1b7\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DndZL7qj2HFhoJWkMmVsZPr%2FnFacT3vq1utetB2upVRaCk4z5VPq111RDd2rNFl5vxCSIo9sB7rew%2BxMpslv2wlGTM5TD7kB8w%2F%2B\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c72fbd5791ab521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":439,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (439), with no line terminators","md5":"592e9ad27f16f8412f8a63689df34531","sha1":"420d0103f36bbc622ef645ccc63dcc56179f2ed1","sha256":"bf6be88c96a0b1400a94b5b70d58bb5c7b612596c6e8c955c1a49273570e5547","sha512":"d918a2feac0ed013d9a1f06b7ffa32b062cb84fe29c150367d726bbf42a78b7434a7159a68a038a6e6fd7543491a4ce64823fe201098a3806715de75a3e67fd7","ssdeep":"","tlshash":"c8f0ab1cb80f86fe598298a4b715a11632ac3579933e358145d85920633a2bc521eb20","first_seen":"2026-02-01T01:42:31.576148Z","last_seen":"2026-02-01T16:57:00.629442Z","times_seen":2,"resource_available":true,"data":null}},"time_used":925,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":925,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/vue-vendor-Bu9wOpDZ.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:41.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /assets/vue-vendor-Bu9wOpDZ.js HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loansusdt.cfd/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nvary: Accept-Encoding\r\netag: \"696a4a85-24d5d\"\r\nexpires: Mon, 02 Feb 2026 04:56:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BqeJbfpSmRtgmLPDpGhBS63gFp63Nk3Jk1ombtf6b%2Fk9y38PxpLuDWwdLxNqhFUQjnAQXVQ1zNtUa87t%2Bt%2Fa%2FZQHzCzT6pz3Fkfq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72fbcbc89db521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":150877,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"546947f07fdcd0a408c73a99ba816f65","sha1":"40325a22cbc246a71c13f54932d82e821d853a6f","sha256":"e688a76b13def6a5c663948af5074fb6b411760021b58b58cfcddc1de5e98146","sha512":"8c878c3ee83a974b7643e97c1caeca3e5377fdff06417e6e7d2f107e7d1cf391a7a6db864169409249662bd3871caa533451d84e734ec89a16c1fa5339209444","ssdeep":"3072:z2agNhYP39YnMI4GxJ+qB6uZdex0CzyMDpTZ:ipgfSn5p76uzLCzyMDpl","tlshash":"8fe319e93182b06253ba19e7107b1001f33e1a59380ed494f1adaddb3d3795a82b7f6d","first_seen":"2026-02-01T01:42:31.574509Z","last_seen":"2026-02-01T16:57:00.631577Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/pages-DPAKgmll.css","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:41.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /assets/pages-DPAKgmll.css HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loansusdt.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nvary: Accept-Encoding\r\netag: \"696a4a85-1ebc\"\r\nexpires: Mon, 02 Feb 2026 04:56:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BTMOpmjWbG9%2BRggu3PAdDfgn%2B7JBPFfTreKwznOz%2BZIZ96GGv45G3szXtc7Ts1DKsBmJmVJPcOFawnj%2B6KPEBvu%2BPJbQbDNxm%2FM%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72fbcc28a4b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7868,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7867)","md5":"0bba2a2ea33e61560b900191399f7b04","sha1":"70af323ebe7a8662922da00fe007e5db862e020c","sha256":"70301c898b768974168d1c28c029589a5afe4309f0ba3541cd091a3461fae625","sha512":"711270bfa080589e040a147eef2a8be43b1a5a31ce058e7fa6ac4091c085fd3408a931c21fab0988af28c702f30315cfab9b4c9acdaa3c45b5e65330d928d246","ssdeep":"192:dJUs5RdE2Fu1SSgWFwT0IoPev1Qy7NUHjRhojAg:jdEJwT0NorCIP","tlshash":"b7f11b2031191018f937d4c56890a2ea782c6bc3d17f43bed9a82817dfab18b7f31786","first_seen":"2026-02-01T01:42:31.585945Z","last_seen":"2026-02-01T16:57:00.633396Z","times_seen":2,"resource_available":false,"data":null}},"time_used":923,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":923,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/notification-BMmUkL1K.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:41.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /assets/notification-BMmUkL1K.js HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loansusdt.cfd/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nvary: Accept-Encoding\r\netag: \"696a4a85-a1f\"\r\nexpires: Mon, 02 Feb 2026 04:56:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r5gdunSOxJr7f57EaQpuM1O1ghwMNBP%2B0rtVMB9DVZUL98yf8mzvv%2FrWhv5zKNMJkvvuldgxi%2BF5fFtrnsPuBr%2FrVSrdN%2BmnZbil\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72fbcc28a7b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2591,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2591), with no line terminators","md5":"f165239ce032a6dc35115200d7e1e927","sha1":"35526d5126edb4587e637b5bb2041d801ca06781","sha256":"f4137cda99b8e7ba4def8dcec03486afe70b09b6f1b3dde6567f5339bf8ce85c","sha512":"6c2db55f0fa24e4865587a6f13f39edbcac051c99f76838f364c61ae1498db417f4837492d748a55ac0e5e48e8498c2f8255a91f305e2b8a7689cbc3bec92f6e","ssdeep":"","tlshash":"3051a3ce7483f0d27bb68477a0bf569b513b7bc524a641d0f58781553839e2ae332a24","first_seen":"2026-02-01T01:42:31.588003Z","last_seen":"2026-02-01T16:57:00.635042Z","times_seen":2,"resource_available":true,"data":null}},"time_used":937,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":937,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/empty-DqntuIUV.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:44.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /assets/empty-DqntuIUV.js HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loansusdt.cfd/assets/index-Bobn9nWg.js\r\nCookie: PHPSESSID=8b2b995c4d9b5fc1d7901f73f1966bc0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:44 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 02 Feb 2026 04:56:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"696a4a85-1b7\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6u0OX3xybqjglDEDvp3Lu1iG5CQeymkzv087X09yiHus%2FUTjCDNTQwdl6mNjLOEYkeqU4ExuTkCfrfWGtnnTH%2BPlYOPoHwW3s8BL\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9c72fbdb3993b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":439,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (439), with no line terminators","md5":"592e9ad27f16f8412f8a63689df34531","sha1":"420d0103f36bbc622ef645ccc63dcc56179f2ed1","sha256":"bf6be88c96a0b1400a94b5b70d58bb5c7b612596c6e8c955c1a49273570e5547","sha512":"d918a2feac0ed013d9a1f06b7ffa32b062cb84fe29c150367d726bbf42a78b7434a7159a68a038a6e6fd7543491a4ce64823fe201098a3806715de75a3e67fd7","ssdeep":"","tlshash":"c8f0ab1cb80f86fe598298a4b715a11632ac3579933e358145d85920633a2bc521eb20","first_seen":"2026-02-01T01:42:31.576148Z","last_seen":"2026-02-01T16:57:00.629442Z","times_seen":2,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/login-Bs0OV7ny.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:44.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /assets/login-Bs0OV7ny.js HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loansusdt.cfd/assets/index-Bobn9nWg.js\r\nCookie: PHPSESSID=8b2b995c4d9b5fc1d7901f73f1966bc0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nvary: Accept-Encoding\r\netag: \"696a4a85-96a\"\r\nexpires: Mon, 02 Feb 2026 04:56:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=35zJjmDwI55ABROVw7UgvyjZR%2FhRy%2BBLmSbWKXEfcmbAj8simqmSLKS3ckhMKxbD8dXundn%2B%2FKwriIW4%2F7GcVpZPmvgDWhE%2FRG91\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72fbdb4997b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2410,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2410), with no line terminators","md5":"425e510f04d12786a9e807e8ff01ab2d","sha1":"5067285f3d15a775fb51af28a1f19f99df9b8b3d","sha256":"fe7fcc44a886a15baede8da9695b82a28268391b08bedbeeaac56b002d939162","sha512":"6eb3813efaa82141b1742aaab8e1b449379ce0ed827c0923a967415694316dbac71cc5c79070eeba08be4aa89ac3ad9d4b6e9f0bbe550e23a7b02bf073d5e428","ssdeep":"","tlshash":"9b41424ce822ccfe94765468a44b04242440b97e61758515e3fe1934ffaaee5ce1e326","first_seen":"2026-02-01T01:42:31.584446Z","last_seen":"2026-02-01T16:57:00.636587Z","times_seen":2,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/vue-vendor-Bu9wOpDZ.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:39.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /assets/vue-vendor-Bu9wOpDZ.js HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loansusdt.cfd/assets/index-Bobn9nWg.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nvary: Accept-Encoding\r\netag: \"696a4a85-24d5d\"\r\nexpires: Mon, 02 Feb 2026 04:56:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DFJFC9CqxJ%2Fcqzb19%2FmOYz2HCsUPJBMwxFWv5CIQs9ZKJw3IwwTAooUIT8rcHLaDdmWvGZEz3qHZinly7bBXCmiygjntNAZlHA9V\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72fbbf780db521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150877,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"546947f07fdcd0a408c73a99ba816f65","sha1":"40325a22cbc246a71c13f54932d82e821d853a6f","sha256":"e688a76b13def6a5c663948af5074fb6b411760021b58b58cfcddc1de5e98146","sha512":"8c878c3ee83a974b7643e97c1caeca3e5377fdff06417e6e7d2f107e7d1cf391a7a6db864169409249662bd3871caa533451d84e734ec89a16c1fa5339209444","ssdeep":"3072:z2agNhYP39YnMI4GxJ+qB6uZdex0CzyMDpTZ:ipgfSn5p76uzLCzyMDpl","tlshash":"8fe319e93182b06253ba19e7107b1001f33e1a59380ed494f1adaddb3d3795a82b7f6d","first_seen":"2026-02-01T01:42:31.574509Z","last_seen":"2026-02-01T16:57:00.631577Z","times_seen":2,"resource_available":true,"data":null}},"time_used":919,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":918,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/pages-CZLy1aSW.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:42.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /assets/pages-CZLy1aSW.js HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loansusdt.cfd/assets/index-Bobn9nWg.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nvary: Accept-Encoding\r\netag: \"696a4a85-22f5\"\r\nexpires: Mon, 02 Feb 2026 04:56:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EDPqeNi0EsCYvdgYIEKuH8EohlnXF3nCc54LU7n%2Fn%2FWpxhhnJJe1MX%2Bq7CGCUMgYl%2BZ5PFauY6KEAJrNJSJo%2Fca7wDJvF6kXdtLG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72fbd1f8eab521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8949,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (8949), with no line terminators","md5":"ae40ec31be42fa3652a188121ba3b77d","sha1":"f2d32fd062d678015117d6003352cb3273d5f397","sha256":"4744943e029073a939d91f8e78c78e53975edf38c8b87c6b26d2548b159e81cd","sha512":"e959a4a2a6a56690ab1451851dbc3c6859ff508f09549827d9c1792799f812cceabed37b43fb7673563da9a13d42577d24cf9a04ac4156896b47726c040cef3d","ssdeep":"192:PdUpC2JB3wRAxrQ0sekI42IbvyiRKyVGMVoLIFujr:PEqRqs0seC+IG","tlshash":"e102955af042cafdf4b780b9991a20647e503fddc0244566f1fe9c092b29da9a70db3d","first_seen":"2026-02-01T01:42:31.579403Z","last_seen":"2026-02-01T16:57:00.638185Z","times_seen":2,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/login-ayuPihfx.css","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:43.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /assets/login-ayuPihfx.css HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loansusdt.cfd/\r\nCookie: PHPSESSID=8b2b995c4d9b5fc1d7901f73f1966bc0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nvary: Accept-Encoding\r\netag: \"696a4a85-db5\"\r\nexpires: Mon, 02 Feb 2026 04:56:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=43KEaUo%2FYjox6ZAEkViK0R8WaqZGm6%2F%2BWxdRKDbbsiDsxvpf09NaRv5ZANE1xXEgPpnKjm9XqSR00%2BO7uj7qaZhpBdd4Grhf9IUS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72fbd56919b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3509,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3508)","md5":"9548543fabe2ee7f6ea8cc8d409a9ae1","sha1":"f32815b191b8115db56aa6c65080aaeda5414b41","sha256":"6cdd0602a0fd160b35a826ea15d9eb54212fb98fb9ce35a671d650ad110f2310","sha512":"730898ed7460f9a6689cd4062d401c959bbd10f7d90ff05dcdd0fbd34a9f8b3e14334285c31d3e3a1db2f4adbb6e20f1b9fa898c5554ef42b13e85675ab5b046","ssdeep":"","tlshash":"3671cd10718a1852f933da85ac90d19c60fd9763da53cb3996bc1178fe6f39e5232f24","first_seen":"2026-02-01T01:42:31.583572Z","last_seen":"2026-02-01T16:57:00.639865Z","times_seen":2,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/LanguageSwitcher-CYHu5LxW.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:43.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /assets/LanguageSwitcher-CYHu5LxW.js HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loansusdt.cfd/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nvary: Accept-Encoding\r\netag: \"696a4a85-4ad\"\r\nexpires: Mon, 02 Feb 2026 04:56:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qqv7TFbf5Bm2xrQb1NSFPqO18mV6CEHGaJnQUGYDq8a8ikch05yt3Ocq3MUZKshi1jvz3iFDeKpFrskf4XjR%2FUX9jYzmMglSUP9b\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72fbd5791fb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1197,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (1191), with no line terminators","md5":"330c28db88ddd5e872cd74c288773445","sha1":"e072701916322c1390eba31a5a806da91269ca88","sha256":"2c4cfc14bd5837a77b9cdd2cce51bc3d2d207e48cbc23deb31b3e45ab78cfc71","sha512":"2601d3930d6fb261d00360a5ad0042c1a040011466913d45053f5db6da1d489bb20c684c1bf46669d70b92929fcfe15ca9ef850cfdb59428da91d8f3782429a2","ssdeep":"","tlshash":"ce21a7fe7401c4f893f2147892274d5e3264a395f37c91a0e19e09143ff6a64ba0f750","first_seen":"2026-02-01T01:42:31.571558Z","last_seen":"2026-02-01T16:57:00.641006Z","times_seen":2,"resource_available":true,"data":null}},"time_used":939,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":939,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/rolldown-runtime-CxJ8HZ7q.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:41.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /assets/rolldown-runtime-CxJ8HZ7q.js HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loansusdt.cfd/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:41 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 02 Feb 2026 04:56:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"696a4a85-29b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4XLizbr2t9GsN0BqpHNyZCygQJp3t6B%2BZWGtVi35XWpuRJ%2FH8FMXOknUeeYVgxQQ2GXmIJ92GViwWCtzFd6irCS2lpctm9uk6rw1\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c72fbcbc89eb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":667,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (667), with no line terminators","md5":"c7243515d1b8762f7965325bd26ad8a0","sha1":"26cf7e711d7dffce79caf99fdaf5466ba83792b8","sha256":"92e259033f95291f5e3c738023b88e1182fde091da96bbb13c87c6f879fd544c","sha512":"33ee3eb563f46d079db4cabfb2931ab4ef50fe398e15a42ba8079b815a823ebcc56fc78c67c677df957f7ca813a715415639ec9f2f5424f6616d5cf386dbcc5b","ssdeep":"","tlshash":"64019ea77d60bbf613d792cac4785685e2082c3e55b4b4d08bf88dfaa9c00472098e33","first_seen":"2026-02-01T01:42:31.577151Z","last_seen":"2026-02-01T16:57:00.642181Z","times_seen":2,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/pages-CZLy1aSW.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:41.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /assets/pages-CZLy1aSW.js HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loansusdt.cfd/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nvary: Accept-Encoding\r\netag: \"696a4a85-22f5\"\r\nexpires: Mon, 02 Feb 2026 04:56:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8e1Ck47DWBZJrQm3coBcByNrI%2FucrZRof7vLZ35ftoU9lTkE%2B9sLoCWOJ0Kl9fqowOc3arzqamYoA8swBsdCm4alhGtJntjNW6UZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72fbcc28a5b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8949,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (8949), with no line terminators","md5":"ae40ec31be42fa3652a188121ba3b77d","sha1":"f2d32fd062d678015117d6003352cb3273d5f397","sha256":"4744943e029073a939d91f8e78c78e53975edf38c8b87c6b26d2548b159e81cd","sha512":"e959a4a2a6a56690ab1451851dbc3c6859ff508f09549827d9c1792799f812cceabed37b43fb7673563da9a13d42577d24cf9a04ac4156896b47726c040cef3d","ssdeep":"192:PdUpC2JB3wRAxrQ0sekI42IbvyiRKyVGMVoLIFujr:PEqRqs0seC+IG","tlshash":"e102955af042cafdf4b780b9991a20647e503fddc0244566f1fe9c092b29da9a70db3d","first_seen":"2026-02-01T01:42:31.579403Z","last_seen":"2026-02-01T16:57:00.638185Z","times_seen":2,"resource_available":true,"data":null}},"time_used":964,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":964,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/favicon.ico","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:42.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loansusdt.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:43 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t9wjRX99O4PLMYrWHBzhN51ntS67GttyMigfQptzlmdVdHXlztnB4IGhb2vzU2or532vSvRUvBZB7cmAvVXsgjmwhkna0Yt4tbEA\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c72fbcf48d7b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-10T23:57:35.198566Z","times_seen":548538,"resource_available":true,"data":null}},"time_used":919,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":919,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/api/v1/wallet/info","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:42.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /api/v1/wallet/info HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nthink_lang: en-US\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loansusdt.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: PHPSESSID=f14acbe7cc6904fdc6718c4612c7bcb7; expires=Mon, 02-Feb-2026 16:56:42 GMT; Max-Age=86400; path=/\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kw%2FuFQAYk18w0n2cmJHIocdAUa77zpe5C3wA9GB2Ghi6kCuBaHEoVsayzsbDA8tKacgQeQ%2BXhFSA8RGIULcGNHEMrmvWYX7E1QOu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72fbd33900b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":79,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"53713175e46877e70551ae9a1a364d5b","sha1":"bf6493b4fdf0c548a68c83e15e156f778d7b8ed9","sha256":"1005a3558b32ce924715c34e005f899d1304ad9f0752389d7a84bf1895709eaa","sha512":"40b487c84284bf578f633afeafed597a2f87bec8ab93acd7aeb11e0d52b67d54251c3d4e3f593b1157983f2e40f3ccafdd283db502b19433952f1c101a180306","ssdeep":"","tlshash":"9ca0120104062b1875160190a4e439800e6c118388400c090848db5442544117007631","first_seen":"2026-02-01T16:57:00.624926Z","last_seen":"2026-02-01T16:57:00.624926Z","times_seen":1,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-01T16:56:37.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 01 Feb 2026 16:56:38 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LH4d7%2FoazqwCIGGxsrukgPz1VZ8vRSJ2oBbLaZXzfSHw%2BFUHuUlOvPmDajeeCuVB%2B5aBBOnMRHswCvVphTteGSNJhYbGOohfaPJO\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c72fbb25ff356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1332,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"cd0590b99363702c062fcfe8c6970f24","sha1":"73e361c4071a904f7d9991244ec991df225911a8","sha256":"dbfac935051d5b34053718d246f43cf1ab06ad8dcc183032a809b61a8fcaac42","sha512":"a1ad6524b8d6e19a248abcd3538d8453b88ab36b76bb515a6b4be479e831c749937b9be7a888f262ae1481bed36f213982541cc89df909da3022783c255e7dd1","ssdeep":"","tlshash":"9321a00560f18c0553301b19fbc1e4289d91f74b894ed698b4ee60fd8f45fc68b97939","first_seen":"2026-02-01T01:42:31.587371Z","last_seen":"2026-02-01T16:57:00.644273Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1092,"timings":{"blocked":67,"dns":52,"connect":1,"send":0,"wait":953,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/rolldown-runtime-CxJ8HZ7q.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:40.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /assets/rolldown-runtime-CxJ8HZ7q.js HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loansusdt.cfd/assets/utils-Cf57fSvr.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:41 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 02 Feb 2026 04:56:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: REVALIDATED\r\netag: W/\"696a4a85-29b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WsOL7D8CtGqqXOC4OLgIY%2F%2FmYaVk9XMQmAi9YFxxS4dQNpN1RuMj1VvBDFU8DbIqGQSMn150Di9BrrZVvkI9T3W0U%2BfBYninjBbW\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9c72fbc5883ab521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":667,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (667), with no line terminators","md5":"c7243515d1b8762f7965325bd26ad8a0","sha1":"26cf7e711d7dffce79caf99fdaf5466ba83792b8","sha256":"92e259033f95291f5e3c738023b88e1182fde091da96bbb13c87c6f879fd544c","sha512":"33ee3eb563f46d079db4cabfb2931ab4ef50fe398e15a42ba8079b815a823ebcc56fc78c67c677df957f7ca813a715415639ec9f2f5424f6616d5cf386dbcc5b","ssdeep":"","tlshash":"64019ea77d60bbf613d792cac4785685e2082c3e55b4b4d08bf88dfaa9c00472098e33","first_seen":"2026-02-01T01:42:31.577151Z","last_seen":"2026-02-01T16:57:00.642181Z","times_seen":2,"resource_available":true,"data":null}},"time_used":973,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":973,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/wallet-I0zhNFg0.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:42.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /assets/wallet-I0zhNFg0.js HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loansusdt.cfd/assets/pages-CZLy1aSW.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nvary: Accept-Encoding\r\netag: \"696a4a85-9c6\"\r\nexpires: Mon, 02 Feb 2026 04:56:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7IZFql%2B%2F0kX1%2Bh193YoGijw7SGEgXyVoJP%2FuyISwvIQtFfE%2FMYB8i9Qva3bSVFgUsQSUKzND3qv4mcVVvM9c1quozfPJO9COZjl7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72fbd238f1b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2502,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2502), with no line terminators","md5":"f493f35f26907c31a8c4f88b5b5055bf","sha1":"fcd43e214f8a688ce3380724f2245f4d17adfd86","sha256":"b7464951ecbfb588f6f5b0b98123eb1b7901056d82cf1a80811cf9d0dfda0dfe","sha512":"1d9d33483234d2289d277549e35b75913571eac36604a05a32ba96cb7b0a9379725fe315dd4b8bd8ae434404f8f6651360a2fce300da8f2da2619efc6df055f9","ssdeep":"","tlshash":"e051e2c97983b0c197758465a0bf66bf51397bc0106ad3e0f55f4541383ae7ee232d28","first_seen":"2026-02-01T01:42:31.578681Z","last_seen":"2026-02-01T16:57:00.645567Z","times_seen":2,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/login-Bs0OV7ny.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:43.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /assets/login-Bs0OV7ny.js HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loansusdt.cfd/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nvary: Accept-Encoding\r\netag: \"696a4a85-96a\"\r\nexpires: Mon, 02 Feb 2026 04:56:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eMSkmrSmMjZwdMp03LDBi3h2UL1Ob4tTWe5HiQSltB1DdJHvFETAef0RTCDqH9YJlwkM2jhPXpkNk6sJ9%2BCHvPyG4uLhgOyOWisR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72fbd5791db521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2410,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2410), with no line terminators","md5":"425e510f04d12786a9e807e8ff01ab2d","sha1":"5067285f3d15a775fb51af28a1f19f99df9b8b3d","sha256":"fe7fcc44a886a15baede8da9695b82a28268391b08bedbeeaac56b002d939162","sha512":"6eb3813efaa82141b1742aaab8e1b449379ce0ed827c0923a967415694316dbac71cc5c79070eeba08be4aa89ac3ad9d4b6e9f0bbe550e23a7b02bf073d5e428","ssdeep":"","tlshash":"9b41424ce822ccfe94765468a44b04242440b97e61758515e3fe1934ffaaee5ce1e326","first_seen":"2026-02-01T01:42:31.584446Z","last_seen":"2026-02-01T16:57:00.636587Z","times_seen":2,"resource_available":true,"data":null}},"time_used":936,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":936,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/vant-CkusD4fu.css","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:38.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /assets/vant-CkusD4fu.css HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loansusdt.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nvary: Accept-Encoding\r\netag: \"696a4a85-46af6\"\r\nexpires: Mon, 02 Feb 2026 04:56:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8jL56oqwnlg18P03QenbRoiPej3ZpjJCVmXUdKAEZpo209ua20d4gRGoSkj68CU%2BEg8no%2BLBAwZdOAWg266rsGOPy1o5AEhRtmNj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72fbb97fd9b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":289526,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ea8934060c05b612a0bcfe470b5a503c","sha1":"3b419644097a936b63518ade69b14ea7e4656e15","sha256":"4028bd5b9cfa2d5775d744499b5c4c823c752887bbd39f2f403ba7fd28144919","sha512":"eff2263f82d4e612e17da80eb9e18753d2f8f3abf9fcc6742bf5c9d9ad79575a81fb09ac76eb5e42099d38467a0ceb3f59140250f3c1ec4ddd0e949d63d02af7","ssdeep":"1536:cCwsBlDOFIxuVoxS7Z/ErA+AKVmVVVqg/IyNBi3MFYaQj7FCwsBlDOFIxuVoxV2h:cClDsIxuVSdALJNIClDsIxuVS0Nku","tlshash":"c6549399eb90917d7f2ab4759b8b95ecf13cba61dd01d6e4f10091a80ac3ff10723626","first_seen":"2026-02-01T01:42:31.572405Z","last_seen":"2026-02-01T16:57:00.646637Z","times_seen":2,"resource_available":false,"data":null}},"time_used":929,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":922,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/vant-BokNV7wa.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:39.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /assets/vant-BokNV7wa.js HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loansusdt.cfd/assets/index-Bobn9nWg.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nvary: Accept-Encoding\r\netag: \"696a4a85-1c0e4\"\r\nexpires: Mon, 02 Feb 2026 04:56:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KJj8ApjTdZ9e1Cb9PY7%2FIbojU1oIcoeJ1jRj871MQVTE39QRyKThbDdMWtoGbiDTxFpHKAwn091gi%2FhHXul6lHBD1%2FZwdh6NbR97\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72fbbf780eb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114916,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65248), with no line terminators","md5":"a464914cd6e0e2765d2b21fa97d463f8","sha1":"61481aa475c99e59f625a74bbbcc1bbef36e0c15","sha256":"1af6e1882aa89600e01bf76951930053821ddbae610e824fdb8ad2288fad7302","sha512":"beca049b37b2a287a92ba86c7c55541347e2f6717ec2aad8d9f6d8db36ba4ae865476619d5b8ce811ee1989767da4027dc27561ec6635c52230498564c8f152b","ssdeep":"3072:/g7wI8JMW3i0GhCDJWWCLp8Q+zJtf56qwH2JumMNwVbrITQ1QoNtQAOrWHQiQN1:+Q3i0GhkxC+R6qwJw9rIuxgBX","tlshash":"92b32bc1b995b43587bbd5d5806b045072391b48b009d1e0f0bdad4a3aadee5b2fbf2c","first_seen":"2026-02-01T01:42:31.577941Z","last_seen":"2026-02-01T16:57:00.64808Z","times_seen":2,"resource_available":true,"data":null}},"time_used":962,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":960,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/vant-BokNV7wa.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:41.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /assets/vant-BokNV7wa.js HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loansusdt.cfd/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nvary: Accept-Encoding\r\netag: \"696a4a85-1c0e4\"\r\nexpires: Mon, 02 Feb 2026 04:56:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jHoHUmMaAO51pnt7D3MJQuQ8kk87pxAnBUF6ZDyrbamCNnX01rcfWUnRvI8CzZG4%2BxuyhY7BbTPPkaexiI3G6oDQFrK0OIDn6f0Q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72fbcbd8a0b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114916,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65248), with no line terminators","md5":"a464914cd6e0e2765d2b21fa97d463f8","sha1":"61481aa475c99e59f625a74bbbcc1bbef36e0c15","sha256":"1af6e1882aa89600e01bf76951930053821ddbae610e824fdb8ad2288fad7302","sha512":"beca049b37b2a287a92ba86c7c55541347e2f6717ec2aad8d9f6d8db36ba4ae865476619d5b8ce811ee1989767da4027dc27561ec6635c52230498564c8f152b","ssdeep":"3072:/g7wI8JMW3i0GhCDJWWCLp8Q+zJtf56qwH2JumMNwVbrITQ1QoNtQAOrWHQiQN1:+Q3i0GhkxC+R6qwJw9rIuxgBX","tlshash":"92b32bc1b995b43587bbd5d5806b045072391b48b009d1e0f0bdad4a3aadee5b2fbf2c","first_seen":"2026-02-01T01:42:31.577941Z","last_seen":"2026-02-01T16:57:00.64808Z","times_seen":2,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/pinia-DQPo-rze.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:41.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /assets/pinia-DQPo-rze.js HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loansusdt.cfd/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nvary: Accept-Encoding\r\netag: \"696a4a85-22b9\"\r\nexpires: Mon, 02 Feb 2026 04:56:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SvNCTEvZ5Os8PyNKrTCZZ%2FMMBXKRraE3vm%2B5I6JlHmJQwa131VB2RElcJQZ2nCqwAkUab3aZbUwr2UUOt8Hw9bq1VkJ6LyvaI8cx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72fbcbd8a1b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8889,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8889), with no line terminators","md5":"b998800f68881de50e7a3a79cf9b3576","sha1":"a4c56a2a84f6e46ed290254bf64935c7ef45fde6","sha256":"bd5843740e241ef8985cf395e1097f6f1f178595431855d94902689bf2bd9ee5","sha512":"c318d55b2b7d796758deb79267af5778f633e0f471eb1c4bbe1d2a355173172842aa4cf2296ff1daa8e79787b7e527544da5579ec132fb9e45e2646190f0040e","ssdeep":"192:1ry+360rE9UFr0wnvAshrToWngbncCWg4xZFBhggF9vyKMX565ZCzGAaack:k+3NE9UFrV4YoWngbncpnFTR7BMX5KG","tlshash":"c902d6cab256b0700b7710f9907f5515f239602e300b58c0b26decf9393656e926babe","first_seen":"2026-02-01T01:42:31.581906Z","last_seen":"2026-02-01T16:57:00.618231Z","times_seen":2,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/api/v1/loan/list?status=repaying\u0026page=1\u0026pageSize=10","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:42.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /api/v1/loan/list?status=repaying\u0026page=1\u0026pageSize=10 HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nthink_lang: en-US\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loansusdt.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: PHPSESSID=72aada9ecdbf037df85ac757e410ccc3; expires=Mon, 02-Feb-2026 16:56:42 GMT; Max-Age=86400; path=/\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JL4m3eDhd5ktxPJiB%2BC9ySotwEnr8W6UU3t43%2FLXEI%2FrXRbFriq9iDkfgtzHoPQh3vBLnzOJjHvjCHLjAJyTFrhGR5dl48k2enh0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72fbd338feb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":79,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"53713175e46877e70551ae9a1a364d5b","sha1":"bf6493b4fdf0c548a68c83e15e156f778d7b8ed9","sha256":"1005a3558b32ce924715c34e005f899d1304ad9f0752389d7a84bf1895709eaa","sha512":"40b487c84284bf578f633afeafed597a2f87bec8ab93acd7aeb11e0d52b67d54251c3d4e3f593b1157983f2e40f3ccafdd283db502b19433952f1c101a180306","ssdeep":"","tlshash":"9ca0120104062b1875160190a4e439800e6c118388400c090848db5442544117007631","first_seen":"2026-02-01T16:57:00.624926Z","last_seen":"2026-02-01T16:57:00.624926Z","times_seen":1,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/index-Bobn9nWg.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:38.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /assets/index-Bobn9nWg.js HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loansusdt.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nvary: Accept-Encoding\r\netag: \"696a4a85-b26b\"\r\nexpires: Mon, 02 Feb 2026 04:56:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=od1US555%2BWh4cYASFOJJ7pu8SQIIBgKcR7ZsKpQsMdljWBcLbV5EaBEmVNlUUt9g%2FMnp52iUR6RdOv%2BJviKW6pep2EdN46ldivYa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72fbb97fd8b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45675,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (43358)","md5":"3be892ca5aedfd6d1d0223a22bb1f1bc","sha1":"690cc5acc940d8719ef3e9e548a311c7b4e89762","sha256":"299aabfc8ae871e38fe93345cd3fe7653575ffb401dbf40ccce4b22d1d6873c3","sha512":"af610c1f81cbf029e5ed6d9d524404df874a348f79173160706fc02b907ab53ee2d9b3e53f9a9db3775046c1b435148ede0b163b79bbb878df7b6189ed0795ef","ssdeep":"768:jXByvD3aVLVKo9XpUzVgpVhEDzY96RqV0g2eFGWjXtSgsIs5u4b1iXOqTeNGPDPm:jREa6oFlED896Rbg2+GGL4zi+qDbuXKG","tlshash":"4723198e720258ac1af707a57cdb221071b44bc5d459c434bde9447933fae2da33bba9","first_seen":"2026-02-01T01:42:31.582691Z","last_seen":"2026-02-01T16:57:00.649254Z","times_seen":2,"resource_available":true,"data":null}},"time_used":949,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":949,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/wallet-I0zhNFg0.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:41.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /assets/wallet-I0zhNFg0.js HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loansusdt.cfd/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nvary: Accept-Encoding\r\netag: \"696a4a85-9c6\"\r\nexpires: Mon, 02 Feb 2026 04:56:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RT54KCbsB5m480YMJbc2DK%2FgVgTjIii4Aik2dMsyPV881PSDu8%2Fbrj57F6SBMurD34LwIgDGjIk7sw9ZEppm8ays9d4FU6xtdmuI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72fbcc28a8b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2502,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2502), with no line terminators","md5":"f493f35f26907c31a8c4f88b5b5055bf","sha1":"fcd43e214f8a688ce3380724f2245f4d17adfd86","sha256":"b7464951ecbfb588f6f5b0b98123eb1b7901056d82cf1a80811cf9d0dfda0dfe","sha512":"1d9d33483234d2289d277549e35b75913571eac36604a05a32ba96cb7b0a9379725fe315dd4b8bd8ae434404f8f6651360a2fce300da8f2da2619efc6df055f9","ssdeep":"","tlshash":"e051e2c97983b0c197758465a0bf66bf51397bc0106ad3e0f55f4541383ae7ee232d28","first_seen":"2026-02-01T01:42:31.578681Z","last_seen":"2026-02-01T16:57:00.645567Z","times_seen":2,"resource_available":true,"data":null}},"time_used":938,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":938,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/api/v1/loan/config","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:42.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /api/v1/loan/config HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nthink_lang: en-US\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loansusdt.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=8b2b995c4d9b5fc1d7901f73f1966bc0; expires=Mon, 02-Feb-2026 16:56:42 GMT; Max-Age=86400; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZmjuW%2F%2BfqAehE3kh6Y7L%2FapbnMKKzlQrucB04uDsS%2BnPVId6009tSC3t0sRbD0UKtlDc3pI6JqTZqa4QQXJRwREG3qyxNIjAMeyr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72fbd338ffb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":359,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a8398d59e010c874ba0cb1f144e7fb5a","sha1":"36829339dbad5670d84f718c1f109b4b8e1efa70","sha256":"b5e9badcbf667b9639cf9bff9724bb853e68d3bbecf46a8128018917794a26c0","sha512":"c81189571a351f83835cf9c15bf80529cc72b1c9ae6616d6bb4062bf7dbca05b9ad2ada9bfd328c39606f36681d71f071271b42830fa0bdabe5f080e99e7f462","ssdeep":"","tlshash":"ffe0680624474dba735014a1f88a108117bc758c8ccd4186d0d82b782fc7d08116ef42","first_seen":"2026-02-01T16:57:00.650597Z","last_seen":"2026-02-01T16:57:00.650597Z","times_seen":1,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/LanguageSwitcher-CYHu5LxW.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:44.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /assets/LanguageSwitcher-CYHu5LxW.js HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loansusdt.cfd/assets/login-Bs0OV7ny.js\r\nCookie: PHPSESSID=8b2b995c4d9b5fc1d7901f73f1966bc0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nvary: Accept-Encoding\r\netag: \"696a4a85-4ad\"\r\nexpires: Mon, 02 Feb 2026 04:56:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tchZv%2FDiys3rf8Lo5HfRbmsk3A6q4wKoAeykuZYJph4szD%2FleFglnbVdsLSxDLiB%2ByLPpwOlcTOtlJwAz1u9sO2a7Xy6PRiw74lY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72fbdb699ab521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1197,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (1191), with no line terminators","md5":"330c28db88ddd5e872cd74c288773445","sha1":"e072701916322c1390eba31a5a806da91269ca88","sha256":"2c4cfc14bd5837a77b9cdd2cce51bc3d2d207e48cbc23deb31b3e45ab78cfc71","sha512":"2601d3930d6fb261d00360a5ad0042c1a040011466913d45053f5db6da1d489bb20c684c1bf46669d70b92929fcfe15ca9ef850cfdb59428da91d8f3782429a2","ssdeep":"","tlshash":"ce21a7fe7401c4f893f2147892274d5e3264a395f37c91a0e19e09143ff6a64ba0f750","first_seen":"2026-02-01T01:42:31.571558Z","last_seen":"2026-02-01T16:57:00.641006Z","times_seen":2,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/utils-Cf57fSvr.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:41.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /assets/utils-Cf57fSvr.js HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://loansusdt.cfd/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nvary: Accept-Encoding\r\netag: \"696a4a85-fc1f\"\r\nexpires: Mon, 02 Feb 2026 04:56:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mRui3L0fR5owrIb%2BM6ZdGtm9k99vO90z%2FFosOYFyLGeOe2Bbge96Zyfn%2Bndfxui7oUkyd8z4so7Eg6z5MoD%2BO%2BAXRaaTgD6orAuv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72fbcbd89fb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64543,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (64543), with no line terminators","md5":"055e2af6c147dd20f21ceecf5c1664d6","sha1":"03a464cc64cc871283ce9923f9e2a255194c25c2","sha256":"50b8bc9cecd77a15c82510b99954c7c33c02f6623d323c8ec572447c9153365e","sha512":"7772b61d83f226686df3ea309b9090c7b53b0dd55f67709c2bab09db146d6682968e50bcad258b7d138f708213654336f7a5d603d539578b5a55ab4f283c3636","ssdeep":"1536:Nsi7v0we8XvVIq1CCC9JJ6dK1m8RTuvUtD:N9/ewvVly9JJ6dK1m8RTV","tlshash":"4f531ad972e1b06253ab61e6403f0806f3be9925740d44a8fa5c9cd7bc7594a82b7f2c","first_seen":"2026-02-01T01:42:31.585187Z","last_seen":"2026-02-01T16:57:00.620572Z","times_seen":2,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/notification-BMmUkL1K.js","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:42.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /assets/notification-BMmUkL1K.js HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loansusdt.cfd/assets/pages-CZLy1aSW.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nvary: Accept-Encoding\r\netag: \"696a4a85-a1f\"\r\nexpires: Mon, 02 Feb 2026 04:56:42 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pFVWc0Sy4UX2mQB25hnjL6EiWOAi6KA5qB4x8UOjzzbdyej18GXXijO9RhprpFWUvZf7DmWyFXCHjxUNoXZtLH5mN0hl6dbL8%2Bw0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72fbd238eeb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2591,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2591), with no line terminators","md5":"f165239ce032a6dc35115200d7e1e927","sha1":"35526d5126edb4587e637b5bb2041d801ca06781","sha256":"f4137cda99b8e7ba4def8dcec03486afe70b09b6f1b3dde6567f5339bf8ce85c","sha512":"6c2db55f0fa24e4865587a6f13f39edbcac051c99f76838f364c61ae1498db417f4837492d748a55ac0e5e48e8498c2f8255a91f305e2b8a7689cbc3bec92f6e","ssdeep":"","tlshash":"3051a3ce7483f0d27bb68477a0bf569b513b7bc524a641d0f58781553839e2ae332a24","first_seen":"2026-02-01T01:42:31.588003Z","last_seen":"2026-02-01T16:57:00.635042Z","times_seen":2,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/api/v1/user/info","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:42.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /api/v1/user/info HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nthink_lang: en-US\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loansusdt.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: PHPSESSID=e2ec7a05af3dca5bb201cd057f9ae499; expires=Mon, 02-Feb-2026 16:56:42 GMT; Max-Age=86400; path=/\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8gZ4qQ9uHEwNWhG7JKQzqIrkDsevKO47VToMjK1Xbk7C%2FiQg%2BOwuU%2FNJI4qegwA1rhPaf6HAKe2fQKT3YqgL7bnWJ4PW4XTp62nG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72fbd328fbb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":79,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"53713175e46877e70551ae9a1a364d5b","sha1":"bf6493b4fdf0c548a68c83e15e156f778d7b8ed9","sha256":"1005a3558b32ce924715c34e005f899d1304ad9f0752389d7a84bf1895709eaa","sha512":"40b487c84284bf578f633afeafed597a2f87bec8ab93acd7aeb11e0d52b67d54251c3d4e3f593b1157983f2e40f3ccafdd283db502b19433952f1c101a180306","ssdeep":"","tlshash":"9ca0120104062b1875160190a4e439800e6c118388400c090848db5442544117007631","first_seen":"2026-02-01T16:57:00.624926Z","last_seen":"2026-02-01T16:57:00.624926Z","times_seen":1,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"loansusdt.cfd/assets/LanguageSwitcher-DQO699Pc.css","fqdn":"loansusdt.cfd","domain":"loansusdt.cfd","tld":"cfd"},"ip":{"addr":"104.21.73.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://loansusdt.cfd/","date":"2026-02-01T16:56:43.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loansusdt.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 09 Jan 2026 09:02:15 GMT","end":"Thu, 09 Apr 2026 10:00:25 GMT"},"fingerprint":{"sha1":"63:8F:19:7D:2B:33:3A:0E:58:C6:5F:AE:9A:E7:0D:17:26:EF:E7:83","sha256":"7C:19:3D:7C:49:9A:01:08:FF:05:C9:83:B6:56:E7:5B:DD:C9:C6:CD:CA:F8:FA:98:49:BE:FB:19:72:D0:0E:98"}}},"request":{"raw":"GET /assets/LanguageSwitcher-DQO699Pc.css HTTP/1.1\r\nHost: loansusdt.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://loansusdt.cfd/\r\nCookie: PHPSESSID=8b2b995c4d9b5fc1d7901f73f1966bc0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 01 Feb 2026 16:56:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 16 Jan 2026 14:26:13 GMT\r\nvary: Accept-Encoding\r\netag: \"696a4a85-5c5\"\r\nexpires: Mon, 02 Feb 2026 04:56:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ng3%2FUX%2BmYDAkWhhiqh16C%2BshW4AYrL5OVTnwoVFmtK1ek8rfo0mU8YTQHr%2F%2FnijxQWEy9HhHIe9rgeDD1TMX5bUQv7gMP9vBEDWG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c72fbd56918b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1477,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1476)","md5":"27258a0ef0a3abbde15a743881e22172","sha1":"deb82cc2bc14f905da169ef9e49369d2009a6d8b","sha256":"4782c6d25e013ff1d3b6095890c2e8d5692124de4acc9e75d6ad259196a3583f","sha512":"30e403fc882b772f6e06e1e0316d7b7aebedcf3d2acc0e465b375d1a46d77ffc97e24ce907f2b00861172d46f4d47992e708c98b619f35d20b2b7c30af8c61a9","ssdeep":"","tlshash":"4331b864b70c044df237d7a19ca1e58cb63d56a7fe4b0f98a9b02d297e13885f077a00","first_seen":"2026-02-01T01:42:31.588902Z","last_seen":"2026-02-01T16:57:00.652294Z","times_seen":2,"resource_available":false,"data":null}},"time_used":932,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":932,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"loansusdt.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}