{"report_id":"b43e2b96-1a35-44c5-89a2-23a7d94d125d","version":0,"status":"done","tags":[],"date":"2026-06-24T17:00:24Z","url":{"schema":"https","addr":"service-usdt.info/","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"104.21.32.139","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"service-usdt.info/","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"title":"AML Check","dom":{"size":140485,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5913)","md5":"8db6a4e026e97c9fce5cb510b1820562","sha1":"3c58ef8acb09ddc404726d81d6d5095310eb550c","sha256":"045134910443f306c78c729ded04bfbd2fb6cd2816cb752164ccbc8f71995750","sha512":"b6fc16f76fa31a27053cb6fdbc311cbba385bd5d19f34dafff94e5adc262cf5660c373ca067b842bdfe738a771901923e669b42000f288efead50b589b724a55","ssdeep":"768:rCbCTIeuGvkjNxTN8+WmwTPFm7Brx5NnYDMmO1vzmaxZsGLHyeI38jzAeGgsVQap:ppuGvkzTNCmJmaxrLHyeI38dGPvmax1F","tlshash":"83d30755a6f0506371a3c3953e96e60932e8e107de138d60b6dcca98cfd3c9cdc6b698","dom_hash":"domhashc78aa8af5c13989ca1e7646f67f72ea9","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"service-usdt.info/","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"104.21.32.139","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-29T17:00:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-06-21T22:46:13.623663Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":482,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-21T22:19:08.810882Z","alert_count":0,"request_count":3,"received_data":148095,"sent_data":1683,"comment":"","tags":null,"fingerprints":null},{"fqdn":"service-usdt.info","ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-24T16:59:29.170365Z","last_seen":"2026-06-24T16:59:29.170365Z","alert_count":47,"request_count":47,"received_data":2505664,"sent_data":24790,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"api.ipify.org","ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2026-06-23T04:40:27.053475Z","alert_count":0,"request_count":1,"received_data":269,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-21T22:22:12.048317Z","alert_count":0,"request_count":1,"received_data":8265,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"service-usdt.info/js/wc-adapter.js","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"846b706f34937429346ee10875e02308","sha1":"855ae73b40163e6c153f4396de25933ec12ff4c0","sha256":"2d0c669eb7d1af214182545494540b27f1578f5efede94d627bf55e6ba8154d8","sha512":"8d879e7d77a22df04e1663db1d859157515d7f2ce6471c86ccd57954b8ad5c065275994a53a3ffc453338cb265cdfe1ddea2f02e5609b4874d95db784ffafe5a","ssdeep":"12288:ARH6nmwhF3v15L3t8APikUt2Pivz5iWBFJ6aydqR:ARHuTL3t8APikULb5yaydo","tlshash":"30f46d9073a1f076839f52a994770041f339e864641d402cfba8e9ff79a4999d6bbf30","size":723783,"data":"","first_seen":"2026-06-24T16:59:35.216521Z","last_seen":"2026-06-24T17:00:27.654331Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/js/tron-wallet-connect.js","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b8922b52f9c57a467e71a576d9096e9","sha1":"a2d3dbffd6a45dde4731befd76914a329d8e98e4","sha256":"2f3081e14e2a6e6fbccf4ecd3e2169c678e81b6e45605a929b1c422272000ed4","sha512":"a14310181090343183b3e74f2ed94234d51ab56d3330d9dc9135561dadd98cb132c91ad470b6c10d24720df25c8b2a13aacef39741211fd5868707041743836a","ssdeep":"1536:npPUXOQY++DbMSqydin/fiIoQuv5gOM3UNR4TzDvLAkv:nMa8zfPuBgC34LR","tlshash":"15a37c3566b331314127a06d9b87916a3d31a503960dca70bb9cc3919fe42badeb37d8","size":98397,"data":"","first_seen":"2026-06-24T16:59:35.200234Z","last_seen":"2026-06-24T17:00:27.626069Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5fe1b3330ea92260bbd2359025a4f48f","sha1":"13f6c6dcea24aae9c431b1d888d64687fd97d0b4","sha256":"56b795c97908eda564221122cc25b1f4a90c772ef0f0acbbaa500ae5489f15d3","sha512":"d05233adabb9ba0b274c4b53b6373df6a249fc624653c677921449f8aa99587d45334f5e45d6b71a2a03ca612ff5ff6b43ff406153956b9c36ca06a19733f9cb","ssdeep":"","tlshash":"03e061108766434020a753761b4da264d1308513911d9b9976ef4620ff24b4c53852f6","size":416,"data":"","first_seen":"2026-06-24T16:59:35.242752Z","last_seen":"2026-06-24T17:00:27.686351Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c59c5128f07c239cc163cb87fc07bd29","sha1":"6158617911d5aa4a28d7d68a4ef78db0a9623493","sha256":"0ca526788a279ee166d2d621b30abf3dabef7ff89a31ed6a99d4f8fb98ef122c","sha512":"c8b32d490194841db6dc928764cc339be16228fd39aa29d8686d5e2e4971bafa8f924ebc2a5153827b6bffeddc3072de7bfaa8929edfe182934c52ad13b44478","ssdeep":"","tlshash":"f62157b889b20733275b6038035f814d73b1889b0165fe803d1f41a89fd6aa4077eafb","size":1374,"data":"","first_seen":"2026-06-24T16:59:35.243532Z","last_seen":"2026-06-28T18:33:02.981569Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5fe1b3330ea92260bbd2359025a4f48f","sha1":"13f6c6dcea24aae9c431b1d888d64687fd97d0b4","sha256":"56b795c97908eda564221122cc25b1f4a90c772ef0f0acbbaa500ae5489f15d3","sha512":"d05233adabb9ba0b274c4b53b6373df6a249fc624653c677921449f8aa99587d45334f5e45d6b71a2a03ca612ff5ff6b43ff406153956b9c36ca06a19733f9cb","ssdeep":"","tlshash":"03e061108766434020a753761b4da264d1308513911d9b9976ef4620ff24b4c53852f6","size":416,"data":"","first_seen":"2026-06-24T16:59:35.242752Z","last_seen":"2026-06-24T17:00:27.686351Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c59c5128f07c239cc163cb87fc07bd29","sha1":"6158617911d5aa4a28d7d68a4ef78db0a9623493","sha256":"0ca526788a279ee166d2d621b30abf3dabef7ff89a31ed6a99d4f8fb98ef122c","sha512":"c8b32d490194841db6dc928764cc339be16228fd39aa29d8686d5e2e4971bafa8f924ebc2a5153827b6bffeddc3072de7bfaa8929edfe182934c52ad13b44478","ssdeep":"","tlshash":"f62157b889b20733275b6038035f814d73b1889b0165fe803d1f41a89fd6aa4077eafb","size":1374,"data":"","first_seen":"2026-06-24T16:59:35.243532Z","last_seen":"2026-06-28T18:33:02.981569Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"✅ WalletConnectAdapter bundled and ready","filename":"https://service-usdt.info/js/wc-adapter.js","line_number":0,"column_number":0},{"level":"warn","text":"[MetaPixel] No metaPixelId in config — pixel events will NOT fire","filename":"https://service-usdt.info/js/tron-wallet-connect.js","line_number":0,"column_number":0},{"level":"error","text":"TronWeb initialization error:TronWeb not found. Please include it via script tag.","filename":"https://service-usdt.info/js/tron-wallet-connect.js","line_number":0,"column_number":0},{"level":"error","text":"Library initialization error:TronWeb not found. Please include it via script tag.","filename":"https://service-usdt.info/js/tron-wallet-connect.js","line_number":0,"column_number":0},{"level":"error","text":"TronWalletConnect init error:TronWeb not found. Please include it via script tag.","filename":"https://service-usdt.info/","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://service-usdt.info/","date":"2026-06-24T17:00:08.908Z","timestamp":1782320408908,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://service-usdt.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 01:47:53 GMT\r\nexpires: Fri, 18 Jun 2027 01:47:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 573135\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49365,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-29T14:31:16.757311Z","times_seen":222205,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":33,"receive":11,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/api/telegram/notify","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://service-usdt.info/","date":"2026-06-24T17:00:09.117Z","timestamp":1782320409117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"POST /api/telegram/notify HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://service-usdt.info/\r\nContent-Type: application/json\r\nContent-Length: 98\r\nOrigin: https://service-usdt.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 17:00:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"21-1cDLQPBPAJZS+LW4buW2cgguc9A\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BGBPxxxmxs0BxbvyRGPZha3iGAgYaiZz8xhVH%2FWqzdAcWDI8LO%2BCLAry9ujWBpATGgQ%2Bo6D9ft6AmbhcXuPYVsTiRTXOkUxC8QU2iNqg4emxby5vjG7E3s6bW8bgAF3t3JVt5w%3D%3D\"}]}\r\ncontent-length: 33\r\ncf-ray: a10d497cfb1d56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":33,"size_decoded":729,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1162509f6ff9e48570d22f732318e18a","sha1":"d5c0cb40f04f009652f8b5b86ee5b672082e73d0","sha256":"a59ed49e74f3b6caaf91f289b370b036c06b56b136caf9ccfee7cf6d66ba979f","sha512":"ca792f2051362b0bdb29ea60e7b56cf4abe675e966ac772d7032317218fa5b53004ec9c46e2e34549332fc54a39248e961a1d43f277f6d6f3ddc0e59b10b6a83","ssdeep":"","tlshash":"23800002828038fbc022228a303c3e022ee80023c200a20ba00e000c8bb882ab083b0b","first_seen":"2026-06-24T17:00:27.611204Z","last_seen":"2026-06-24T17:00:27.611204Z","times_seen":1,"resource_available":false,"data":null}},"time_used":777,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":777,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/team2-CTL725D4.webp","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.937Z","timestamp":1782320391937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/team2-CTL725D4.webp HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"16b4-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CgXerJYObzUNDfNg2mb9ANO%2Bx%2B1iWy1YnX0vAdluiDDLQsJU8tX6fxOJVwVZTzkuOpT0I22KJ1XK%2BONt5D6yz8cSsAyEivMzTKvFGBwopPuWDhqrh6dFm0QBupdKvixELsBhQA%3D%3D\"}]}\r\ncontent-length: 5812\r\ncf-ray: a10d49119d1056aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5812,"size_decoded":6578,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7ddbbf9cab745b9433bea6b2edc96096","sha1":"5d6c1060beabd56827c5441fea4d7cabdd59b70b","sha256":"3a3f8a7f6ccee1feb368a7a7c8d357a29156e35181772292242b6de2a053cf01","sha512":"7635535a1db3b572135119ca99e4beb6517af783ab9df43ee97535273c534e247610d7b7cfd123886fe73c8941deb68e4959daf394c91ffc8c85921f9af92729","ssdeep":"96:8WoZZT+fYdS4oDKOhMRDvHm4s6XepK3f/j+u63ygikCq6d+Lv1A+k2uos:8njOYdFoO7D/mv6RD+7jikCBQL9u3","tlshash":"efc1afd46f92c0bb00d1f848aabd189626bd77e1ee12112625c9690038d13a4625feef","first_seen":"2025-04-08T20:33:55.24233Z","last_seen":"2026-06-29T00:48:36.932021Z","times_seen":443,"resource_available":false,"data":null}},"time_used":16678,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16673,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/team4-B3PbVeRF.webp","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.940Z","timestamp":1782320391940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/team4-B3PbVeRF.webp HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"1360-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XUMc4DWWn7nD4mXNqV1Q4qr2u%2FxSAx8QFU3EH49icxUbmMZGbCNOgKX8yu3bGMp9Sw0HyJjC%2FbFLD33qJnhYUVlJqBeqUPevkDMBCsbNPsKhx%2FVmqxRjaviz1KVXMnKeNFw6dg%3D%3D\"}]}\r\ncontent-length: 4960\r\ncf-ray: a10d4911ad1456aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":4960,"size_decoded":5726,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"667a7a156924eb8cf1ea2cc310fa84be","sha1":"a0c41d24550cb1375e1e7184e562cdd1fc19bdaf","sha256":"687e6062d6b65a7669c1badbbf7a4f374eb95572ab40efefcabee1208b96f679","sha512":"c7f8d10bc7c4d14fc2a2444150999baf64f7ae98728ddcc09bbc6147d8452bfdf08f3e17780641303299482bc7ab237d9df36f332446d674632771ff81d2b99e","ssdeep":"96:MZETuQouq6zgoF7sOUTf/l6RdFDcPAnD+zFc5msuDmMIui/Jyx9woc0BhNC3:3TuQo67sO4/ATFDoAD+zW5mVTIRhnocb","tlshash":"e6a18d621f66e1a1eb564f3b2431ca4a218337c487c490a8b3a99c9561d597cabe3b12","first_seen":"2025-04-08T20:33:55.212733Z","last_seen":"2026-06-29T00:48:36.884036Z","times_seen":526,"resource_available":false,"data":null}},"time_used":16674,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16667,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/team5-Z1xAavYy.webp","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.942Z","timestamp":1782320391942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/team5-Z1xAavYy.webp HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"151a-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OESlFFm%2B2GTM8dRbTQONAgUIlRx78qnJumJIu53DkxCDPMj0J5GaKE0oiq14xYSqmboUeI3DGfWLYQlInkxWafooCVtb%2FWEcHz%2BG3Fwm5oxMitRwyo6hlh8%2B0f8viDWV86YkLA%3D%3D\"}]}\r\ncontent-length: 5402\r\ncf-ray: a10d4911ad1556aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5402,"size_decoded":6170,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1b861f2296e3769da970e6af87cff205","sha1":"23e4cfc4f857247ae9955dff2503c3d6231febb1","sha256":"05201c411495b15a1807b3e649ca8fbbfbfee22e149b1ad0c42f9e3768e81230","sha512":"e9dc80a9198a8ee38b1a9407ff0d74258851a61f9461c97a83f5f9f34642ea5466a510610e6371e5d9f77333257749505396468ee9f8a2cf40241fc97dbc3b91","ssdeep":"96:ZRNCyHuEJ8uPWkvCwcBsYUKtZ88YPn+AkI+TwG0UVJg:fNBHui8uPWs2WYUEZ8jPxkTVJg","tlshash":"f1b1aed50af4c71c980316884b4c294beb7a6f5c9d20fd755c52eebb939bcc0661260e","first_seen":"2025-04-08T20:33:55.227028Z","last_seen":"2026-06-29T00:48:36.954557Z","times_seen":444,"resource_available":false,"data":null}},"time_used":16672,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16665,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/favicon.ico","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:57.908Z","timestamp":1782320397908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/favicon.ico HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 17:00:00 GMT\r\ncontent-type: image/x-icon\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gn9k9C3NbF3xOiaXE8o%2FLbheLuZIToT6laDOd9d8f0WuM%2Bp9fMv6N0stySx%2B2G7jt2HwKC3%2BdS%2B3BVytkya8E9dtqF7SPgW5dgwoNuIFSfWB6gFeEA6O5bxHBTAHQ1EKgaJJIA%3D%3D\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"a76e-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a10d49458fa856aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42862,"size_decoded":7083,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 103x100, 32 bits/pixel","md5":"854845c9dc489b715a93d6718e1d65a8","sha1":"8126b243953b16480417412e11633c05ceec3208","sha256":"85573e3bf8fdc1b4a255135b2b61dc422992ae07f2c0ce53d4fd79a7c98d1152","sha512":"d5c421e91f3c869839c8d2207a63f6d506f287a1e7670da2c06079ed425533db8ebc559cbec2844f9614189c5a64055f3f4aec1bc02f9f3d62c6f21dc7813fc6","ssdeep":"192:nVNPtBme7yyGkbVlDRGxeODlmRqqQL3JSpE1t3O2KP2iO8rNZMvTZUwoHVV9AJpR:VEyLpqHN/BZvTZxoHVV9AJpQn0owt7l","tlshash":"c21312a0a462e395f0db353945a3d5f8645bfe9873820812e53c73f91933a835eb374a","first_seen":"2025-06-20T20:01:15.025332Z","last_seen":"2026-06-24T20:29:50.611837Z","times_seen":237,"resource_available":false,"data":null}},"time_used":10708,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10706,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/team3-DH9H-rCm.webp","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.938Z","timestamp":1782320391938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/team3-DH9H-rCm.webp HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"14ee-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1XNsYoiYHfTdi0oIEK82ub5qgT7d%2BFMQcr3767uF8C8HIANfaXhKuecPOGRw3OXZJYkZWPtwf2QUl6pjZajS7xeUqdmTEVuH9FXcpW8M2nYCX6V0GyHv%2FpZbfEQp5OGpFnwEpw%3D%3D\"}]}\r\ncontent-length: 5358\r\ncf-ray: a10d4911ad1156aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5358,"size_decoded":6122,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"74bcbc95eb9c765eb9807d9a6f5a198d","sha1":"3a1595be13ffd0a8622900fbe79b8bafa5a72d3b","sha256":"40b376a82e6f6ed6e382e6955fca2037bb67a22fdb08b26736d357051393dc2a","sha512":"41286c269e0650b523a3cbc18f91b95a10173f7f90bd5a0164f0f29a3c114928dbda998a93397de4e80cb5838370c46cf7ff369a189abb4a777d0fe34ce17e6c","ssdeep":"96:CHNESUnx97dkN8xnkhSwRWXBwK025xozmK0sMu2+7fJDf4Y/UCh2:ANof7g8xkhQhzzPtfu2exrt8Cg","tlshash":"9ab1aee0825d0da86a8ed98c15576a636c2d345c17c403951c855a637a8f61ecff4f2f","first_seen":"2025-04-08T20:33:55.231907Z","last_seen":"2026-06-29T00:48:36.89925Z","times_seen":445,"resource_available":false,"data":null}},"time_used":16675,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16671,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/e1c98a7a1e1a7d4b504922bb5d6d9288b2aac2fb.webp","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.956Z","timestamp":1782320391956,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/e1c98a7a1e1a7d4b504922bb5d6d9288b2aac2fb.webp HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"9ba-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=urbxURFgDZa9%2FW%2BanpFTUspbhu0p7ZqGQrLjfqv5KFhM2KuPXw6YkdLQWxZLuG2g%2BudIsEIOPPgbR0zFngIXuId431dOo%2FrVxwQgnxS1H84PS2iCXU7vasQuK7HYJXlKE29%2FPw%3D%3D\"}]}\r\ncontent-length: 2490\r\ncf-ray: a10d4911bd2256aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2490,"size_decoded":3259,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0da376de29e3effa9e73b409d638072e","sha1":"e1c98a7a1e1a7d4b504922bb5d6d9288b2aac2fb","sha256":"84ba54b7ffd029a116e70c73218c941f40d25c45373e29000933a40d09983d49","sha512":"e197311efdbff88f896ef7e213e09d5d00920282aba80812d260b6bc4a6f3c04985ed6add87fe6a47c5bea24848dddc42121e0c7c7783e5ff23fb5f0c9d4dfc8","ssdeep":"","tlshash":"5a511a434d24098d5d29061a9ae2c6e52a9bb2087709c14faff88df71fb55231d226ba","first_seen":"2025-06-28T19:36:09.223225Z","last_seen":"2026-06-29T00:47:57.678723Z","times_seen":62,"resource_available":false,"data":null}},"time_used":16656,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16653,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/33-1yWRRjf1.webp","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.965Z","timestamp":1782320391965,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/33-1yWRRjf1.webp HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"c83c-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bWOaLRQ0nBtMAkMOsjrUC5l%2FtyA9F0DD06nhgdi1QpxbK%2BYngDBSR2C72l%2BzmdUXvLjrTmuw%2FE3nqFR281cLurbFwrDrQUYPWTmU9cFjSk3s6MhI%2FU%2B2mttsuuIjMe%2FgJclj4w%3D%3D\"}]}\r\ncontent-length: 51260\r\ncf-ray: a10d4911cd2d56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":51260,"size_decoded":52035,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ee868cf20c90ea252365e462b6ed3c5e","sha1":"152db0b5653fd2b887fd121364cdf30958681d03","sha256":"127cbc5c941fbc03d9cbb37facd6601951d51318c0e6e50c7d15596c4481630f","sha512":"03515bab68fbeed2a2f2ac21c9f59551eeabffa5b8f62789aaab7fb2983303a36d7d9ba4cbb2d798df73081c15f614c6cc9504eb5813d11fc298bc4214438707","ssdeep":"768:j653t9vVD5JXaaGDkMYqov6bM/z1Czd1spLBSuvAmxpp4UZYrmlKLs0PpkhHWQhw:stFV0vYt6bY1CJSB4UZ1Qg7/6uoeC4","tlshash":"6533f1d2bbee3551c19ff51dc9eb49da1105f40ace1cb98c42d864ca99722fd132b163","first_seen":"2025-04-08T20:33:55.213792Z","last_seen":"2026-06-29T00:48:36.952147Z","times_seen":441,"resource_available":false,"data":null}},"time_used":16660,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16650,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"172.67.74.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://service-usdt.info/","date":"2026-06-24T17:00:08.807Z","timestamp":1782320408807,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Apr 2026 21:16:17 GMT","end":"Tue, 28 Jul 2026 22:16:15 GMT"},"fingerprint":{"sha1":"6D:CC:48:D6:E1:8C:50:0D:7C:B9:13:15:F0:18:E0:73:56:59:60:F7","sha256":"00:FD:76:18:CB:8D:B6:5A:4C:B7:0A:37:77:28:B1:01:5C:3D:6A:E4:2D:06:02:C1:9D:B8:6B:F8:6F:F8:31:77"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://service-usdt.info/\r\nOrigin: https://service-usdt.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 24 Jun 2026 17:00:08 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a10d497b2f530883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23,"size_decoded":269,"mime_type":"application/json","magic":"JSON text data","md5":"89ce651b6247763c936aa53e3de7ae7e","sha1":"0bd907f116da6ed86edff10996dcbcd864929bb9","sha256":"9c2bf05b6b893ddefa78d66acdec27b47929f712174094485fa5de2d26d41748","sha512":"854e79e40874cb9f102b3091ab20d88bafc0fc83a77f498718c85cf44100ace5f7a3cb99db5375098ccd79c72b3d095d3445eb25f51620c649680e948edef7bc","ssdeep":"","tlshash":"5c70008200300a008080020208880030a08a228220828e08838823320cc0220a000032","first_seen":"2025-12-20T00:24:27.675016Z","last_seen":"2026-06-29T14:17:33.817627Z","times_seen":359,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":0,"dns":4,"connect":1,"send":0,"wait":110,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/65c82043c70f0ca23e677d31cb87d970f71f2130.webp","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T17:00:08.845Z","timestamp":1782320408845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/65c82043c70f0ca23e677d31cb87d970f71f2130.webp HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 17:00:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cYvCQMpk7UIG%2B4asEsHB8E43OPJNI1utl60XZ6UcjOq9giTeAPQjSUpClVfi07aiYelZnUZ7cS4EKMcuIP5bEtO2jPEdjLv5vNC4bp2SK%2Brmw24bZINMFZg16LF3IRXxocgroQ%3D%3D\"}]}\r\nage: 68\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a10d497b4b0556aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":196,"size_decoded":956,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"a00883aaeadc587cb906f07b97474443","sha1":"22fd791e3da8a7d88d5a546f50d94bb3c76d3ddf","sha256":"70778cfe70149c4072d6abbcec3002ad7e60fcdbec5641beae361835c27858b6","sha512":"584be90bf1e453fae252ae235b329036c5525512d145d4183f181388525e978c297f6709ab7e9f806b612ee223d1a01babb11e3eabaaff1831e68c9a4adeae71","ssdeep":"","tlshash":"a7d0225a111029215a309b841d80319034e33f6929d297405a82b027a8e5262c49a8c4","first_seen":"2026-06-24T16:59:35.186727Z","last_seen":"2026-06-24T17:00:27.620997Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/3066aabd21889aa6b62d3c86837c6fcac484b39d.webp","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.952Z","timestamp":1782320391952,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/3066aabd21889aa6b62d3c86837c6fcac484b39d.webp HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"45e-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rhFIUv33ntaNKCvF2y38IvmoJ7HgWYpiMnfCZ0NGJFjVxaMsUqjx4r02SiDn2vaCPvVC0z5MH7Oh2XsrRwweQNwFtGlUqrGqZC2s1OejE1K0dm9e002XsznQK5q2WRz%2FLhGXMQ%3D%3D\"}]}\r\ncontent-length: 1118\r\ncf-ray: a10d4911bd1f56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1118,"size_decoded":1879,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e84da5c9e3f8d31c4612e25e490fbc6e","sha1":"3066aabd21889aa6b62d3c86837c6fcac484b39d","sha256":"00206d3180fd2c493bc673d174d153b537a1c185b75819b65796d67e39ca2ea4","sha512":"fb5cfaa88f4bef1e954e2b1423e21a9de410e49e403519d022ba396dd4acdaa798ec96fd489c4b3dae144c24cea91ac0a9634f3bdeb07f9e467c05b0f45f2d33","ssdeep":"","tlshash":"4421c6dbf5c0cb49ac0d00b1a4ce294bdfef5139b8808c115331c361129fad2dead498","first_seen":"2025-05-30T09:05:59.259667Z","last_seen":"2026-06-29T00:47:57.688845Z","times_seen":109,"resource_available":false,"data":null}},"time_used":16660,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16656,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/Land-Btat2g4s.css","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.598Z","timestamp":1782320391598,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/Land-Btat2g4s.css HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:51 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z2ms3ZX7MmUGUOeNCxMoGLEVqMLOxjCb2woz74p%2BnF7kedh4HLPL92PrvOvCW2zk%2FiR8aK%2FciREQ6BGVkZYK9eIdOtgrhVNUcIG%2FUp78IRekCz2XwDAuO4tbyR2yCn5gQ3lcsw%3D%3D\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"1361e-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a10d490f8cee56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79390,"size_decoded":14663,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"df0ed2b605febe4d1fe470838d6b5638","sha1":"848eec59eb4a1e14c8692ba191eab5c4424e0d6e","sha256":"f7693256cb3310777d8c1f98b2f290c7d190a77cee87f51c9db88d614e9ec89b","sha512":"d70bb5748672a3d4d91ef491a38b9cff22db5f3ab1ea238808c591d4f784084d0cd0f4b09eb48ea1ce9a261dacc1495d253e38e130a34e7140e02e406440a2bb","ssdeep":"768:ByABZWEyUpZpbOqkmsfwfa4rnwJGhWc3uuz:B2nyZpbkm6gwG7","tlshash":"d173a3334310260ee01b8d217bd257e9a138d409e65b27feda53be15c3cb2a716b7789","first_seen":"2025-06-28T19:47:13.724698Z","last_seen":"2026-06-28T23:08:29.232246Z","times_seen":21,"resource_available":false,"data":null}},"time_used":17020,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":16836,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/sweetalert2.min.css","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.600Z","timestamp":1782320391600,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/sweetalert2.min.css HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:51 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vmv7uLFm06YMpt6L4Ep2XhfFSR1S%2BS8REHu3Zp4aVy97s0Z28WNuQRHVk%2BAwjrU50teh6kL7ReBHEruoOr59pYv91qd9cb6jOXCai%2BbTclP6sc1ij2kQaUZXdasmmnzIk1Y8UA%3D%3D\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"5d2b-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a10d490f8cef56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23851,"size_decoded":5597,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (23850)","md5":"d849077e8b4cc93dd5c925165f2cded4","sha1":"496b8e753292cc78d4964d94eee5c250d53ca13a","sha256":"ee3512f8c59eaa415d996f68ce467b98f6a0cfe42631bb0196df90dccb04f855","sha512":"c97d51f2e5a2d75c4f7d8ec70e0eeb90b2fff45d63abc1f28b3f2a1780d5da779d5f821597baee476fa1dd315c78721c4f93aaee8a0a8b4f5465b237f41ef297","ssdeep":"192:CBh5Cif2Ib/m3ozgBVdX+LZDcFPAtmFHiJw3epAd/34JpG:CB72IrjgIFAFPAtmQa3Mu/ofG","tlshash":"43b2f9a1aa88e017f67a862f59c0f60875d9e50bfdf3085ef414d1008fd7e5f2a792a4","first_seen":"2023-07-01T11:25:55Z","last_seen":"2026-06-28T23:26:31.188685Z","times_seen":1924,"resource_available":false,"data":null}},"time_used":17009,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":16831,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/css2","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.882Z","timestamp":1782320391882,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/css2 HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"8a0c-19e0944f658\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pn14vaz1d6miG3Ptvw3uK3A%2FlZhrPT3B1Cr4%2Fld2c%2FfSla4D6uDGYBwiUDdhC3guB%2BAcASLFB%2FgHDLDizxhVjz6R6SewPZKG95l5SBDVdfTG6jdC%2Bc7o56m6ruhflnzXMLy51g%3D%3D\"}]}\r\ncontent-length: 35340\r\ncf-ray: a10d49114d0256aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35340,"size_decoded":36126,"mime_type":"application/octet-stream","magic":"ASCII text, with very long lines (1572)","md5":"6a176e66c0757520f1a38de9a014ee9f","sha1":"d80732e59189dec357aff78729260bc028e86fa2","sha256":"ed91d1574ef0d433d146fb125176c757d101c918d33677269d4df504ab796299","sha512":"d04f81cd1fd7d394e9055ca556af0704836c4bdd6815085ce3759a60c1d1a5960a18682b681825d8cbe15d675435829d96b9b816a5db8c96489195ee22fb9842","ssdeep":"768:aTcfFBhiEymDcTYeBai75tdmtC0BQiVPTX:HAwR","tlshash":"67f240a1041b9000eb435cd223cf7f36fe4e52557086c0b9abfd1aaaacdbc62036875d","first_seen":"2025-11-30T04:14:12.180343Z","last_seen":"2026-06-24T17:00:27.625124Z","times_seen":12,"resource_available":false,"data":null}},"time_used":16739,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16727,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/js/tron-wallet-connect.js","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.887Z","timestamp":1782320391887,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /js/tron-wallet-connect.js HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4MakYhMYYte%2B8y%2FVw3cnxOy9ksAwxYmz7xyPOfzpbH8oMg5SnrPMfItrQJbXNAsIuCy4v7SCrQtVMoEJNKaT67k%2F6%2F9x2dSF8RGxjyb40ZB4KaXfBZ%2BZW7D1rTt6O0lv3U%2BIbA%3D%3D\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:57:51 GMT\r\netag: W/\"1805d-19e0961e498\"\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a10d49114d0556aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98397,"size_decoded":48196,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18989)","md5":"1b8922b52f9c57a467e71a576d9096e9","sha1":"a2d3dbffd6a45dde4731befd76914a329d8e98e4","sha256":"2f3081e14e2a6e6fbccf4ecd3e2169c678e81b6e45605a929b1c422272000ed4","sha512":"a14310181090343183b3e74f2ed94234d51ab56d3330d9dc9135561dadd98cb132c91ad470b6c10d24720df25c8b2a13aacef39741211fd5868707041743836a","ssdeep":"1536:npPUXOQY++DbMSqydin/fiIoQuv5gOM3UNR4TzDvLAkv:nMa8zfPuBgC34LR","tlshash":"15a37c3566b331314127a06d9b87916a3d31a503960dca70bb9cc3919fe42badeb37d8","first_seen":"2026-06-24T16:59:35.200234Z","last_seen":"2026-06-24T17:00:27.626069Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16735,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16721,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/uniochange-B8zbqJSY.webp","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.960Z","timestamp":1782320391960,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/uniochange-B8zbqJSY.webp HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"1082-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tZWp5QpT9at0fzYz70D147JVKU62lmmGII6YAnJqgfVLGQnEgp6mvzvclQKIQWG3ddepLgXloH1zeiwJ3SgSAq%2FtMyIo59ElqDRrN%2FtCmsDQGgqgsGPueZiy98PGiAM9DDgOHA%3D%3D\"}]}\r\ncontent-length: 4226\r\ncf-ray: a10d4911cd2656aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":4226,"size_decoded":4990,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6c1d8ecc4eb00c7b2fc07c6e6bf80d62","sha1":"9f4768ee54c89fc835ab8ebb553f27d1687d6c09","sha256":"239a8beaafa035e38e4e3a96bd524269676557d5f2fa5c2b64e086a283e82308","sha512":"a4a3a752dbf6a1d97c0e711bf100988e80fa47bfc6288ccf523bf97b0527d4373267f4306cf0d04cf6cd10d430b609bd9e82153e28b244297108ffbc3761eb0a","ssdeep":"96:vytkHXw/Xbumhm5aioWQPDN7a4Ic44MUut0mXZ5FsmOA:mkA/w53JQPDVa4T44MUutBXZ5Fso","tlshash":"f8917f549f8835318c170d4928372225a0e4968edc380ddfee531c21676dcb1b9b1f3c","first_seen":"2025-04-08T20:33:55.219007Z","last_seen":"2026-06-29T00:48:36.932602Z","times_seen":399,"resource_available":false,"data":null}},"time_used":16659,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16649,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/api/landing/config","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://service-usdt.info/","date":"2026-06-24T17:00:08.915Z","timestamp":1782320408915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /api/landing/config HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://service-usdt.info/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 17:00:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fy2P4in%2B7%2BrsCiBSNZZA5LH341Bhh9PH7e8SMGZV2Kz4nA6Sb%2BVmIAOxcqpHg7pbDy4ovEs90lFx8tcGXR0xhe1H6MS96oqyRyRELXjsck8drfQTXNGlO%2FFc6PTtPzlhdt1l4A%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"11bc-TqbkDONZbMnxBu6w7fikuNCJmxk\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a10d497bbb1356aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":4540,"size_decoded":3190,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a0a17c8a7063b0c7aede152d8953c03e","sha1":"4ea6e40ce3596cc9f106eeb0edf8a4b8d0899b19","sha256":"4f9157502eafc08568e69557ec9c5a98f73201f471f0a9bf2671d43014e76a90","sha512":"8e756be23ebf0d6fa066cd91a372a3300cbad8b46e06f830201b640aca0fccbe6eb9023388292950d85a7cd58f00146ba1a86c3c5493871deb49c8d78760a610","ssdeep":"96:7oDyfMD9dINmpfbrI4ZedQ1WfXhcyXgIAfzfRze:7qtnk4bIvWEQfFK","tlshash":"1091d96b9b8e15330bc5104379437eaef356007a7badc2f19c9c144e1beaea8053a557","first_seen":"2026-06-24T16:59:35.238895Z","last_seen":"2026-06-24T17:00:27.629454Z","times_seen":2,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/2d6a5d77ce9d27f3e017dab40b83d776cea1fd61.webp","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.951Z","timestamp":1782320391951,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/2d6a5d77ce9d27f3e017dab40b83d776cea1fd61.webp HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"89c-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GJSP1u3ftv%2F1kXA95s8qL%2F4UBkr9fosqzmrLJAe5Pmx4fJPtCr%2FJWPPJrEfktgcpMkKHFRq1udZK8zkfu%2FtR8XmrjknLbED9Ww%2BUpr9keAGEcOLlSfgKjBI7GJz%2FQIKjbb5Owg%3D%3D\"}]}\r\ncontent-length: 2204\r\ncf-ray: a10d4911bd1e56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2204,"size_decoded":2975,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"055f0bd8c5955c37fe06cd1e13465792","sha1":"2d6a5d77ce9d27f3e017dab40b83d776cea1fd61","sha256":"7f94d16d2a76b2dedf373d8611a8ab94c011e367d1f3bbd6703704e9f7f584ac","sha512":"bc51f6ad9b566868d7e0f67d15659e98e3e61c40cb35139ab1e6f4977aa20dacdce1f4c92fcd37732c4ad517d5466dd254407f71821c92e88adde0ee77b6bdee","ssdeep":"","tlshash":"b8412b704a45bc70a163d6393112f7246c85ca888795541a4fb09f9df13d4dc6cc3ce7","first_seen":"2025-06-28T19:36:09.245667Z","last_seen":"2026-06-28T23:08:29.221193Z","times_seen":61,"resource_available":false,"data":null}},"time_used":16661,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16657,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/6b940a1205537db46cf4299e059085e87d60a7b7.webp","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.954Z","timestamp":1782320391954,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/6b940a1205537db46cf4299e059085e87d60a7b7.webp HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"cd4-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tSsMhdmmvhYSveP%2FJYHJ5yxsv4xr8758usKHzgtf9AvOY7i6zSP%2BdbycuTgbLI2Gaq7z9FXeQJCYmiUxNtBBNENAwhoUK%2BA%2BgptpmX8vOVwqH29B6WqzCN7y%2FnhWyyJWH3XxPw%3D%3D\"}]}\r\ncontent-length: 3284\r\ncf-ray: a10d4911bd2156aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3284,"size_decoded":4053,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"884c19cf4efbb63139e9156da3fc6ad3","sha1":"6b940a1205537db46cf4299e059085e87d60a7b7","sha256":"586bc9c6999a57c34d63512ff02f1e988c54415ff1fa958a490e74bf22c41292","sha512":"94e89bbaafe87140a299893ec9a231515a9a6adf2dcd346b2e4d4f7a4a5ffcd940387b93f7b3e643086788cfbe023e9a5489e10b69595f34f5c89e347e391af1","ssdeep":"","tlshash":"33614b9346f168d3d8caa494d0ef697bd7dda8803b9290798f65d474342c10afba750c","first_seen":"2025-06-28T19:36:09.224686Z","last_seen":"2026-06-29T00:47:57.698624Z","times_seen":62,"resource_available":false,"data":null}},"time_used":16659,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16654,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/668f0d3d472d295c224c9dba35f5e77a9926d1fb.webp","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.958Z","timestamp":1782320391958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/668f0d3d472d295c224c9dba35f5e77a9926d1fb.webp HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"614-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3O1iQsHWOmmVQ6nbeZry6F9T5g0xuDJ%2BzPHCezjQlrBhd0wp17id82H3BtRbb9wXSQ6Jzs76EuIrFYUfp33N2FfY%2BiZe4JYsiSIB6qEDDL2HRkGK3SheNqtTLzjUrPfWcdcTOQ%3D%3D\"}]}\r\ncontent-length: 1556\r\ncf-ray: a10d4911bd2456aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1556,"size_decoded":2319,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b586a4f1c34a9edfc96feee68ec0e180","sha1":"668f0d3d472d295c224c9dba35f5e77a9926d1fb","sha256":"40f73c06872c9435da38203bd4ea949ca2257834ec7994880ba468e98aad835a","sha512":"74ac88272bdc356c71ae4c50cf408e74e9e331cc306486c22fd0a91ff65bd288eb3e1716af6e21d2a83ba1793757b4c859cd413ce3a8b5b57b6c537ee6a0eb9f","ssdeep":"","tlshash":"1631ea610dd1d97c695a2fea2387588493472d2dbf291177f6352c90287c146d63612a","first_seen":"2025-06-28T19:47:13.739795Z","last_seen":"2026-06-28T23:08:29.241216Z","times_seen":54,"resource_available":false,"data":null}},"time_used":16654,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16651,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/fb4b89f0bfb71662c3833f8578a6c68d2e8bbcd8.webp","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.961Z","timestamp":1782320391961,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/fb4b89f0bfb71662c3833f8578a6c68d2e8bbcd8.webp HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"b32-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jN1O7DazALn8Y8uYin67eTmFOoQBG5fEyKARhlSH6MAHfsq6JZaTdIxlMziTAtXTtBVtH0JrVfv2LlbG%2BnEKH%2FgTteDBpgfH33siWoG2%2FeYruwUNzF4%2BSv%2FX5zDbop1A5NDIKg%3D%3D\"}]}\r\ncontent-length: 2866\r\ncf-ray: a10d4911cd2856aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2866,"size_decoded":3635,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"34b477453807018a581a6ce5b7f3f58b","sha1":"fb4b89f0bfb71662c3833f8578a6c68d2e8bbcd8","sha256":"7b1a9e0062a9f81d814646e338dd2c88f62e108e06169069be96ef5bf55b6415","sha512":"4cdffb2beb6656404c4ff200579cbe7c577495fc6662a5cb591101f7a349177c6246392fa80cefda216562c35477182e2af9e0326c0aaba9a96c78fce790974c","ssdeep":"","tlshash":"9f516e1542ffd46ed1267410702737044f7199d556e48ffa6b750634e0148d1995df31","first_seen":"2025-06-28T19:36:09.201208Z","last_seen":"2026-06-29T00:47:57.680539Z","times_seen":62,"resource_available":false,"data":null}},"time_used":16656,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16654,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/fonts/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://service-usdt.info/","date":"2026-06-24T17:00:08.732Z","timestamp":1782320408732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /fonts/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/index_files/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 17:00:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zKcHfiW2GjfHKr1XgWyuXnDCssoSs0H7ISGFVTLKJx32gb5W119GUSRN%2FSdOxTYAQroKTBv1HuUrPacwvjJaFMDBbhgoI5iPgbEo1MDryP9NYAYTQ4T8ecmlrlXJRCZxx3atcg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nage: 68\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a10d497a9afa56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":187,"size_decoded":946,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"b0a182617eb25eace9225ecfb445f44d","sha1":"5950f03ea0e14ad4af123fc07a7c8a6e95d7dd3a","sha256":"5c9166c433556d5bc0d695eb9cf74166cd4955fcdb7c02a06adacf97bf307f08","sha512":"f8465093c326d577de39eff00622eb278542b386f0afc45c5e65572ffa247dffd86637ac250cec3fdd0509f406667b74afa2d0dc58fb12d81af3d46da2fb8148","ssdeep":"","tlshash":"bec0229f20011200072057002ac1630836c23aac29da81402a469093dce0246c4c638c","first_seen":"2026-06-24T16:59:35.237595Z","last_seen":"2026-06-24T17:00:27.635455Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/team8-Ba7qheCQ.webp","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.946Z","timestamp":1782320391946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/team8-Ba7qheCQ.webp HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"4d5c-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CbpyGEhfPHnddyJk4CAv%2BMkgrKZQmY0r%2BeTvg5e9aNKg8VPJFRaqLVn4WewbJqNuEhoeLHk5oVohg1B29y5eSBhlNmAn%2F2F3fmp3OJ2zaa%2BN7yjUtzlskC1AIYC39YWIuJ4mUA%3D%3D\"}]}\r\ncontent-length: 19804\r\ncf-ray: a10d4911ad1856aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19804,"size_decoded":20573,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fd8f7be198d97dbaaa2d1a3b5645191b","sha1":"8ca51f777ba30dbb1f57c755abe0cd17c9ba3ccc","sha256":"3d886348daceeeb72cbb1f157440d88e3cd8e273199f0be11ab8fb489a8d6b60","sha512":"618952eff83f028c6d211dffe0525d2f6c2b957552e33010698dd8119163ccc349d5389c2cd78e0ea58f80ce7e710cbc9417df9d48c33091bd6db2ee3651c910","ssdeep":"384:jnpCiYZLoKv/PpXu2HTr6bhIBuwbIkC5SxpHgoIHEC4Eij4dvvngZp+T:jnBYSa/HHTrqqUwG5cHaLi0d0E","tlshash":"a592d1066158b1a2e7bfe4029bad2daf1d20c2cdb86806534d9cf141d617db27b3f56c","first_seen":"2025-04-08T20:33:55.235982Z","last_seen":"2026-06-29T00:48:36.880899Z","times_seen":444,"resource_available":false,"data":null}},"time_used":16674,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16661,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/22-CzpWkn_R.webp","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.964Z","timestamp":1782320391964,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/22-CzpWkn_R.webp HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"4b64-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XFnPEr5C0bIGB%2BsJr9Kj60D0TNtTTlv8tMYjy34d02xcWAJPHUckbBl8Ylkq2%2BSJSmHUdNQfelmGisuu3n%2BGY1mKFgwZVLfa2ZAnSaVhgpl7NjE0tbhdBf3K50Atj2hCa5aOig%3D%3D\"}]}\r\ncontent-length: 19300\r\ncf-ray: a10d4911cd2c56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19300,"size_decoded":20067,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d4224b0cea000adfe29027c4ace6ca90","sha1":"f3f62f8c429c5446db4ee28f6857c81265bb6a8d","sha256":"9c5add30b5e422671689a41106849fdc2319a01ac3952b16c9506aed05bfedd8","sha512":"f846a43f28741f7a4ee7528a042e9d0de1bb45ccb65e239f9941c4a536f74529539d08f9f740f437bb523a8f5756292835dec6dc15e2825c1b082d04a236a04b","ssdeep":"384:60GohnG8pPSTVjACEs6tLfdQYaW+61jXKDFFoBlM7PD0sHLG2Xz2x:60GoI8ZyVjCLSiZ1jXA8l0rbLG2XKx","tlshash":"cf82c0d0d6b9946bacbc43a8bf2011bdb5fc12ea3a545b134d00747c87eb97a076ad34","first_seen":"2025-04-08T20:33:55.237744Z","last_seen":"2026-06-29T00:48:36.950142Z","times_seen":437,"resource_available":false,"data":null}},"time_used":16657,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16651,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/menu2.png.html","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T17:00:08.872Z","timestamp":1782320408872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /menu2.png.html HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/index_files/Land-Btat2g4s.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 17:00:09 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=4,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LHf21238EuSvbHnqPF6AlIJd9Jgd2in5%2BPMzpeha1Cv5isUODBEZvqqChXQjM6LKQlNaBaa36TUvsZdyppQ553AQ%2FYdDOz0RnDgpiES8MS138FeGvQEYvB77ZwlVcFzZ0Zy8CA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a10d497b7b0656aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":881,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"8fe04f0529768497c565d4d1e7c07fad","sha1":"db9706965ffe214e63a4aa078763b46194c88803","sha256":"01c8e6e69bbd938ed73910a3514b651119c7daa66b2d3af0d5fd4b54fd271d65","sha512":"4af4c6ae29e8df6b7303c68a6d259adb27c1804b20c81ba98675133d331f200b1db188c85bd33929765ba77c15925c23d70cda70c12e4f7f005ae6216fa33505","ssdeep":"","tlshash":"46c02b9e101022414a3083002ec5725434a73f9e24e285087f82e027ece573bcac71e8","first_seen":"2026-06-24T16:59:35.241457Z","last_seen":"2026-06-24T17:00:27.63779Z","times_seen":2,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/85fbbbed31ccf33309e03046b9d7f8718c223a18.webp","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.935Z","timestamp":1782320391935,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/85fbbbed31ccf33309e03046b9d7f8718c223a18.webp HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"c3a-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f1TEx5quKXv5JkV%2FnG5cVCIQoO2mcdag%2BvK5tlO3BWc0heqvQ2ffDQv9AS9RRezatY%2FJxByS2qlNka%2Bc2qI6MejhYE41pcwi0BrQ%2BTRwV4%2Be5wb92LhTrNdr61AXE%2F%2FDiwt%2F8g%3D%3D\"}]}\r\ncontent-length: 3130\r\ncf-ray: a10d49119d0f56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3130,"size_decoded":3907,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2d31961f03995004043bc75cb47a352e","sha1":"85fbbbed31ccf33309e03046b9d7f8718c223a18","sha256":"48df89880c736246d7d187d96c6a85b7fa9b5325d23f014c9dce512976546ea6","sha512":"fe6cdb69b9333d3f51c2575612e0643aa4bc8fcaa96c20feccc91c398f75e50da063bde46eefed1ae33c6fec243225a74387b05739ff40f63cd44df6ca29034d","ssdeep":"","tlshash":"84513b0e476800f28e6d81bfa137d9161d483908e906727110afd0210a4fbe67d5bf4c","first_seen":"2025-06-28T19:47:13.73795Z","last_seen":"2026-06-28T23:08:29.215758Z","times_seen":50,"resource_available":false,"data":null}},"time_used":16679,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16675,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/b1374a7d228afed6bd69ae74d8d3ad49c56643c5.webp","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.950Z","timestamp":1782320391950,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/b1374a7d228afed6bd69ae74d8d3ad49c56643c5.webp HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"660-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8SCJadluVcIrzIjSfS3mNBWsCHHaP7qT7Ru2IALKcyKWYrIytwrd6HvPQ3K5bGiRdxVhXNSOjFixvhGU7ZfAsgI38639l%2FFsKTXRHczkXinXI4SGn0D5wIFAGJALTuEm8sHUlQ%3D%3D\"}]}\r\ncontent-length: 1632\r\ncf-ray: a10d4911bd1d56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1632,"size_decoded":2393,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"29fb2f9d4e2bfb0b3b2f007ab824d0c8","sha1":"b1374a7d228afed6bd69ae74d8d3ad49c56643c5","sha256":"72c282f935d8fd7fee0fcb1b54ccd0c85cb7bbfa10248f6ae31442d2c9dd81a7","sha512":"ce8b7aac83fb05911ad77933cea315c67ff038e2e186582ca2e6f8dfb16e497da92b3ac40ddbb74b89741f4beb65dd3a0e25e52951d0ef296aa3c725f00a8499","ssdeep":"","tlshash":"e03108faa06ad3f36f14a77c484f1d03f0af00a855d526b2843d45e1a8439bc40cac95","first_seen":"2025-06-28T19:47:13.757157Z","last_seen":"2026-06-29T00:47:57.677944Z","times_seen":53,"resource_available":false,"data":null}},"time_used":16662,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16658,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/2df0ecacf2e76a7e0ce20dcef096403f359de962.webp","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.959Z","timestamp":1782320391959,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/2df0ecacf2e76a7e0ce20dcef096403f359de962.webp HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"b62-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e5SSgyd1ew%2BePSM%2B%2Bq2AgFE03zEh3X0JurmfEmW9b0wdNr8128yUQVYltDKDXEfiJGry7NWAfHDZbYINIY%2FqbdBSlRb2WFeNfmHjFB9xt%2FymGGTRs4BJv0xe7aI79wfKip22Aw%3D%3D\"}]}\r\ncontent-length: 2914\r\ncf-ray: a10d4911cd2556aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2914,"size_decoded":3683,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ecb23a9f640cf59bb0b7e268313f2f9a","sha1":"2df0ecacf2e76a7e0ce20dcef096403f359de962","sha256":"09f0695e6f065f49332a04169976e49a32af8d4c7c5962388a7412431f2174ec","sha512":"39ef2685491f9f64f597be1cd853430696831fc147eace8d36cf6d936144126a8786c4cb2cbf5fd49527b354ea651064989e0b2e0b07e2eb49b32de147b87899","ssdeep":"","tlshash":"bc515b486c7f8e069f63937021739927eb05c20d1d7008a187d1d42a5e0fea69aa455c","first_seen":"2025-06-28T19:36:09.24223Z","last_seen":"2026-06-28T23:08:29.223648Z","times_seen":61,"resource_available":false,"data":null}},"time_used":16653,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16650,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/shield.svg.html","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T17:00:08.876Z","timestamp":1782320408876,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /shield.svg.html HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/index_files/Land-Btat2g4s.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 17:00:09 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=4,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uWIFnm6yupYBeShnTPYmoCSNDXBjKStxoqHRk7eKf6s16ZrPVCUrbV43LtKmuc%2B%2F1YdhAr4%2BUVs17xByS4C8SYpYDPuYfi643vyUW%2FeA6y3CB%2FXmU6%2F%2FTMEnPr8%2F8SfPa4tdew%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a10d497b7b0956aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":154,"size_decoded":893,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"d54a31d06eab50bceffcc50286f2c770","sha1":"eea7d71a98b5a42a39252aff934c3a68913c3b7c","sha256":"4f88828187013fa005a4b42b78bfef4aad4dd005216c647087cb7559bfa9bde1","sha512":"3af4465a9e0475bc76c776f4a78fa7cad0a434c640861b22c5f0ee6aa2c8d5b368180e8eda6c17d951c34788369b2c5b6b890b5bc545623fa6fe35332d21fbb3","ssdeep":"","tlshash":"3ec08c9a101132420a6083647ec1725439973bda24e28504ab92e02bfcd8627c8c61a8","first_seen":"2026-06-24T16:59:35.196997Z","last_seen":"2026-06-24T17:00:27.644444Z","times_seen":2,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://service-usdt.info/","date":"2026-06-24T17:00:08.906Z","timestamp":1782320408906,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://service-usdt.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 01:47:53 GMT\r\nexpires: Fri, 18 Jun 2027 01:47:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 573135\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49365,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-29T14:31:16.757311Z","times_seen":222205,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":14,"send":0,"wait":15,"receive":20,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/index-CBzum9nO.css","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.595Z","timestamp":1782320391595,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/index-CBzum9nO.css HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:51 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G4BR6mR%2BfxkPMVRGo8mkqnW5koJNAFZPHq0%2FEQ6u7O0AE%2Fg5dSMaVsA%2FMu1zGhAqDmbh4ycAnHyqi%2BMhNMbEqq3lQLnTboNiTW9nbo4o5Kz9GaBdOVxQPRLtbR%2BZnrxDJhrilw%3D%3D\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"6c8c-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a10d490f7ced56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27788,"size_decoded":3758,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (27787)","md5":"d012e40b4f6561e59fc44523fc58d357","sha1":"6cdf678956b0d3b931e5ffb5a60e5929f52208bc","sha256":"7ad745da0877587d01bbcf4b7460d58e96da18c8218f09d07015d651d2ded837","sha512":"4541de61982ced3be52ebf173eb328e45896346304cf6999bba37bf453b9b1beba0d830227778451e27675bb636e97c2546e76dc6ca5ed0569fcc1ee505d8f55","ssdeep":"768:457MJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQES:+MJihoCcZCOud8G8tKS65wqsZCG+dM2x","tlshash":"0fc27d5a7a4cd100bf835b4362df2e0855347588e530194abe3b35ca2cd5ce6ba73fa9","first_seen":"2025-06-28T19:47:13.716991Z","last_seen":"2026-06-28T23:08:29.211423Z","times_seen":23,"resource_available":false,"data":null}},"time_used":17017,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":16830,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.890Z","timestamp":1782320391890,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 24 Jun 2026 17:00:07 GMT\r\ndate: Wed, 24 Jun 2026 17:00:07 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7581,"size_decoded":1405,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7575ffd6532e96f3830de7bc9efc8544","sha1":"348ab893b08a4854b7715fcabf3843a26e15ed9e","sha256":"a10e7cf1445dc2d00971db17adcd20ec035a11211c982265f321e6658501b15b","sha512":"1fa9e882de10d071f440582aa2594802d406d9e2c484e1e6971e6b8ac3f02f81aedbe6e09689412296c7bf0d461bafbf223b09bd00227d84e6c003c23aa8adc6","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlx:vXuM0pR","tlshash":"e0f17792002ba400ab971dc223cf7f3aaece50896085d1b95ffd0dc59ceed66436876d","first_seen":"2025-09-11T07:42:16.456799Z","last_seen":"2026-06-29T13:58:27.207966Z","times_seen":8335,"resource_available":false,"data":null}},"time_used":15408,"timings":{"blocked":-1,"dns":0,"connect":15324,"send":0,"wait":34,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/65c82043c70f0ca23e677d31cb87d970f71f2130.webp","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.962Z","timestamp":1782320391962,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/65c82043c70f0ca23e677d31cb87d970f71f2130.webp HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P3hYdDMCvPi1aeppkXrG88MwBn%2FUo6VtXMRDQqPO8V3MRAy2cbGcjuFSqy1e8lQCJFSIwYFBRWxmPYNGRZ3Hf1vhuxcxb3xDYD90pqf%2FOchTxsV3ZkMT%2F0OJVl5eVd57iZIM1g%3D%3D\"}]}\r\nage: 51\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a10d4911cd2956aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196,"size_decoded":958,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"a00883aaeadc587cb906f07b97474443","sha1":"22fd791e3da8a7d88d5a546f50d94bb3c76d3ddf","sha256":"70778cfe70149c4072d6abbcec3002ad7e60fcdbec5641beae361835c27858b6","sha512":"584be90bf1e453fae252ae235b329036c5525512d145d4183f181388525e978c297f6709ab7e9f806b612ee223d1a01babb11e3eabaaff1831e68c9a4adeae71","ssdeep":"","tlshash":"a7d0225a111029215a309b841d80319034e33f6929d297405a82b027a8e5262c49a8c4","first_seen":"2026-06-24T16:59:35.186727Z","last_seen":"2026-06-24T17:00:27.620997Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16647,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16647,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://service-usdt.info/","date":"2026-06-24T17:00:08.911Z","timestamp":1782320408911,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://service-usdt.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 01:47:53 GMT\r\nexpires: Fri, 18 Jun 2027 01:47:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 573135\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49365,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-29T14:31:16.757311Z","times_seen":222205,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":44,"receive":8,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-24T16:59:50.970Z","timestamp":1782320390970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SUCRJtyZDDaLNsx72IFejcOdJtxKjfYo8TWr8J%2BHeOyJtGBsCR5qZiXFTUtBlIyjMR%2FIqP%2BnY1nISGOWVyYQkyZDnEorXhPSwhIAha8If3ppq2ecJgL4jfOmjTfc1ZAAV3tfqQ%3D%3D\"}]}\r\npriority: u=0,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a10d490bfcd256aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":144988,"size_decoded":32157,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5913)","md5":"b4b98754cdd50d1cbf58c40bda200273","sha1":"2a7fb14c2f960343f66413729791c3596622c2fd","sha256":"a7f9747d05f674cce793858b2af6528e0dea30a096f7d8a2983cf6296ca682aa","sha512":"90efbe1ada4f164f8233f123d97ed45c153bc60b9871c470584883bd5f5134b7e1d27bada304244148b2b3d5c89ac4809f809502e91af0d92071b09e6a118684","ssdeep":"1536:XpuGvkzTNCmVmaxFRbNKeO3iHkPXmaxfn:XpufvkPl","tlshash":"65e3f955a6f010a371a3c3993e96e60932e9e107de138d60b6dccad4cfd3c9cd85b698","first_seen":"2026-06-24T16:59:35.195658Z","last_seen":"2026-06-24T17:00:27.647147Z","times_seen":2,"resource_available":true,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":13,"connect":34,"send":0,"wait":208,"receive":177,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/tronweb@6.0.0/dist/TronWeb.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.884Z","timestamp":1782320391884,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /npm/tronweb@6.0.0/dist/TronWeb.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T14:32:22.680856Z","times_seen":16827740,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/js/wc-adapter.js","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.886Z","timestamp":1782320391886,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /js/wc-adapter.js HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2A2fNmbVe1XOG9j2JYaxMlIUqoowM8iGXA4c8EQKvajUPwsC8igu6R9jOQpY0ivOD9lsAqsOR3rJIsJzDiqu4UjQfBcjvJ%2FoC3%2B0kSWLKOUFN1BP6gWRzzzAEv%2FcA4Mecsz07w%3D%3D\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:56:41 GMT\r\netag: W/\"b0b47-19e0960d328\"\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a10d49114d0456aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":723783,"size_decoded":215223,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (54277)","md5":"846b706f34937429346ee10875e02308","sha1":"855ae73b40163e6c153f4396de25933ec12ff4c0","sha256":"2d0c669eb7d1af214182545494540b27f1578f5efede94d627bf55e6ba8154d8","sha512":"8d879e7d77a22df04e1663db1d859157515d7f2ce6471c86ccd57954b8ad5c065275994a53a3ffc453338cb265cdfe1ddea2f02e5609b4874d95db784ffafe5a","ssdeep":"12288:ARH6nmwhF3v15L3t8APikUt2Pivz5iWBFJ6aydqR:ARHuTL3t8APikULb5yaydo","tlshash":"30f46d9073a1f076839f52a994770041f339e864641d402cfba8e9ff79a4999d6bbf30","first_seen":"2026-06-24T16:59:35.216521Z","last_seen":"2026-06-24T17:00:27.654331Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16743,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16723,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/team7-CmlWnAqS.webp","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.945Z","timestamp":1782320391945,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/team7-CmlWnAqS.webp HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"25d8-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x8rcHKvEqyxp8Q%2F%2FBzzXMpMP%2Fifp9SqFW%2FkFUPcSyUJ3JOgjRuSIHVQsSlsQy0ovmr8avFVAMXnFGlnRcNjCTkPBCUgqRCjQg51Nr2N2GssHeUgqj3xU6ccO56%2BijfJMbkpvhA%3D%3D\"}]}\r\ncontent-length: 9688\r\ncf-ray: a10d4911ad1756aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9688,"size_decoded":10458,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"21990ddbef30acafada5ba840885cd4e","sha1":"25696e08962a0758185198ede1429c789ab3516d","sha256":"241f8c2374eedda4b5bcdc553f91e383fb54cf2d99e8e9e3ca95fb935964c262","sha512":"a118c8c34208bb2c182be1c5b26551a1d6144172f32f40d929c148d2a972a942f85a73571381d6c5671c93718b3571fc3d446749dfdc4ce8c27292c432e68998","ssdeep":"192:i10Tks2INi0TU+xhRRqeksiFAoOqA1vrM4x6qlqRV7r5X6:imRgchR7ksfjqA1vrMOARFrs","tlshash":"3d12b018d340648eef0ae7445261726681d55b7abf7b5c701a3c8bda308f8b61906e45","first_seen":"2025-04-08T20:33:55.241357Z","last_seen":"2026-06-29T00:48:36.944656Z","times_seen":444,"resource_available":false,"data":null}},"time_used":16673,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16666,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/menu1.png.html","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T17:00:08.873Z","timestamp":1782320408873,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /menu1.png.html HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/index_files/Land-Btat2g4s.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 17:00:09 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=4,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sr4BlpknGaci3ZkMfwsgWMNd9mnqttlg4qPIsWpASknaKBw%2B22t3gakdTgBIEV3R5ubGQn2iiIUWFWK4N83aztHiKv9PX55dLX%2FfG5AWco5l98M8W9yFL97AhmlDxCCVGChCIg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a10d497b7b0756aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":153,"size_decoded":881,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"5d12d129c25c649bb0c3f0137f785fe1","sha1":"662b761106d0d3d614ccf148e7c6daa8817bb45f","sha256":"3366174243b66a26cb0cc4a5e5f6fa2a8b24fc43cb2bf25ba58ecdc3449d4304","sha512":"f9bb09584139e69869c1fd6f361939e912d86c911a9bb166775d5c246aaea2522effb210287b6a539658356ce3a25c91486a6ea1779d419ef8b2717b457ea254","ssdeep":"","tlshash":"aec02b9e101022010b3093002ec5725834a73f9e64e285087f82e027ece5737c8c71e8","first_seen":"2026-06-24T16:59:35.214886Z","last_seen":"2026-06-24T17:00:27.655813Z","times_seen":2,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/what-else2-c8YgOWn0.webp","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.933Z","timestamp":1782320391933,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/what-else2-c8YgOWn0.webp HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"56c0-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xq4WpJ582ERE73eEXEMXEj58HCxRsJDbjJQpGtxOkv%2F0KsboeMikfcE%2BFzKfrmyIVqz6Mt54CyRGj%2FSDMNScajQTO08CQzqdt7066J0Rylf%2BdnKta3%2B%2B1Prdi6Ya788S7G5f1A%3D%3D\"}]}\r\ncontent-length: 22208\r\ncf-ray: a10d49119d0e56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22208,"size_decoded":22981,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e1e057fdfd21fcb1b20f6dbff68beec6","sha1":"0a1b93824ad73034f0fdcca9cdb69bb141cc766f","sha256":"56999b85ede07c51cb32cbb21169a76bab2fd5396bb1edf7cedf88b1f32c32eb","sha512":"7d78ceee169f2e5309396dec77dae0bded22a9b2f0223308c15019904c203233071bb88f126fb037de94a793ef2d88533dff1cce22efd85216fb2d5f4587385d","ssdeep":"384:VZgiCAV2JY7iTlSiIQigkOzLewew0/dOnPm5FcHCQO5D2p:VYWmTlSiTTLez//dXFcHCQSa","tlshash":"25a2cffc302d028afeedc67b6906af92b9fe14571470ca0d63587a8155906c753cabb8","first_seen":"2025-04-08T20:33:55.221615Z","last_seen":"2026-06-28T23:08:29.24327Z","times_seen":413,"resource_available":false,"data":null}},"time_used":16687,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16676,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/oneobmen-CyrSxzF4.webp","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.949Z","timestamp":1782320391949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/oneobmen-CyrSxzF4.webp HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"10ba-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R0m%2BYXvaVYIWqkeQQm4j%2FjTpxmXMBT9%2BVYhnsBzeY902X%2FYkwqbwNhYHAIvwlGQNDwWAu47rShP04sidZmEsPuWm7JjdWZYbvY29u36HtwUhy%2BPANL4Pq%2BHL6z%2BwlxBHxhmTgw%3D%3D\"}]}\r\ncontent-length: 4282\r\ncf-ray: a10d4911bd1c56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":4282,"size_decoded":5056,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1bc53ee5929fc3195e5adf1d86c72a33","sha1":"a72412370f4ff21cbb9d758dd6d68731356c9276","sha256":"a6264cb3a7fabd924bcd62bee017831472ecd32fc7624700d3df895a0968af7c","sha512":"acda9b9f3a95005731d72c16ff515c0121114d43612838fcc8f34c731741171c37dc2cc4abe9b461a8eed3984249c38c8457c819f9795064eea99e75b0a1b80e","ssdeep":"96:X2mKVaGphCpFLE38bTHNstUDueEtDhT8zCJK6OS+CRC0MwhwH1nf4i7:vgTpuicTtGUDVE3T8zsHCDwhw","tlshash":"d2918fda6a84d4b4d905a77f4af27f40db8423064781075e2157a906fdbc8c854965f3","first_seen":"2025-04-08T20:33:55.235244Z","last_seen":"2026-06-29T00:48:36.875893Z","times_seen":399,"resource_available":false,"data":null}},"time_used":16665,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16658,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/cryptohome-Bkw0BUZH.webp","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.953Z","timestamp":1782320391953,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/cryptohome-Bkw0BUZH.webp HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"197c-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=79gI1Az6odEjl45ql14SelxQX7D9J8eM2T9ICgGdVmIZgXFVRYrTvx7fMbrtIWq7NUub788UCz5UUUpd8YS%2Bk0UDWIXWva9O2bTxiGAxNIztXpvbUjw8p9fJCTgZYSWFGmzL1Q%3D%3D\"}]}\r\ncontent-length: 6524\r\ncf-ray: a10d4911bd2056aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":6524,"size_decoded":7286,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"10a2a0b43e1c12c0518ee43437610ef9","sha1":"49885aa60fda4e756d9e02516f9e8b4abf0441b5","sha256":"bb65329601cee30def53aeabaa90cca20c36c5c5560c20f6bb7c85f40989f5ef","sha512":"d08a23b1764987b0c01beb8f6f5c5ede4305be744ea396f7c0fa5670a347768123958154f5e34c34fcce6c6b962264327a091c0d82f7b5a53bdbab83782b5c77","ssdeep":"192:K5CHETRBoVjBVHm0hQVK2/R8j+9yYZXa:KAH6R+tsFVNR9a","tlshash":"a0d18fe6236d7678e4546fb4bad993d1a6447a3c84507d37283f8eae7cc56748230dc0","first_seen":"2025-04-08T20:33:55.236886Z","last_seen":"2026-06-29T00:48:36.907424Z","times_seen":400,"resource_available":false,"data":null}},"time_used":16664,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16655,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/cost.png.html","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T17:00:08.875Z","timestamp":1782320408875,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /cost.png.html HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/index_files/Land-Btat2g4s.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 17:00:09 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=4,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lmb0qPwKZfXKatcc0QIIjBRVEfS%2BKXETkzJzvxedtSwMsj2JQj2pvPenS1OzfxWx17o%2FAYMXBJMCuG%2BDUKa6Lw0EfXGW0bWApIprf95Npe%2FdqJNStjK5DWUISW%2Ft5nuDPg5b2Q%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a10d497b7b0856aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":152,"size_decoded":884,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"5dcc35523c89eabb773230bb3a756987","sha1":"af9f44a2d6edcaa41e107bc292949967cfa38e1f","sha256":"d559a27ad33ea0278c1d4ebf84d83baa763006cd6664b4ebb297f3dc22c0268d","sha512":"35ec3f2c32811467e178a9ed40c229beb64775ce8eca59b8557b520391e7f0ed84b1913b5d6e63683822f876c4601e2d2593911e3372e781a84bb7f3bf35018b","ssdeep":"","tlshash":"bdc02b9e110022010a3183002ec1775434d73b9e68e285047fc2e077ecd472bc8c71e8","first_seen":"2026-06-24T16:59:35.211983Z","last_seen":"2026-06-24T17:00:27.666476Z","times_seen":2,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/css2.css","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.593Z","timestamp":1782320391593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/css2.css HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:51 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ea6TF3EzyScwsUbfAVjnc7pVi0RSBcCyQERQkOnrdr%2FGK1vOZXQrDrjdArHDkVm3HWh%2BRuH8gCc8YcpzEUqSBaj7SdDZv6gsr37J%2F6gKTGgyKt9Ovnx3PB6KWhZKoBHz0xSqhw%3D%3D\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"8cd-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a10d490f7cec56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2253,"size_decoded":1364,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"625ca91498dc236809aebfb8066200ad","sha1":"c5824b34210dbce332418e5677c7201576536b22","sha256":"5dafd6ab6b98936cebe34f359ca807f7ce6787ab9bc1ffa7883947fd3039c971","sha512":"0d7c5ba243d2b05d9da18111d86d208ba8aca376f58aa76ed64d63b4d1a1e29495aa43905af7dc6c45c1498bdfdb64a7d845806d0751784da065d73194ec2ed0","ssdeep":"","tlshash":"4d417881482b5204e6975cd327cf3f266e8c61487045d7b93ffe189b9cead6513a074e","first_seen":"2025-06-28T19:47:13.761885Z","last_seen":"2026-06-28T23:26:31.206761Z","times_seen":71,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/1-B8hMQnFc.svg","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.930Z","timestamp":1782320391930,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/1-B8hMQnFc.svg HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IMUHqRQdB9eZGICLNpXa3mkjFfPybjpGkUPLfU2YUzhBQpej1ZDtjL73AyQzf2TT%2BXpyUY7hRd3JlkW81xuzo%2B981tjxkhy4mi%2FMukBvkF4mfbXyDEzh%2BJLizarrNLbPViljXw%3D%3D\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"dadf3-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a10d49119d0d56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":896499,"size_decoded":651549,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7e54ee403da676c99d77633c01b606c3","sha1":"351c6bb9a4dba01eed5cc86ac6ae0a38f3e472f6","sha256":"59fee31a79439edb17dccae8553674f87012403c8a486c9b098a1e294c119e65","sha512":"7cc6dd0aea72a3f8e9c324dec727ab5133eef87d600768bf29801201118d4025fae2ce28071582dd3699b13a1ded3f3b78c56aa9fb53a67c7e5d1bcb7a099947","ssdeep":"24576:euayhlfPkhRx15QVsLcIuJ2wStoU6ghC5:eaDex6gW","tlshash":"be151214f80ae5b503bd0a251eb7156c6f748f709895ab8e87ac774683983c0f3ede25","first_seen":"2025-04-08T20:33:55.231096Z","last_seen":"2026-06-29T00:47:57.704422Z","times_seen":453,"resource_available":false,"data":null}},"time_used":16706,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16679,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/44-DcUgPKtf.webp","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.966Z","timestamp":1782320391966,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/44-DcUgPKtf.webp HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"2aa4-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uclnBywog%2BQf7Bh8FVhsm4MS9P7V4rwEouv53EuJp3qBemMRO3VLur1QRcJMz7ZLLtrCHS2SB3hlhc5Bcqc7yYHZJmASwmj0Aqis7SOIJ%2FqooiQVciH9%2Bulmf7M3p6DFkvE11Q%3D%3D\"}]}\r\ncontent-length: 10916\r\ncf-ray: a10d4911cd2e56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":10916,"size_decoded":11683,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b8dc93cca387bf2c17d1f47b79205b00","sha1":"afd9f668392c676754652edef35bc84af4624532","sha256":"064243afc32b9aba427090bffe6c1fb20a9a3068368147cec2566007d5dbf709","sha512":"a4364e4e888bfa68c1ed6e279753e8947616ce68c933bf16857e59d509551fe7a2b0d94966c34f10c7c74bb61bd721223db97416011e573e2c0ca22fc8ca50b8","ssdeep":"192:HCtlaTub/yIuJoKRhKGzNnL3DrY2kVBOr60PuO/mpIs3mW26mbBNzY:iuCb/moK+Un/rrkjx0B+pIsH26mdN8","tlshash":"5232c0e1be3a71a09a0439aeb36c5194c535600fc27a7df77a59047ca8c35f031817d6","first_seen":"2025-04-08T20:33:55.238728Z","last_seen":"2026-06-29T00:48:36.881479Z","times_seen":440,"resource_available":false,"data":null}},"time_used":16654,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16650,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/team9-sIMRwxbc.webp","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.947Z","timestamp":1782320391947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/team9-sIMRwxbc.webp HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"2b48-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YekoAtwiF2Af6oPuadVfdeW9%2BXr%2FChzvmwkuNObG1DnstHjrbdbhrnFDcQqNGbF6Wqpnidaof6m3MgRDpt7%2B9Xs1kfP9VGRZVkWBCB7IQ3vIcZGb1WolOOYDVJODuXntr%2BXINw%3D%3D\"}]}\r\ncontent-length: 11080\r\ncf-ray: a10d4911ad1956aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":11080,"size_decoded":11849,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"87d484adedd61343f676bf417fc61fd6","sha1":"96cf1ad110d99c2870f85c9f5c717fbb14f6c44f","sha256":"ec79aeb903b3fa0ad35e684b252ab35fc654bcdf93fa4b28cccac058b8b69ccf","sha512":"7a6d1e57e3434d8ae603cc9d8d1c3b80ab1666a281d62b16f1ea109d97d52b64aebba41d998be548f2d69c5c052f1e1d80abfa07bad36a595aea3da0ebfeb125","ssdeep":"192:qmmu84BOdcxxn8iFk6GI+HgvIm6mKj544gF2jVr19XzKlpwoTI4GlZY92Vm:qmmvX/iWEvp6Bj5NgFI39jKlp7TnGlZI","tlshash":"ff32c0f5858d67f49f809b468043ec6d04b7905bce86e1e6013b640a8a77c89ec2a31e","first_seen":"2025-04-08T20:33:55.23263Z","last_seen":"2026-06-29T00:48:36.949762Z","times_seen":444,"resource_available":false,"data":null}},"time_used":16670,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16660,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/home-image-gzJaQJ7U.png","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.928Z","timestamp":1782320391928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/home-image-gzJaQJ7U.png HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"23c77-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uF2MExXkmeM6rEq8NQZuqthJR5gkARz4hXtH2ytjPJGGYSHXwVFsvRIxtoixdjJikl4X5GKfwISn8nUQOq0G5inHcO8nflIkUoOGWgF4mF9Egmz811izIUhWWLeIMH2OxBD1rg%3D%3D\"}]}\r\ncontent-length: 146551\r\ncf-ray: a10d49119d0c56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":146551,"size_decoded":147313,"mime_type":"image/png","magic":"PNG image data, 1512 x 2130, 8-bit/color RGBA, non-interlaced","md5":"9cad99dbdf29233a3e18fae89cbcdd56","sha1":"05d9639f849359af23082e722dd8bae99bfdf560","sha256":"b005f5a6875b15ca7957b90dbae8cf52e6ff1645b327d4b7ef90892401ffcff5","sha512":"9ab249cc09967d21d5a3cf2b75250c3bcc0305d5c0c693d9c7b55e62dcd0de734950c55f5ec6dcb3b5d091ff6d193892b5b27de3cb6a06065df1f7df84223665","ssdeep":"3072:GaDBLdkD1Y5RW69+1cVOA0gi52BytVMTSqXQfjo/n7:lDBLqqW6NV1+52BytVMuaqc","tlshash":"6fe3e058250b5d6ac84d86358beb4fb5f76c8ad94598fe1b0bb40276bcf7319cc83881","first_seen":"2025-04-08T20:33:55.226246Z","last_seen":"2026-06-29T00:47:57.682468Z","times_seen":471,"resource_available":false,"data":null}},"time_used":16700,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16682,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/team6-DPDdh9tS.webp","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.943Z","timestamp":1782320391943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/team6-DPDdh9tS.webp HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"1f86-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vb%2FT38kxPOuez%2FxBmm0lD16dvcaJisiRKk4Hqik0PW4HGHckxdZmk%2Fw%2BGqV8DYlxS2JisU5cbAvhvx4p4sYT2C7Jx6pCqnHpLQVk8y%2B2Zw8RHPENiY4HbqFwMmsnuz%2B18B2VAQ%3D%3D\"}]}\r\ncontent-length: 8070\r\ncf-ray: a10d4911ad1656aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":8070,"size_decoded":8842,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ff92c5d0702748d4fd4a7598287b52e9","sha1":"1c52f75273473401f01060b11732c9f2b93bdec0","sha256":"4678f709196922389c98ba22c894212e124843154455769551b2af283e2afb78","sha512":"0d728fb2b6b205466fda940e0732da04c5bd6f42a17a266ba871e2412d285caada5814ed15240ebfa942798871c2de97ee109cd16856da574255de2ba4abca5c","ssdeep":"96:Ag9uYyKIvVYX1msb1sbUItmcdl0+InYMAXAf6glqBTTCxBd5bIe75fPM8Hif/pDq:V94J+8sRYHzM3dtPMSifFKXG+8W9fJ","tlshash":"d7f1c0157ba4493c6ee08b78d1f4e6827ef5dd0946f37d1a580518f43c2d690390bb26","first_seen":"2025-04-08T20:33:55.234306Z","last_seen":"2026-06-29T00:48:36.942113Z","times_seen":443,"resource_available":false,"data":null}},"time_used":16673,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16664,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/18ca64bcf3b61fc77291e65174a6b321f5eb4f3b.webp","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.948Z","timestamp":1782320391948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/18ca64bcf3b61fc77291e65174a6b321f5eb4f3b.webp HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"978-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BQIciAH1UJt16MUOFxsw%2Bc02aNwlAq4Lfy78608I2%2BA4fcIVYdy4z0YEExMXOF62gP6uKUjXzVo9%2F9mF%2FUdlM8acSnI%2FM1KBqPkJzGxJcmXvOXgv5sCyRieJlUQY4%2FiQEH%2FU6g%3D%3D\"}]}\r\ncontent-length: 2424\r\ncf-ray: a10d4911bd1a56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2424,"size_decoded":3199,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f6f8643ea2051c776abc130970c485a0","sha1":"18ca64bcf3b61fc77291e65174a6b321f5eb4f3b","sha256":"80124c9264e4ac3b1c7aa601e6762fea3dcc4560615185cae2a324ba41b1d01d","sha512":"ad3c0f67353b27aa6548b6a409ca1f33d35bc9e3309777b2795e49ae02f7828484ad6e082c0cdc66c658ba28d464dbae4003c6ac758695f0ca961be16dab1b10","ssdeep":"","tlshash":"60413d21deb54d5bbb36c3b923d92242a1804635cb116d25b29ff378495110210f7da0","first_seen":"2025-06-28T19:36:09.229274Z","last_seen":"2026-06-28T23:08:29.219101Z","times_seen":61,"resource_available":false,"data":null}},"time_used":16664,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16659,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/amlsafe-Dapxivrv.webp","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.957Z","timestamp":1782320391957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/amlsafe-Dapxivrv.webp HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"2674-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r4%2Bip4fKgK4HpkpJbwSYRumgFy0EzXdoMpQsElfYIvmQJveuUp4bSG8mXXLCSpcQNnZQk5PwwTfoCXCW%2B8tXBnn%2B3onsBJiOcSuIkXxzchIhIIbzFDl9UcmDP48CKnTaWX97gQ%3D%3D\"}]}\r\ncontent-length: 9844\r\ncf-ray: a10d4911bd2356aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":9844,"size_decoded":10610,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f748a3cfd9873d313464f9e4bbcd76f2","sha1":"a83bddfbde067d55b167ec308e126cf8ca62f39d","sha256":"8fbbeb76beafc36aa0ea7fc570774505c2420352539aef015c3de412cf89a6db","sha512":"ef92662bbe1500595f103d365ff34222f0e6b6286dc3dd240f276d2d8965f8cebd9398adc835c0e4e9c1b06ffbef80edfb0084a5d717139bd5ed6edcaecc078d","ssdeep":"192:ZFiBIVp+T5ehnQHhd5BTr2zdmQbkJZaGwcs5LREy:Z7H+T5QnO75B24QbkzcLR","tlshash":"b8121a95884d9044db9790f86f0320b3a9798873cadcae7384fef0a5d7591f19fa9d40","first_seen":"2025-04-08T20:33:55.228278Z","last_seen":"2026-06-29T00:48:36.938168Z","times_seen":398,"resource_available":false,"data":null}},"time_used":16662,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16652,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service-usdt.info/index_files/11-CEJH9EXk.webp","fqdn":"service-usdt.info","domain":"service-usdt.info","tld":"info"},"ip":{"addr":"172.67.152.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service-usdt.info/","date":"2026-06-24T16:59:51.963Z","timestamp":1782320391963,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service-usdt.info","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 20:10:20 GMT","end":"Tue, 25 Aug 2026 20:10:19 GMT"},"fingerprint":{"sha1":"12:F0:6A:BA:B8:63:DC:AF:2A:B4:E0:2F:F4:E9:17:51:7E:EA:48:14","sha256":"39:E5:02:F6:FF:65:C7:63:BA:92:5B:83:A1:39:D2:20:DF:73:98:07:02:22:90:B0:A1:47:FB:48:D9:D6:A9:9C"}}},"request":{"raw":"GET /index_files/11-CEJH9EXk.webp HTTP/1.1\r\nHost: service-usdt.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service-usdt.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 16:59:52 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 08 May 2026 20:26:15 GMT\r\netag: W/\"4dea-19e0944f658\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w0AO%2FJqBRrDOtBSliL84S51PRwhX4tL6DfqUaoA8nGeDzP4YBw%2FWZEOuiLH3xzMErfIIrKb9xMLX6h1HnTYTzMdUh%2BdSqpm9JQ%2FQ23CQhST%2B6tRt0QrLs8qgZpzJ8ucIfXy3Bw%3D%3D\"}]}\r\ncontent-length: 19946\r\ncf-ray: a10d4911cd2b56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":19946,"size_decoded":20717,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d848cc6082d065edec132c04bcc72a1e","sha1":"ee347487fc051c45082e8053d05d06aa37a0dccb","sha256":"ece6e8ca616a5c0416427834c086199980328f18e36c53707dd559cd49f0536f","sha512":"b67c5bd932034b717261d74d10d67fd5d1ab0ca507dd0dcdeb2f1679bc8628d83762af7fbac359fb2148981804a907bc7a138f69d1ceba3ca93f34ebd720668e","ssdeep":"384:qJTRUuDcWFQBZnHM/C0R7YDW1w2gMTFT1eDQTS0VamG7MurCubw/g8qf2Ggt:qX+WFQfs/C27O32gevTS0VamcCRg8qf+","tlshash":"1792e0087400489a87ff0ddaa85f9771534e5edd7c7e00693bf8aa8c93e4a958215f4d","first_seen":"2025-04-08T20:33:55.233493Z","last_seen":"2026-06-29T00:48:36.945169Z","times_seen":440,"resource_available":false,"data":null}},"time_used":16660,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16652,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"service-usdt.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}