{"report_id":"b8681860-6b8c-40b7-9a50-97a288faa385","version":6,"status":"done","tags":[],"date":"2026-04-07T14:43:03Z","url":{"schema":"https","addr":"usdttoxmr.exchange/","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"104.21.38.148","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"usdttoxmr.exchange/","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"title":"USDT to XMR Swap No KYC | Anonymous Tether to Monero Exchange","dom":{"size":47940,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"f5659f72a2bc0bb29802117d50d3ee4f","sha1":"1daa565345a151cd163008e6029ca6358fd8d677","sha256":"2c01163e3eeff53c05636eaf2cbb2de1c70f80d51c2f58691f6e587083c4c101","sha512":"a01645fd311d261cdb608e25399e83bf9a8398984954e0be4376562120a631633ef98c744245c0f0df93787a4a5e9ad52b1df55914be353039b7f8a1ac5781e8","ssdeep":"768:4R4M4HXvPmAhqHVuNHXvPmAhqHVuTojG4U0UcpfM:4R4M4H7H+y4U0lM","tlshash":"ff234f0931fe59b704bb96e569930e023ed4e307e00915927aae0ef94fd7c61f877688","dom_hash":"domhash0ce0c69535da174e866ccc2fc19ae20e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"usdttoxmr.exchange/","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"104.21.38.148","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-12T14:43:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"usdttoxmr.exchange","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-07T14:40:20.802361Z","last_seen":"2026-04-07T14:40:20.802361Z","alert_count":53,"request_count":53,"received_data":299356,"sent_data":26024,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-05T22:20:18.514512Z","alert_count":0,"request_count":1,"received_data":8267,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-05T22:16:34.770209Z","alert_count":0,"request_count":3,"received_data":148101,"sent_data":1674,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"usdttoxmr.exchange/","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f0a2bf188de49b6270f92d8563c2fdbe","sha1":"fa083f1fe8f261ceba66aa24cb2a5d96dc3d44e6","sha256":"3418bec180787cf6ee6b9afe2a43e0925a5480e69ad9720c698e446e85101475","sha512":"0e781fc421483b4d68c581d9e4d45b558254c5be924ce4c8c601289eca298a231af020616eff282794a6c16a3884b14efdf2cb913c3dd25c3809a5e5d81ae110","ssdeep":"192:n+tKuIjQwcdAOatSzdFedsBC8B9CKYqk6cdYyqsVscYbvW+lhfga3FTXPvmVEbdr:n+tKZLOZBn9Q/6Z1fbv1hNFbPOVEx/NB","tlshash":"3d1294aa32bb7a300abb66ff2edb56697464405b3800d9843abc41100fd0f95ed77dd6","size":9617,"data":"","first_seen":"2026-03-09T13:48:49.35552Z","last_seen":"2026-04-07T14:43:05.324379Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/dot.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/dot.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:30 GMT\r\netag: W/\"41f-64e1b7268b62d\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PuSHY%2FOn5S1F2BmscQbeiUyHwjzKwOZjhMzF1GHSohwwhgL6mF9QK%2B%2F8qtsNg5diqA6lyD7F%2B98geXNFKeg0UN2zrCGHjVWoknOx0XCMk1JwQi0h2MK4KPZc31OQ0MWHFJaskFU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce639d956aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1055,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7544a7dc0217267f00df8da7abbf25f5","sha1":"e5a447cc3934c038d8ff6cfded94664b719bfe9f","sha256":"eeb8fe43686e638fa2de0026fb3fa0e17371910f27e8404adf31ca800512b4ae","sha512":"48f2c2d4ab0fadef1b4079420e1f9e882979af83f2a0f02c16a0ad4d444a4402c9e2268cf3fa24572fe2042d41ed2e5be2e3b46290181c84b9245f261a328f19","ssdeep":"","tlshash":"1b118c59f24cf425991a1148c7f3aae197ae92278f909a8e80b17dbcf7728e015417f1","first_seen":"2024-12-17T05:49:38.368976Z","last_seen":"2026-04-07T14:43:05.292949Z","times_seen":495,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/usdceth.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/usdceth.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:47 GMT\r\netag: W/\"5fa-64e1b736899fb\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L5kfR1qSTzFFgzpCnbIfDmBIP%2BAwBGbQHXu811HTfP1mxeOq5p4wGmURgr1g0I7BjV%2BTkWDK6Q6gguF6C%2BxZhitc2iBM3cgbjhJJ28LZTlxkacD1%2B2oJgimxW9XvlAAW8ug7JHQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce65a0056aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1530,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"322c3a29937251efd44281265efce141","sha1":"25ccd65f50945df52ac20313e9eee1daa4231a02","sha256":"25585d58d4deed391e7d396abfaa5c8724b1248c62d2f4df66fd1a5e918207a3","sha512":"9ad9ba6d21bea4dcf6c7a33b4dc4ddd73f8e90a6cba251534afe89126f241522698bc01bf0176dbeff07e1341b21dbc369023bda8b74f4f190223f2e3c92b306","ssdeep":"","tlshash":"9e3111f0e1343338ce8a4bf49e6e74b5bc8f68ee45e893107188e65072512ce22e9965","first_seen":"2025-08-08T03:14:58.202197Z","last_seen":"2026-04-07T14:43:05.293592Z","times_seen":468,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 07 Apr 2026 14:42:42 GMT\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7581,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"053e580dd54b26338a22e4cb549690c3","sha1":"c55e4b6acd019be1820230bacd9aaec4b548337c","sha256":"9d981e129460bc838afb4f5c3ae0a09a9b454c98004adce11470f729a814d764","sha512":"4707e1eb1367e61aa8e1cab1d9792790a2eb9dd9e3efadd937ffc7c091d5269a758fcb24f6417d6be86ca5ab99f0869d4f8957a42e68c1f308acb7417c15d5b7","ssdeep":"192:9NNIxO34OxDNNryfO3iExlONEhYO3RrxGx:vXJp2+4","tlshash":"57f18992002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T03:48:36.324085Z","last_seen":"2026-04-07T19:33:29.262757Z","times_seen":5222,"resource_available":false,"data":null}},"time_used":552,"timings":{"blocked":244,"dns":1,"connect":29,"send":0,"wait":32,"receive":0,"ssl":241},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/sol.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/sol.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:41 GMT\r\netag: W/\"6f9-64e1b73130ba4\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tlPbKcHnzdTARj1%2BiKM3JKf%2BaHpz6HF0HbrFgXI4eDSKqHpFp9RAr7fCU7qemjjeb2zzLe9hz4oiccG4DEbkSqKF6Qv8IIpbVK%2F32%2FVLJLagUlfiMJRoT7AcxIK4lGNu%2F0WUvSA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce629b656aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1785,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e6fecb2c83dd517ad34f5851b99ca82","sha1":"1f08ca68f7b9d5810f4048c90119b5f30a1d13c8","sha256":"767bd52ed4f4764f27243d78f441d6690b2024d5526044e06e55f49b8008d47a","sha512":"a932d777e8766aef3c077f636a6aa361d8afab191185092d28a353b765b8a86c26f9a71d611fa6d85d906a6ecff70451615fd8316947728aa63bd3cf0fe587de","ssdeep":"","tlshash":"b6310215e51a68bbf415c24ccee1197523e802eb9062d7e091a17e3ef5acce1001f3dd","first_seen":"2023-05-11T17:52:35Z","last_seen":"2026-04-07T14:43:05.294752Z","times_seen":680,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/avax.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/avax.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:19 GMT\r\netag: W/\"653-64e1b71bddfce\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=515x5hNNph6uxWvqNEjr0xmRAISrRqQ55pF1Sm3YXN5VxlH%2F2N77wiFFxJMt9bnNHXd1TEZBUILRRAD23hqaP07aQ%2BgYm7PVqOV%2BcPWrU9guXyUcf18xFkAZpqPQFnRNrtYvcOQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce629c756aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1619,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e9df24ea466b546f238627045e3f242","sha1":"f77d52a7ec76d6c123f80edf561bc76060bce738","sha256":"1770e468b98420107a7385066571b9ea8c2a86c327c16f5bf59108983a40657c","sha512":"c78827f51b37840004cb8855fc78f1e647a5a66c72817cf8511c598c47aa10db2ec372f358df6ae6befb90a026e304872d20e911e34f5a99e973647aec68a733","ssdeep":"","tlshash":"c13133dc1a4688dc5dc485f4f72030d4da1ff0fd66026e15c248ae5868938e88e4d55f","first_seen":"2023-05-07T20:18:14Z","last_seen":"2026-04-07T14:43:05.295297Z","times_seen":664,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/zec.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/zec.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:28:04 GMT\r\netag: W/\"578-64e1b746ce2ca\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2905NtIIAXTPfbxaaw7GNiWHjhGMZ0eqAh67Noke0zy6RXiOPa%2FEVx22QKxwlFU1sXeHS4kGHArlI1OykVlnp3mUtWDnGuoxgt0svWwpdHYpSLlPzmFBnZ5TilXM16guLr8DUKs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce649ed56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1400,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0355dfef0156fa1410290c6f62594b18","sha1":"de25f2fc3d8e8417c25e9cacf316b8ab9ae5aa94","sha256":"c202292c36336b109523fff68c5e8de3a659ca2dbea6a7d1e9fdead80c0e1a90","sha512":"0f5db1dd772218a22b21ca44ceb50ab2a85036712ea4a17c7618f6bec7b4b6d198ed3e638158d8497132decdb5402823f3df0699d391c8cd56e6d00fa44ccb94","ssdeep":"","tlshash":"8a211664b3875e39b9b1c394ecd0b89e3029207a90c5415cd555bf5ee495df01c84ad4","first_seen":"2024-08-20T15:05:04.252796Z","last_seen":"2026-04-07T14:43:05.295838Z","times_seen":487,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/usdtarb.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/usdtarb.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:51 GMT\r\netag: W/\"865-64e1b73abe873\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dHiYlPXBWWkpO1V9Un%2BrQwy8vjrK9sEQhs23QCD3NCBJZ%2B6tMpoNrxRAhskVWDvfBDlCb28HKatVPJPYafIBSNbeMy2q2HgPJU%2BWBV1Dq8Y1wWfyFs7v5JAEmxFiAngqFD4flPA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce659f356aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2149,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d70c261908a7bd2cde182a6a477850be","sha1":"d587b777974afb3eb63009d8d06cd27f962acc5b","sha256":"fced8c4a47899704bd2606b577df5f893abafc9ad4625d91cbdc3f4deb13aede","sha512":"1c37f056407c887510b202b57af8d6007c66c2358dfa1fee7d64cd62e23aa0ac957f4b77b4490fd8e9655132307f0d572f60a7a5f48c30046bba3a0660df0ff5","ssdeep":"","tlshash":"744110b5a75a45fc0d0b4bb8ab3494b0671f187eb35b02342d5fa3f0a1074edd9938a4","first_seen":"2025-08-08T03:14:58.088751Z","last_seen":"2026-04-07T14:43:05.296386Z","times_seen":467,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/usdtsol.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/usdtsol.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:56 GMT\r\netag: W/\"919-64e1b73ec48eb\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XEh9PyNDXRSqn0%2BoDaDXQYoVZTFM7pndLyE82yYR3Wi%2FhjlX%2F9mfZm4MjKHIo69gWUM6zTTiTXLFyeiMSp252ftgIzkEoYajejZXr7%2FDM4nRKqQ%2BQ0caEwLQ%2FWnf3bdeLGDzQrI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce659f656aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2329,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"64346595d18c63284443047e061af26d","sha1":"4cf0e95a278cceb2f92b1b872225c28822d8810f","sha256":"14c6fe294604e23397d327c03d26d9f9241175b035a5a31dafedb98d8dde1aec","sha512":"4f603cd6fe045ffff816fe139267c0ee7437258f3501bc797fabc1abfa566d09c15a7438dc76fd91cd3ad0388ddcc1f9d18645f33f4ca62378d26e520c87d21a","ssdeep":"","tlshash":"90412052e204d23b8d4f82bdcb7660b42413505c76feb2b892e35b1d70178e5f5089b8","first_seen":"2025-08-08T03:14:58.31984Z","last_seen":"2026-04-07T14:43:05.296942Z","times_seen":468,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/usdtmatic.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/usdtmatic.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:54 GMT\r\netag: W/\"586-64e1b73d0644b\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lL1I%2Bljcl6h%2BhXZ8PcVimlyb7ddYZY9cO7ni3kKQ%2F8DNAm3blzmz7gkfvnzTwftxQ%2F7aqi07dFOGQdUvPDNLIg8xr%2Bun8lXAJPAaJyReV4ft700rVgoRIeRMuo3Qdt5IcE9u9%2Bg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce659f556aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1414,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0d0e6e76cbffd37bc0aef1b5a85e0f60","sha1":"de286a9d64f68d471abd382e796935b8f9d73e55","sha256":"6136d482b83eaa2ab3d9f13a6682876a75eb5f8c070f0928dd112db2e518f3eb","sha512":"ba9d2633aa02fa8dfde4d602ca7d5b426a19a93c6d860384854d365b1c1b9b2e4831e4a0a1150325fcd976717aff2be225d4338f88e45c60c7f55e14790fe6f9","ssdeep":"","tlshash":"48210335439c82bc398a0bb8fd7864f0c4cf9add44f5e3a022fd861071960d951ed8ca","first_seen":"2025-08-08T03:14:57.897783Z","last_seen":"2026-04-07T14:43:05.297464Z","times_seen":468,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/usdc.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/usdc.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:45 GMT\r\netag: W/\"6a0-64e1b734a0dac\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0kMnV9BqBPrDyni%2FSBe19s%2F9h98r2sDmV2hGp22yBqKzBiHAntlrTL6tU8gTagFJqpEt5WC4SFOAZHD7yULjO1ZEPHmLYH6h3TZjADN%2B0npyr55rWag26RZVmYCMGtK7OqwXWJE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce66a0956aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1696,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b5972c16a9795dcf6e2e2d7e3125d21","sha1":"9b1cbfda8bd93368b67de6e9aba62fd250bfc7ee","sha256":"913adf09fc3097cfee7f76a3226bacd52237f2ac714817d68eaf73bfc3a72109","sha512":"c271a0fcc19d8a62481e3c72dc679186d89f28b642fd5322b3e66250d4d63e549b6a468cb407ded0d92b5786e0e1fd3b99cc218da873133d2ab80f6af03fb791","ssdeep":"","tlshash":"d7312918eb950a399848c393ada42fa53a0f73bdb114c2fc94b45e30b935c9cdde508a","first_seen":"2023-05-19T19:08:22Z","last_seen":"2026-04-07T14:43:05.298015Z","times_seen":656,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/daibnb.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/daibnb.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:25 GMT\r\netag: W/\"4d5-64e1b721769ad\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DyYS6hrxpYd%2B5DC42BCO0B7D0HBcGrvYbx7hhLKLKkCHdmBsxyrjp4pZWUD%2FJsXpEuWxPBsQQR8mB%2FvH4q6%2BhV%2BLiUjAGAUYU6k62Vom%2FdEn%2F2SDRdeEBoD17yGBwNAFVi0Po%2FE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce66a0d56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1237,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d65c85fccdce8a2e6dddef2c26e66cff","sha1":"d7f02719e75158096cceca288bef2368061f2176","sha256":"7b98008cf62b1cae702574b447bb541e281d16575de557e4fdeb8c2986434255","sha512":"64374064858c2c79d35673a6cbfae67688644dc95a9af2a20effb22dee8573eb07f0fedeaa5f33a5811c8118188e30d29f122ebe945486264b1e6b7d12cca87b","ssdeep":"","tlshash":"0e2167a8865005abd91bd7f0ca7c7bf67cad048c48c5cb73c5be321076521d961b54fa","first_seen":"2025-08-08T03:14:58.28393Z","last_seen":"2026-04-07T14:43:05.298542Z","times_seen":468,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/xmr.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/xmr.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 28 Mar 2026 20:28:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xaUwQE7apAwkXkCzaC0H8ZJy48PxRfTkvEmyH7Lv2xq83K8OiBAnqRgpcunk0dk9X6mD7jK6f8Dn2x7wR%2FrlgLLwL4CMngMYsYNyo%2BbL19WjxwBM1ZKmyikYbtlH8l77PhBBzVE%3D\"}]}\r\netag: W/\"3ac-64e1b7451b9aa\"\r\ncontent-encoding: br\r\ncf-ray: 9e89cce619a556aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":940,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"22ac5949dd8d861e10abeee3e4d546d0","sha1":"172f8c99e4b56bc6be6a86791e08fbe867640b40","sha256":"668c28e1a5e0ce6839c6b3a8a35c5dfba3e284a442f7ae4049398472f72ace27","sha512":"d0cb29e855ecafffbd4a49c4b287849ac133c97f0aa9d098d197031add5df8cf51668d2ec34db0934230c216952acf87bc7c4ddce33c6564da2e39e56395eac5","ssdeep":"","tlshash":"d7114083a0702d1ee07689c88be9ae260c7c91b563d92dfcf6d32d3e1531c7811c8a90","first_seen":"2023-05-22T07:53:58Z","last_seen":"2026-04-07T14:43:05.299066Z","times_seen":520,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/sui.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/sui.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:42 GMT\r\netag: W/\"4bf-64e1b7314ccdc\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vjGbwT%2BI1aGcPfEw3Pk6rE0zAyf%2BsUuZ9mrJ4w0llBk1cdakMxpjPVoE1u07VZKJq01h%2BlD%2B7s2MU9s%2Fc7UE3qu22qmW4CebNaI4zxgeRKGqdFleyHRSk17NwbE4hdwtpGg1UC4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce629bf56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1215,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"acd43b38b0d5a1a02bf1484ca78ed1a9","sha1":"ef7e22ce96d9919dc3550d8563bac2b48a868ae9","sha256":"20a6ae6ce038f9f48d610c05d7269cf0a4a0fe2226a86172498b9ae3b7ddaebc","sha512":"0baa471a56f84c975a9a0a869bd72106f47d368032b27feecc3c10495b0d3b13852b4da93683ae8e6a37db068d4ee91fb7f06ad8b9553e935ef31b7344ad693f","ssdeep":"","tlshash":"cb21020783c19fa9be15823c03e4a19072b1a4c6f0f0a7dc7b971a52d44d8d4419e7fb","first_seen":"2025-07-04T10:15:19.602231Z","last_seen":"2026-04-07T14:43:05.299606Z","times_seen":485,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/arb.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/arb.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:18 GMT\r\netag: W/\"782-64e1b71a5662e\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gssnMzXX6oVp7W%2BBm0p68irR5e74qqmDpEAEkJnn9iXgeECKVTspdiWco95lb4pcgKbCAM4JvSwfqbu0Sc4wuk5%2B%2BkP2cZ3rkwPXf5%2BzY5jR5jSGwJT2amIG600rUd2FYkG4nx0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce649e456aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1922,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f7e9bc0adcf5af84067eb66e36be7b6b","sha1":"f099b35e6d366088d70fc148f1a910c119ce79c1","sha256":"f719363fae816b4c9af724ae8935e6c978792fb774349cd0582b1a1bb4ae12c2","sha512":"c8fa17b077f4c89fc2024a6bd050084c434e60bce91e77670e6c2fdeda5840b43ae4d145afed719299e28e4409a22154d7d3e2568e83b1905b2a30ccdf48388c","ssdeep":"","tlshash":"e1414208019d3d4e76edc7c53bba41da54fbabfbd1410488b5fb2cdd67015650e56890","first_seen":"2023-08-06T17:14:54Z","last_seen":"2026-04-07T14:43:05.300205Z","times_seen":537,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/usdcbnb.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/usdcbnb.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:47 GMT\r\netag: W/\"745-64e1b73679c13\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SfmlWU%2FG1bR4%2BXuesuc7EgjkgYAFTZFUr%2BbrMIGoExB2rhaecH6zx5PSRh7XBrthj9cR0lgj7UpBL%2FrGTZhEevUzY1Rkhbgt3olXk97bGz8ZTptVlcWwWZ%2BIvgk8ikZ7olq0Gz4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce65a0156aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1861,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f0ce7292c332994628c0e1b4c08ab3f4","sha1":"1a9f3fd35b77a7de9671d1fd808d2681f8110da7","sha256":"491df7d4fa868a5356791fb10e13ba0ae2035752b4ec38c37ce882f8ec3ba457","sha512":"d4191f59758967ba29c4af68028487bcfb88f8327b0b3685bb3d82f53312ee83ba16cfa6753bdedb444ed7596c419e263f9f68c9e17030ab950e946539116ae1","ssdeep":"","tlshash":"0931dca482246373ce5bc7f4de7d7ab67c8e50ad00c4c33595fc922072511dd22aa4f9","first_seen":"2025-08-08T03:14:58.302643Z","last_seen":"2026-04-07T14:43:05.30073Z","times_seen":468,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/usdcsol.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/usdcsol.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:49 GMT\r\netag: W/\"ca9-64e1b73802553\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F7gWq%2BKvleOTo%2BEmqzE2awFZp7vBbch3S%2FPAMKC%2BZR%2Fqp7%2BTVyPdlIOIBV8M%2BAKLRrsBQmT%2F93xUpu8hD%2F9N5eMfsn8x7YXFXXJ7R%2F%2FB%2BYIr2%2BkfFD7BKWUg3KVazljTyEtAh30%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce65a0256aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3241,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7d20a02fa42c7ecf717261f06b657429","sha1":"e34f466c2fdfdd7bf4d9cbd21391db8b7452c2f3","sha256":"0414052fd922bb1d9598fb1d8a97114ee7c2ad4093f4f0fb40d3073fdc5fe332","sha512":"6256b6d5cf07d6eab0831ecced5e1adec8019773334115a952d44777d4a68aa2ed7f469d30d4bf13247f15ae18f72aa851568049f4360c2741b47cf81b43ffb0","ssdeep":"","tlshash":"1a616383c2245271cc4d88ac9725752d1656a88b7a708ad0efef5b1ed40e5f2510dad9","first_seen":"2025-08-08T03:14:58.321449Z","last_seen":"2026-04-07T14:43:05.301256Z","times_seen":467,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://usdttoxmr.exchange\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 01:38:11 GMT\r\nexpires: Fri, 02 Apr 2027 01:38:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 479071\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-07T20:36:02.775002Z","times_seen":136347,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":103,"dns":0,"connect":14,"send":0,"wait":36,"receive":11,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/apt.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/apt.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:16 GMT\r\netag: W/\"5d3-64e1b71957fde\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=faepsM0SpQ2091%2Fq%2F73LCOJTiAzp22cjbli7Don15xsnuQk1641j1mrp72Ph7pORZxN1ED5YGVnCVjvUUW60tmau93xzSwKXv0FUDbmB9u3PLgLT1dX9SAli5Jzxh6MscKMh8%2BA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce649e156aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1491,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6c7ad284010a856ad4cdd3f7bfc6b909","sha1":"aa7da091593b330064132f70b65a86065fb75845","sha256":"c7cd444572695311269e63476d0851682e0bed974c89b49353f039b1e033b0f3","sha512":"75222414c7c18a7997168a511c88716d6bd6e21c4913873a785e6fd5077d0ff099a87070be9df43d5cdd3a4a01213a737351d16f4c6facb076ec37f9e5cfb436","ssdeep":"","tlshash":"f231e20bc350daf9ad424538f315b860f6909ca5a470f1d8aba91855f50cce471adbeb","first_seen":"2024-11-24T05:56:59.788956Z","last_seen":"2026-04-07T14:43:05.302413Z","times_seen":476,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/weth.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/weth.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:59 GMT\r\netag: W/\"85b-64e1b742594e2\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dedr0ziWS0WS27RYcJo4My38qU0BQ5C2T1N9DUVKGnQgocoAczAdBR7e6QxrmK%2BLsDVxmRlUgR14x%2FphRhF%2BUYcErpi9vK3%2FCwnUJcCjiTJ%2FJ%2FrbWY7VQD%2BXrlq5Q7Zn8rLCPXM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce66a1256aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2139,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e06ef72a3829d2c0b7ee12b02c618963","sha1":"290daa3f604e0f807a26820891174b8b49a09dfa","sha256":"f7a5b397898cb68f6928de822474b10447af4c0fec8b7a540a2842cea9e776c0","sha512":"99043372570509443c19d122647b946e251c079d7df3345e77d01891f985bb5d1206bf8c608da478cfbd29b93883487df4d5e609c656581ada721a336abacf29","ssdeep":"","tlshash":"6c41239531b965bcd40097328b2f357af92358e9364155dcc2d43f49e86482e1c96dcf","first_seen":"2025-08-08T03:14:58.252172Z","last_seen":"2026-04-07T14:43:05.302984Z","times_seen":469,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/wbtc.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/wbtc.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:58 GMT\r\netag: W/\"696-64e1b7412eb8b\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YKqBBlBxeXZ3M0bNIVgYr9FXchLOZ30xsQtmyE8nLb77op%2FptCpWWqYNtcDLHdAPgoN1JA3OZ%2FnY9BFX0Ob27%2FFhnSxWrFizMuyON%2FSMqSkFToM1S3mHxxki3KYdiq2Q%2BZOd1TA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce66a1056aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1686,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ec1996e5df275212861eb647fec114ba","sha1":"a1e21bb75e8c7e33c054c29146dfeaed577d0d6b","sha256":"7af7a4b20040df46c98ef79ee867f3e429f01a87c9d4f2a62cf0d7c56814974b","sha512":"cfa333737e008e56e417e6593cdf823f5032dab29aaeb1d23ef62bec9784988599519adfda0861d4f0280ca6e1d53a37569b3a132a30885e2e4232548285b18b","ssdeep":"","tlshash":"8e3132b7436d1cf2ac038ba676e0d42374f164fee258c9ec77eb21774406a762a24831","first_seen":"2025-08-08T03:14:58.291829Z","last_seen":"2026-04-07T14:43:05.304062Z","times_seen":467,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-07T14:42:41.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj; path=/\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jr29PPS6V2wWtELPHmMxG%2FU8YDPfFcHYJK9h2IoPiaxb4XddMZpOC%2BV%2B8%2BKq5EkPYeRsYvCR1CGLM3s70k15ZDzsIVaVFtgzzcGUNPOO%2B%2F0CvSBdylv08vYQt9M6IUgpTxWZY0Q%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e89cce43f0f2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":48102,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"33cb3bc5038a92c31f4e512f17d0f068","sha1":"a432cc8e4167541d077c035f91becdc1fc517867","sha256":"4b7db531e206fd5dade894a2884404fcef40c2d696ebf658590d8307bb42431b","sha512":"32c14c8f3cbdfe1e8a98032a57f483d045d07156490f5d7fd271ceb28c97b06e1fd3be5519808fe9f5d5d63f758dc0ec978d2ed9feef1ed13f758230dd980c17","ssdeep":"768:+LGEGZcWeNTiBE8vkZcWeNTiBE8vbojG4U0UcpfM:+LGEGZiZ2y4U0lM","tlshash":"5d23300930fe99b704bb96e559930e473e94e303e00915967aae0af84fd7c65f877388","first_seen":"2026-04-07T14:43:05.304719Z","last_seen":"2026-04-07T14:43:05.304719Z","times_seen":1,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":12,"dns":0,"connect":2,"send":0,"wait":144,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/bnb.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/bnb.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:21 GMT\r\netag: W/\"648-64e1b71dca6b6\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QuHLo4o37Ras69QgewM9YKNFUwqpOPvnxJU2b13Dsjt4u2nqD75GlgmdSFiPvbxfkwP3qLJkkUd%2F5cFebCX5GG6OGy3z94hzBSkC5rUWc86Ywum99oMJkMyzMJkq32S9akieeso%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce629b156aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1608,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1aa88810b9f05826b0ce034c0799f7e6","sha1":"7f7092e9e20565d527a1ceddf7e123a6fa1112ca","sha256":"d068cbf5169368d3e27992d205e7891f2a376908fb6d6f5edbacf11a3f058c61","sha512":"6af3a7895649bb3b8fe912d4921403d91a3f24fa9182a978aa5451ec54bac8608c42ca332bdd48d4f50a3c0dbe22cff883bbcd615c6b2181d32fdd3b7a531ab5","ssdeep":"","tlshash":"46313305c7d4c7a7bc95c7ced6b11542427350e9a23382b4fb0bc531bc2e0aa0a4c6f9","first_seen":"2023-08-06T01:12:06Z","last_seen":"2026-04-07T14:43:05.305676Z","times_seen":654,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/dash.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/dash.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 28 Mar 2026 20:27:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uCgEgOh3oYiub3qqRbc3Kgrqo9%2FPxu4Meusitk2sAUc33DDK8DkUCPMocodE3MzGxO4SwJ6YrCDzJb%2BIFD3C3ThAYE3f%2Fj4kiMw4GOVkOwxNA4xk%2BocUDSR%2BxCYLIDuTQEzqcIk%3D\"}]}\r\netag: W/\"26d-64e1b72492bf5\"\r\ncontent-encoding: br\r\ncf-ray: 9e89cce649ec56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":621,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"94b9ae90fc721072b5f8199a6ab9a747","sha1":"7155ad4c23b1f03550d3c3ff9866ad0e6a3f67e8","sha256":"307cd15ae12153f9c4440063dc5e53d44c1dafabe2c015c599cb97a179d7e7a0","sha512":"70a1aea23f3140f4b6cd9f8e6abb14f2f92df85a25af947d52358be2c1b2891aca438ad79930521becc98ffe80765d854e77bd88aba4052e5ebbcd14fc9ffe59","ssdeep":"","tlshash":"71f0dd6f82498f3abe1382b65a98284520fdb4e850a0d0a870e2701fd0488f45970593","first_seen":"2023-05-09T12:11:59Z","last_seen":"2026-04-07T14:43:05.306255Z","times_seen":483,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/xaut.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/xaut.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:28:00 GMT\r\netag: W/\"53c-64e1b74322b8a\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oIAF7yTmD0tpIQYSAFiOcFi8OpuuW9GHPG4meMf9C5uk4zpSN2HYBMZ%2F4pJRMVkojIuGkZanrBQ2876YaVgJEEqmuzcxtfRg0Rl%2FelZTRI4Y2brvil2RtJ5rnLuBbNUt5fWmdFY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce649ee56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1340,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"366ffdc65a8d259c1c34081748586241","sha1":"aa10fade865478c4a704092d6b7d0371a515f964","sha256":"5d5581a3457b735d7f5300005c78171bdeea07787786ef3073a0a5f7b8675cd6","sha512":"9b316bbb7c94b5db6ea30533fe53d653dcb163406df9e91eb6b7d4fcee54691f9ed5cc7c503e2c3068e80737882ff0c236b046b7815bff14495efbe2db41b698","ssdeep":"","tlshash":"8c21453bd3199c75e13b8798d684d50b7438796af1c9d2ece6c0771b35314e30954e28","first_seen":"2023-08-12T12:25:11Z","last_seen":"2026-04-07T14:43:05.306817Z","times_seen":477,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/usdcmatic.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/usdcmatic.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:50 GMT\r\netag: W/\"747-64e1b7391115b\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YuwlCTsxZPFaklsG3xEYsVHEzaWaCZqNGt2i%2BLd6tlGEe4UX7u0LJNcgcw5yP1FaGHrg34glUQJqFXM9Tlw3yJEGvuch2jltaDUgncqy%2FIs59S%2BS33iqRzdUeAKHMghyIt6PeJ0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce65a0856aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1863,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"168fcea028c4ac606fabb64b132cd323","sha1":"048c021a3a8797e444903e3e9c6d618357961864","sha256":"0941676070cb87e8a7fe56295a5dd41a6958368f78c904d0d74e143e57552d0b","sha512":"95362941bc9622ff2ef4a78909017218af8250681225de4e30e69e42c8c31df6519f04575bde726d517587c0c051f5d0a9a3452c04d739a4dec51047fcffa80f","ssdeep":"","tlshash":"da310e70c3689378bdca0bf8ee7874b1e8cf9aad05e8d35461e8c57072510dd12dd44a","first_seen":"2025-08-08T03:14:58.274832Z","last_seen":"2026-04-07T14:43:05.307398Z","times_seen":468,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/eth.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/eth.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:32 GMT\r\netag: W/\"541-64e1b7282d1c5\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2Blu3YCVwluqFxndoGOOinAzZyt9X5fYfTOL8Uzk1NzpApF92UgufNrEfzltbWrFIE88P3SYh3Y1pAM7wLnkk%2FEpezdyRjzgWtAsTssBGUMcAwRFZwpRIImtJpJB3g8OSiJfo1I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce619a456aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1345,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7c19954628081bf6fd772fa0d0819547","sha1":"9c1d03cc04bb9d2e2f8577ad561abb9c9ac9dae5","sha256":"066b2a60df66fbe2c11bbf7d37201552fd27e4edca73cac4a3e7ebda3ceb2486","sha512":"3f40c39fa2e06194f6957ad2bb7cf6c752dd9ad12eaefe891a56380496d85f383331fc4c557b42f3cd897bdfa02c87d4f27ff457b1c11ecdbba6053ff2549ff4","ssdeep":"","tlshash":"fc21eef5ad9e6991c5fe83b4b5fc91532853c0cf008a0880fac07681ac066fe4e42adc","first_seen":"2023-10-24T01:06:33Z","last_seen":"2026-04-07T14:43:05.307952Z","times_seen":737,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/usdtton.png","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/usdtton.png HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 35528\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 28 Mar 2026 20:27:56 GMT\r\netag: \"8ac8-64e1b73f3a7a3\"\r\naccept-ranges: bytes\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yVtH9qtZu6gq4kgYCFUPQEIJK3ufk5VI72RRMNPMFF3Wao39ltfRxK%2BlUJ6bunndh2X1iSbglBGTzEF323D0jExr1O5cg7y7h7P49Q6FYm0mC3WsA6vscPPXsh3ntfvPoKFjWkc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce659f956aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35528,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"31e889c88c60a941fbbae1853dbf5a9e","sha1":"a8152e08885bb744822697063188366158b9c069","sha256":"0ea77264a2518023316f8bb8ab2a5fdeffbe9d687558e96cbc799a75caa07533","sha512":"8311df33378ac3dc0ed885dfcca144f29a99481abf4b53942ceed48a31971dfbcbc5ca6fd0aeb0d7c70e62d56cefdc571f0d3ec1309c8c4b2aa593bb89a93218","ssdeep":"768:0akjq7Du7AnW7uFlu+u4QOOqdDdVpiDSP+9hFsQ++DhhPonv+yxKi:f+q7K+zF8H4QO/ldHi2P+bFseNmv+YV","tlshash":"b4f2d04045590f8ade66e0387a687efc7f72231f811a7798932fd689235a3f39069b41","first_seen":"2025-08-08T03:14:58.247261Z","last_seen":"2026-04-07T14:43:05.308505Z","times_seen":468,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/btc.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/btc.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:23 GMT\r\netag: W/\"815-64e1b71f723f5\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vAJdCtB8NAC%2BI6849LxSWtUICUh%2BfbVOVj4gNQMluSe0nCVkCSlta9hMQihgMtzRkEhvy%2FfWZ5rwas8bsPYVJjKIZjHk87wlQCEsdBT7ZQfAGsDj9htj6rBEasS9gDoudriBrKI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce619a056aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2069,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f92890de8d6512e2597d378f00254e71","sha1":"ae4f3414bffd2594adedb794d4f9eefb2a86c382","sha256":"51a4362311aab24ca9f1b68d3ff5faf423385db8ffdade0894bd6acb799e53d3","sha512":"6ab7b81fef67d104a6fdf5c9523efc3d03d6039913a3cd3dac6d22fd4975d2449be7043953c840ff0ee8fdc7226894b07c287790381b0fb653579d8dd55f140f","ssdeep":"","tlshash":"cc41a5fcca1a8952ca9e4b6ceafc4c5e2f23604f016d01fcc58296f57c125f58645a9d","first_seen":"2023-07-06T20:31:23Z","last_seen":"2026-04-07T14:43:05.309087Z","times_seen":719,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/usdcarb.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/usdcarb.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:45 GMT\r\netag: W/\"957-64e1b734e6ec4\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mr3vmrhjtwyE7m4Wxt1d3Ejcp3Jce%2Fm%2BEejXcHTh1yzVCKq%2Fo8gOxZkLSwtyiFBzSdxrJnBOLF998BcIBU5vZpYhYsMhkkO9w7Bd2r9X7fQmyKEyCnZUWgUhg3liEXj5TzZvhqk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce65a0656aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2391,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04718d4bd8563bc973c42ec327721c90","sha1":"dafb67871836f9a57c2406668e0b30117aa5d75c","sha256":"6b3bafccf0606dfda24d8a260da11509827e3a536d911bf9a74f2c3d6f4dfdb0","sha512":"3292511798b47f488491934ee96641097a16f8571d1cdf396287282d7bc960dab879f5968a355bfccdfd7ec39b7fc5aa6bb3ad6a3df4e864832164e04348aa26","ssdeep":"","tlshash":"e141edf4a21d52bc0d4b8bb89b3698746b1f587ab38a02342d9fd2b091074fdd9d3894","first_seen":"2025-08-08T03:14:58.329492Z","last_seen":"2026-04-07T14:43:05.30964Z","times_seen":468,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/get_rate.php?from=USDT-ERC20\u0026to=XMR","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /get_rate.php?from=USDT-ERC20\u0026to=XMR HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usdttoxmr.exchange/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:43 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yJhnIbe41xSaddpDW0Xi3PWmRM6bDAnndYi%2FfbGhinkF2Yk04%2BjvQerD%2F1yboP47IM0tqObND8TURZEJLdXRzP0VtkrNmm88np3c71FGE9vggS9AYTGqXAUiL1PgGL32gwPvgO4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce8ac8b56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"62a6a8d28fb1ab90f73024d332b791a0","sha1":"0a7a2e060b01d21681d1c20baec3568497724483","sha256":"c0da0ec0ed26c57b4e432406f29f0c2b460f452a8a2f0b876a76db04df9403b8","sha512":"aff0907522ad475466191a9e0e3bb653cc930a70935b9885aa7b8b8238e6c8e464befc42c9e6a831191d48e0187fdb83777cb12cbdee38319f78577e214b539f","ssdeep":"","tlshash":"c38000a0003c08a0c08320202f22c8a200c020a22888808080ec0c0a88328ca0b2a820","first_seen":"2026-04-07T14:43:05.310225Z","last_seen":"2026-04-07T14:43:05.310225Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1063,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":1060,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/shib.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/shib.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:40 GMT\r\netag: W/\"26a6-64e1b72faa1a4\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YW6gzp4qhAURiiM6cPritlCApSxM5r32hC%2Fv4s9%2BBEQVxw7HLGrlAvzQClHKdCV0drVXy39nuo705bWVbjGbZPefp8WFv%2FnHwQ1xYSzmA8FHohcPtUdthbVnOtgNsj7xLz1jsl0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce629cb56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9894,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e53ff3a90e8c46f183c2f76f5e56c725","sha1":"496b59dfa36d361399419112394dbfa2d638ed44","sha256":"e1718d832724f003ff97f4b2e5210ef48399cc992b00efca2ca3a17f75ccc908","sha512":"afd69f9c50b857827d1e73b101c64b058c2a537fa94272fa0041cf084ef3bb3d6ec2ee63c9db2a91252bc807374dd0821d9436469590d7eb31f4e6bce2e5be6d","ssdeep":"192:u0x5yqAxbG8Nz+R4y42CMAAq79NzpdyjfLFtCmkdPc6lI1y:u0vVAhG8Nz6gMAH79NzpQLfNkdU6O0","tlshash":"61122f074388ebf8bda98228d51064d979d5ecdbe430f2d4bb6b1442c58c4d5a68c7fe","first_seen":"2023-05-22T20:26:51Z","last_seen":"2026-04-07T14:43:05.311246Z","times_seen":521,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/atom.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/atom.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:19 GMT\r\netag: W/\"842-64e1b71bb4f8e\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cHvKJqywj6gqJ1vn%2Buk2V%2BqLclta28b%2Bluh8Q2Qrf21aFoZYU7jcK3HTv%2BESaHA6mnxxu5WtUTQ9z2pOpVfo11PdDnmFqrUiwFoMd2e6vbkUm5IvY4y7KMmY11wzBOQEU5mGVos%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce649e656aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2114,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e915ff17eb74750c84f8b87158be2d5e","sha1":"09c8f89fca808b27d169819d8899f0a59f761bdd","sha256":"4010e79c2131a2cceee1027940138e866c0c95fa961059ce6958cf5a3ea460c4","sha512":"8a25aff49d8176fb636c00b4e8ea7d5b1aa93ff6bda312ecbff55da86b1206c13366f6666f4e183f781b8230d2053d9463f50f2368ab92488c327396b968ea66","ssdeep":"","tlshash":"294142b7c38d2f264841426ed9e7607925a89138eb7491ec9763e22fbe059f0241cdec","first_seen":"2023-10-29T19:24:30Z","last_seen":"2026-04-07T14:43:05.311826Z","times_seen":618,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://usdttoxmr.exchange\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 01:38:11 GMT\r\nexpires: Fri, 02 Apr 2027 01:38:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 479071\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-07T20:36:02.775002Z","times_seen":136347,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":110,"dns":1,"connect":15,"send":0,"wait":16,"receive":22,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/xrp.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/xrp.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 28 Mar 2026 20:28:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fv1modugxipiDd%2ByLwtVY%2FbPMz0fjpu2zfDW9HitTNDGsVv0JNkAIZcN4ZtZTg0gUe6YAW4yeDqE%2FvCFCn05TR5I%2FFQGn%2F7BIgPugBaXFVuSPF5YC5GEB3Tes3WVDD1JKWTQFTk%3D\"}]}\r\netag: W/\"1d8-64e1b745dbbe2\"\r\ncontent-encoding: br\r\ncf-ray: 9e89cce629b456aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":472,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"639b151a2217fe161ce8042566cacec9","sha1":"64e49a6afb3c8b84342c50821b0db39defad887e","sha256":"7ef9f0d812984cb142e870166076e2221266528206274b080a2f0035ade4224a","sha512":"bf722bc3adaa6bcb2693f989959f36dba411d725b35c0ad08d4cdb96bfbdd67b52b7532d08c9ebfeca2c0559dfb3179cb44fe573aebd462ec0f6ec17dc1a4817","ssdeep":"","tlshash":"b6f0dc7f93459df4f11ac37e6c887680a0b3b0408a9c80dda3c13d232104c626032615","first_seen":"2024-08-20T15:05:04.276138Z","last_seen":"2026-04-07T14:43:05.312392Z","times_seen":688,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/ltc.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/ltc.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 28 Mar 2026 20:27:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RQwej6j4hfhHKd3dxNA8eVmQj4%2BMkPpMm7i3lqQePnfCoadH36bvm3OLhF9kpOuh5n0WQG7FdGs3qeGyL1Lslr3DDmVxszwHyfh4YlQd8gmGZiRDt%2BOTr17g2Nft%2FKCDF933w0M%3D\"}]}\r\netag: W/\"1e9-64e1b729e02b5\"\r\ncontent-encoding: br\r\ncf-ray: 9e89cce629c956aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":489,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6046cca14ef5741d48469675250f8d1a","sha1":"e5d3cb531aa29112387e94a9d68a1ea583576c8b","sha256":"20dd004b22b76d98151807b3ca99196f84edf24cc5d66c33e3aaabfd9ada6d19","sha512":"e4153f5893945f12cf4bcb8b0a66e1b360fcbdd62be00058ec3e6d32452e3aaed2913e3328ca99a3067acb5ed5964df60796b7e56199dfb316790bc413877b31","ssdeep":"","tlshash":"f6f0d47bdb50ce2ddb50472cc0c2b50210704542f1c24294ef97012cf80b8b3747c9c2","first_seen":"2023-07-06T20:31:16Z","last_seen":"2026-04-07T14:43:05.312959Z","times_seen":701,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/aave.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/aave.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 28 Mar 2026 20:27:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iRBFMmL%2Bucv3iWiIMJN3%2F%2BRe56mMS%2BUZAINaTlX0FT3SEK7Sr7JZSGBt1I3%2BfRbflFvwejXmh1RscWxo8mQDXtY3WXp04WF0WFb60awcMGxAK2kLNuDN1FGgG4u9LkE9TRW%2BFg0%3D\"}]}\r\netag: W/\"3da-64e1b71827cae\"\r\ncontent-encoding: br\r\ncf-ray: 9e89cce649de56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":986,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"43b3ac8008da5b6ac71ad555efcf5986","sha1":"be7203559d86576a67cc91077314ea26d2a345a9","sha256":"55071c18b66729760d28f32766e4a39acb9b7bb179d9fd9389f1aeaff8d41829","sha512":"9ac3b42a9c11bca5fda1681782542761eaa12fe85731ec54516cd4128ae918926f7cad8256591a02775ffed5b653f9ff663c14a7314a62390f4567ee6d2dfb1f","ssdeep":"","tlshash":"60112d02829cc6ba9c63c331a6e870c32241f435f0b0a4f9fdeb5464860d2f00906ff6","first_seen":"2025-07-04T10:15:19.593113Z","last_seen":"2026-04-07T14:43:05.31351Z","times_seen":478,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/s.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/s.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:40 GMT\r\netag: W/\"486-64e1b72f5ee84\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2UhM5zFplF%2BU4ZwYLwGXCn7FzEgeLfI4Pn0wLk96jh9VFKSmmxnZopbLmK%2BSQBhY7Tb%2FN5p4PUNGHOFtEZb1MhLoJSWmQJX4OdHKRE0dY6c1SXgTTPNHlPwkRVhLB1U315KAlys%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce649eb56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1158,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bccb21c07afe15bf010c92ffff579b05","sha1":"cf707548bed3016c7670802c7b26052c65e5a2cb","sha256":"2a054b4943caf7ba55eb71ccc22058c0a84454537a9436658d5ebc21ee08452b","sha512":"a9ce685c5df36ef630703b0ba633e80f80b503e241a85449980b08a2ed173b5fa0b2a40f9d6c3cfaed71a370a80b5f8952b8041abb19d75f7d7ec33cb6a669ae","ssdeep":"","tlshash":"49211167eb49d6bc464587648d3166b17b8be49cb3835364c2e2c330624bad183b5dd4","first_seen":"2025-08-08T03:14:58.04309Z","last_seen":"2026-04-07T14:43:05.314077Z","times_seen":467,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://usdttoxmr.exchange\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 01:38:11 GMT\r\nexpires: Fri, 02 Apr 2027 01:38:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 479071\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-07T20:36:02.775002Z","times_seen":136347,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":85,"dns":3,"connect":28,"send":0,"wait":31,"receive":7,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/ada.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/ada.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:14 GMT\r\netag: W/\"163d-64e1b7176209e\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nd2sQfTFb4jPgTURNOn4IzCfESZnPh7PkVKSD9u2Vl7y9ZiaqzIHfqQTecVXgsQNP3ha7KcdESvKKobLfvKZ7GIMyXqvoy4xHotodsmU9pAH6IjUsi9QHBEg1EgX7aW7JTF2mN0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce629bb56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5693,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6aea691c581b22a12b85bbe81506ae8b","sha1":"aa06a813f0588d3836f76ae4624fa51faa7bfa43","sha256":"59c9f3504914a9c3f16669e94db5469289161142c9257f1a3741129ffe2c969c","sha512":"b6a26cf5523f43de49c34fe2d5fca5fc1ea1b48e4d429be6197244a65bfc842bc002b18292879e112eac0d4858e59814285516cd80b38ccfa093c371dc96c5c0","ssdeep":"96:2vfuV+ovy2ZN6EaiFkhspmCGuG4OduEaNJfvKcZB7t+yTWXqzqxM:uuV+ov/VFkhspmCGDGbf/7tFTJzqxM","tlshash":"38c1bd520304ebf7aca587988ae8148575d69deff430f1d46ebf1427da0c8c489987db","first_seen":"2024-08-20T15:05:04.269975Z","last_seen":"2026-04-07T14:43:05.314627Z","times_seen":531,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/pepe.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/pepe.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:36 GMT\r\netag: W/\"4d69-64e1b72c1e24c\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iYWAHo8tbmKCJJWg7s%2B%2Fc2ePAbOajhiBJMDdxMx8MsCrn%2BpcI9YmSeNYalGM0Md0UySYbJM14BDFD54WHdbrwgLH5jeJZGkiHyYFAwKBA%2FXDszCxKpBmPKTqXPlr7xOJIj4nxHo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce649dc56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19817,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"32b9ac73ce19668645d07c043bdb7ae0","sha1":"0d668bf6a962dd5a6192a0ebd003502edc603c94","sha256":"cab2d27b6b789d9f86dbbb91ada3b3a5bf3d83b3aa02e8145d81e89131228dbb","sha512":"74652f084d180e65e4379f946d9232c09e90fc7d6c0e0b87cae2e0919e8d19601ca055c622d787388ea669d3f54c3c4307dfe94c15bc0ae25b7a9dfaea11d894","ssdeep":"384:7VcTgHGcXSvgKIqL0xKjc4XnNzFLbu3dMeaWGd4wYzEEYFUgSBa:R/GoS4Pj4dFkBVzbgSk","tlshash":"3092a913438097bafe984868aa6124d5b1d5ecd7d4b4e3c0eb7f140ad94c4e0a5ac7fb","first_seen":"2025-08-08T03:14:57.833421Z","last_seen":"2026-04-07T14:43:05.315188Z","times_seen":471,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/op.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/op.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:36 GMT\r\netag: W/\"647-64e1b72ba50cc\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0sRxTYj%2Fr4%2BFegMGQLMPq0UbC8NgWkeRmzld2m%2B0meJBD%2BNsTuU9zpadHdVpglkJ1%2FWHd%2Fbw19Tbl08Q%2FXiYZqWYIsmHofHQLFQO7bL4Sv48pRwK1%2BJwQik5v8FM7eq2DrCO2bI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce649ea56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1607,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e1321c628e6fc01f56221b42b7899656","sha1":"14b324aabf8931c1f10bbfe101dfc6882ebf93f0","sha256":"8c52ff09c6306abac25cbf8f051db1596b41e856f1c9dd55b27c1a42abefde01","sha512":"b588788f22e971e919d79a055c821ede95089de0d17eade09e9911e50c15c7e66811237ea4a495a65a68ef2d4d04828416c41f95f8bb25764a569622ab299ddf","ssdeep":"","tlshash":"df31ed1a4701cbb9be99413c4aa0798d73f2ac95a174f4d4739b106ac5488d4694c7ed","first_seen":"2023-08-06T17:14:54Z","last_seen":"2026-04-07T14:43:05.315715Z","times_seen":492,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/daimatic.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/daimatic.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:27 GMT\r\netag: W/\"4de-64e1b72309ae5\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B18hNg%2FS8iAoldabHCMHofnoVs5ADkFtLGTmAvfkF%2FNizU0YinQ0Y8KqC8gmyFfDIoJQ5CDVHrAhAFmGtjhsgadUcnYGpAbm4roVIQc1inqFnWQ7xDxnqCXc8Y%2BCi20QYIXUxCc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce66a0f56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1246,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4436cbc4b6eeeeb953b4c04bc7c48e52","sha1":"49efdacaddb14aeb6bee5c3da7c7c896280157ad","sha256":"053977827032cdcccbe0b9fae05550151bf57a20bc6b047997e7d8f3c3e3239e","sha512":"3999d7da8e0a80642cff3a60a13b6222f6b9bf8ce58df7115c643ea00f1ac1e84ef2afe2cca8a14d83a46f6694a5b8d56802a2d5957efbc727e03f91e3441056","ssdeep":"","tlshash":"5621cb75c79982bd38c70b78ea7844e0d4df9f8c4cf9d2d181bf9568b2910d441ed85a","first_seen":"2025-08-08T03:14:57.943685Z","last_seen":"2026-04-07T14:43:05.316274Z","times_seen":467,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/css/design.css","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /css/design.css HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: text/css\r\ncontent-length: 4356\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 28 Mar 2026 20:27:11 GMT\r\netag: \"4ac6-64e1b713f880e-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H9nHQOCXj4A%2FcC787ja5pBnLh%2BiZofDHWDGhHhTTG8BrrRaW6G7yGmV0x7Aia1Wlrtb%2BWSLw%2BJqECNZ1xWPAhB8HeTs1v9wTVCjGp9wud8sK71BbKNv0Q0DaAStAoCEUTF0Pe4I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce6199456aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19142,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"10a43cd3e10db220a4aa2d0e542f24df","sha1":"bad74179b0fb0f46b7b98fa60fff10d5bd67f6ca","sha256":"03a678a2751f3424ecbe00715e1347dfaac9ab463d7cc213b0273693956f5bc8","sha512":"388a9afb504d596d976a29507f4cad63355c021a3b55b27034374877f310cecc0d3b8d7cae316d6ae38c08be2d49ec041c180daa1bda589d5eb0686ba7837654","ssdeep":"192:S4W0rfR0frIfEY/uvaeTJcl0MjM2EeJSy1mMwKOOLEk5+tCDH7glba9VDoz4FXGL:BGFGjjExBe/5UCj7gl29azAfILxn2O","tlshash":"ab8263e22b191218702b96b475e3db5f236d9002e803ce7c7ba6105ddf8e6eec1627d4","first_seen":"2026-04-07T14:40:24.95962Z","last_seen":"2026-04-07T14:43:05.316851Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/doge.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/doge.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:29 GMT\r\netag: W/\"df60-64e1b725326a5\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vSePNBqBL6ujmnnryfdaxllf59c%2BUFXZldqXtZMwNUC5jtyGyU92A39tnjgbUW9XHjsUcxkddGMlsbbw%2BUo%2B5PugXGAKnfVIu2XOHBfjVaSygb1Yuzj%2BALZwY339C7AEXveFuCI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce629b856aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57184,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bfe942ea1ab1cdd5b24bf66e4764bee1","sha1":"cda102204962596c36af10643a9c7d52f2d27185","sha256":"fd1c5bba25550fb3817560c04c9ec96e9b1a59251249997220a98b8c69cc5cdc","sha512":"7f118456391705644d5bb4c3b668c055f7b145344cde2e4c4e72062c80882c0ddca1d137d5da4f58b9bcf5b70e285e33557e30726449c9a6f0c07529701e80c2","ssdeep":"768:ceNIDXtN03ZpiteAidcLojmW3/tbHH2OZugokMUXzCknYL9bkFyyFWATv:ceNWQAXUme/RdZdok/jdvXz","tlshash":"a3438993d2a817fc79460b24c531706679f555aa723be39ccb67d6827806ef200bcc7a","first_seen":"2023-11-25T21:53:24Z","last_seen":"2026-04-07T14:43:05.317482Z","times_seen":878,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/bch.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/bch.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:21 GMT\r\netag: W/\"4be-64e1b71db5e96\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MRt1ENnJPvO1d82FvOpTq0QeaTZnwayi9Xwq4QTK4B5YTmkA1JPk3wmZJ6hrNOBqGXjg04eA%2B3paqbhnlMGhVsFoecionVAmeQfu6s5haHNXtYcYJf4PCQSu300gEWQaJr2Tgqc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce629c656aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1214,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c09d291a67357599252f1208c0842ee9","sha1":"d1c95e8b248838d153735628c110951d18aa057b","sha256":"0af9263278022b11dd522c2ec26c5dc4e07e35f0b421fac7278951f0066795aa","sha512":"53d756eee3c4cb922a701fc0e427708d4d1b25a440bd5a2ac02e454288cd4a25ed575f42db132687b408525e155776df42b3acad643de2ef2761a64d89450ae3","ssdeep":"","tlshash":"10213f0881d5a87efc50e11953a0158633b4ac6fd430aa90f8eba85ec24c8d0128dfaf","first_seen":"2023-07-23T06:53:23Z","last_seen":"2026-04-07T14:43:05.318054Z","times_seen":763,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/favicon.ico","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:25:54 GMT\r\netag: W/\"10be-64e1b6ca67024\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rgWsrkUn4kBxcCCHgF2X1ryPcfmRScSruyBJtsH1KGUb7U2gsu9kDv9V00GJPiqrpjkmnoXeYkONvvM3cpYjZSWnlMXiS%2BiOq9y6JB15f44nJHtbPa5ButD1tdlR5LZ67wZpIac%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89ccea3e3656aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"8a714001d25959c81a7d472c31e6c680","sha1":"07367df7d8630cd09a7f94b5b779bbcbb8b53245","sha256":"adb1ada529d1d2f7b46f90509bfe8d10dcb7fb0b6e68cc33ad8bfa35d74bafcb","sha512":"cb9b4a8de2762c303e893a4a6a09620a11e4087297ad0393eac0cc53009663489fcc580e5b8e9ac47e4c017ce2dc4562cccde581ee6af9bd1e909af7de2579bd","ssdeep":"96:PlwOnPySe7zaQjLALphNxsAg9436XRRa94:Pjnqj7zaQjstmAg94qXfP","tlshash":"97910570e3e0cf68dc71337410058a433e186df8a2e11965aa227a493e7bc337d6e5b2","first_seen":"2026-01-24T18:34:43.272478Z","last_seen":"2026-04-07T14:43:05.318611Z","times_seen":10,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/trx.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/trx.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 28 Mar 2026 20:27:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BSeUcG3i9xpZgVkUQfTNSsdU5MIj%2BUs3yZUc9qMnrZ0KfTQ2D7w7n8%2F7kks1C3BScEC9CsbLgR%2FuyQqX4Z7J9%2BYmCQRoh6Qa9HcCHjhP2rQ9nESELcXp1xZAkmYT112Z1vcHZQk%3D\"}]}\r\netag: W/\"28b-64e1b73304034\"\r\ncontent-encoding: br\r\ncf-ray: 9e89cce629af56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":651,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4f3f390369f12750aab8fd55f786372f","sha1":"6e657fc446743d340bf0443c41fa07e893029c88","sha256":"6f5f6afca8e2facd43297b21b9c453d61994224184265284605e0ad21d3ac09b","sha512":"62ef62d6a342a8af66a436447b00329feea2ea696bc6935de9d9f4370a6c017bcd90ea2fb85d3a31a9eebb61ca06fa0d55c55c95c8e32fb983e92e082115351a","ssdeep":"","tlshash":"27f02dbf11657ab9e595a3813145b01e21a4b002f6b890ae2fe76823b8098f780a0c23","first_seen":"2023-11-07T08:36:10Z","last_seen":"2026-04-07T14:43:05.31918Z","times_seen":691,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 28 Mar 2026 20:25:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j5%2FeQ%2FMfD6o9ip%2Fv%2FfakfIAMEvgVcsErtNOpRdqEh1zQcOvzV78PE39mzYBut%2FJhSKVvPH%2BqTTQuXwCWMFN6zCEhC%2BvC0%2BReUtJLW84mwWORoNBGlKx%2FsKW6vuQyeyBXdx1GkVE%3D\"}]}\r\netag: W/\"36a-64e1b6c58d10d\"\r\ncontent-encoding: br\r\ncf-ray: 9e89cce6199656aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":874,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"43f688a0313c926433ef60c377c7cc51","sha1":"7edea9502e75583e0f93815ebb6700ad04af7e04","sha256":"fc9c52d67a9dd9c5983c2f679218e804d9ba4aecef8a1074003e3de9efdea088","sha512":"3c957f1758fb3b3a1cf125a8c4e4a5728e0f7072202c421cf834306b6f0ae931291d3181ca725890e67e4274eefbfe114b4796f1cf5be597ab70b8f39c30f3b5","ssdeep":"","tlshash":"4611e3a6d5982f7005c9077c561a70e930f8c88ff5a445eddf7a5a36bc14cf68d280a7","first_seen":"2023-05-19T19:08:22Z","last_seen":"2026-04-07T14:43:05.319747Z","times_seen":659,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/usdt.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/usdt.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 28 Mar 2026 20:27:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DrDgtfBcE3MIiDUFQB%2B7u2rtA58LA%2FySVFaxlCc%2FNm%2BsAkI%2BWwIc0zuEdG0k8lwSHn0nJiPb1pKPp26iBgpM2tRne7Yx6AjjxQChp7acAyGOEkfp33VRz%2B1%2BB%2F80CdQPKox5ZwE%3D\"}]}\r\netag: W/\"36a-64e1b739d0fab\"\r\ncontent-encoding: br\r\ncf-ray: 9e89cce6199956aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":874,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"43f688a0313c926433ef60c377c7cc51","sha1":"7edea9502e75583e0f93815ebb6700ad04af7e04","sha256":"fc9c52d67a9dd9c5983c2f679218e804d9ba4aecef8a1074003e3de9efdea088","sha512":"3c957f1758fb3b3a1cf125a8c4e4a5728e0f7072202c421cf834306b6f0ae931291d3181ca725890e67e4274eefbfe114b4796f1cf5be597ab70b8f39c30f3b5","ssdeep":"","tlshash":"4611e3a6d5982f7005c9077c561a70e930f8c88ff5a445eddf7a5a36bc14cf68d280a7","first_seen":"2023-05-19T19:08:22Z","last_seen":"2026-04-07T14:43:05.319747Z","times_seen":659,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/etc.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/etc.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 28 Mar 2026 20:27:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SpOwKd72NJbUAU6Rrobnb5Zc7u2pcwFR%2Bu67MKw44ruFfnka3mowkBfWK5rUU2iAdID0DVk5HUtB7x1iuRNBQO%2Fd5TCmHIuVTr6EPLxABVxqo5LIIk2qGxa5%2FreU810yoHQtbuY%3D\"}]}\r\netag: W/\"3ba-64e1b726fa785\"\r\ncontent-encoding: br\r\ncf-ray: 9e89cce649df56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":954,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9d4534ae68dc2efc7ee6f7186e3c8b6b","sha1":"b803c4d8579db205bf55bfc9761db80d68baa1e7","sha256":"07ec8c673d077df357ddd662ddc84f4ee80777bbf07800426999f687084f860d","sha512":"8b1d3dd409226322c6d7b801ac3de2f3a70671ccb7c90bbbac466e1f32d50d6df9ee77892b65bf403fbf97636d1f11ad0a53297f84a518e82536448ad426958d","ssdeep":"","tlshash":"e1112d3d7bae7cb05a8643587990b8817831316d6bad01de78e5b5335d0aab10833e43","first_seen":"2023-12-24T22:32:30Z","last_seen":"2026-04-07T14:43:05.320301Z","times_seen":479,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/xlm.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/xlm.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 28 Mar 2026 20:28:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LfDlj5YuNKDmpPga20wL4DwH416dHBTz2oYDnWROEIyMETNNwwPCKhSw1BnzZ4RfsIqhL7DBrimRR%2FFHq4t1jJaPnX7XDEMo2MP77dH0sBSzxy4QZSHg%2Fc8bV46ytx8sREomtl8%3D\"}]}\r\netag: W/\"2c1-64e1b74423502\"\r\ncontent-encoding: br\r\ncf-ray: 9e89cce649e856aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":705,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ad29091e7d23481da4685f74853b6ee5","sha1":"86c0460566479b9b0db731eb497bc970ab4d99a8","sha256":"c2e1a69ec05cbdf97b55af1e2d815fbc2a1dbf64f90b2eb5114125a3db00fffa","sha512":"f64919df5b486ed747e8e3513a29e3fa384f3afa6fb865034e812cebf802ec9838cb5dbe01911bc725c1967a079057947f0b2fc91d355207521f057167212f83","ssdeep":"","tlshash":"8c01c073634a0f20f1514798afc8681225e2716671d5c9b867522be92d05cf32930c30","first_seen":"2023-10-29T19:24:30Z","last_seen":"2026-04-07T14:43:05.320723Z","times_seen":492,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/usdttrx.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/usdttrx.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:58 GMT\r\netag: W/\"86b-64e1b74090463\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=76jUldR9sz0alYbzhg%2FbcJY%2Bvu%2FpSZZGpzI2WvuxvrKgIyp57VPLmybXswNdREAg48STJRa0hmA3izQJYo0fpELMOXEDhz9qMAUFTXD1xMiIZuzJZBA8yf12rtp6kCSLlKwqAkw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce659f056aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2155,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"65d0769f04cff5821407a498732732e3","sha1":"a503d417c974fc1e3a487c7471cc91af07c2f727","sha256":"eff62a2f0d19a238745f0644f5db3eb0e22ab3432b51fb40fb23843e2d0ceab9","sha512":"0f787807b5f5ffeee4358f187a2b1e737b0e81c2d7775a7b358d9cd59723fb8f844599f743e42314fb2db4060bf3c1bb43e4de5f187e44b0c52b4a2a2c8aa536","ssdeep":"","tlshash":"f84199788384d3789ecad7bcaf35b8b4a44ea0fed1e283148395915072d24d9f3ad8d1","first_seen":"2025-08-08T03:14:57.853514Z","last_seen":"2026-04-07T14:43:05.321208Z","times_seen":468,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/daieth.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/daieth.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 28 Mar 2026 20:27:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eZsZuSwAa9M%2BnrJTJQVqMKZkKAqlREvc5EwRdfjG6bktckYJvUH4g69i69YW9hKY2opEKNmq%2FRw0JBbwa5gSDlqhlkSCX2l9X71RMs4nKbavdUCTxM%2BnjfFgbOTVEccRaNHOtOI%3D\"}]}\r\netag: W/\"38a-64e1b722e54dd\"\r\ncontent-encoding: br\r\ncf-ray: 9e89cce66a0a56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":906,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d87ee22969e0aae24f1f110320f3b41d","sha1":"1689674b0c03a65cb2d7276913344f474196b0fc","sha256":"dadf1b43249c6a30982100346e82a7e56b7670e8495aa57627ab1ab257daa266","sha512":"cc55a781434ea99a8d3926946a518e14e059f86e8b79373a93fe66c93bd2be75f0c5cc53c84d97ab9095d7275a7f071b604ae247fbfff3dcaf00819ed36a6c29","ssdeep":"","tlshash":"3911dcf8f570246cde460bf08eae14e0b8992cddcca85652910f31007a9138f50f0aa1","first_seen":"2025-08-08T03:14:58.13591Z","last_seen":"2026-04-07T14:43:05.321687Z","times_seen":467,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/link.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/link.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 28 Mar 2026 20:27:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z2EKkOwch5mEUYKzHX05wnikEFotfriYAyBFi8oJ8n9M7Pii3ZlwyjlkA6rZUgwVrg2WFC6YeJb6mkgftnWOe7lxgyIN7l9iyt%2BHKpREnepxgDS7wvOACr4ZP3e11uDqXUyC%2FTg%3D\"}]}\r\netag: W/\"183-64e1b7287fa15\"\r\ncontent-encoding: br\r\ncf-ray: 9e89cce629c556aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":387,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4b02bc11930246d53d859deaa960862f","sha1":"8319ab21888d10b5afd2b0dad4b24e642b6c558c","sha256":"44f03722fe182e5cee65cb2811b293ca23d759c150d00ac309179a493b572875","sha512":"93c68fe6e30e65471333f4ba3ff57e9950f8a1b8ad0da0b12e46c07d04023bc4e19dd5bdaec86a3931275f8fa05f9dcd23c7cd64a640f671a9e2e18252639b31","ssdeep":"","tlshash":"cbe0689bd34a9ea8b61a812866d4f024d8a5bd75c28a9ca5fae3642f905c8f41910846","first_seen":"2024-08-20T15:05:04.25452Z","last_seen":"2026-04-07T14:43:05.322163Z","times_seen":574,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/ton.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/ton.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 28 Mar 2026 20:27:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IUWjG69q9Fe7tnAZfZqUf1QiL1ImT26aiWMmuxM8jNFQjr9aj28KMmvSnz18vCzzcFETSlOmRC202yQ5OKUrN139uNIPhLnvx24%2Bmzb87ZgecJQ2E0IwRI1JguoMSItKHBQNMSc%3D\"}]}\r\netag: W/\"328-64e1b73322494\"\r\ncontent-encoding: br\r\ncf-ray: 9e89cce639d756aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":808,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f26a4968e7bd522daab3b7a71309bb7","sha1":"feedef31ecd11c0473ab2bb2af23a32b90634626","sha256":"453cf5649b76d7eb5b0648bd83aca1c5958cb042d75d89e81b0f0ce6201a66a6","sha512":"3333cc6363bd95447403fc146be17f4295994259f160c9528f9ec0bbdea5e219f0f5f71297e402bf8c3d92040943ea724bb25d3d03f561d4ef67fd715994132a","ssdeep":"","tlshash":"6f01120583815f5a6814861073ac55d2b3f5f4c7e170a9cc81d6343af64c8d41688bcd","first_seen":"2025-05-23T11:37:09.503981Z","last_seen":"2026-04-07T14:43:05.322671Z","times_seen":510,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/pol.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/pol.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 28 Mar 2026 20:27:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Vj3MD7jo2OKT59Mk54gtddlAvu6viLP6Oulm7T1%2BdffBd84eX%2BwZjiidV07DPrYbopXVJI8nK%2BmnM2dx9yP0FDCvc8a8rhDlFOFzTW0Qb9Xv%2BTcLyHF%2BHq9uJYjqrgPu3uw9Tc%3D\"}]}\r\netag: W/\"273-64e1b72de1cdc\"\r\ncontent-encoding: br\r\ncf-ray: 9e89cce649e256aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":627,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aa72aafc7e825106d06b43aa3d1dcb6c","sha1":"6a4c770f18a70687baf0f1d884bd481fba583fba","sha256":"a496a1b5d645e93a82d186448d686aacbffbe431282b1df283adf5015c64c237","sha512":"256729f2f1bc66a17ab67005e9de5e7c4768b136159c55a283e9e35b950eddcc9e3f2f4adee6101e3ad4d2ff112a3e6e2855143f5ac1ac586b2dd6363085510a","ssdeep":"","tlshash":"fcf0dd48c309b83da426470093bdb1c173a172c9e2540d8c94a528b7a597c8c42955f8","first_seen":"2025-07-04T10:15:19.63792Z","last_seen":"2026-04-07T14:43:05.323163Z","times_seen":516,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usdttoxmr.exchange/logo/usdtbnb.svg","fqdn":"usdttoxmr.exchange","domain":"usdttoxmr.exchange","tld":"exchange"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttoxmr.exchange/","date":"2026-04-07T14:42:42.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usdttoxmr.exchange","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 17:08:07 GMT","end":"Fri, 26 Jun 2026 17:08:06 GMT"},"fingerprint":{"sha1":"AB:0A:F5:C1:0E:9F:C4:FD:00:4B:A2:8E:FF:31:10:83:0B:B3:54:6E","sha256":"F7:10:E2:33:EF:61:12:4B:A8:2A:30:73:58:4A:8F:D1:8C:36:E6:2D:A4:DB:F2:CB:05:FC:48:95:0C:5A:58:84"}}},"request":{"raw":"GET /logo/usdtbnb.svg HTTP/1.1\r\nHost: usdttoxmr.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdttoxmr.exchange/\r\nCookie: PHPSESSID=mvtpuiqf61460j1sfdr0gf3baj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Apr 2026 14:42:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 28 Mar 2026 20:27:53 GMT\r\netag: W/\"67a-64e1b73c3f0cb\"\r\ncontent-encoding: gzip\r\nage: 163\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nWdUkm3%2B7Z5yV%2F76IU6nFdnostJZ%2FJsi4czvIUVHHS8GAzs%2Bt%2FmRBInvFcrOwcMRRFaMfUtwAoQn8M%2FJ0yJGV2Q9Qsr%2B2OxvPcCvTxwdAC5rnKK6L92mGvFjeKJhtnawL7JC9s4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e89cce659f256aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1658,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8336cbfae1821eaa5e60c4a732199e8b","sha1":"d1058b932852bfe85ea3a028bd1a745f121f7ee4","sha256":"0d861cdf93979e1c668f798b89d66eba2c77b187d9e3a6603ca4a0052a2f8e70","sha512":"d8b827b3101ef220e9867d3203f1118c4cdc5ceb041371dec513febda85f052ad5070d8a7974cf35017818647f8a59b7903b0afe9d512e2370b0a73b5d201f4b","ssdeep":"","tlshash":"70319ea8d676c2f46e4b4774ce742bd22e66d34c97a0472c43b26720b2159f37248c7e","first_seen":"2025-08-08T03:14:58.328265Z","last_seen":"2026-04-07T14:43:05.323656Z","times_seen":468,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-07","alert":"Sinkholed","trigger":"usdttoxmr.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}