{"report_id":"c074ca2a-8b6f-4b69-9669-307ebbf043c2","version":0,"status":"done","tags":[],"date":"2026-08-02T15:41:13Z","url":{"schema":"http","addr":"usdttrans.top/","fqdn":"usdttrans.top","domain":"usdttrans.top","tld":"top"},"ip":{"addr":"154.198.50.82","port":0,"asn":138995,"as":"Antbox Networks Limited","country":"Seychelles","country_code":"SC"},"final":{"url":{"schema":"https","addr":"usdttrans.top/","fqdn":"usdttrans.top","domain":"usdttrans.top","tld":"top"},"title":"链点号铺 - TRC20 USDT 自助商城","dom":{"size":4373,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"8432ec801c287a62e3bdda229d167091","sha1":"262cee21ef0c004f296444c2330805be6c340ff6","sha256":"efb2c3cb1fd9a0b9e3d639e543b48175fd81b9ec68898a1be23bba8650269903","sha512":"56f916ab8ae367c71fa6dc836f6b68cf3af7281887247418969de83c0c7308e52f22da9f9b4afd34fbee17471daaa970e014cb02f93111cd49dbb74d5d52a737","ssdeep":"48:xu//Kj01fO5QO5gQ5EWjgO9sZtnS6y06hJrFDovOCfx:xunVfEQEgGEWjg4ytnS6uj5D+OCZ","tlshash":"2491422095f3a877019392c5a0a16f5e3ed4aa07f94a455037fc0ed7afe2d098c2b49d","dom_hash":"domhashdcd8a7e33e0fc2c137fa5ce9cf1e5535","first_seen":"2026-08-02T15:41:15.391592Z","last_seen":"2026-08-02T15:41:15.391592Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"usdttrans.top/","fqdn":"usdttrans.top","domain":"usdttrans.top","tld":"top"},"ip":{"addr":"154.198.50.82","port":0,"asn":138995,"as":"Antbox Networks Limited","country":"Seychelles","country_code":"SC"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-06T15:41:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-26T22:19:52.505461Z","alert_count":0,"request_count":16,"received_data":873816,"sent_data":9592,"comment":"","tags":null,"fingerprints":null},{"fqdn":"usdttrans.top","ip":{"addr":"154.198.50.82","port":443,"asn":138995,"as":"Antbox Networks Limited","country":"Seychelles","country_code":"SC"},"domain_registered":"2026-07-30","domain_rank":0,"first_seen":"2026-08-02T15:40:29.91271Z","last_seen":"2026-08-02T15:40:29.91271Z","alert_count":0,"request_count":8,"received_data":84984,"sent_data":3974,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"PHP:7.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fastly.picsum.photos","ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2017-09-14","domain_rank":452388,"first_seen":"2023-01-26T01:05:02Z","last_seen":"2026-07-31T03:04:58.312365Z","alert_count":0,"request_count":3,"received_data":229825,"sent_data":1705,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"picsum.photos","ip":{"addr":"104.26.5.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-09-14","domain_rank":29556,"first_seen":"2017-10-10T10:03:26Z","last_seen":"2026-08-02T04:10:52.897159Z","alert_count":0,"request_count":3,"received_data":2473,"sent_data":1621,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-26T22:23:14.439231Z","alert_count":0,"request_count":1,"received_data":337659,"sent_data":532,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"usdttrans.top/assets/js/script.js","fqdn":"usdttrans.top","domain":"usdttrans.top","tld":"top"},"ip":{"addr":"154.198.50.82","port":443,"asn":138995,"as":"Antbox Networks Limited","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ca3d20c0732848b8c3137e5a5306768","sha1":"dcedbc0a4955da4866dd54c7ac60cfcf59441960","sha256":"54228b523d594d1e574d7e3e8c2caacfc4e45d327b797679d32d6a2d11e280c7","sha512":"e7fd529323a45f74ca2afd676fe1c0547add0ea8b091d7958fb4cd5fb67c8f231d82e9b74868f26470b284caab8ea989d13b2332c2608937e848bbd09964c610","ssdeep":"","tlshash":"c121e01935b91474c5f324fb6a8fc96878a201433800e7907cccc98a0fd1ad6662d7ed","size":1260,"data":"","first_seen":"2026-08-02T15:40:34.810471Z","last_seen":"2026-08-02T15:44:59.940674Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.115.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdttrans.top/","date":"2026-08-02T15:40:45.267Z","timestamp":1785685245267,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.115.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://usdttrans.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 56508\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 26 Jul 2026 20:09:20 GMT\r\nexpires: Mon, 26 Jul 2027 20:09:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 588685\r\nlast-modified: Tue, 06 Jan 2026 19:04:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":56508,"size_decoded":57321,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 56508, version 1.0","md5":"6b89c49bad3a84fa8b0ab38ba115cff5","sha1":"dc69a7e1d9316e8320e8cf7d5775f56e288fe81b","sha256":"fb29957c7adccb9a89e34fb28d3d1c7d12bd7401f80c0dba6e1c9e5259cb3262","sha512":"a709e5ce0af961b9efec52885a41fc4ba1dc2360544c70811e52f5e82d9e08988adceb7a47320c430350f4d0f43e3a59bf5304fbc639250ee0565ebfa5cd603d","ssdeep":"1536:SgUi8SLeTb+PNJhy3g0SDolq3LNEPPB/m:SpiW6PZ4xCNQtm","tlshash":"30430111ed22da5ddde4c9b99238457a43e0cd68700c2721466b31e7dba821ebb7387f","first_seen":"2026-01-09T01:41:44.259454Z","last_seen":"2026-08-08T18:32:37.285633Z","times_seen":1013,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":77,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdttrans.top/favicon.ico","fqdn":"usdttrans.top","domain":"usdttrans.top","tld":"top"},"ip":{"addr":"154.198.50.82","port":443,"asn":138995,"as":"Antbox Networks Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttrans.top/","date":"2026-08-02T15:40:45.614Z","timestamp":1785685245614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"usdttrans.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 15:05:13 GMT","end":"Wed, 28 Oct 2026 15:05:12 GMT"},"fingerprint":{"sha1":"6A:FD:2C:A0:8A:3A:D9:87:F9:9A:C7:12:A7:3B:2A:69:B6:08:08:0B","sha256":"D0:95:6D:26:5A:88:A5:84:94:D1:68:27:DA:5F:DE:E9:D0:C5:D0:72:66:F9:1A:77:4F:DD:DD:D4:FA:20:DC:44"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: usdttrans.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdttrans.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-type: text/html\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\ndate: Sun, 02 Aug 2026 15:40:45 GMT\r\ncontent-length: 1231\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":1231,"size_decoded":1401,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"1ad754fc9a6969d673982bbd1498d79c","sha1":"44e396ee7733cd19e32519bf5e9f7381e16542a3","sha256":"6e5d917da044b7e6be0ca5cd01c3af6f0f64953698ca0c5ecda7d2fb9d1ffa61","sha512":"83903271afde4c7fd26d31a22fcb2f794249b38b3bb6a8e16d57143953f4e6ad386494aee89b4995c050c90b0619883f32d9a8c57f4fccc3d8156dbfee5e2245","ssdeep":"","tlshash":"ba21422a93942814f69785a070f277d63f078282f55b0b58e413b227e4c36a281d7384","first_seen":"2025-04-11T00:22:25.352663Z","last_seen":"2026-08-02T15:44:59.941192Z","times_seen":530,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALRLoKI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdttrans.top/","date":"2026-08-02T15:40:45.246Z","timestamp":1785685245246,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALRLoKI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://usdttrans.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25240\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 28 Jul 2026 23:33:46 GMT\r\nexpires: Wed, 28 Jul 2027 23:33:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 403619\r\nlast-modified: Tue, 06 Jan 2026 19:08:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":25240,"size_decoded":26053,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25240, version 1.0","md5":"f5fe9f3fb5c19c5a68be1bda75040d50","sha1":"f82abe04e22f3bdc908880c50cfd4b0944d2a785","sha256":"c1d919c8701a86ed7f33a8044f7c4e5675db2fce8b754091e97b2c0792f9782c","sha512":"edda6a44a33b18f47ca87fafd9a30ee6a31ebb38372bf614fc597b9be2a0ae8069b8f04e42256e97673fd9a714f46912dcc0d14509c5f41dcf1098ecee77bda1","ssdeep":"768:fkVYsPAbHkrwtNhRe4WZOIgaWKSuGVsqZwJFMr:vsPA/4dZJgaTSLFZwgr","tlshash":"e1b2e09e1c363a1ab602353c996fb8e321a78c74cce2a7f96731559813d187c84c75a3","first_seen":"2026-01-08T16:11:36.298831Z","last_seen":"2026-08-08T18:32:37.285004Z","times_seen":1020,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":2,"connect":30,"send":0,"wait":22,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.113.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdttrans.top/","date":"2026-08-02T15:40:45.269Z","timestamp":1785685245269,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.113.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://usdttrans.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 58648\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:33:41 GMT\r\nexpires: Thu, 29 Jul 2027 13:33:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 353224\r\nlast-modified: Tue, 06 Jan 2026 19:04:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":58648,"size_decoded":59461,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 58648, version 1.0","md5":"1335949674b7c206a1bb17bc5477ce35","sha1":"cb7fd4976a08c9856c4111801bc7bbf34fc593df","sha256":"614ab8f616352583f92cc2130fe8812c5aaaa8560b3828de45eefb318be7b503","sha512":"991a8b2373214543100446ed6e25aa09892a1f4fb2b5140744477e08d10d499378366a6064c65e12f46039630d6d28fbf80b80d63f804eb9793550be1e9584a4","ssdeep":"1536:8CEDiUi6YrHYopSGvDsJ9gqRYb86bAv2gmAM:8a6GpbA9Em+gu","tlshash":"7d430256f900dce07d2d653376deac0090abb45fa04fe636aaa586d601f0f484dcce3a","first_seen":"2026-01-09T01:41:44.277305Z","last_seen":"2026-08-08T18:32:37.278335Z","times_seen":958,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":58,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fastly.picsum.photos/id/201/1200/420.jpg?hmac=w3_uMv_UVWGII2cuUVqTDVPiLWYBco64fvXq8tzTSuE","fqdn":"fastly.picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttrans.top/","date":"2026-08-02T15:40:45.286Z","timestamp":1785685245286,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastly.picsum.photos","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 04:52:56 GMT","end":"Tue, 06 Oct 2026 04:52:55 GMT"},"fingerprint":{"sha1":"34:C2:4E:31:C5:7F:26:A9:73:2F:90:FE:E4:65:19:0A:A7:50:57:A3","sha256":"C2:42:9E:2D:E4:42:B6:DA:5A:29:78:1A:29:CF:ED:A3:3B:D7:6E:BC:E0:15:71:09:0D:21:19:5E:0C:5C:78:8B"}}},"request":{"raw":"GET /id/201/1200/420.jpg?hmac=w3_uMv_UVWGII2cuUVqTDVPiLWYBco64fvXq8tzTSuE HTTP/1.1\r\nHost: fastly.picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdttrans.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncache-control: public, max-age=2592000, stale-while-revalidate=60, stale-if-error=43200, immutable\r\ncontent-disposition: inline; filename=\"201-1200x420.jpg\"\r\npicsum-id: 201\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Sun, 02 Aug 2026 15:40:45 GMT\r\nvia: 1.1 varnish\r\nage: 50\r\nx-served-by: cache-bma-essb1270021-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1785685245.323078,VS0,VE1\r\nvary: Origin\r\ncontent-length: 47933\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":47933,"size_decoded":48438,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 1200x420, components 3","md5":"f9d073d61dadb84c48efbac65cd08ab0","sha1":"484bae04f209a3274d2f4cdbdb8b94e3f36aaef0","sha256":"f2a60e4b9b9f67ed3af0f45632acf6db47bef46d9ac93573241532c6bb06204b","sha512":"cfc310f57bcb6edf40129b4eed20ec11c3ca1c0c5c52fe919f62385dbaa1319e31443ba0fef9c205efa9aea750f70e25109c676a9948109c239f8422aa6baaca","ssdeep":"768:ZBoakskRzc9Ruw9eHJwfp/sKX3uegiBylzgFpmIZC7+KPt0u2JA5ea8Z:Z7D9R+wfBdX3FgiulIZi/PCu2JAUa8Z","tlshash":"db23f13901db305ef7cf41bbb008a370f14dcd6587068abf137b29e27d9a9765a54a60","first_seen":"2026-08-02T15:40:34.819003Z","last_seen":"2026-08-02T15:44:59.937349Z","times_seen":3,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":11,"connect":9,"send":0,"wait":27,"receive":3,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"picsum.photos/id/106/1200/420","fqdn":"picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"104.26.5.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttrans.top/","date":"2026-08-02T15:40:45.226Z","timestamp":1785685245226,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"picsum.photos","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 08:37:55 GMT","end":"Fri, 25 Sep 2026 09:37:52 GMT"},"fingerprint":{"sha1":"B0:65:66:A5:82:E1:01:D8:EF:1E:61:81:28:52:7F:50:51:4E:E5:18","sha256":"44:22:5D:F9:7A:48:85:3C:6B:16:59:2F:CA:13:A1:D4:93:2D:4B:6D:CD:C4:A0:89:6C:41:6F:E4:F2:74:75:DF"}}},"request":{"raw":"GET /id/106/1200/420 HTTP/1.1\r\nHost: picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdttrans.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 15:40:48 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://fastly.picsum.photos/id/106/1200/420.jpg?hmac=e09EES7bCiANWh2GvJQQZYQzmEwzFAmQcpaixFL6BhI\r\ncache-control: public, max-age=86400, stale-while-revalidate=60, stale-if-error=43200\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lp2nM6mx1dZbUqP5BPXSE2xfiTBjm3jDxRX14gDBkZBaALMQkIaSOYr0TI4qr1Ng4XV8tJg8Rgw2LsFTcTsF8YRNuDUGGLraXgfMLvQ6MDbj5A0O2I9HkdbTA2ShtZ0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\ncf-ray: a24e2ee3689176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T19:43:03.957537Z","times_seen":17784936,"resource_available":true,"data":null}},"time_used":3358,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":33,"receive":0,"ssl":3322},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALRLoKI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdttrans.top/","date":"2026-08-02T15:40:45.258Z","timestamp":1785685245258,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALRLoKI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://usdttrans.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25240\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 28 Jul 2026 23:33:46 GMT\r\nexpires: Wed, 28 Jul 2027 23:33:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 403619\r\nlast-modified: Tue, 06 Jan 2026 19:08:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":25240,"size_decoded":26053,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25240, version 1.0","md5":"f5fe9f3fb5c19c5a68be1bda75040d50","sha1":"f82abe04e22f3bdc908880c50cfd4b0944d2a785","sha256":"c1d919c8701a86ed7f33a8044f7c4e5675db2fce8b754091e97b2c0792f9782c","sha512":"edda6a44a33b18f47ca87fafd9a30ee6a31ebb38372bf614fc597b9be2a0ae8069b8f04e42256e97673fd9a714f46912dcc0d14509c5f41dcf1098ecee77bda1","ssdeep":"768:fkVYsPAbHkrwtNhRe4WZOIgaWKSuGVsqZwJFMr:vsPA/4dZJgaTSLFZwgr","tlshash":"e1b2e09e1c363a1ab602353c996fb8e321a78c74cce2a7f96731559813d187c84c75a3","first_seen":"2026-01-08T16:11:36.298831Z","last_seen":"2026-08-08T18:32:37.285004Z","times_seen":1020,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":25,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.115.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdttrans.top/","date":"2026-08-02T15:40:45.264Z","timestamp":1785685245264,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.115.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://usdttrans.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 56508\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 26 Jul 2026 20:09:20 GMT\r\nexpires: Mon, 26 Jul 2027 20:09:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 588685\r\nlast-modified: Tue, 06 Jan 2026 19:04:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":56508,"size_decoded":57321,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 56508, version 1.0","md5":"6b89c49bad3a84fa8b0ab38ba115cff5","sha1":"dc69a7e1d9316e8320e8cf7d5775f56e288fe81b","sha256":"fb29957c7adccb9a89e34fb28d3d1c7d12bd7401f80c0dba6e1c9e5259cb3262","sha512":"a709e5ce0af961b9efec52885a41fc4ba1dc2360544c70811e52f5e82d9e08988adceb7a47320c430350f4d0f43e3a59bf5304fbc639250ee0565ebfa5cd603d","ssdeep":"1536:SgUi8SLeTb+PNJhy3g0SDolq3LNEPPB/m:SpiW6PZ4xCNQtm","tlshash":"30430111ed22da5ddde4c9b99238457a43e0cd68700c2721466b31e7dba821ebb7387f","first_seen":"2026-01-09T01:41:44.259454Z","last_seen":"2026-08-08T18:32:37.285633Z","times_seen":1013,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":63,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.118.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdttrans.top/","date":"2026-08-02T15:40:45.253Z","timestamp":1785685245253,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.118.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://usdttrans.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 46192\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 28 Jul 2026 23:47:40 GMT\r\nexpires: Wed, 28 Jul 2027 23:47:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 402785\r\nlast-modified: Tue, 06 Jan 2026 19:04:16 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":46192,"size_decoded":47005,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46192, version 1.0","md5":"5556d1a216ad1866c0e9d00290a3c9cd","sha1":"f534be976ceb3c29d1ca0865df117eb692bbfe29","sha256":"76c9ddb85ae4578cccd35ae4f6e6bbffaa2c8c2aec0fea17d3c17c84a3c6f7d1","sha512":"6859702849475921b6aefa36d2ad5dd4239719e145d83b05abd61fd57b1108a0a181967b0a15355e52721c1d934b2e7f2634bbaa2e860933b89e9e2f7cc8f823","ssdeep":"768:LP8gIehhR1z5H3GLFFRXcp5ZEZaadTlg0YhQarNwPtHVY9fS4fuYWbkZDVX7mUXn:LfPR1zlGJFRUZEZaaplg0YVu6pbfrsk/","tlshash":"8f23f200afad935de5b62b3cde79941019fd79ea8c3418e9c17798ca9000e7bd0ea573","first_seen":"2026-01-09T01:41:44.260322Z","last_seen":"2026-08-08T18:32:37.288878Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":50,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fastly.picsum.photos/id/106/1200/420.jpg?hmac=e09EES7bCiANWh2GvJQQZYQzmEwzFAmQcpaixFL6BhI","fqdn":"fastly.picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttrans.top/","date":"2026-08-02T15:40:48.590Z","timestamp":1785685248590,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastly.picsum.photos","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 04:52:56 GMT","end":"Tue, 06 Oct 2026 04:52:55 GMT"},"fingerprint":{"sha1":"34:C2:4E:31:C5:7F:26:A9:73:2F:90:FE:E4:65:19:0A:A7:50:57:A3","sha256":"C2:42:9E:2D:E4:42:B6:DA:5A:29:78:1A:29:CF:ED:A3:3B:D7:6E:BC:E0:15:71:09:0D:21:19:5E:0C:5C:78:8B"}}},"request":{"raw":"GET /id/106/1200/420.jpg?hmac=e09EES7bCiANWh2GvJQQZYQzmEwzFAmQcpaixFL6BhI HTTP/1.1\r\nHost: fastly.picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdttrans.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncache-control: public, max-age=2592000, stale-while-revalidate=60, stale-if-error=43200, immutable\r\ncontent-disposition: inline; filename=\"106-1200x420.jpg\"\r\npicsum-id: 106\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Sun, 02 Aug 2026 15:40:48 GMT\r\nvia: 1.1 varnish\r\nage: 53\r\nx-served-by: cache-bma-essb1270021-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1785685249.590153,VS0,VE1\r\nvary: Origin\r\ncontent-length: 72320\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":72320,"size_decoded":72825,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 1200x420, components 3","md5":"6a2dafcdfa368d2e07a4e73273dbc0da","sha1":"72d115ced1f0255335047e9a97663f2e52a63eaf","sha256":"5385aa5fd87d035676ef5e5fcecf99da8a3775a713c306fe8a47c7756b1206e1","sha512":"2ee84050ce476deb7fbaaa560d0a5c7cd29f82096dc6b1c84cc511ba23ce39935dd353354376dc98836edea5e0d6b816c52e3257b81708e91de03e7fb72472c1","ssdeep":"1536:RBtm18pFf2dUYUcwlYCw/6iCW+sUVyWiNqWgRTZ3ZTkcRS12xrD:7tmKT2dqlYCyosUITNCRTBzrD","tlshash":"1c63f1b79ea470c7d713cb24e5a6f28538fc3c561eeac1a2a6945c874e32d20af47094","first_seen":"2026-08-02T15:40:34.807554Z","last_seen":"2026-08-02T15:44:59.930443Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdttrans.top/uploads/prod_1781085816798.webp","fqdn":"usdttrans.top","domain":"usdttrans.top","tld":"top"},"ip":{"addr":"154.198.50.82","port":443,"asn":138995,"as":"Antbox Networks Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttrans.top/","date":"2026-08-02T15:40:44.612Z","timestamp":1785685244612,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"usdttrans.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 15:05:13 GMT","end":"Wed, 28 Oct 2026 15:05:12 GMT"},"fingerprint":{"sha1":"6A:FD:2C:A0:8A:3A:D9:87:F9:9A:C7:12:A7:3B:2A:69:B6:08:08:0B","sha256":"D0:95:6D:26:5A:88:A5:84:94:D1:68:27:DA:5F:DE:E9:D0:C5:D0:72:66:F9:1A:77:4F:DD:DD:D4:FA:20:DC:44"}}},"request":{"raw":"GET /uploads/prod_1781085816798.webp HTTP/1.1\r\nHost: usdttrans.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdttrans.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: webp\r\nlast-modified: Mon, 15 Jun 2026 13:51:07 GMT\r\naccept-ranges: bytes\r\netag: \"89f5db3cefcdc1:0\"\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\ndate: Sun, 02 Aug 2026 15:40:44 GMT\r\ncontent-length: 1724\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1724,"size_decoded":1983,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d2e5ff9007347cce994182b0135477b5","sha1":"c77ae684eae8e18706b6b421c6c68519fba862c4","sha256":"371182ff441b2895208f4901650c90c2769bd0a83f9a1515a8e56358a6c61c9c","sha512":"4e04369e32d9f94428580bcbab39a5652131335e286476575dea483f5491802a2646a0295d2396508df3677f0e57cf3e9d728a857c03e61dc94560aea0d08b64","ssdeep":"","tlshash":"443128b7a1c8f3626e0cc0c00307be87ddb0386a2117b630096221aa548a78586ec7a8","first_seen":"2025-06-25T21:48:43.379506Z","last_seen":"2026-08-02T15:44:59.941683Z","times_seen":5,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Noto+Sans+SC:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdttrans.top/","date":"2026-08-02T15:40:45.078Z","timestamp":1785685245078,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Noto+Sans+SC:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdttrans.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 02 Aug 2026 15:40:45 GMT\r\ndate: Sun, 02 Aug 2026 15:40:45 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":336975,"size_decoded":93405,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (934)","md5":"efc766c2e976f4f286fd85d06808a2bc","sha1":"f615914e84c7eb380d7201851f0d1cab2acab001","sha256":"bea5f2baff54e899f0b7cbd0cae4452cc2dac6ed5aa232d43db3461f9014c923","sha512":"9baaf677e40507c2ea5c9739081fb0d7c604c68cf5181c55ab6fbc2cc7444d452a221f4f7d38b10853041e290145979571626751b8ddd4825cffec517b07387a","ssdeep":"3072:ljJnq7pPEjgkzO7Mor1I9E+GkZkbsOCeXB81u46GDkLgsN:JJnkpOP2r10EYCTXB0uA4V","tlshash":"1564fca5460795cffde75ca352ced8147ea968bcf980893c52f519d3ac0a01ad0dbb8c","first_seen":"2026-01-09T01:45:16.425154Z","last_seen":"2026-08-02T15:44:59.93831Z","times_seen":80,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":38,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdttrans.top/","fqdn":"usdttrans.top","domain":"usdttrans.top","tld":"top"},"ip":{"addr":"154.198.50.82","port":443,"asn":138995,"as":"Antbox Networks Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-02T15:40:42.320Z","timestamp":1785685242320,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"usdttrans.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 15:05:13 GMT","end":"Wed, 28 Oct 2026 15:05:12 GMT"},"fingerprint":{"sha1":"6A:FD:2C:A0:8A:3A:D9:87:F9:9A:C7:12:A7:3B:2A:69:B6:08:08:0B","sha256":"D0:95:6D:26:5A:88:A5:84:94:D1:68:27:DA:5F:DE:E9:D0:C5:D0:72:66:F9:1A:77:4F:DD:DD:D4:FA:20:DC:44"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: usdttrans.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: PHP/7.1.33, ASP.NET\r\ndate: Sun, 02 Aug 2026 15:40:44 GMT\r\ncontent-length: 1603\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:7.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":4390,"size_decoded":1847,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"94155be9505987c4a23e9c72ce109333","sha1":"f43c13cc0c670297d71dab6673469cdd308b204f","sha256":"8b4643e5ed8f7c2c172566af252bbd898c571efc8e06f190bdaaaf9bb7bedf17","sha512":"0022dbadbfcd0c8c15f6e9b43b1d81bdd50d45f111f78035f0ee427e878ac50b7eeb914de2ed5adf9d45d081ad5927fc2048f572c99b4a2679e8fb2918b6c0a6","ssdeep":"48:9G//Kj01fQ5QO5gO5EsjKO9sZtnS6y06hJrFDovOCfVj:9GnVfGQEgEEsjK4ytnS6uj5D+OCd","tlshash":"0e91522095f3a877019392c4a0a16f5e3ed4aa07f94a055037fc0ed7afe2d098c2b49d","first_seen":"2026-08-02T15:40:34.809458Z","last_seen":"2026-08-02T15:44:59.936574Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2059,"timings":{"blocked":-1,"dns":842,"connect":298,"send":0,"wait":316,"receive":0,"ssl":603},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdttrans.top/assets/js/script.js","fqdn":"usdttrans.top","domain":"usdttrans.top","tld":"top"},"ip":{"addr":"154.198.50.82","port":443,"asn":138995,"as":"Antbox Networks Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdttrans.top/","date":"2026-08-02T15:40:44.606Z","timestamp":1785685244606,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"usdttrans.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 15:05:13 GMT","end":"Wed, 28 Oct 2026 15:05:12 GMT"},"fingerprint":{"sha1":"6A:FD:2C:A0:8A:3A:D9:87:F9:9A:C7:12:A7:3B:2A:69:B6:08:08:0B","sha256":"D0:95:6D:26:5A:88:A5:84:94:D1:68:27:DA:5F:DE:E9:D0:C5:D0:72:66:F9:1A:77:4F:DD:DD:D4:FA:20:DC:44"}}},"request":{"raw":"GET /assets/js/script.js HTTP/1.1\r\nHost: usdttrans.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdttrans.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 15 Jun 2026 13:51:18 GMT\r\naccept-ranges: bytes\r\netag: \"5f4278acefcdc1:0\"\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\ndate: Sun, 02 Aug 2026 15:40:44 GMT\r\ncontent-length: 737\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1260,"size_decoded":1060,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"9ca3d20c0732848b8c3137e5a5306768","sha1":"dcedbc0a4955da4866dd54c7ac60cfcf59441960","sha256":"54228b523d594d1e574d7e3e8c2caacfc4e45d327b797679d32d6a2d11e280c7","sha512":"e7fd529323a45f74ca2afd676fe1c0547add0ea8b091d7958fb4cd5fb67c8f231d82e9b74868f26470b284caab8ea989d13b2332c2608937e848bbd09964c610","ssdeep":"","tlshash":"c121e01935b91474c5f324fb6a8fc96878a201433800e7907cccc98a0fd1ad6662d7ed","first_seen":"2026-08-02T15:40:34.810471Z","last_seen":"2026-08-02T15:44:59.940674Z","times_seen":3,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdttrans.top/uploads/prod_1781577163787.webp","fqdn":"usdttrans.top","domain":"usdttrans.top","tld":"top"},"ip":{"addr":"154.198.50.82","port":443,"asn":138995,"as":"Antbox Networks Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttrans.top/","date":"2026-08-02T15:40:44.610Z","timestamp":1785685244610,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"usdttrans.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 15:05:13 GMT","end":"Wed, 28 Oct 2026 15:05:12 GMT"},"fingerprint":{"sha1":"6A:FD:2C:A0:8A:3A:D9:87:F9:9A:C7:12:A7:3B:2A:69:B6:08:08:0B","sha256":"D0:95:6D:26:5A:88:A5:84:94:D1:68:27:DA:5F:DE:E9:D0:C5:D0:72:66:F9:1A:77:4F:DD:DD:D4:FA:20:DC:44"}}},"request":{"raw":"GET /uploads/prod_1781577163787.webp HTTP/1.1\r\nHost: usdttrans.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdttrans.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: webp\r\nlast-modified: Tue, 16 Jun 2026 02:32:43 GMT\r\naccept-ranges: bytes\r\netag: \"cde21d6938fddc1:0\"\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\ndate: Sun, 02 Aug 2026 15:40:44 GMT\r\ncontent-length: 9202\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":9202,"size_decoded":9462,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f4a12c97104560131b6d44fa2f71691f","sha1":"e7d57493067b6e4c08d48568271385b28bd3e8f1","sha256":"c70a5c1ff1ef2d32fe83515218a34c174b419ba3e5c4201b68f67dfc4c15c9fb","sha512":"f819879fa15085a5290d49009ca5a2a807adcb2a183f17a4e318b8084c3f46052a26d1bcb43a3cd2cc13a5ca64694aea6ffb70eddd6b6d2c3b9e624ad0df1930","ssdeep":"192:T88RwmY2leOO88y0wMCQwvaMYcRA3mSDQ2aG8OONQtJo+mQ3BVn1Cuxv2i:T88Rwil9O88y0wMHWnYHDaFmQ+/3Bz9v","tlshash":"4a129066387d9a70d89035b88d234545e6727c54c73a97fb3df338f6348663a184978c","first_seen":"2026-08-02T15:40:34.822658Z","last_seen":"2026-08-02T15:44:59.928746Z","times_seen":3,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.112.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdttrans.top/","date":"2026-08-02T15:40:45.256Z","timestamp":1785685245256,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.112.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://usdttrans.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 57648\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:33:41 GMT\r\nexpires: Thu, 29 Jul 2027 13:33:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 353224\r\nlast-modified: Tue, 06 Jan 2026 19:03:54 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":57648,"size_decoded":58461,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 57648, version 1.0","md5":"bb86f71e5996622a6b4231fb51cfe25e","sha1":"4ec3191070d6897f3ae612b18825cacc0bd0b202","sha256":"34a4580239eae8dc54b726a1e1e9fec266e74225b112063ed93b412d54b97ccd","sha512":"002b7cfe2af492a316d15463d5343810b7fd85b7d8bef38421b695977257f55bcb71bbd4f2099197b23b92783fe9d3138771b8d2cd996ca3b4cee859053bfaff","ssdeep":"1536:YSj5PlP5pi7BYjZW0BJsxpbTKfjD3iKb+VIKVZA:YSZlaydW0BJsfPKfSKqjA","tlshash":"ad4301824ece6be2c67523f7aef124d6e60de90162047055313ee433c6ee1f4993a65e","first_seen":"2026-01-09T01:41:44.266878Z","last_seen":"2026-08-08T18:32:37.28265Z","times_seen":905,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":44,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.118.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdttrans.top/","date":"2026-08-02T15:40:45.259Z","timestamp":1785685245259,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.118.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://usdttrans.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 46192\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 28 Jul 2026 23:47:40 GMT\r\nexpires: Wed, 28 Jul 2027 23:47:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 402785\r\nlast-modified: Tue, 06 Jan 2026 19:04:16 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":46192,"size_decoded":47005,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46192, version 1.0","md5":"5556d1a216ad1866c0e9d00290a3c9cd","sha1":"f534be976ceb3c29d1ca0865df117eb692bbfe29","sha256":"76c9ddb85ae4578cccd35ae4f6e6bbffaa2c8c2aec0fea17d3c17c84a3c6f7d1","sha512":"6859702849475921b6aefa36d2ad5dd4239719e145d83b05abd61fd57b1108a0a181967b0a15355e52721c1d934b2e7f2634bbaa2e860933b89e9e2f7cc8f823","ssdeep":"768:LP8gIehhR1z5H3GLFFRXcp5ZEZaadTlg0YhQarNwPtHVY9fS4fuYWbkZDVX7mUXn:LfPR1zlGJFRUZEZaaplg0YVu6pbfrsk/","tlshash":"8f23f200afad935de5b62b3cde79941019fd79ea8c3418e9c17798ca9000e7bd0ea573","first_seen":"2026-01-09T01:41:44.260322Z","last_seen":"2026-08-08T18:32:37.288878Z","times_seen":1125,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":69,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.110.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdttrans.top/","date":"2026-08-02T15:40:45.271Z","timestamp":1785685245271,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.110.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://usdttrans.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 61472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 26 Jul 2026 20:45:39 GMT\r\nexpires: Mon, 26 Jul 2027 20:45:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 586506\r\nlast-modified: Tue, 06 Jan 2026 19:04:04 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":61472,"size_decoded":62285,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 61472, version 1.0","md5":"e9e2511183b7de3140d258c22c079c2c","sha1":"5542c99cc3fd3606937cf80afbe8cc85896a8823","sha256":"bbca9081655c45233a25c4cca030c47ebcf2e156eeedd48110836658adb31fa0","sha512":"6afb0fb4a22e3fa8b0918f39ef562fa328624760877e29e09cb0077d94b2dd7ef1a5b0109bd2344a73e02ed24c4555c014ebc4a4a2b97f39e35f8bc30977c7e9","ssdeep":"1536:uu+bsAI99iXAMa4++500w482XQih6+naI74FVoqLFt7r:DTAIiAB4+M0TavhValVR7r","tlshash":"e6530240832bddbdce13bb000c8856d4270e39550db5b78edd8ba5a4305fedbae86da5","first_seen":"2026-01-09T01:41:44.267868Z","last_seen":"2026-08-08T18:32:37.278996Z","times_seen":769,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":53,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fastly.picsum.photos/id/1015/1200/420.jpg?hmac=LJ7fs6k48ilTVtGj_vPdBj6cs2o-pFcpry-oDkC5wt4","fqdn":"fastly.picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"151.101.1.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttrans.top/","date":"2026-08-02T15:40:45.288Z","timestamp":1785685245288,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastly.picsum.photos","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 04:52:56 GMT","end":"Tue, 06 Oct 2026 04:52:55 GMT"},"fingerprint":{"sha1":"34:C2:4E:31:C5:7F:26:A9:73:2F:90:FE:E4:65:19:0A:A7:50:57:A3","sha256":"C2:42:9E:2D:E4:42:B6:DA:5A:29:78:1A:29:CF:ED:A3:3B:D7:6E:BC:E0:15:71:09:0D:21:19:5E:0C:5C:78:8B"}}},"request":{"raw":"GET /id/1015/1200/420.jpg?hmac=LJ7fs6k48ilTVtGj_vPdBj6cs2o-pFcpry-oDkC5wt4 HTTP/1.1\r\nHost: fastly.picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://usdttrans.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncache-control: public, max-age=2592000, stale-while-revalidate=60, stale-if-error=43200, immutable\r\ncontent-disposition: inline; filename=\"1015-1200x420.jpg\"\r\npicsum-id: 1015\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Sun, 02 Aug 2026 15:40:45 GMT\r\nvia: 1.1 varnish\r\nage: 50\r\nx-served-by: cache-bma-essb1270021-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1785685245.322790,VS0,VE2\r\nvary: Origin\r\ncontent-length: 108054\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":108054,"size_decoded":108562,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 1200x420, components 3","md5":"6a440f7efd0f1ced6069dddb80d71e3d","sha1":"3ea760617a07355654617dadf38825f2af17f608","sha256":"9522f8e063da4fce927152b989e2756cd55ebf7e4f61eedec614c4d391ef0682","sha512":"2fd5442e28b4cf64aa3823403de2c788fe59a5fc4464adb6cb223673bbc92a8ea5b1fa755ec2e1d3b1bc11821a6dccacbbb1e008b5b1da2f7428a2fb0943e96f","ssdeep":"3072:ZFFl1YhJPZwKz5BUkDG4blfwT3wVzUZXvyryM7:XrAPZbEepfwT3c0fjM7","tlshash":"c2b3125332808d04676e542bd8bc4bba0f02ecc486fcb66ebc108f0aa558d5979dfb47","first_seen":"2026-08-02T15:40:34.81614Z","last_seen":"2026-08-02T15:44:59.930949Z","times_seen":3,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":10,"connect":9,"send":0,"wait":11,"receive":17,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdttrans.top/uploads/prod_1781083849109.webp","fqdn":"usdttrans.top","domain":"usdttrans.top","tld":"top"},"ip":{"addr":"154.198.50.82","port":443,"asn":138995,"as":"Antbox Networks Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttrans.top/","date":"2026-08-02T15:40:44.615Z","timestamp":1785685244615,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"usdttrans.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 15:05:13 GMT","end":"Wed, 28 Oct 2026 15:05:12 GMT"},"fingerprint":{"sha1":"6A:FD:2C:A0:8A:3A:D9:87:F9:9A:C7:12:A7:3B:2A:69:B6:08:08:0B","sha256":"D0:95:6D:26:5A:88:A5:84:94:D1:68:27:DA:5F:DE:E9:D0:C5:D0:72:66:F9:1A:77:4F:DD:DD:D4:FA:20:DC:44"}}},"request":{"raw":"GET /uploads/prod_1781083849109.webp HTTP/1.1\r\nHost: usdttrans.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdttrans.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: webp\r\nlast-modified: Mon, 15 Jun 2026 13:51:06 GMT\r\naccept-ranges: bytes\r\netag: \"21389a3cefcdc1:0\"\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\ndate: Sun, 02 Aug 2026 15:40:44 GMT\r\ncontent-length: 13270\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":13270,"size_decoded":13530,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d0a960a264669197e22b595af730887c","sha1":"1bae76a029823a47fa43a157117d5530a9018a39","sha256":"623586d22e28b181f96e48a86d0b77d5045103c1bf830d0c1f2e6a9b01f5692d","sha512":"5fe54653c879fbd90dbe192b03d8f739bdcac2516e77c3cf457ac55d9b2a271d934e8c1df636281367e5bb8590dc0d090874747301ab96b8675ca71cefa8b0c6","ssdeep":"192:U/diHaIhozLEu2VViEdAFZgwGGbZv6/KsKB0MdjrEAVp4OGNO/jD6a1eS7H+LWpQ:wyST2VV0ZgwDy/KpB0MlAAMIDz18WpQp","tlshash":"3452bfeaf2b65a811d2703492c1cddf5e4c995a0ef050a60b4ad0dd9273817ed2aaec7","first_seen":"2025-12-16T07:13:07.425526Z","last_seen":"2026-08-02T15:44:59.934891Z","times_seen":4,"resource_available":false,"data":null}},"time_used":898,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":898,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"picsum.photos/id/1015/1200/420","fqdn":"picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"104.26.5.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttrans.top/","date":"2026-08-02T15:40:45.224Z","timestamp":1785685245224,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"picsum.photos","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 08:37:55 GMT","end":"Fri, 25 Sep 2026 09:37:52 GMT"},"fingerprint":{"sha1":"B0:65:66:A5:82:E1:01:D8:EF:1E:61:81:28:52:7F:50:51:4E:E5:18","sha256":"44:22:5D:F9:7A:48:85:3C:6B:16:59:2F:CA:13:A1:D4:93:2D:4B:6D:CD:C4:A0:89:6C:41:6F:E4:F2:74:75:DF"}}},"request":{"raw":"GET /id/1015/1200/420 HTTP/1.1\r\nHost: picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdttrans.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 15:40:45 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://fastly.picsum.photos/id/1015/1200/420.jpg?hmac=LJ7fs6k48ilTVtGj_vPdBj6cs2o-pFcpry-oDkC5wt4\r\ncache-control: public, max-age=86400, stale-while-revalidate=60, stale-if-error=43200\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=knlGZswg2%2FS%2B6edfeq5luQfW7dESUhVJeZ1kPprT4lD61Fm1wsw45eyxpgrr8wMUUsnqv41CYt95OSg1ZJX2%2FxEAEnHKlJInwDYZ6UYBqRwwsMQVCbjA6TSqgYlVDX4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\ncf-ray: a24e2ecebd0e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T19:43:03.957537Z","times_seen":17784936,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":20,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.116.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdttrans.top/","date":"2026-08-02T15:40:45.248Z","timestamp":1785685245248,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.116.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://usdttrans.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 52984\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 08:40:16 GMT\r\nexpires: Fri, 30 Jul 2027 08:40:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 284429\r\nlast-modified: Tue, 06 Jan 2026 19:04:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":52984,"size_decoded":53797,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 52984, version 1.0","md5":"b2faec2d0d896e9eb815856829776a47","sha1":"670f7e750e8fc181538cb8afd87586c8d9bde06f","sha256":"a98dc5a726f82141f74a827c443e120709a12fe737fabacf2530927a275fce0d","sha512":"7848fce92cad9d50a523972709c8f3b695a13a95d3eb288d45bd26f4bda6d1b32b4b23285255bcc4f93832018428cbf5f6bc8274db73c1371e24e6ad7ca0f05d","ssdeep":"1536:idm3Zg+GYL2IlptUjXT9yRKhqcimDLK4ypJh3O:idm3BL3GsRoZiSDeJ0","tlshash":"0b33f255ee83db92c201ae09f49ab8581f06e338926c956037fd1e6f83c258dd0b79c3","first_seen":"2026-01-09T01:41:44.262235Z","last_seen":"2026-08-08T18:32:37.282039Z","times_seen":1038,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":72,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.119.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdttrans.top/","date":"2026-08-02T15:40:45.250Z","timestamp":1785685245250,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.119.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://usdttrans.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 76800\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:13:40 GMT\r\nexpires: Thu, 29 Jul 2027 13:13:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 354425\r\nlast-modified: Tue, 06 Jan 2026 19:05:08 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":76800,"size_decoded":77613,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 76800, version 1.0","md5":"4118cc8cac2655b9ccd64a91698f0ecd","sha1":"671e3c1e2be85665c9d35903b5345ee8f9d3354d","sha256":"b3b2374881f4cd93f239820dfd91f0fde8d52f8f92ba2888f7ab9cba21e4d7eb","sha512":"37b21323db1521169b46960daca80dd851683d07eea674d89a322ffee1a64b3d82bf950c3b61327e6890df9ca1fc2871c0f4666a6c88a57867a9ee91368cdf03","ssdeep":"1536:0XBgtzl3QDJb42SX1r6Jftba4gWaKx40rXLUkjMnLPbCRPaDy7U2bwRoaaZ0gTN:0GP3QDJbbSefNNBbLAnLD2bwRoygTN","tlshash":"147312595883df1ebe60c4e3eb5aec3770841387e178051102e30aeeaef9cee5650972","first_seen":"2026-01-09T01:41:44.272407Z","last_seen":"2026-08-08T18:32:37.276771Z","times_seen":1099,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":33,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.116.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdttrans.top/","date":"2026-08-02T15:40:45.266Z","timestamp":1785685245266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.116.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://usdttrans.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 52984\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Jul 2026 08:40:16 GMT\r\nexpires: Fri, 30 Jul 2027 08:40:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 284429\r\nlast-modified: Tue, 06 Jan 2026 19:04:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":52984,"size_decoded":53797,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 52984, version 1.0","md5":"b2faec2d0d896e9eb815856829776a47","sha1":"670f7e750e8fc181538cb8afd87586c8d9bde06f","sha256":"a98dc5a726f82141f74a827c443e120709a12fe737fabacf2530927a275fce0d","sha512":"7848fce92cad9d50a523972709c8f3b695a13a95d3eb288d45bd26f4bda6d1b32b4b23285255bcc4f93832018428cbf5f6bc8274db73c1371e24e6ad7ca0f05d","ssdeep":"1536:idm3Zg+GYL2IlptUjXT9yRKhqcimDLK4ypJh3O:idm3BL3GsRoZiSDeJ0","tlshash":"0b33f255ee83db92c201ae09f49ab8581f06e338926c956037fd1e6f83c258dd0b79c3","first_seen":"2026-01-09T01:41:44.262235Z","last_seen":"2026-08-08T18:32:37.282039Z","times_seen":1038,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":56,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.111.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdttrans.top/","date":"2026-08-02T15:40:45.272Z","timestamp":1785685245272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.111.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://usdttrans.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 62664\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 26 Jul 2026 21:00:56 GMT\r\nexpires: Mon, 26 Jul 2027 21:00:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 585589\r\nlast-modified: Tue, 06 Jan 2026 19:03:53 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":62664,"size_decoded":63477,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62664, version 1.0","md5":"9ffb39c4cc253e2ebb75c1133bed7332","sha1":"154436bc28900e2d28a444723e4913cbb646a81a","sha256":"372be010ac0e87cb12065a861da39821104a43d68345a62ca95d3d3e2fb2c269","sha512":"dffac688c58d3b30c9b48a874ddba91179378f29af5b7527ae605fabb33d7a3c1292050f09ce17df79e469d553137ca64d3bc112680b26b2da07e456dbfb56bf","ssdeep":"1536:1tvfLfe1dfkkWl0/ljjn+H2fdk3UIQLoE21R:vDe1dIqNOH+dCLUoEAR","tlshash":"d5530178a1c727c0a858ff36943552659ccbede76c0c13a986e8b53bf08214b0da4f5e","first_seen":"2026-01-09T01:41:44.2869Z","last_seen":"2026-08-08T18:32:37.277561Z","times_seen":878,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":73,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.119.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdttrans.top/","date":"2026-08-02T15:40:45.281Z","timestamp":1785685245281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.119.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://usdttrans.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 76800\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:13:40 GMT\r\nexpires: Thu, 29 Jul 2027 13:13:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 354425\r\nlast-modified: Tue, 06 Jan 2026 19:05:08 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":76800,"size_decoded":77613,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 76800, version 1.0","md5":"4118cc8cac2655b9ccd64a91698f0ecd","sha1":"671e3c1e2be85665c9d35903b5345ee8f9d3354d","sha256":"b3b2374881f4cd93f239820dfd91f0fde8d52f8f92ba2888f7ab9cba21e4d7eb","sha512":"37b21323db1521169b46960daca80dd851683d07eea674d89a322ffee1a64b3d82bf950c3b61327e6890df9ca1fc2871c0f4666a6c88a57867a9ee91368cdf03","ssdeep":"1536:0XBgtzl3QDJb42SX1r6Jftba4gWaKx40rXLUkjMnLPbCRPaDy7U2bwRoaaZ0gTN:0GP3QDJbbSefNNBbLAnLD2bwRoygTN","tlshash":"147312595883df1ebe60c4e3eb5aec3770841387e178051102e30aeeaef9cee5650972","first_seen":"2026-01-09T01:41:44.272407Z","last_seen":"2026-08-08T18:32:37.276771Z","times_seen":1099,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"picsum.photos/id/201/1200/420","fqdn":"picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"104.26.5.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttrans.top/","date":"2026-08-02T15:40:45.229Z","timestamp":1785685245229,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"picsum.photos","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 08:37:55 GMT","end":"Fri, 25 Sep 2026 09:37:52 GMT"},"fingerprint":{"sha1":"B0:65:66:A5:82:E1:01:D8:EF:1E:61:81:28:52:7F:50:51:4E:E5:18","sha256":"44:22:5D:F9:7A:48:85:3C:6B:16:59:2F:CA:13:A1:D4:93:2D:4B:6D:CD:C4:A0:89:6C:41:6F:E4:F2:74:75:DF"}}},"request":{"raw":"GET /id/201/1200/420 HTTP/1.1\r\nHost: picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdttrans.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sun, 02 Aug 2026 15:40:45 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://fastly.picsum.photos/id/201/1200/420.jpg?hmac=w3_uMv_UVWGII2cuUVqTDVPiLWYBco64fvXq8tzTSuE\r\ncache-control: public, max-age=86400, stale-while-revalidate=60, stale-if-error=43200\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ewDxoZRPkTyoZ%2FZMXte95NwYwIdaSmHV73qOFnb9C1%2BfMAu0MwtpgO3LvDDNeanSUtVaLk3PHd56VJ8JwaJTxI8Os1E27lovN2HcBYG9FpWC7l0ce7VJu%2FI19uSGnj4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\ncf-ray: a24e2ecebd0d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T19:43:03.957537Z","times_seen":17784936,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":12,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdttrans.top/assets/css/style.css","fqdn":"usdttrans.top","domain":"usdttrans.top","tld":"top"},"ip":{"addr":"154.198.50.82","port":443,"asn":138995,"as":"Antbox Networks Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdttrans.top/","date":"2026-08-02T15:40:44.576Z","timestamp":1785685244576,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"usdttrans.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 15:05:13 GMT","end":"Wed, 28 Oct 2026 15:05:12 GMT"},"fingerprint":{"sha1":"6A:FD:2C:A0:8A:3A:D9:87:F9:9A:C7:12:A7:3B:2A:69:B6:08:08:0B","sha256":"D0:95:6D:26:5A:88:A5:84:94:D1:68:27:DA:5F:DE:E9:D0:C5:D0:72:66:F9:1A:77:4F:DD:DD:D4:FA:20:DC:44"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: usdttrans.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdttrans.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 15 Jun 2026 13:51:18 GMT\r\naccept-ranges: bytes\r\netag: \"08f44acefcdc1:0\"\r\nvary: Accept-Encoding\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\ndate: Sun, 02 Aug 2026 15:40:44 GMT\r\ncontent-length: 1812\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":5832,"size_decoded":2121,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"b5f557dd42a5361621c80fd0c9b922c4","sha1":"3addb878d3b4f24c66579e9eced4beeef51d0da8","sha256":"e47563d64a7cf4f39fbb6d89b780cde4fd39d9b779bd657fbaa35f11570c7771","sha512":"d275a04cf93efbed6543215c59bc37adaa56953561ad09116411b7d3fde24bed974690077b2d528c78df9ff506e9a728d0beab8d35473c52455e52f0f98003f5","ssdeep":"96:N60p2NfaSQJMusuovPnWy0FG63bSC/N27nkOqps05zqwzM2StHak34:NLMlaSQJXsuovPnWy0FG63WC/N27nkOG","tlshash":"1ec12e9aa66b1945b413d1a42fb7478e736c9003850addbc7b9a718ccf492ecd1b278c","first_seen":"2026-08-02T15:40:34.817142Z","last_seen":"2026-08-02T15:44:59.928191Z","times_seen":3,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdttrans.top/uploads/prod_1781085735738.webp","fqdn":"usdttrans.top","domain":"usdttrans.top","tld":"top"},"ip":{"addr":"154.198.50.82","port":443,"asn":138995,"as":"Antbox Networks Limited","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdttrans.top/","date":"2026-08-02T15:40:44.613Z","timestamp":1785685244613,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"usdttrans.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 15:05:13 GMT","end":"Wed, 28 Oct 2026 15:05:12 GMT"},"fingerprint":{"sha1":"6A:FD:2C:A0:8A:3A:D9:87:F9:9A:C7:12:A7:3B:2A:69:B6:08:08:0B","sha256":"D0:95:6D:26:5A:88:A5:84:94:D1:68:27:DA:5F:DE:E9:D0:C5:D0:72:66:F9:1A:77:4F:DD:DD:D4:FA:20:DC:44"}}},"request":{"raw":"GET /uploads/prod_1781085735738.webp HTTP/1.1\r\nHost: usdttrans.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://usdttrans.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: webp\r\nlast-modified: Mon, 15 Jun 2026 13:51:07 GMT\r\naccept-ranges: bytes\r\netag: \"e34fb83cefcdc1:0\"\r\nserver: Microsoft-IIS/10.0\r\nx-powered-by: ASP.NET\r\ndate: Sun, 02 Aug 2026 15:40:44 GMT\r\ncontent-length: 45990\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":45990,"size_decoded":46250,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d8680f9efaa8b0cf616a9f75f8b3fd31","sha1":"64a85036fdb58a370b8577546707415103b5d21d","sha256":"19824f34973bf39246931034a0a0318655a49316664c29c83f4903ef8ffd70ae","sha512":"aafe0815e90f450849525fe33b9ab896e8d01092445601cb0013dbad65d181b09f138abfcdb8be73bed0e609527c7ea9e4a0eab63775c0e5eae3bcb34c1574d6","ssdeep":"768:n3WfFiGb4fCDs1uH+M3k/9kPGjzHDgt+ey9O0O9tGwZNH/KwURojPMdrPc:3WfslB1uH+Ik/+P6XeB7LXzH/KTKMpU","tlshash":"aa2301539274c817f859aa5f8aeeba3378ffce96c7e300e931bcaca01118516336414c","first_seen":"2023-06-27T01:19:01Z","last_seen":"2026-08-02T15:44:59.934127Z","times_seen":6,"resource_available":false,"data":null}},"time_used":857,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":594,"receive":263,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.117.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdttrans.top/","date":"2026-08-02T15:40:45.261Z","timestamp":1785685245261,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.117.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://usdttrans.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 52464\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:20:10 GMT\r\nexpires: Thu, 29 Jul 2027 13:20:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 354035\r\nlast-modified: Tue, 06 Jan 2026 19:04:16 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":52464,"size_decoded":53277,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 52464, version 1.0","md5":"9b32cb6db243ebeb0a1df911a26bb60d","sha1":"aece76019bb22f090d7852a65f44d721f5da1f11","sha256":"d94b5af0c14838af99bf9855f91e851878726558531ddef5bd2100b70dfbe90c","sha512":"f8e20ab5d08f48b526f5eee72262e0e2e1780353426a5067550efadc43761ad15fc507f207b9c72b7ba065b488f9671fae4b11b3451b25757c97cdd00d7a0e70","ssdeep":"1536:jV7XxXVMZ1gK+n4HQ0+zbfi+nuyLPViBKG7:j9x+lI4R+P1uyDcx","tlshash":"11330266cbd8736aa4331a83c07f6920a7f294a09219e774657403d7125dc4bbbeff42","first_seen":"2026-01-09T01:41:44.26601Z","last_seen":"2026-08-08T18:32:37.281419Z","times_seen":1124,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":69,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.117.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdttrans.top/","date":"2026-08-02T15:40:45.262Z","timestamp":1785685245262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/notosanssc/v40/k3kXo84MPvpLmixcA63oeALhLOCT-xWNm8Hqd37g1OkDRZe7lR4sg1IzSy-MNbE9VH8V.117.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://usdttrans.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 52464\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:20:10 GMT\r\nexpires: Thu, 29 Jul 2027 13:20:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 354035\r\nlast-modified: Tue, 06 Jan 2026 19:04:16 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":52464,"size_decoded":53277,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 52464, version 1.0","md5":"9b32cb6db243ebeb0a1df911a26bb60d","sha1":"aece76019bb22f090d7852a65f44d721f5da1f11","sha256":"d94b5af0c14838af99bf9855f91e851878726558531ddef5bd2100b70dfbe90c","sha512":"f8e20ab5d08f48b526f5eee72262e0e2e1780353426a5067550efadc43761ad15fc507f207b9c72b7ba065b488f9671fae4b11b3451b25757c97cdd00d7a0e70","ssdeep":"1536:jV7XxXVMZ1gK+n4HQ0+zbfi+nuyLPViBKG7:j9x+lI4R+P1uyDcx","tlshash":"11330266cbd8736aa4331a83c07f6920a7f294a09219e774657403d7125dc4bbbeff42","first_seen":"2026-01-09T01:41:44.26601Z","last_seen":"2026-08-08T18:32:37.281419Z","times_seen":1124,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":38,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}