{"report_id":"c505a9d5-1945-418d-83d4-02366f24c238","version":6,"status":"done","tags":[],"date":"2026-04-07T14:25:00Z","url":{"schema":"https","addr":"usdtbuy.shop/","fqdn":"usdtbuy.shop","domain":"usdtbuy.shop","tld":"shop"},"ip":{"addr":"65.108.71.177","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"final":{"url":{"schema":"https","addr":"usdtbuy.shop/","fqdn":"usdtbuy.shop","domain":"usdtbuy.shop","tld":"shop"},"title":"usdtbuy.shop/","dom":{"size":64695,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16879)","md5":"79884b062b6c32f668123f78d3182b96","sha1":"0626869b3f72b1c395b7db56de77926c076bae8c","sha256":"2c6cf115616f292ad0489162aeaf5256fdf186d35caf3b82de4173fd1c113bcb","sha512":"95fef20498d7f2891abf226afa2129dee6716cf8b398ae921ce21511765e21322d7741dff3aeab2f4e66226c0076f1dd6af29f7cc4c2cd7f709cd6cf25fa3118","ssdeep":"1536:Gngclkm5ypRnrdjZobXemlUVuXwamUCPQvCihYR:Gngclkm0TdjZobXemlUVugamvPQvCihk","tlshash":"395386a057b448f5797f833b5e44a2189527e902c60977e5f0f7d294768ceb20ae3b0b","dom_hash":"domhashd42297d8534e307004883e96092bee51","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"usdtbuy.shop/","fqdn":"usdtbuy.shop","domain":"usdtbuy.shop","tld":"shop"},"ip":{"addr":"65.108.71.177","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-12T14:25:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-04-05T22:33:08.106483Z","alert_count":0,"request_count":1,"received_data":761189,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"usdtbuy.shop","ip":{"addr":"65.108.71.177","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-03T22:44:48.192186Z","last_seen":"2026-04-03T22:44:48.192186Z","alert_count":0,"request_count":8,"received_data":194302,"sent_data":3898,"comment":"","tags":null,"fingerprints":[{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"s.w.org","ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1993-12-01","domain_rank":27695,"first_seen":"2017-01-30T04:56:16Z","last_seen":"2026-04-06T02:19:34.817081Z","alert_count":0,"request_count":7,"received_data":12028,"sent_data":3162,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"usdtbuy.shop/","fqdn":"usdtbuy.shop","domain":"usdtbuy.shop","tld":"shop"},"ip":{"addr":"65.108.71.177","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"db3fbed6177f2e8adbff44d7155e12b4","sha1":"733191f7d774a434ce582d198118061d7045e912","sha256":"5f212ea9fe33fb27d71b89a6c51f1b1e40adbb0955a7e26734959f4e9c0ab7ad","sha512":"aa286d4978b7f8f4078c24ec73d24732877630e616fd0b0279fe03e8840f66a441033a26271920017bf966b3b644c2f310ece6be7bc17cd27a6f8ed3f25bad8d","ssdeep":"","tlshash":"b311807e37b314b05a6b259b2b0f1701252911136d8bc58b7d7d5a501f44f4025abfb8","size":990,"data":"","first_seen":"2026-04-07T14:22:59.45024Z","last_seen":"2026-04-07T14:25:01.893084Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtbuy.shop/wp-content/plugins/escrow-admin-panel/assets/main.js?ver=1.0","fqdn":"usdtbuy.shop","domain":"usdtbuy.shop","tld":"shop"},"ip":{"addr":"65.108.71.177","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"e62ac4da0a63bc6aedb037c078814b5f","sha1":"f588879b0f28f1a2e5d9abd9ec40c3a72337de58","sha256":"5148a77348d9d5e220254236c1b25c87f4c6a0e30b4a4630a4ebefaf58fad9e0","sha512":"5d7504a0ff67f4727a97eac4112f4bb0cf06d3aa2299d69ab7f9fb8beb3ecedcae6f9b38cbf083def17ae0a6358998f413f8d1e41c82dd8be3f17c85056ce043","ssdeep":"96:2DwvF+R4gS4o6A7RFJ5imJYeiAmq+2dYCbRLSlfXlZrTTX2JLSV3mKDghzJBtm77:2DS0Kwob7JckviAIGYCbReXrKJm0KI2v","tlshash":"b8a164362377602407371ada2d9f115a20d67343fa4ac98532ec4421afafa89cdf75ce","size":4965,"data":"","first_seen":"2026-04-07T14:22:59.442224Z","last_seen":"2026-04-07T14:25:01.88625Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.7.2/ethers.umd.min.js?ver=5.7.2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","size":760171,"data":"","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-04-09T13:42:21.5062Z","times_seen":3121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtbuy.shop/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=66c613f68580994bb00a","fqdn":"usdtbuy.shop","domain":"usdtbuy.shop","tld":"shop"},"ip":{"addr":"65.108.71.177","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"importedModule","is_inline":false,"md5":"4dc1083fadc3146eef9e178a635322d7","sha1":"4e30da47cbbd6c3b4bc243ef9196fdb54b8a5648","sha256":"222102c59fbeb8df4f97e143c264d83d794d74a6123486b03b9ecf32a5471918","sha512":"aa096ebe4c95e43225ee1f09450521632db53c9cd732d01e1492747a1f45cb0254cc2a443cd1f024314c86fa0eec441f20ae33c5ef4a55d6cb95bcb7b84d3384","ssdeep":"768:HeW4693pQRsx45G/0vTVhtFiBa7jJEbYlrEdORuHhYlxuQLSZEXdYqAOmp9mI66f:HeQ93u6/0vxh17thuhyQpgFbonUWqeou","tlshash":"bc03c7a4b065f03047e614a6907b051bf3356618344fc0e0f769e8ea78b919f6567f3e","size":41194,"data":"","first_seen":"2026-02-04T02:31:53.531475Z","last_seen":"2026-04-10T00:24:13.404345Z","times_seen":2476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtbuy.shop/wp-includes/js/wp-emoji-release.min.js?ver=6.9.4","fqdn":"usdtbuy.shop","domain":"usdtbuy.shop","tld":"shop"},"ip":{"addr":"65.108.71.177","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-10T00:28:30.43134Z","times_seen":139736,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtbuy.shop/wp-block-template-skip-link-js-after","fqdn":"usdtbuy.shop","domain":"usdtbuy.shop","tld":"shop"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2125e333e8997a7d8933b6bf25bf9471","sha1":"48b6e047d53d425c0fb378d05422a20c76a8d7c7","sha256":"6f2c84e90ecdcfc786ddecbbaacbd2c76c104a4506e18fbe51915da83a0cac45","sha512":"70751b41cc837a0c04b89f4a70277d85563284747260ccf4de622deb45d5619743ea4f1b43d227819b1b53b97557166b4a97af9877aa76c96eeca2e4021cfafc","ssdeep":"","tlshash":"0c2195c4f21506f401662a39c4341bc9e2b92998f6db1ca7cc0c8c2cb1b256f46b6f7e","size":1417,"data":"","first_seen":"2026-01-07T06:37:55.694765Z","last_seen":"2026-04-07T14:25:01.89361Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtbuy.shop/wp-includes/js/wp-emoji-loader.min.js","fqdn":"usdtbuy.shop","domain":"usdtbuy.shop","tld":"shop"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d787a62a67f0b9312b0faf539e6dccb","sha1":"e5559411d466161993a2d80f4da12ed99ae2a0d5","sha256":"e94eb1421e1503b06ffc062db798fafebf313c101b4b5dbb814df231ec6ae9c2","sha512":"75fdb7e79c779ea16eb89b2afc5cf58fb33707bd44afb668647ad0fc1f7c8a03278b11df3cf7b1efcb9cbb84d6bff674d9e860317a3974652ccea592eba53f84","ssdeep":"","tlshash":"cb61859ae77a38dbb2f900f2697a0d47eb614435d6c8d438c9bda31418b58a3c274a46","size":3330,"data":"","first_seen":"2026-04-07T14:22:59.451054Z","last_seen":"2026-04-07T14:25:01.894133Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtbuy.shop/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210","fqdn":"usdtbuy.shop","domain":"usdtbuy.shop","tld":"shop"},"ip":{"addr":"65.108.71.177","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"81f491adccda86aaf56a1ce68fa59b87","sha1":"c27ca491887c7fdad5a3ca67592173427cc861af","sha256":"efc3dac74026580ee6b527716e2e63ba29f2116a90d4a47a691438b9a2b86c2f","sha512":"809037c160df1990ac458f977252a4cb2629c748f1a8133240c9d2897b14ad58d2407d822fea9c61efeb19af1e72dc16b29c09c917dca024f4145f1977d1ff57","ssdeep":"","tlshash":"24610234306576b1aefe5ad8f3148428a3148581640b78717e1cb9ee58eef5391f0bea","size":3401,"data":"","first_seen":"2025-12-03T01:51:42.331168Z","last_seen":"2026-04-10T00:24:13.397048Z","times_seen":7380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"usdtbuy.shop/","fqdn":"usdtbuy.shop","domain":"usdtbuy.shop","tld":"shop"},"ip":{"addr":"65.108.71.177","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-07T14:24:36.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.usdtbuy.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 00:43:47 GMT","end":"Tue, 30 Jun 2026 00:43:46 GMT"},"fingerprint":{"sha1":"23:73:75:89:14:6E:45:5B:04:DC:B6:0E:AF:9E:D3:77:8B:6C:BA:72","sha256":"6E:6A:68:F7:99:D5:99:8F:A2:C6:BF:B7:BA:D1:BC:4A:02:06:43:62:67:FA:CE:A5:54:D0:6B:1C:67:59:B8:58"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: usdtbuy.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.3.30\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://usdtbuy.shop/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://usdtbuy.shop/wp-json/wp/v2/pages/7\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://usdtbuy.shop/\u003e; rel=shortlink\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 07 Apr 2026 14:24:36 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":63708,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16879)","md5":"e4f078973dbdd685a36d268389f7f77d","sha1":"d247dad09dceafba4666aba8d16d391963bc756a","sha256":"b8846942da7aa1ed92e9a15c7bcb08657e8f4e9b7bffa516446873f544aa2ce6","sha512":"43503cd6eadbc31a6f473f819482539a8d5453f7db0ba153c061ca9980e83d272ad89e2b70acc289081612ba86b598ff1efbda73baecf2eeece044596f9aa726","ssdeep":"1536:IeKclkY5ypRnfdUZMp64wvSAIXuTVi4QvCihY1:IeKclkY0ndUZMp64wvSAIeTVi4QvCihk","tlshash":"155376a057b448f5797f833b5e44a2185527e902ca0977e5f0f7e294768ceb206e3b0b","first_seen":"2026-04-07T14:22:59.446749Z","last_seen":"2026-04-07T14:25:01.883402Z","times_seen":2,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":32,"dns":0,"connect":13,"send":0,"wait":196,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtbuy.shop/wp-content/plugins/escrow-admin-panel/assets/style.css?ver=1.0","fqdn":"usdtbuy.shop","domain":"usdtbuy.shop","tld":"shop"},"ip":{"addr":"65.108.71.177","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usdtbuy.shop/","date":"2026-04-07T14:24:37.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.usdtbuy.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 00:43:47 GMT","end":"Tue, 30 Jun 2026 00:43:46 GMT"},"fingerprint":{"sha1":"23:73:75:89:14:6E:45:5B:04:DC:B6:0E:AF:9E:D3:77:8B:6C:BA:72","sha256":"6E:6A:68:F7:99:D5:99:8F:A2:C6:BF:B7:BA:D1:BC:4A:02:06:43:62:67:FA:CE:A5:54:D0:6B:1C:67:59:B8:58"}}},"request":{"raw":"GET /wp-content/plugins/escrow-admin-panel/assets/style.css?ver=1.0 HTTP/1.1\r\nHost: usdtbuy.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtbuy.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 14 Apr 2026 14:24:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 02 Apr 2026 16:26:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 401\r\ndate: Tue, 07 Apr 2026 14:24:37 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":901,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"de9a863743a63940f1b1ad2d25622d45","sha1":"e9322cbcf04678903a967a968d527c6da4bf5ea8","sha256":"ac3d0e9fdb6c5a8c748eda284e7cc70077aeec9d2c1693685184f4af8e604ba3","sha512":"1add71869b4dee0c963850c884d03dc8cc4ef8d5cbe33f9dda61092d71e147dcfc8f97fc375fb03de4eb599f3d47ffc38d5b8c13528581bad8faa4ba91b0ab82","ssdeep":"","tlshash":"c4119095e5884292705ac454e541d6fe72006d3e5067f3fe37923065edcb4a33735319","first_seen":"2026-04-07T14:22:59.438042Z","last_seen":"2026-04-07T14:25:01.884205Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f4cb.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtbuy.shop/","date":"2026-04-07T14:24:37.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 19:44:39 GMT","end":"Sun, 24 May 2026 19:44:38 GMT"},"fingerprint":{"sha1":"56:DE:8F:AC:F7:7D:09:E2:76:F8:9A:D7:5D:9D:16:D0:8A:77:E9:1B","sha256":"F4:65:F9:07:07:7E:3C:D6:2E:1F:02:76:FC:58:8D:E2:FE:E1:4B:A5:5A:D5:4C:AE:78:56:62:41:A7:28:80:CC"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f4cb.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtbuy.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 07 Apr 2026 14:24:37 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:29:30 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 20\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":892,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1bfac5a4300cf5668073bd17d178e89e","sha1":"734d53adc8c3f3562d7c0034832e1e1d2ee271af","sha256":"5ca5e373d368aa3fdec96fcc0c23252eb17661aa02b07eb0ed49f2280c5602ea","sha512":"473ee2dc33abe54ea8eba7c43e967a6fabfdb7c8e8852665a6b196bac34a7e31456a579f2ab631604e2f3bae956fcfd741c7fc42508df28f5c73c812758dd3ea","ssdeep":"","tlshash":"33115798eb282476495fa2eb0fec612e23ce6008d3a3775c2109c93d520ba17f863517","first_seen":"2023-08-14T00:52:22Z","last_seen":"2026-04-09T20:22:26.299871Z","times_seen":326,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":36,"dns":1,"connect":7,"send":0,"wait":9,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/23f3.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtbuy.shop/","date":"2026-04-07T14:24:37.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 19:44:39 GMT","end":"Sun, 24 May 2026 19:44:38 GMT"},"fingerprint":{"sha1":"56:DE:8F:AC:F7:7D:09:E2:76:F8:9A:D7:5D:9D:16:D0:8A:77:E9:1B","sha256":"F4:65:F9:07:07:7E:3C:D6:2E:1F:02:76:FC:58:8D:E2:FE:E1:4B:A5:5A:D5:4C:AE:78:56:62:41:A7:28:80:CC"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/23f3.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtbuy.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 07 Apr 2026 14:24:37 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:29:30 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 20\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":548,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"617c1718e07ad475bacecb7e5e401dd3","sha1":"a93761de567df5156731dbaabb5ef27b17ff2cbe","sha256":"2a7a5ec4c9338fb81c3ea9026463b56c4efda965b915d30341944691f0023370","sha512":"da0abc94224d7cffdb7204ac5047fbdd9e62d80b2e6fe0bcb24baac23a6ae1daa59248851285e49e2714e13d68c6bb79508964430a47cbefa18d89998d167afc","ssdeep":"","tlshash":"26f0e1e4db7ca040c51ae8dc2edf63d500077134021c09cbe2c89cfca68066d7866601","first_seen":"2023-05-30T14:40:14Z","last_seen":"2026-04-09T22:52:07.374254Z","times_seen":486,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtbuy.shop/wp-content/plugins/escrow-admin-panel/assets/main.js?ver=1.0","fqdn":"usdtbuy.shop","domain":"usdtbuy.shop","tld":"shop"},"ip":{"addr":"65.108.71.177","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtbuy.shop/","date":"2026-04-07T14:24:37.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.usdtbuy.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 00:43:47 GMT","end":"Tue, 30 Jun 2026 00:43:46 GMT"},"fingerprint":{"sha1":"23:73:75:89:14:6E:45:5B:04:DC:B6:0E:AF:9E:D3:77:8B:6C:BA:72","sha256":"6E:6A:68:F7:99:D5:99:8F:A2:C6:BF:B7:BA:D1:BC:4A:02:06:43:62:67:FA:CE:A5:54:D0:6B:1C:67:59:B8:58"}}},"request":{"raw":"GET /wp-content/plugins/escrow-admin-panel/assets/main.js?ver=1.0 HTTP/1.1\r\nHost: usdtbuy.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtbuy.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 02 Apr 2026 16:26:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1650\r\ndate: Tue, 07 Apr 2026 14:24:37 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4965,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text","md5":"e62ac4da0a63bc6aedb037c078814b5f","sha1":"f588879b0f28f1a2e5d9abd9ec40c3a72337de58","sha256":"5148a77348d9d5e220254236c1b25c87f4c6a0e30b4a4630a4ebefaf58fad9e0","sha512":"5d7504a0ff67f4727a97eac4112f4bb0cf06d3aa2299d69ab7f9fb8beb3ecedcae6f9b38cbf083def17ae0a6358998f413f8d1e41c82dd8be3f17c85056ce043","ssdeep":"96:2DwvF+R4gS4o6A7RFJ5imJYeiAmq+2dYCbRLSlfXlZrTTX2JLSV3mKDghzJBtm77:2DS0Kwob7JckviAIGYCbReXrKJm0KI2v","tlshash":"b8a164362377602407371ada2d9f115a20d67343fa4ac98532ec4421afafa89cdf75ce","first_seen":"2026-04-07T14:22:59.442224Z","last_seen":"2026-04-07T14:25:01.88625Z","times_seen":2,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtbuy.shop/favicon.ico","fqdn":"usdtbuy.shop","domain":"usdtbuy.shop","tld":"shop"},"ip":{"addr":"65.108.71.177","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtbuy.shop/","date":"2026-04-07T14:24:37.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.usdtbuy.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 00:43:47 GMT","end":"Tue, 30 Jun 2026 00:43:46 GMT"},"fingerprint":{"sha1":"23:73:75:89:14:6E:45:5B:04:DC:B6:0E:AF:9E:D3:77:8B:6C:BA:72","sha256":"6E:6A:68:F7:99:D5:99:8F:A2:C6:BF:B7:BA:D1:BC:4A:02:06:43:62:67:FA:CE:A5:54:D0:6B:1C:67:59:B8:58"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: usdtbuy.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtbuy.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 07 Apr 2026 14:24:37 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-10T00:24:13.372434Z","times_seen":117234,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtbuy.shop/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210","fqdn":"usdtbuy.shop","domain":"usdtbuy.shop","tld":"shop"},"ip":{"addr":"65.108.71.177","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtbuy.shop/","date":"2026-04-07T14:24:37.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.usdtbuy.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 00:43:47 GMT","end":"Tue, 30 Jun 2026 00:43:46 GMT"},"fingerprint":{"sha1":"23:73:75:89:14:6E:45:5B:04:DC:B6:0E:AF:9E:D3:77:8B:6C:BA:72","sha256":"6E:6A:68:F7:99:D5:99:8F:A2:C6:BF:B7:BA:D1:BC:4A:02:06:43:62:67:FA:CE:A5:54:D0:6B:1C:67:59:B8:58"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210 HTTP/1.1\r\nHost: usdtbuy.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtbuy.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 28 Oct 2025 11:26:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1057\r\ndate: Tue, 07 Apr 2026 14:24:37 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3401,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (3401), with no line terminators","md5":"81f491adccda86aaf56a1ce68fa59b87","sha1":"c27ca491887c7fdad5a3ca67592173427cc861af","sha256":"efc3dac74026580ee6b527716e2e63ba29f2116a90d4a47a691438b9a2b86c2f","sha512":"809037c160df1990ac458f977252a4cb2629c748f1a8133240c9d2897b14ad58d2407d822fea9c61efeb19af1e72dc16b29c09c917dca024f4145f1977d1ff57","ssdeep":"","tlshash":"24610234306576b1aefe5ad8f3148428a3148581640b78717e1cb9ee58eef5391f0bea","first_seen":"2025-12-03T01:51:42.331168Z","last_seen":"2026-04-10T00:24:13.397048Z","times_seen":7380,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtbuy.shop/wp-content/themes/twentytwentyfive/assets/fonts/manrope/Manrope-VariableFont_wght.woff2","fqdn":"usdtbuy.shop","domain":"usdtbuy.shop","tld":"shop"},"ip":{"addr":"65.108.71.177","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usdtbuy.shop/","date":"2026-04-07T14:24:37.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.usdtbuy.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 00:43:47 GMT","end":"Tue, 30 Jun 2026 00:43:46 GMT"},"fingerprint":{"sha1":"23:73:75:89:14:6E:45:5B:04:DC:B6:0E:AF:9E:D3:77:8B:6C:BA:72","sha256":"6E:6A:68:F7:99:D5:99:8F:A2:C6:BF:B7:BA:D1:BC:4A:02:06:43:62:67:FA:CE:A5:54:D0:6B:1C:67:59:B8:58"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfive/assets/fonts/manrope/Manrope-VariableFont_wght.woff2 HTTP/1.1\r\nHost: usdtbuy.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtbuy.shop/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 14 Apr 2026 14:24:37 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 28 Oct 2024 23:02:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 53600\r\ndate: Tue, 07 Apr 2026 14:24:37 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":53600,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 53600, version 1.0","md5":"a8ebc7eb54efacfda66d0a2531058ecd","sha1":"5b56dbe3d3eabe178719988f4fee76d9d4ad7079","sha256":"ce340d48531930f3f2c8b7c47d149f82c9f4413548dd216e0f4d9af94a87c374","sha512":"bde7ef9fa476ae2bf7220afadc1285dec21f1a51718f3633a82cd4d08ac0adafd02acf01db82b3c263ab8a87e2cb18a03830f302d664f4441629ec24678bf2ac","ssdeep":"1536:GcCtX6JRTj6XLzm1OSRKt9Vo3IGC9pT/UTQ+z/y:qX6DWXPmwSRIVPGC9pTREy","tlshash":"203302d1f44038206c75e3fbddecfb9434ea81aaf53945d384a658bc0f8056addb0264","first_seen":"2023-11-30T06:19:19Z","last_seen":"2026-04-10T00:30:12.281706Z","times_seen":7113,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f517.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtbuy.shop/","date":"2026-04-07T14:24:37.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 19:44:39 GMT","end":"Sun, 24 May 2026 19:44:38 GMT"},"fingerprint":{"sha1":"56:DE:8F:AC:F7:7D:09:E2:76:F8:9A:D7:5D:9D:16:D0:8A:77:E9:1B","sha256":"F4:65:F9:07:07:7E:3C:D6:2E:1F:02:76:FC:58:8D:E2:FE:E1:4B:A5:5A:D5:4C:AE:78:56:62:41:A7:28:80:CC"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f517.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtbuy.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 07 Apr 2026 14:24:37 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:22:03 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 20\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":502,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7c13aa0def6ccb6932f47dedd33f59c1","sha1":"64b8cede1c101f5355935c0ad126e0cea31ab608","sha256":"fa8717b7f702f4a53ec6b76775d90e2583470d0262499e9af5e4477069920156","sha512":"7d432f7752f6ae4af03cf65e22a67106688334ecf9e94ee998f44becda415bf6b832276e7562d98bd5b965af6f3e00d31fbefe82ca2ee0b926fe1b1e251ffc3e","ssdeep":"","tlshash":"01f050512db8b4cc68950ddd4e9964d30277423dd3578aedd6d8d82094d3dc15f0dc19","first_seen":"2023-04-06T22:22:04Z","last_seen":"2026-04-09T12:03:34.816308Z","times_seen":749,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":42,"dns":0,"connect":7,"send":0,"wait":8,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f50d.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtbuy.shop/","date":"2026-04-07T14:24:37.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 19:44:39 GMT","end":"Sun, 24 May 2026 19:44:38 GMT"},"fingerprint":{"sha1":"56:DE:8F:AC:F7:7D:09:E2:76:F8:9A:D7:5D:9D:16:D0:8A:77:E9:1B","sha256":"F4:65:F9:07:07:7E:3C:D6:2E:1F:02:76:FC:58:8D:E2:FE:E1:4B:A5:5A:D5:4C:AE:78:56:62:41:A7:28:80:CC"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f50d.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtbuy.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 07 Apr 2026 14:24:37 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 460\r\nlast-modified: Fri, 07 Nov 2025 05:25:34 GMT\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 20\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":460,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ddeb2a90dd32867b77e22b1eccf5fa55","sha1":"4d82637afe3e2c9db1b4de57deff09c321d9bcc0","sha256":"426d4db7bb4ca89f374e8c1b85807741e44b26a8d1691517f670256125624134","sha512":"03629e066255c2882b4a2b03d2a013646427e88cdc2c70cd42e18990cfdf24f2bb55cacc8e9fcef6e501fca34d088270c0a614b05ba88c78b8a96249a464ff83","ssdeep":"","tlshash":"4af05cd2f038facf4cc48566d59ef4f5b5b6b0bcd30406dc70868818aa46bfb6451970","first_seen":"2023-05-23T14:24:05Z","last_seen":"2026-04-10T00:25:14.9166Z","times_seen":3174,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":38,"dns":2,"connect":12,"send":0,"wait":7,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/21aa.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtbuy.shop/","date":"2026-04-07T14:24:37.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 19:44:39 GMT","end":"Sun, 24 May 2026 19:44:38 GMT"},"fingerprint":{"sha1":"56:DE:8F:AC:F7:7D:09:E2:76:F8:9A:D7:5D:9D:16:D0:8A:77:E9:1B","sha256":"F4:65:F9:07:07:7E:3C:D6:2E:1F:02:76:FC:58:8D:E2:FE:E1:4B:A5:5A:D5:4C:AE:78:56:62:41:A7:28:80:CC"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/21aa.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtbuy.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 07 Apr 2026 14:24:37 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 336\r\nlast-modified: Fri, 07 Nov 2025 05:29:30 GMT\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 20\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":336,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"397cc2a7ee743bfc004701afc818b84a","sha1":"b5043ba9f8df7f72c4cdfac50b866b54bb7e3c2b","sha256":"fc7e786036674457c8e8555a51a1ba0b5fb24e11012e0520c31c4947729dfbdf","sha512":"73c846d360a0754ab6b24e5903c6f0de999c6d725eb07c61bd9e5a651eb4201855f5384f36bf93db2e1e3ed8d2ed1e61971077c33323cb7c19884ed2e3c1f7d9","ssdeep":"","tlshash":"51e020a9d069d5c58832c6b03c593ac01b09537a259100edf497272cbcc46de7301fd4","first_seen":"2024-05-15T19:17:28Z","last_seen":"2026-04-07T14:25:01.889921Z","times_seen":155,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":37,"dns":3,"connect":12,"send":0,"wait":8,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f4b8.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtbuy.shop/","date":"2026-04-07T14:24:37.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 19:44:39 GMT","end":"Sun, 24 May 2026 19:44:38 GMT"},"fingerprint":{"sha1":"56:DE:8F:AC:F7:7D:09:E2:76:F8:9A:D7:5D:9D:16:D0:8A:77:E9:1B","sha256":"F4:65:F9:07:07:7E:3C:D6:2E:1F:02:76:FC:58:8D:E2:FE:E1:4B:A5:5A:D5:4C:AE:78:56:62:41:A7:28:80:CC"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f4b8.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtbuy.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 07 Apr 2026 14:24:37 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:22:03 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 20\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4954,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aff6d39f4947f22f042e67ac21a9dc7a","sha1":"394e6746f8df722cb6178aa9e826d8ba37a61b59","sha256":"ba092715bd6bd22a504e8b81116bfa85f85f5b1987800fcfcd36ddc63bc9fce0","sha512":"ebd045981814271baf69b7de842450c08afb986cb6eff3a4b055ddb9e82db384b37eeb31c543dcfc57310949ca5a828e20cce3dbc30bb42fd61e1bc10019d447","ssdeep":"96:0neqBRkbeD3mW6xfpgcs/2+58YrL18itXWZca27fB91:0neYkbednL18iWZcauf1","tlshash":"c4a124cb1270b3c0a6caebaedf2feea4146564fe9d754284425b478c658b9c5fd48820","first_seen":"2023-05-05T15:38:46Z","last_seen":"2026-04-09T23:40:12.769177Z","times_seen":1718,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.7.2/ethers.umd.min.js?ver=5.7.2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtbuy.shop/","date":"2026-04-07T14:24:37.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/ethers/5.7.2/ethers.umd.min.js?ver=5.7.2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtbuy.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Apr 2026 14:24:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 139139\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"6350cee7-21f83\"\r\nlast-modified: Thu, 20 Oct 2022 04:30:31 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 66943\r\nexpires: Sun, 28 Mar 2027 14:24:37 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2BkXNmBCOHeVsIwy7m0oWrf1OZtAhY1iWfoyh86I2m9INmrIqpCvlu429SgA%2FzMVXmCWbjv%2Ff%2FXdTkQjryTJ5WzTiEylc%2Fv21lahROoH8f7Kq6cVBR7vSgbHyxbintJ1WP5wY0PF\"}]}\r\ncf-ray: 9e89b2676c3a5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":760171,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-04-09T13:42:21.5062Z","times_seen":3121,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":12,"dns":1,"connect":1,"send":0,"wait":9,"receive":10,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtbuy.shop/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=66c613f68580994bb00a","fqdn":"usdtbuy.shop","domain":"usdtbuy.shop","tld":"shop"},"ip":{"addr":"65.108.71.177","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtbuy.shop/","date":"2026-04-07T14:24:37.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.usdtbuy.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 00:43:47 GMT","end":"Tue, 30 Jun 2026 00:43:46 GMT"},"fingerprint":{"sha1":"23:73:75:89:14:6E:45:5B:04:DC:B6:0E:AF:9E:D3:77:8B:6C:BA:72","sha256":"6E:6A:68:F7:99:D5:99:8F:A2:C6:BF:B7:BA:D1:BC:4A:02:06:43:62:67:FA:CE:A5:54:D0:6B:1C:67:59:B8:58"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=66c613f68580994bb00a HTTP/1.1\r\nHost: usdtbuy.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtbuy.shop/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 29 Jan 2026 22:37:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14617\r\ndate: Tue, 07 Apr 2026 14:24:37 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41194,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (41194), with no line terminators","md5":"4dc1083fadc3146eef9e178a635322d7","sha1":"4e30da47cbbd6c3b4bc243ef9196fdb54b8a5648","sha256":"222102c59fbeb8df4f97e143c264d83d794d74a6123486b03b9ecf32a5471918","sha512":"aa096ebe4c95e43225ee1f09450521632db53c9cd732d01e1492747a1f45cb0254cc2a443cd1f024314c86fa0eec441f20ae33c5ef4a55d6cb95bcb7b84d3384","ssdeep":"768:HeW4693pQRsx45G/0vTVhtFiBa7jJEbYlrEdORuHhYlxuQLSZEXdYqAOmp9mI66f:HeQ93u6/0vxh17thuhyQpgFbonUWqeou","tlshash":"bc03c7a4b065f03047e614a6907b051bf3356618344fc0e0f769e8ea78b919f6567f3e","first_seen":"2026-02-04T02:31:53.531475Z","last_seen":"2026-04-10T00:24:13.404345Z","times_seen":2476,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usdtbuy.shop/wp-includes/js/wp-emoji-release.min.js?ver=6.9.4","fqdn":"usdtbuy.shop","domain":"usdtbuy.shop","tld":"shop"},"ip":{"addr":"65.108.71.177","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usdtbuy.shop/","date":"2026-04-07T14:24:37.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.usdtbuy.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Apr 2026 00:43:47 GMT","end":"Tue, 30 Jun 2026 00:43:46 GMT"},"fingerprint":{"sha1":"23:73:75:89:14:6E:45:5B:04:DC:B6:0E:AF:9E:D3:77:8B:6C:BA:72","sha256":"6E:6A:68:F7:99:D5:99:8F:A2:C6:BF:B7:BA:D1:BC:4A:02:06:43:62:67:FA:CE:A5:54:D0:6B:1C:67:59:B8:58"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.4 HTTP/1.1\r\nHost: usdtbuy.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtbuy.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 07 Nov 2025 13:44:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4949\r\ndate: Tue, 07 Apr 2026 14:24:37 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-10T00:28:30.43134Z","times_seen":139736,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f4bc.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usdtbuy.shop/","date":"2026-04-07T14:24:37.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 19:44:39 GMT","end":"Sun, 24 May 2026 19:44:38 GMT"},"fingerprint":{"sha1":"56:DE:8F:AC:F7:7D:09:E2:76:F8:9A:D7:5D:9D:16:D0:8A:77:E9:1B","sha256":"F4:65:F9:07:07:7E:3C:D6:2E:1F:02:76:FC:58:8D:E2:FE:E1:4B:A5:5A:D5:4C:AE:78:56:62:41:A7:28:80:CC"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f4bc.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://usdtbuy.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 07 Apr 2026 14:24:37 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:21:38 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 20\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":651,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7d4bf2e92b2587e47b09997dbc654823","sha1":"08f6139e131b9a0be5342ff255e072346ce9ef7b","sha256":"b7244d06499e782eb58335018c80c0f5dca9454d7dab0c9b85e3ced8a2ec1ab9","sha512":"53f07154534de82deaa3a6ae1cbd9ba459dbcb9560c3ec709f5ca4fd8ce166bcd529f770067ab4f7ad3ecbbc977bf0b0627b735e922860a530f6233d2e6ac1c1","ssdeep":"","tlshash":"96f08fd4e638d4c24506e99c3ecd37c6140d27363215509bf10fbb28e5ca5fa3a86a24","first_seen":"2023-05-23T14:24:05Z","last_seen":"2026-04-09T22:33:32.71019Z","times_seen":553,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":44,"dns":1,"connect":7,"send":0,"wait":8,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}