{"report_id":"ceb64dcb-6b92-4ade-b53d-acf6a23d8a1a","version":6,"status":"done","tags":[],"date":"2026-01-25T04:15:21Z","url":{"schema":"https","addr":"usust.top/","fqdn":"usust.top","domain":"usust.top","tld":"top"},"ip":{"addr":"172.67.218.4","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"usust.top/#/","fqdn":"usust.top","domain":"usust.top","tld":"top"},"title":"A website focusing on USDT trading for 5 years","dom":{"size":660250,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (36803)","md5":"c8d38788a0f8d41b9a108663cb31bec4","sha1":"92e187c234f5758d41889c82c01cf0db58519cfb","sha256":"a621468c2b2c7d6bba68cd4e8ed97087367b47e49ae3efb90c3413394ff50376","sha512":"8a7810febf0025a828d6bb34ca0ca88b3bb62977f7b9c3a23f58a495f9deb961d1701d8f149b08fcf1114ae33ec0538df4db6937e4a8bbd4c5567bb103810850","ssdeep":"3072:fFduBRzXv11dFGJERBRVpaRKpIvJmJXpO:dQ3zXv11TGODnI0Svct4","tlshash":"a4e429e7f9cd20089127c296c55177bcb93fbad743429e836a0abb318f165cb361461e","dom_hash":"domhash9fcca42549c476624e704da4a0632960","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"usust.top/","fqdn":"usust.top","domain":"usust.top","tld":"top"},"ip":{"addr":"172.67.218.4","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-01T04:15:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-25","alert":"Sinkholed","trigger":"usust.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"usust.top","ip":{"addr":"172.67.218.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-23","domain_rank":0,"first_seen":"2026-01-25T04:15:23.904704Z","last_seen":"2026-01-25T04:15:23.904705Z","alert_count":18,"request_count":18,"received_data":3067356,"sent_data":8312,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-18T22:20:30.851037Z","alert_count":0,"request_count":1,"received_data":434633,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"111.231.169.247","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-01-21T11:55:18.622959Z","alert_count":0,"request_count":1,"received_data":579,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"usust.top/static/js/pages-bind-bank~pages-bind-wallet~pages-deposit-index~pages-deposit-newindex~pages-give-index~pages-~4b01d782.381b74d0.js","fqdn":"usust.top","domain":"usust.top","tld":"top"},"ip":{"addr":"172.67.218.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e336fd6882b34e1d479ec1196b3048c4","sha1":"793cc61f5814a1ca0c445dde19453b521eec165f","sha256":"32deb6b9d97cebc0e195f62d5337bd8565e54938e0acc07349abdaf99e191999","sha512":"2d165721261a71ecf96c3fc33f7ed630752c6223336ad9d7031d546a36126d64d6cde9fd741e16dfa485e7b737d180f4cb6eafdc5dbea129c6cbdc886d189423","ssdeep":"192:zeXTWE+X1fRC7a7O6aWog+6WlEjZVMrtehj5nDJNUu7N5X8q+aYz212j292wc2Dd:LIiR+68E0ehjlDJNUuJ+xHfR1MOUuk","tlshash":"e0530c86f5da200e4267c7a9d141b7f87aaaad230a8178d2d84f7f784f175ce252071f","size":62439,"data":"","first_seen":"2025-10-08T16:53:25.49731Z","last_seen":"2026-04-18T09:10:09.944849Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usust.top/static/js/pages-bind-bank~pages-bind-wallet~pages-deposit-index~pages-deposit-newindex~pages-give-index~pages-~5f13f1a4.dc1eb6f7.js","fqdn":"usust.top","domain":"usust.top","tld":"top"},"ip":{"addr":"172.67.218.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"623e30d55e4a251af84df54e0a546d28","sha1":"1cb3e74f70c9bd30582a1ac30504966136986a38","sha256":"c89bd4fb1157f1d21ae1bb5e5decd656ced4ee7179e34b8776b066389b021576","sha512":"89b27935d0509a3fa744814ab910a0cd227e5a53c5dcbce9d248f4190ca8178083e323d95c732b266fb3c94f8db13b83574c74a129407015907194e0635f1e7b","ssdeep":"192:gqB26G7XeaPY+T1fBHUnQk++EJSGv0bJRiHtgpuzczxMMmaFmUpf80yE0w2X2O2S:chcS4GvYJ7uzc1MMmaFDwXOQ","tlshash":"b3431be2fddc201e4167c701954132fc9eabaa2baac168d2d8633f344e961c7752e71d","size":57065,"data":"","first_seen":"2025-10-08T16:53:25.511211Z","last_seen":"2026-04-18T09:10:09.932413Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usust.top/static/js/pages-login-index.124c3c8b.js","fqdn":"usust.top","domain":"usust.top","tld":"top"},"ip":{"addr":"172.67.218.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d742c627d3fce2d1e12f4608cddde97","sha1":"a4cbe860407ceaacbf029f2dcf44eca8e458c829","sha256":"bbc01f26aa3f6a5452bf7569098e65ca92d2811893eadc1b1775fa72263daea1","sha512":"7ccfc5c869320693bb473c3b9f0d13f5184f272a1a2ddb460b145fec101363fabae97d8cae28fd5ad6c9d9d36039d5eb029e2b62532c74e3ae077b85c1bd2f08","ssdeep":"6144:osDqU5bA5UFmeDHhTOoKqUrYarla1IUPx:oy7KMmeDuqmTrla2A","tlshash":"86b4a6a7f6dd20055267c785d04632fd8d3a6a778301ec43f991bfb18f2a6da3a2461c","size":511422,"data":"","first_seen":"2025-10-08T16:53:25.513789Z","last_seen":"2026-04-18T09:10:09.937948Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usust.top/static/js/pages-invest-index~pages-login-index~pages-login-registry~pages-my-index~pages-newtask-orderList~pag~d5d39553.21e54f5f.js","fqdn":"usust.top","domain":"usust.top","tld":"top"},"ip":{"addr":"172.67.218.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1d08415973ee35bb092d022fb8420b9","sha1":"b960da31498891f2a4f68a5096456c51a67cc2d4","sha256":"2264870faad4c8103da71f5a90e66d10e8e75c6417695508e7b49dbea6f05f8d","sha512":"f38cdbcff83660327a2d097e493a0b8da0afddfe873528e6e304520f370e6d17bbd7361321d1fd497a4a28089eb1639bea32aa1be7d4935ea354622c14b0fa21","ssdeep":"768:mctgKjX4okKo7nfh5kMGczUt0QsU7yF+1V46nqhVCkBnm:5tgKjX7ufhq+UeYJCRwkBnm","tlshash":"26343a9af9cc60148667cb56c59237fcda3ff92712056e82d989af348f276c63710a1c","size":241152,"data":"","first_seen":"2025-10-08T16:53:25.528538Z","last_seen":"2026-04-18T09:10:09.934057Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usust.top/static/js/chunk-vendors.d2db3ed6.js","fqdn":"usust.top","domain":"usust.top","tld":"top"},"ip":{"addr":"172.67.218.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"195ea88ad7545a3f7ab7ef04460e369d","sha1":"97f1421cebcb9fa96f91ba2b1f671fc47a2d8e39","sha256":"1a09b4caa05806e6012d5c9d704f9b50b92833c3c9a1161aba5ebc7c5da3f7d8","sha512":"f18d358b51e7ce4a9fbb8206a15cdfa4e9d3288f40a5761f2778dfa4c2fa9a01eb83efb4391f78a1892d732c5c544edf05c00a97364e446afdb41b558dc834e1","ssdeep":"12288:oI+txmCOH5XJsT0BWniQaiU3H+cd8jwr0fAFptjHeQGjn6Xme:oXxmCOH5XyT0YniQaV3FOTfuj+QGj6P","tlshash":"2f453acd7286b0a247e321b5403f260bb23b2aa9680e8814f665e4d5bd78d5d5337f7c","size":1184018,"data":"","first_seen":"2025-10-08T16:53:25.544771Z","last_seen":"2026-04-18T09:10:09.974033Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usust.top/static/js/index.d57eb0b0.js","fqdn":"usust.top","domain":"usust.top","tld":"top"},"ip":{"addr":"172.67.218.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4adc65357211e169feed1b4858a7a900","sha1":"f6ece84f7d3604c8e99cf2c531a288a59de0da3a","sha256":"55673c75fee11df8e594182dc3ec3b850212171fa661c23a3f20e1818613f537","sha512":"6f5d366ee25139a1d43199193939b99f3728f1a5a16440ecd73e88015e10876cc26d472fcf2d8d9c57fe2e841ef36711431bd44080859e261c473dd02a96c4c8","ssdeep":"6144:Z0tJpY/ufc5UqN7SEBTzLNJAAih8s1ER06tYI:ZMJpYWMN5fNGABsGR0dI","tlshash":"42d44dcebfcd128c059662457097ae3963b72c52412ee451e3d9cba01fedc89b53da38","size":650080,"data":"","first_seen":"2026-01-24T18:49:02.65889Z","last_seen":"2026-04-18T09:10:09.928949Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usust.top/","fqdn":"usust.top","domain":"usust.top","tld":"top"},"ip":{"addr":"172.67.218.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c7c2044589cd6c4afb8f708d8f4929ce","sha1":"0a1a91f258a6b31b5f24008bde88fe949fd00317","sha256":"20217fc70ebe327eee12ece90b2c8ad0e6f760234c316849f05b7e2a7d0ee931","sha512":"50894a9f5d6c19842e74141d8b09cfc2ed951ee4d75dd45343c8c9156064fabc2129acf0c4635cfba00be760064af9293e826d7df958097177d67e364bb11248","ssdeep":"","tlshash":"25c04cb4761959305659a22d7239e7d83dbb501130437547901c158d0cf4e945671ea9","size":159,"data":"","first_seen":"2023-03-07T12:06:42Z","last_seen":"2026-06-05T19:55:23.264745Z","times_seen":1132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usust.top/","fqdn":"usust.top","domain":"usust.top","tld":"top"},"ip":{"addr":"172.67.218.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f3f295af79532710ca866d1d98080031","sha1":"6fe115bf2476878ab746804ef75bc3c1d8b229e7","sha256":"82094c378b3eea9ab68190c952d8e1df96eb40394a8cd86ee93a4f30ef1a3346","sha512":"f53876910f95317e1783ca67918346fe9a1968915829bbca864a014520e9d0f85871fdcbb507e932b26be3533b6f7ab3788ac23552a09e37a6db1754a9c45755","ssdeep":"","tlshash":"27c02b9c230a9d7072ef27000f3fba04b0913322b8d01c300a19a30c7b61e0bf7049a0","size":157,"data":"","first_seen":"2026-01-24T18:49:02.675038Z","last_seen":"2026-04-18T09:10:09.979171Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-KDW6DRTX61","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1f9eda951ca334b99c6177384561e3f","sha1":"a7425136cc6e584e6a2b5ffbda856724de502e02","sha256":"2960836ac63d01626f6b58b015853f1f9df422d32170494ac1473159e9fa0dc7","sha512":"b7dbb9e9473ec9b21974e52f8b6eceff57764260f20c65179f120d4771d0273db46bc9c98ef99ba088d5e7225814cbc4905dd23bf1538a1a60aaa98948554371","ssdeep":"6144:pbJmMvkbBQAxJ508XYoeZlzlFldbKKCYTdqb0NqB7XD:LmM8bBQAxJ508XYNljdq3D","tlshash":"6e941ace73d670269396f478503f118ba57b29a2b45cc89af189cce01e74a9a4137f7c","size":434029,"data":"","first_seen":"2026-01-24T18:49:02.661354Z","last_seen":"2026-01-25T04:15:27.854946Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usust.top/static/js/pages-bind-bank~pages-bind-wallet~pages-deposit-index~pages-deposit-newindex~pages-give-index~pages-~8f3c16bb.79130c9c.js","fqdn":"usust.top","domain":"usust.top","tld":"top"},"ip":{"addr":"172.67.218.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"42be99fd8c7e13c8d3e397d7f5bdd75e","sha1":"7aa296c16f1f5528099b509b0a82a99072ddd912","sha256":"75f4e9a92997ef41265cad33bc5901040c3cd0fd427fc08c09cc8db015af75e6","sha512":"b8043c68ede9b69496b6f46cfad35b3a82dc394639a59e0e39ab2d24a016d3e8e3e4c6762c06e504231d913e15eab45c24a1ba05524e335f034fd337f4ddc5c3","ssdeep":"384:kUXPscySDsgqXe40Ou8OLG5Vtddbz00lmpB8r:/scPDsx0EOLG5Jmps","tlshash":"8c531a87fdda20154667c741d1a532f8bb2eeab34b416862f849af2c4f365ce250ed1c","size":66075,"data":"","first_seen":"2025-10-08T16:53:25.494603Z","last_seen":"2026-04-18T09:10:09.943575Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"usust.top/static/bg-rb.620f4095.svg","fqdn":"usust.top","domain":"usust.top","tld":"top"},"ip":{"addr":"172.67.218.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usust.top/","date":"2026-01-25T04:15:00.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usust.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 06:16:55 GMT","end":"Sat, 28 Mar 2026 07:16:48 GMT"},"fingerprint":{"sha1":"E9:F5:35:3B:19:8D:5D:71:46:69:02:89:2B:76:06:40:9D:04:AA:0A","sha256":"73:92:89:FC:44:4C:68:DF:4B:6D:AF:0A:11:82:08:BC:29:8E:54:FA:1A:44:BA:23:20:F8:39:0F:96:CF:1E:C2"}}},"request":{"raw":"GET /static/bg-rb.620f4095.svg HTTP/1.1\r\nHost: usust.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usust.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 04:15:00 GMT\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ou3bSYF6SbQk5fH%2BcCNtxBU201FHtmzdbY6p5uX1jpqMfXMYh0mwAeogrTlSJ5OX7CIiwpfSlV%2Fw2zprdmG1wZUedzG3sbM%3D\"}]}\r\netag: W/\"6a900c3a12aa4cfddc9d63fed4e6ba6e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c34f26a1ec1723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2494,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7c30557c9e61649b94e3418ac77acb67","sha1":"0169e8ea24449ff3e56482396f8216a700520293","sha256":"293ae79c2a44faeb095b405c8154eac40c31583b4b0ddbed7af12b9d686d05a6","sha512":"9172767da412f6cc82706f8e9a6b3021c50460fc3b7fa6fdbf00dc29f87987cf0d5129aed8574dd71c8a67c833c49ff97f11392a06e961b184e7fd7942636bbe","ssdeep":"","tlshash":"1f51f07aa6bb4473e110d399ebc4c0346b2b49c356819112f41e2f9f1f789e6c6ab3d0","first_seen":"2025-10-08T16:53:25.516737Z","last_seen":"2026-04-18T09:10:09.949556Z","times_seen":6,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-25","alert":"Sinkholed","trigger":"usust.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usust.top/static/bg-rb2.458b4123.svg","fqdn":"usust.top","domain":"usust.top","tld":"top"},"ip":{"addr":"172.67.218.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usust.top/","date":"2026-01-25T04:15:00.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usust.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 06:16:55 GMT","end":"Sat, 28 Mar 2026 07:16:48 GMT"},"fingerprint":{"sha1":"E9:F5:35:3B:19:8D:5D:71:46:69:02:89:2B:76:06:40:9D:04:AA:0A","sha256":"73:92:89:FC:44:4C:68:DF:4B:6D:AF:0A:11:82:08:BC:29:8E:54:FA:1A:44:BA:23:20:F8:39:0F:96:CF:1E:C2"}}},"request":{"raw":"GET /static/bg-rb2.458b4123.svg HTTP/1.1\r\nHost: usust.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usust.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 04:15:00 GMT\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7usfB4KMmd%2BwLWRmN8rh7sACa8nxMWxYpiEY35u7FzafZNPK5610xGccH80vqks%2Fc%2F7nUZyYxFZU1kOvGsauwVldExa0%2BPemEw%3D%3D\"}]}\r\netag: W/\"f91e5936e33118d42db3ca277ad903b0\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c34f26a1ec2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2494,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9d5bcbd92afce478d0c89fb856483f6e","sha1":"7b00189ecbb169984bbfd940704eb1f87502f819","sha256":"5ba0ab042edd87a78f7a26753d6a056a3c59c9ebb9564410dfdfd575672c4b15","sha512":"673a572c2f875170b3e5af4e5d2d5a1190ecf4f875792bd83b6895739690c311d6ca90e9ef07a70f57e67fc45a812a34606cfb7ba8feb9edf2fb9f2a363e02b9","ssdeep":"","tlshash":"c651d27aabbb4473a110c3a9ebc0d0245b1b49c352918111f45d1f9f1f389e6d69b3d0","first_seen":"2025-10-08T16:53:25.518672Z","last_seen":"2026-04-18T09:10:09.918007Z","times_seen":6,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-25","alert":"Sinkholed","trigger":"usust.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usust.top/","fqdn":"usust.top","domain":"usust.top","tld":"top"},"ip":{"addr":"172.67.218.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-25T04:14:59.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usust.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 06:16:55 GMT","end":"Sat, 28 Mar 2026 07:16:48 GMT"},"fingerprint":{"sha1":"E9:F5:35:3B:19:8D:5D:71:46:69:02:89:2B:76:06:40:9D:04:AA:0A","sha256":"73:92:89:FC:44:4C:68:DF:4B:6D:AF:0A:11:82:08:BC:29:8E:54:FA:1A:44:BA:23:20:F8:39:0F:96:CF:1E:C2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: usust.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 25 Jan 2026 04:14:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V2WZjZ%2FY2CtIP6eCTwMEIQRcQYYRe0GCp8f4LY1pUiC9BPGo0zY1OZy0h8yExqsAm4WSNqwh4YwL0hFQlVDb6s5vHEvadARKRg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9c34f264ae383181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1216,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (510)","md5":"509f4831fbe92e95a4abc4af3d098507","sha1":"abdcd85cd51f2377b16c5deb75c2e549a68ffaf3","sha256":"7850008eb6c6a7944e3c594b546003aa87e37aad884b4d0ce669f5ccf34388f9","sha512":"44b7d089b7fb0bd42025f5e879931eccce7fe34fe333c5222ed4aefd93e9f8093488cbbeeaa1e03752865ef735604322d7203ae404e3d99f79c6f3003c765794","ssdeep":"","tlshash":"0321fee22e00c8392f619715767ef20da4ab98a239519c61e09c28dc0ce0fc9de6bd64","first_seen":"2026-01-24T18:49:02.67118Z","last_seen":"2026-04-18T09:10:09.922259Z","times_seen":4,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":71,"dns":57,"connect":1,"send":0,"wait":65,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-25","alert":"Sinkholed","trigger":"usust.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usust.top/static/js/chunk-vendors.d2db3ed6.js","fqdn":"usust.top","domain":"usust.top","tld":"top"},"ip":{"addr":"172.67.218.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usust.top/","date":"2026-01-25T04:14:59.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usust.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 06:16:55 GMT","end":"Sat, 28 Mar 2026 07:16:48 GMT"},"fingerprint":{"sha1":"E9:F5:35:3B:19:8D:5D:71:46:69:02:89:2B:76:06:40:9D:04:AA:0A","sha256":"73:92:89:FC:44:4C:68:DF:4B:6D:AF:0A:11:82:08:BC:29:8E:54:FA:1A:44:BA:23:20:F8:39:0F:96:CF:1E:C2"}}},"request":{"raw":"GET /static/js/chunk-vendors.d2db3ed6.js HTTP/1.1\r\nHost: usust.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usust.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 04:14:59 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M75xVYkO44uz%2FHtY%2FUNMZ3XmUBhVxwz8vc5jxSqypf53AsdBC4DL2evRl3CIyhFcHgAZnbtaASGazuTwWUcmvAM3xJ%2Bp53I%3D\"}]}\r\netag: W/\"1a68ef13dd708707e78b7aa5043ad14c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c34f2669e6b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1184063,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30006)","md5":"1e4f9b03d42b968762e0818b3173b08c","sha1":"4a83fdf3f51d2e14591133d092e853ed2f8754c4","sha256":"2bfc7e57e12fd1e66462b77bc67736a30ef1c21081455e16e3c524ac364003d3","sha512":"bfc440331493e78ec60346480c5810a541ccdb12a0fcabb194d9b4d73919eab9141cb4d545891b8fe33c48775af019addf700cb3068d0d8c1ec4e29291f92e9a","ssdeep":"12288:oI+txmCOH5XJsT0BWniQaiU3H+cd8jwr0fAFptjHeQGjn6Xmz:oXxmCOH5XyT0YniQaV3FOTfuj+QGj62","tlshash":"02354acd728ab0a247e321b1403f360bb23b2aa9680e8454f665e4d5ad78d5d5337f7c","first_seen":"2026-01-24T18:49:02.662267Z","last_seen":"2026-01-25T04:15:27.848862Z","times_seen":3,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-25","alert":"Sinkholed","trigger":"usust.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usust.top/static/js/pages-bind-bank~pages-bind-wallet~pages-deposit-index~pages-deposit-newindex~pages-give-index~pages-~8f3c16bb.79130c9c.js","fqdn":"usust.top","domain":"usust.top","tld":"top"},"ip":{"addr":"172.67.218.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usust.top/","date":"2026-01-25T04:15:00.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usust.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 06:16:55 GMT","end":"Sat, 28 Mar 2026 07:16:48 GMT"},"fingerprint":{"sha1":"E9:F5:35:3B:19:8D:5D:71:46:69:02:89:2B:76:06:40:9D:04:AA:0A","sha256":"73:92:89:FC:44:4C:68:DF:4B:6D:AF:0A:11:82:08:BC:29:8E:54:FA:1A:44:BA:23:20:F8:39:0F:96:CF:1E:C2"}}},"request":{"raw":"GET /static/js/pages-bind-bank~pages-bind-wallet~pages-deposit-index~pages-deposit-newindex~pages-give-index~pages-~8f3c16bb.79130c9c.js HTTP/1.1\r\nHost: usust.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usust.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 04:15:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2RcWJqzWHPcvOuFMoeUvfIOo7Ex7i6I9Txim0xIcl0YGegV%2BX8hbBSf4w7nldoFgB441ZZ0dgHFtccvmjzcy2SptN5ioSvOeyw%3D%3D\"}]}\r\netag: W/\"5c980e11b3a36d0ea3f892cc8713c6e8\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c34f269ceb5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66143,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64940), with no line terminators","md5":"42be99fd8c7e13c8d3e397d7f5bdd75e","sha1":"7aa296c16f1f5528099b509b0a82a99072ddd912","sha256":"75f4e9a92997ef41265cad33bc5901040c3cd0fd427fc08c09cc8db015af75e6","sha512":"b8043c68ede9b69496b6f46cfad35b3a82dc394639a59e0e39ab2d24a016d3e8e3e4c6762c06e504231d913e15eab45c24a1ba05524e335f034fd337f4ddc5c3","ssdeep":"384:kUXPscySDsgqXe40Ou8OLG5Vtddbz00lmpB8r:/scPDsx0EOLG5Jmps","tlshash":"8c531a87fdda20154667c741d1a532f8bb2eeab34b416862f849af2c4f365ce250ed1c","first_seen":"2025-10-08T16:53:25.494603Z","last_seen":"2026-04-18T09:10:09.943575Z","times_seen":6,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-25","alert":"Sinkholed","trigger":"usust.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usust.top/static/js/pages-login-index.124c3c8b.js","fqdn":"usust.top","domain":"usust.top","tld":"top"},"ip":{"addr":"172.67.218.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usust.top/","date":"2026-01-25T04:15:00.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usust.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 06:16:55 GMT","end":"Sat, 28 Mar 2026 07:16:48 GMT"},"fingerprint":{"sha1":"E9:F5:35:3B:19:8D:5D:71:46:69:02:89:2B:76:06:40:9D:04:AA:0A","sha256":"73:92:89:FC:44:4C:68:DF:4B:6D:AF:0A:11:82:08:BC:29:8E:54:FA:1A:44:BA:23:20:F8:39:0F:96:CF:1E:C2"}}},"request":{"raw":"GET /static/js/pages-login-index.124c3c8b.js HTTP/1.1\r\nHost: usust.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usust.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 04:15:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cNVak%2FH3zSFuJ5DQoS0YJT4ZdST7Hmy8cAFNcMYfvkod7Ih66HU9OdiLUdQ5BWl3UfU1G0NikSCW22WMfEo3UQcvAkqGJwE%3D\"}]}\r\netag: W/\"1109733530b141685c37b63d59b1cf48\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c34f269ceb9723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":511422,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"1d742c627d3fce2d1e12f4608cddde97","sha1":"a4cbe860407ceaacbf029f2dcf44eca8e458c829","sha256":"bbc01f26aa3f6a5452bf7569098e65ca92d2811893eadc1b1775fa72263daea1","sha512":"7ccfc5c869320693bb473c3b9f0d13f5184f272a1a2ddb460b145fec101363fabae97d8cae28fd5ad6c9d9d36039d5eb029e2b62532c74e3ae077b85c1bd2f08","ssdeep":"6144:osDqU5bA5UFmeDHhTOoKqUrYarla1IUPx:oy7KMmeDuqmTrla2A","tlshash":"86b4a6a7f6dd20055267c785d04632fd8d3a6a778301ec43f991bfb18f2a6da3a2461c","first_seen":"2025-10-08T16:53:25.513789Z","last_seen":"2026-04-18T09:10:09.937948Z","times_seen":6,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-25","alert":"Sinkholed","trigger":"usust.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usust.top/static/favicon.ico","fqdn":"usust.top","domain":"usust.top","tld":"top"},"ip":{"addr":"172.67.218.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usust.top/","date":"2026-01-25T04:15:00.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usust.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 06:16:55 GMT","end":"Sat, 28 Mar 2026 07:16:48 GMT"},"fingerprint":{"sha1":"E9:F5:35:3B:19:8D:5D:71:46:69:02:89:2B:76:06:40:9D:04:AA:0A","sha256":"73:92:89:FC:44:4C:68:DF:4B:6D:AF:0A:11:82:08:BC:29:8E:54:FA:1A:44:BA:23:20:F8:39:0F:96:CF:1E:C2"}}},"request":{"raw":"GET /static/favicon.ico HTTP/1.1\r\nHost: usust.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usust.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 04:15:00 GMT\r\npriority: u=6,i=?0\r\ncontent-type: image/vnd.microsoft.icon\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7LTkkBlCvFGsnBC9i0B7tWdcRYtvyE%2Fb%2BlW5BCBBvH41SvVjPFzCyI2JWUJHqxIQCy3I%2BQNmbWCUsowyMKrL%2BE%2Fag5vH9So%3D\"}]}\r\netag: W/\"bab452d46cf3d9e6348cd07cc66dd32e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c34f26a8ed0723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"5e1cc58a69fdc54fb2dbc42af3f81ec6","sha1":"8eb269b499db2a3c491c95495da8a7502b053f15","sha256":"13f524694e2bef69e9ae30e7b19d9f88218d3d3962811199635685816fb067be","sha512":"eff971baeb6429fe112b592a111880e46234f8d4b8152bfa07d9fc2326744fbc1b2a8bf8768fd1c9fdd5736b2f802d42b82af2247748a3d70933bb865132eb37","ssdeep":"48:1q4/6txTFlVsssX0NrinYAFw9NK5i5jCnjBrXlmM0Kb2o6Xyze0CbhU3Va:kkKNVsRX0mtw3K5i5mlPboCSN","tlshash":"a6910a8a36259c9dc4d663b858fb4135425f8e89a7d8170782c8ec9e3f0a1753f076e4","first_seen":"2025-10-08T16:53:25.530412Z","last_seen":"2026-04-18T09:10:09.961486Z","times_seen":6,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-25","alert":"Sinkholed","trigger":"usust.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usust.top/static/img/USDT_logo.94170f59.png","fqdn":"usust.top","domain":"usust.top","tld":"top"},"ip":{"addr":"172.67.218.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usust.top/","date":"2026-01-25T04:15:00.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usust.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 06:16:55 GMT","end":"Sat, 28 Mar 2026 07:16:48 GMT"},"fingerprint":{"sha1":"E9:F5:35:3B:19:8D:5D:71:46:69:02:89:2B:76:06:40:9D:04:AA:0A","sha256":"73:92:89:FC:44:4C:68:DF:4B:6D:AF:0A:11:82:08:BC:29:8E:54:FA:1A:44:BA:23:20:F8:39:0F:96:CF:1E:C2"}}},"request":{"raw":"GET /static/img/USDT_logo.94170f59.png HTTP/1.1\r\nHost: usust.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usust.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 45553\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"d4de1f308d1c6b57cc9fdd6007c0e523\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z0UrrPw97A7zCVHe21zGm4ieK3ZX9IBYgLjM8oOvm2mTN8epvKDn5Yq4eGgbEwJzx7B4prbEx5VAse4jx%2BY%2FJh1yV1a1FctLOA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ndate: Sun, 25 Jan 2026 04:15:00 GMT\r\ncf-ray: 9c34f26caeed723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45553,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"94170f595aa27a98356674a1ba0a59b9","sha1":"34cae1032a0f801ad1c8673d4379adc0a886e21d","sha256":"71b8a18df8adb1bd5ed1a6d82a80e570fbf6ded6f55ed135ede609f49910cc1f","sha512":"8b977a219511ef19bcfa7c386025f394a69f5ec7ff913509184ccfbe28615ad37b4b43387bb1f8e33e834eb2395510785c10bf1be9c53affe19cfafb2f211d85","ssdeep":"768:EwVCb0GoLs4UsJJEgeJfwXt3jH0hjhNrIg9I+hhHkdbuy4uVcrjkXuIuBUH3:Ewcfo44ggepwXqh9NrxlGdiytcrjIBP3","tlshash":"f61302085fbfc8b15f0c12135d1a2925782708cfc6144fc8b63969aa8deadd8f7a9344","first_seen":"2025-10-08T16:53:25.521193Z","last_seen":"2026-04-18T09:10:09.954568Z","times_seen":6,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-25","alert":"Sinkholed","trigger":"usust.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usust.top/static/js/pages-invest-index~pages-login-index~pages-login-registry~pages-my-index~pages-newtask-orderList~pag~d5d39553.21e54f5f.js","fqdn":"usust.top","domain":"usust.top","tld":"top"},"ip":{"addr":"172.67.218.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usust.top/","date":"2026-01-25T04:15:00.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usust.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 06:16:55 GMT","end":"Sat, 28 Mar 2026 07:16:48 GMT"},"fingerprint":{"sha1":"E9:F5:35:3B:19:8D:5D:71:46:69:02:89:2B:76:06:40:9D:04:AA:0A","sha256":"73:92:89:FC:44:4C:68:DF:4B:6D:AF:0A:11:82:08:BC:29:8E:54:FA:1A:44:BA:23:20:F8:39:0F:96:CF:1E:C2"}}},"request":{"raw":"GET /static/js/pages-invest-index~pages-login-index~pages-login-registry~pages-my-index~pages-newtask-orderList~pag~d5d39553.21e54f5f.js HTTP/1.1\r\nHost: usust.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usust.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 04:15:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0mbeiv%2BAr3lOz8WBs%2B7g97WLMuc5z%2ByWx0XuwiJdlefc7%2BXe7TMt%2FYAU2RrjAS9qPTHbpdR6ZtJ9IY4D8s99eA9dzLv87aM%3D\"}]}\r\netag: W/\"140461f3da5f48e03c06c75037a5f06b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c34f269ceb8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":241152,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65180), with no line terminators","md5":"f1d08415973ee35bb092d022fb8420b9","sha1":"b960da31498891f2a4f68a5096456c51a67cc2d4","sha256":"2264870faad4c8103da71f5a90e66d10e8e75c6417695508e7b49dbea6f05f8d","sha512":"f38cdbcff83660327a2d097e493a0b8da0afddfe873528e6e304520f370e6d17bbd7361321d1fd497a4a28089eb1639bea32aa1be7d4935ea354622c14b0fa21","ssdeep":"768:mctgKjX4okKo7nfh5kMGczUt0QsU7yF+1V46nqhVCkBnm:5tgKjX7ufhq+UeYJCRwkBnm","tlshash":"26343a9af9cc60148667cb56c59237fcda3ff92712056e82d989af348f276c63710a1c","first_seen":"2025-10-08T16:53:25.528538Z","last_seen":"2026-04-18T09:10:09.934057Z","times_seen":6,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-25","alert":"Sinkholed","trigger":"usust.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usust.top/static/bg-lt2.7ee6c857.svg","fqdn":"usust.top","domain":"usust.top","tld":"top"},"ip":{"addr":"172.67.218.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usust.top/","date":"2026-01-25T04:15:00.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usust.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 06:16:55 GMT","end":"Sat, 28 Mar 2026 07:16:48 GMT"},"fingerprint":{"sha1":"E9:F5:35:3B:19:8D:5D:71:46:69:02:89:2B:76:06:40:9D:04:AA:0A","sha256":"73:92:89:FC:44:4C:68:DF:4B:6D:AF:0A:11:82:08:BC:29:8E:54:FA:1A:44:BA:23:20:F8:39:0F:96:CF:1E:C2"}}},"request":{"raw":"GET /static/bg-lt2.7ee6c857.svg HTTP/1.1\r\nHost: usust.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usust.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 04:15:00 GMT\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z4AjygVvBGxUHu535dGE7mEYOf%2FxTtSxCV1zq5WypeeKkr52ATbE96ofJChey5H%2B84a%2Fps%2BRoTNtlDXhA4tZnPbqNADglojf%2Fw%3D%3D\"}]}\r\netag: W/\"142047e07ecfb08f454af5275ed0550e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c34f26a0ebf723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2542,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"489500e3cd7c5826b2bf36b2abd71c0c","sha1":"e16cfbd2c4c8c5a321333376a765e5e4f3f275bc","sha256":"ac5331921b025c3b6368497486ccf4a3c6b1903ecbda4b5949b4ed85063de18d","sha512":"64ce2e3c3ed5a172549a6b77f29399cf842a5c513c923e0112a8f599ec5299c7e2247d81bf977f64358ce7c87a488b35267e7eeb1456decd61e25b2188768b20","ssdeep":"","tlshash":"7351ac2af7bb44abe214e3a8ef80c1349b170dc355919511f41e1f8e1bb8dba96637d0","first_seen":"2025-10-08T16:53:25.540926Z","last_seen":"2026-04-18T09:10:09.940638Z","times_seen":6,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-25","alert":"Sinkholed","trigger":"usust.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usust.top/static/index.97465e7b.css","fqdn":"usust.top","domain":"usust.top","tld":"top"},"ip":{"addr":"172.67.218.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://usust.top/","date":"2026-01-25T04:14:59.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usust.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 06:16:55 GMT","end":"Sat, 28 Mar 2026 07:16:48 GMT"},"fingerprint":{"sha1":"E9:F5:35:3B:19:8D:5D:71:46:69:02:89:2B:76:06:40:9D:04:AA:0A","sha256":"73:92:89:FC:44:4C:68:DF:4B:6D:AF:0A:11:82:08:BC:29:8E:54:FA:1A:44:BA:23:20:F8:39:0F:96:CF:1E:C2"}}},"request":{"raw":"GET /static/index.97465e7b.css HTTP/1.1\r\nHost: usust.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usust.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 04:14:59 GMT\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FpvY1TJg4lVDC%2F4bESw0gfCq9Ea5vUouZDF43wgPClGx3GDLFtfcrJwciOXKEJeg7oYAXBQoLZ%2FKi8huB%2Bimd44gRM05HEpbgA%3D%3D\"}]}\r\netag: W/\"1946eab8b1528efce948abf6221ded92\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c34f2668e68723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96404,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"97a29764a1df91af2f287e5641b1efeb","sha1":"887cbd5cd4630164c4ac6b8738d8a32459c920d6","sha256":"f6789ee8a50f44f18ba717956bd34c4cd17b1d658443e92408976907b83a0242","sha512":"b54537789bc819ff8b1edd39e579ad2c5731e399379e817f3bedbc3105853d87891bb19dc0373f4d3af03554173ef4c486e5f6b85cab3b8cd9edcb8b5624f67a","ssdeep":"1536:OlIApuK7hmVmb2RS1Wu3xdyn37ehgnKhlvbc:VApuK7hmVrS1Wu3iy6nKPI","tlshash":"aa93f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2023-07-13T05:53:18Z","last_seen":"2026-06-04T16:39:28.018589Z","times_seen":1015,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-25","alert":"Sinkholed","trigger":"usust.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-KDW6DRTX61","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usust.top/","date":"2026-01-25T04:14:59.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtag/js?id=G-KDW6DRTX61 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usust.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 25 Jan 2026 04:14:59 GMT\r\nexpires: Sun, 25 Jan 2026 04:14:59 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143818\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":434029,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"f1f9eda951ca334b99c6177384561e3f","sha1":"a7425136cc6e584e6a2b5ffbda856724de502e02","sha256":"2960836ac63d01626f6b58b015853f1f9df422d32170494ac1473159e9fa0dc7","sha512":"b7dbb9e9473ec9b21974e52f8b6eceff57764260f20c65179f120d4771d0273db46bc9c98ef99ba088d5e7225814cbc4905dd23bf1538a1a60aaa98948554371","ssdeep":"6144:pbJmMvkbBQAxJ508XYoeZlzlFldbKKCYTdqb0NqB7XD:LmM8bBQAxJ508XYNljdq3D","tlshash":"6e941ace73d670269396f478503f118ba57b29a2b45cc89af189cce01e74a9a4137f7c","first_seen":"2026-01-24T18:49:02.661354Z","last_seen":"2026-01-25T04:15:27.854946Z","times_seen":2,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":120,"dns":1,"connect":20,"send":0,"wait":39,"receive":59,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usust.top/static/js/index.d57eb0b0.js","fqdn":"usust.top","domain":"usust.top","tld":"top"},"ip":{"addr":"172.67.218.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usust.top/","date":"2026-01-25T04:14:59.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usust.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 06:16:55 GMT","end":"Sat, 28 Mar 2026 07:16:48 GMT"},"fingerprint":{"sha1":"E9:F5:35:3B:19:8D:5D:71:46:69:02:89:2B:76:06:40:9D:04:AA:0A","sha256":"73:92:89:FC:44:4C:68:DF:4B:6D:AF:0A:11:82:08:BC:29:8E:54:FA:1A:44:BA:23:20:F8:39:0F:96:CF:1E:C2"}}},"request":{"raw":"GET /static/js/index.d57eb0b0.js HTTP/1.1\r\nHost: usust.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usust.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 04:14:59 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3zq%2BBXh%2F3y3H9JtptKwWz1coPFx65n8U2B8u129PdmHk4k5JuRAACpmURQ3KMV3GHFz3OP38AwIc3P7Xxn%2Bphn3iL5KaRqvdtw%3D%3D\"}]}\r\netag: W/\"8655a1479b4fa3b25f5c6565a8239da7\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c34f2669e6c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":650080,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54035), with no line terminators","md5":"4adc65357211e169feed1b4858a7a900","sha1":"f6ece84f7d3604c8e99cf2c531a288a59de0da3a","sha256":"55673c75fee11df8e594182dc3ec3b850212171fa661c23a3f20e1818613f537","sha512":"6f5d366ee25139a1d43199193939b99f3728f1a5a16440ecd73e88015e10876cc26d472fcf2d8d9c57fe2e841ef36711431bd44080859e261c473dd02a96c4c8","ssdeep":"6144:Z0tJpY/ufc5UqN7SEBTzLNJAAih8s1ER06tYI:ZMJpYWMN5fNGABsGR0dI","tlshash":"42d44dcebfcd128c059662457097ae3963b72c52412ee451e3d9cba01fedc89b53da38","first_seen":"2026-01-24T18:49:02.65889Z","last_seen":"2026-04-18T09:10:09.928949Z","times_seen":4,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-25","alert":"Sinkholed","trigger":"usust.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usust.top/static/js/pages-bind-bank~pages-bind-wallet~pages-deposit-index~pages-deposit-newindex~pages-give-index~pages-~5f13f1a4.dc1eb6f7.js","fqdn":"usust.top","domain":"usust.top","tld":"top"},"ip":{"addr":"172.67.218.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usust.top/","date":"2026-01-25T04:15:00.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usust.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 06:16:55 GMT","end":"Sat, 28 Mar 2026 07:16:48 GMT"},"fingerprint":{"sha1":"E9:F5:35:3B:19:8D:5D:71:46:69:02:89:2B:76:06:40:9D:04:AA:0A","sha256":"73:92:89:FC:44:4C:68:DF:4B:6D:AF:0A:11:82:08:BC:29:8E:54:FA:1A:44:BA:23:20:F8:39:0F:96:CF:1E:C2"}}},"request":{"raw":"GET /static/js/pages-bind-bank~pages-bind-wallet~pages-deposit-index~pages-deposit-newindex~pages-give-index~pages-~5f13f1a4.dc1eb6f7.js HTTP/1.1\r\nHost: usust.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usust.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 04:15:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VF0lHn35NDcSSkuzedIf9bOzpRrLzszCVX%2BaRLCvccXH1n%2FJpcvMr762rxjRSyD8KEqWnr%2BVkTErjh2FVPXcDq%2FVDL0zE2E%3D\"}]}\r\netag: W/\"700ca5e4ffc6485dee0ad1141076047c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c34f269ceb6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57065,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (56887), with no line terminators","md5":"623e30d55e4a251af84df54e0a546d28","sha1":"1cb3e74f70c9bd30582a1ac30504966136986a38","sha256":"c89bd4fb1157f1d21ae1bb5e5decd656ced4ee7179e34b8776b066389b021576","sha512":"89b27935d0509a3fa744814ab910a0cd227e5a53c5dcbce9d248f4190ca8178083e323d95c732b266fb3c94f8db13b83574c74a129407015907194e0635f1e7b","ssdeep":"192:gqB26G7XeaPY+T1fBHUnQk++EJSGv0bJRiHtgpuzczxMMmaFmUpf80yE0w2X2O2S:chcS4GvYJ7uzc1MMmaFDwXOQ","tlshash":"b3431be2fddc201e4167c701954132fc9eabaa2baac168d2d8633f344e961c7752e71d","first_seen":"2025-10-08T16:53:25.511211Z","last_seen":"2026-04-18T09:10:09.932413Z","times_seen":6,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-25","alert":"Sinkholed","trigger":"usust.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usust.top/static/fonts/PlusJakartaSans-Regular.f539ae4a.ttf","fqdn":"usust.top","domain":"usust.top","tld":"top"},"ip":{"addr":"172.67.218.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://usust.top/","date":"2026-01-25T04:15:00.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usust.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 06:16:55 GMT","end":"Sat, 28 Mar 2026 07:16:48 GMT"},"fingerprint":{"sha1":"E9:F5:35:3B:19:8D:5D:71:46:69:02:89:2B:76:06:40:9D:04:AA:0A","sha256":"73:92:89:FC:44:4C:68:DF:4B:6D:AF:0A:11:82:08:BC:29:8E:54:FA:1A:44:BA:23:20:F8:39:0F:96:CF:1E:C2"}}},"request":{"raw":"GET /static/fonts/PlusJakartaSans-Regular.f539ae4a.ttf HTTP/1.1\r\nHost: usust.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usust.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 04:15:00 GMT\r\npriority: u=4,i=?0\r\ncontent-type: font/ttf\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jQ0Jxd5xNaGGkR27hKx6G8b2VWVnaTWQX0I9WempbOwtZHIHN9RXRIR9biIY0g9UTJtthY6Y8vBbxbcYXoRm%2B%2FUEkqRkfiM%3D\"}]}\r\netag: W/\"1f9bbe8987906bc122b3cc1c1cb5fe6c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c34f26a1ec3723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94764,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 28 names, Microsoft, language 0x409","md5":"f539ae4a8884822210a4553cc88ca3dc","sha1":"25ba6345e577fa516ad5f89405933171a8d81eb0","sha256":"f7e7cebd26ac8ad800783dbc41e661dbe14ee8bc58e53c532995b13274276933","sha512":"d4125786a2ae3247b3f8bf6892077400e9a6f2f7501bd6a2d278462be99f2cec91b627153bd485905c271e7f73e3dafa29656319655fc1b57e1ee1dcbf07ab10","ssdeep":"1536:eNcU0h0nOMxzMowzIbFLKFisOmmIYUAiFHAvnBWja1GHEz87/VIz+H76UVsm/m3Z:krjwzIbFLKFisOmmIYUAiFHAvnM6o7/U","tlshash":"85931871b72b93cedf1199798236d7c43b36ff12ab7ac28b54f0a649e44b1d54c22290","first_seen":"2023-12-27T17:39:23Z","last_seen":"2026-06-05T23:08:57.291147Z","times_seen":1055,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-25","alert":"Sinkholed","trigger":"usust.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"111.231.169.247","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usust.top/","date":"2026-01-25T04:15:02.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usust.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 04:15:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Sun, 25 Jan 2026 15:15:04 GMT\r\ncache-control: max-age=39600\r\nset-cookie: __uni__uid=rBEQUml1mMikM2C5AzM5Ag==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-06-06T04:49:51.251849Z","times_seen":16174,"resource_available":false,"data":null}},"time_used":2387,"timings":{"blocked":770,"dns":41,"connect":283,"send":0,"wait":846,"receive":0,"ssl":445},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usust.top/static/js/pages-bind-bank~pages-bind-wallet~pages-deposit-index~pages-deposit-newindex~pages-give-index~pages-~4b01d782.381b74d0.js","fqdn":"usust.top","domain":"usust.top","tld":"top"},"ip":{"addr":"172.67.218.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://usust.top/","date":"2026-01-25T04:15:00.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usust.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 06:16:55 GMT","end":"Sat, 28 Mar 2026 07:16:48 GMT"},"fingerprint":{"sha1":"E9:F5:35:3B:19:8D:5D:71:46:69:02:89:2B:76:06:40:9D:04:AA:0A","sha256":"73:92:89:FC:44:4C:68:DF:4B:6D:AF:0A:11:82:08:BC:29:8E:54:FA:1A:44:BA:23:20:F8:39:0F:96:CF:1E:C2"}}},"request":{"raw":"GET /static/js/pages-bind-bank~pages-bind-wallet~pages-deposit-index~pages-deposit-newindex~pages-give-index~pages-~4b01d782.381b74d0.js HTTP/1.1\r\nHost: usust.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usust.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 04:15:00 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DHfZVhhUl5%2BcdwASXyPxBmJ70onkEaoWRE7AA4sMExaoMOq35DGk1fLo1GmUoIw810JOP5A7PfTxOvHUdiLheZdyHUr5o4Y%3D\"}]}\r\netag: W/\"9496f60da7ccfe3fc912462f361168b4\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c34f269ceb7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62617,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62261), with no line terminators","md5":"e336fd6882b34e1d479ec1196b3048c4","sha1":"793cc61f5814a1ca0c445dde19453b521eec165f","sha256":"32deb6b9d97cebc0e195f62d5337bd8565e54938e0acc07349abdaf99e191999","sha512":"2d165721261a71ecf96c3fc33f7ed630752c6223336ad9d7031d546a36126d64d6cde9fd741e16dfa485e7b737d180f4cb6eafdc5dbea129c6cbdc886d189423","ssdeep":"192:zeXTWE+X1fRC7a7O6aWog+6WlEjZVMrtehj5nDJNUu7N5X8q+aYz212j292wc2Dd:LIiR+68E0ehjlDJNUuJ+xHfR1MOUuk","tlshash":"e0530c86f5da200e4267c7a9d141b7f87aaaad230a8178d2d84f7f784f175ce252071f","first_seen":"2025-10-08T16:53:25.49731Z","last_seen":"2026-04-18T09:10:09.944849Z","times_seen":6,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-25","alert":"Sinkholed","trigger":"usust.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usust.top/static/bg-lt.5ea0d5ff.svg","fqdn":"usust.top","domain":"usust.top","tld":"top"},"ip":{"addr":"172.67.218.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usust.top/","date":"2026-01-25T04:15:00.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usust.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 06:16:55 GMT","end":"Sat, 28 Mar 2026 07:16:48 GMT"},"fingerprint":{"sha1":"E9:F5:35:3B:19:8D:5D:71:46:69:02:89:2B:76:06:40:9D:04:AA:0A","sha256":"73:92:89:FC:44:4C:68:DF:4B:6D:AF:0A:11:82:08:BC:29:8E:54:FA:1A:44:BA:23:20:F8:39:0F:96:CF:1E:C2"}}},"request":{"raw":"GET /static/bg-lt.5ea0d5ff.svg HTTP/1.1\r\nHost: usust.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usust.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 04:15:00 GMT\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UbvjI%2FbIRHa4rePXqOVtH8jhW%2B5mQR7LHqUoYBIGGrC39nIK0piIX3edug5Aaeeg6gu5pHEn5lgV7m4XsBAwFVbk71k7tGU%3D\"}]}\r\netag: W/\"324df0a6f4239a70469860bf9c09c131\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c34f26a0ebe723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2542,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"09f9677b00c12336bf409424fe709d5f","sha1":"24c6db2bcf006ee2c9365121cf3fac447570ed30","sha256":"39bcb1b1d082d10a437d9574e36679a418033f26cfd0ad0784d9221f4dbf0f64","sha512":"4067592330735e11c51e3fd361a2fd79039f62504e8373882e308be7c70dcbbd9f7506059aded2cc435289456964fc9115d9a93ad758b14c35c29626e07910b3","ssdeep":"","tlshash":"2a51e02af7b740b7a215d3a6dbc1c0345f1b0ac316a09151f45e2f5e1bb89aac6633d4","first_seen":"2025-10-08T16:53:25.500193Z","last_seen":"2026-04-18T09:10:09.948063Z","times_seen":6,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-25","alert":"Sinkholed","trigger":"usust.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usust.top/static/img/lang.c3a04428.png","fqdn":"usust.top","domain":"usust.top","tld":"top"},"ip":{"addr":"172.67.218.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usust.top/","date":"2026-01-25T04:15:00.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usust.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 06:16:55 GMT","end":"Sat, 28 Mar 2026 07:16:48 GMT"},"fingerprint":{"sha1":"E9:F5:35:3B:19:8D:5D:71:46:69:02:89:2B:76:06:40:9D:04:AA:0A","sha256":"73:92:89:FC:44:4C:68:DF:4B:6D:AF:0A:11:82:08:BC:29:8E:54:FA:1A:44:BA:23:20:F8:39:0F:96:CF:1E:C2"}}},"request":{"raw":"GET /static/img/lang.c3a04428.png HTTP/1.1\r\nHost: usust.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usust.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 20188\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"2f3c80abced8daad9ff304938baa034a\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C15WhQjgSMvYOpfokkhCN5AVlf7h6nSnt81mAIZZ0XExHtyyIfyfKcIgJmI6Kb6PFEoo4wzW6lxUDUA1OUzRETPVFhehfpTGwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ndate: Sun, 25 Jan 2026 04:15:00 GMT\r\ncf-ray: 9c34f26c9eec723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20188,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 16-bit gray+alpha, non-interlaced","md5":"c3a04428c28357adf638a9200198e98f","sha1":"c744606c35f02f27203e36c43bd6224c0977710d","sha256":"85244ed861f70db2c4ae45de55c5d365a649fd3e3f58b437aec81dc69f036cb0","sha512":"04e736f5de493b58bd9e58ddfb795312f1f31bd23112180401864e55c8b41b66019b517dda7023b825afb9c25500d972f6d655e657e1f01feb05e93701198736","ssdeep":"384:cFpve/38+P49B88MerzT8blcqH6zPzxfUKWVGidnNZl8rV:Uv6C9BhX0lcqGVidNIrV","tlshash":"d092e0b3da7ae6f8ad372ac1fce3001bb9140720d66514727520b77336ac56de637980","first_seen":"2023-11-10T15:57:53Z","last_seen":"2026-05-03T10:23:48.673793Z","times_seen":34,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-25","alert":"Sinkholed","trigger":"usust.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"usust.top/static/img/hide-icon.efa67c29.png","fqdn":"usust.top","domain":"usust.top","tld":"top"},"ip":{"addr":"172.67.218.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://usust.top/","date":"2026-01-25T04:15:00.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"usust.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 06:16:55 GMT","end":"Sat, 28 Mar 2026 07:16:48 GMT"},"fingerprint":{"sha1":"E9:F5:35:3B:19:8D:5D:71:46:69:02:89:2B:76:06:40:9D:04:AA:0A","sha256":"73:92:89:FC:44:4C:68:DF:4B:6D:AF:0A:11:82:08:BC:29:8E:54:FA:1A:44:BA:23:20:F8:39:0F:96:CF:1E:C2"}}},"request":{"raw":"GET /static/img/hide-icon.efa67c29.png HTTP/1.1\r\nHost: usust.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://usust.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 8241\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"1e0ebaac5b3805942f26cb62f4a4fabf\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z39vlS1tcBn5Escxov61aiJP6dmWGZRx9kS%2BNGcEn1deX%2BQbk79QNzOGXaDR37dq3BsW3vDF4lng%2FiSik5yJ7k2lSiQhqsM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ndate: Sun, 25 Jan 2026 04:15:00 GMT\r\ncf-ray: 9c34f26caeee723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8241,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"efa67c2927b6a56e6cab202116945659","sha1":"fb79378e64c676e2f1b934e1584fc72d838bd1df","sha256":"aa224443885450c5df82d725bf713e201081312d9e9b0f839b9ccb6c4c3f93cc","sha512":"14e3249c806ef01c1c5f27d8139b07dd10f9d2c6c22559b03dd5219f3202aa22c6a4a4e81ed120f984f0b73f9162aed900db8b2d9540208685d58e0ab06555df","ssdeep":"192:3TvHB1NBlQNYrW1kFnBbDx1saxcSuNYWxrghZtFMoOM1defI:3TvpQsHnSSzQQfFMoh1dl","tlshash":"20029fec2647de342c783db69866ef3a4d38e7a1047ac4492438573953fea05ef2e149","first_seen":"2025-10-08T16:53:25.532757Z","last_seen":"2026-04-18T09:10:09.970083Z","times_seen":6,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-25","alert":"Sinkholed","trigger":"usust.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}